You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
270 lines
9.1 KiB
270 lines
9.1 KiB
From 341da4f38809d0efaa282d5281ee69c62a826f9a Mon Sep 17 00:00:00 2001
|
|
From: Andreas Schneider <asn@samba.org>
|
|
Date: Wed, 27 Jun 2018 14:06:39 +0200
|
|
Subject: [PATCH 1/4] krb5_plugin: Install plugins to krb5 modules dir
|
|
|
|
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489
|
|
|
|
Signed-off-by: Andreas Schneider <asn@samba.org>
|
|
Reviewed-by: Alexander Bokovoy <ab@samba.org>
|
|
---
|
|
nsswitch/wscript_build | 12 +++++++-----
|
|
1 file changed, 7 insertions(+), 5 deletions(-)
|
|
|
|
diff --git a/nsswitch/wscript_build b/nsswitch/wscript_build
|
|
index 15e93db2f05..576855bb56c 100644
|
|
--- a/nsswitch/wscript_build
|
|
+++ b/nsswitch/wscript_build
|
|
@@ -105,16 +105,18 @@ if bld.CONFIG_SET('WITH_PAM_MODULES') and bld.CONFIG_SET('HAVE_PAM_START'):
|
|
)
|
|
|
|
if bld.CONFIG_SET('HAVE_KRB5_LOCATE_PLUGIN_H'):
|
|
- bld.SAMBA_LIBRARY('winbind_krb5_locator',
|
|
- source='winbind_krb5_locator.c',
|
|
- deps='wbclient krb5 com_err',
|
|
- realname='winbind_krb5_locator.so')
|
|
+ bld.SAMBA_LIBRARY('winbind_krb5_locator',
|
|
+ source='winbind_krb5_locator.c',
|
|
+ deps='wbclient krb5 com_err',
|
|
+ realname='winbind_krb5_locator.so',
|
|
+ install_path='${MODULESDIR}/krb5')
|
|
|
|
if bld.CONFIG_SET('HAVE_KRB5_LOCALAUTH_PLUGIN_H'):
|
|
bld.SAMBA_LIBRARY('winbind_krb5_localauth',
|
|
source='krb5_plugin/winbind_krb5_localauth.c',
|
|
deps='wbclient krb5 com_err',
|
|
- realname='winbind-krb5-localauth.so')
|
|
+ realname='winbind_krb5_localauth.so',
|
|
+ install_path='${MODULESDIR}/krb5')
|
|
|
|
bld.SAMBA_SUBSYSTEM('WB_REQTRANS',
|
|
source='wb_reqtrans.c',
|
|
--
|
|
2.17.1
|
|
|
|
|
|
From a1e9527b207b4bb045012cf78649362b42351313 Mon Sep 17 00:00:00 2001
|
|
From: Andreas Schneider <asn@samba.org>
|
|
Date: Wed, 27 Jun 2018 14:08:56 +0200
|
|
Subject: [PATCH 2/4] krb5_plugin: Move krb5 locator plugin to krb5_plugin
|
|
subdir
|
|
|
|
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489
|
|
|
|
Signed-off-by: Andreas Schneider <asn@samba.org>
|
|
Reviewed-by: Alexander Bokovoy <ab@samba.org>
|
|
---
|
|
nsswitch/{ => krb5_plugin}/winbind_krb5_locator.c | 0
|
|
nsswitch/wscript_build | 2 +-
|
|
2 files changed, 1 insertion(+), 1 deletion(-)
|
|
rename nsswitch/{ => krb5_plugin}/winbind_krb5_locator.c (100%)
|
|
|
|
diff --git a/nsswitch/winbind_krb5_locator.c b/nsswitch/krb5_plugin/winbind_krb5_locator.c
|
|
similarity index 100%
|
|
rename from nsswitch/winbind_krb5_locator.c
|
|
rename to nsswitch/krb5_plugin/winbind_krb5_locator.c
|
|
diff --git a/nsswitch/wscript_build b/nsswitch/wscript_build
|
|
index 576855bb56c..dd1952b799b 100644
|
|
--- a/nsswitch/wscript_build
|
|
+++ b/nsswitch/wscript_build
|
|
@@ -106,7 +106,7 @@ if bld.CONFIG_SET('WITH_PAM_MODULES') and bld.CONFIG_SET('HAVE_PAM_START'):
|
|
|
|
if bld.CONFIG_SET('HAVE_KRB5_LOCATE_PLUGIN_H'):
|
|
bld.SAMBA_LIBRARY('winbind_krb5_locator',
|
|
- source='winbind_krb5_locator.c',
|
|
+ source='krb5_plugin/winbind_krb5_locator.c',
|
|
deps='wbclient krb5 com_err',
|
|
realname='winbind_krb5_locator.so',
|
|
install_path='${MODULESDIR}/krb5')
|
|
--
|
|
2.17.1
|
|
|
|
|
|
From b0fa360161aba9aa092bf4ecf0533a49d621a068 Mon Sep 17 00:00:00 2001
|
|
From: Andreas Schneider <asn@samba.org>
|
|
Date: Wed, 27 Jun 2018 15:14:15 +0200
|
|
Subject: [PATCH 3/4] docs: Move winbind_krb5_locator manpage to volume 8
|
|
|
|
The vfs and idmap manpages are in volume 8 too.
|
|
|
|
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489
|
|
|
|
Signed-off-by: Andreas Schneider <asn@samba.org>
|
|
Reviewed-by: Alexander Bokovoy <ab@samba.org>
|
|
---
|
|
...inbind_krb5_locator.7.xml => winbind_krb5_locator.8.xml} | 6 +++---
|
|
docs-xml/wscript_build | 2 +-
|
|
2 files changed, 4 insertions(+), 4 deletions(-)
|
|
rename docs-xml/manpages/{winbind_krb5_locator.7.xml => winbind_krb5_locator.8.xml} (96%)
|
|
|
|
diff --git a/docs-xml/manpages/winbind_krb5_locator.7.xml b/docs-xml/manpages/winbind_krb5_locator.8.xml
|
|
similarity index 96%
|
|
rename from docs-xml/manpages/winbind_krb5_locator.7.xml
|
|
rename to docs-xml/manpages/winbind_krb5_locator.8.xml
|
|
index 17e401a9da0..0af0c2cc95f 100644
|
|
--- a/docs-xml/manpages/winbind_krb5_locator.7.xml
|
|
+++ b/docs-xml/manpages/winbind_krb5_locator.8.xml
|
|
@@ -1,12 +1,12 @@
|
|
<?xml version="1.0" encoding="iso-8859-1"?>
|
|
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
|
|
-<refentry id="winbind_krb5_locator.7">
|
|
+<refentry id="winbind_krb5_locator.8">
|
|
|
|
<refmeta>
|
|
<refentrytitle>winbind_krb5_locator</refentrytitle>
|
|
- <manvolnum>7</manvolnum>
|
|
+ <manvolnum>8</manvolnum>
|
|
<refmiscinfo class="source">Samba</refmiscinfo>
|
|
- <refmiscinfo class="manual">7</refmiscinfo>
|
|
+ <refmiscinfo class="manual">8</refmiscinfo>
|
|
<refmiscinfo class="version">&doc.version;</refmiscinfo>
|
|
</refmeta>
|
|
|
|
diff --git a/docs-xml/wscript_build b/docs-xml/wscript_build
|
|
index 954c62a29bc..2d686eb38b0 100644
|
|
--- a/docs-xml/wscript_build
|
|
+++ b/docs-xml/wscript_build
|
|
@@ -103,7 +103,7 @@ pam_winbind_manpages = '''
|
|
manpages/pam_winbind.conf.5
|
|
'''
|
|
|
|
-krb5_locator_manpages = 'manpages/winbind_krb5_locator.7'
|
|
+krb5_locator_manpages = 'manpages/winbind_krb5_locator.8'
|
|
|
|
def smbdotconf_generate_parameter_list(task):
|
|
parameter_all = task.outputs[0].bldpath(task.env)
|
|
--
|
|
2.17.1
|
|
|
|
|
|
From d16a8b65af5de19c1ccbb95e3542d01f77696be3 Mon Sep 17 00:00:00 2001
|
|
From: Andreas Schneider <asn@samba.org>
|
|
Date: Wed, 27 Jun 2018 15:06:07 +0200
|
|
Subject: [PATCH 4/4] docs: Add manpage for winbind_krb5_localauth.8
|
|
|
|
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13489
|
|
|
|
Signed-off-by: Andreas Schneider <asn@samba.org>
|
|
Reviewed-by: Alexander Bokovoy <ab@samba.org>
|
|
---
|
|
.../manpages/winbind_krb5_localauth.8.xml | 86 +++++++++++++++++++
|
|
docs-xml/wscript_build | 4 +
|
|
2 files changed, 90 insertions(+)
|
|
create mode 100644 docs-xml/manpages/winbind_krb5_localauth.8.xml
|
|
|
|
diff --git a/docs-xml/manpages/winbind_krb5_localauth.8.xml b/docs-xml/manpages/winbind_krb5_localauth.8.xml
|
|
new file mode 100644
|
|
index 00000000000..a382e71ead3
|
|
--- /dev/null
|
|
+++ b/docs-xml/manpages/winbind_krb5_localauth.8.xml
|
|
@@ -0,0 +1,86 @@
|
|
+<?xml version="1.0" encoding="iso-8859-1"?>
|
|
+<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
|
|
+<refentry id="winbind_krb5_localauth.8">
|
|
+
|
|
+<refmeta>
|
|
+ <refentrytitle>winbind_krb5_localauth</refentrytitle>
|
|
+ <manvolnum>8</manvolnum>
|
|
+ <refmiscinfo class="source">Samba</refmiscinfo>
|
|
+ <refmiscinfo class="manual">8</refmiscinfo>
|
|
+ <refmiscinfo class="version">&doc.version;</refmiscinfo>
|
|
+</refmeta>
|
|
+
|
|
+
|
|
+<refnamediv>
|
|
+ <refname>winbind_krb5_localauth</refname>
|
|
+ <refpurpose>A plugin for MIT Kerberos for mapping user accounts.</refpurpose>
|
|
+</refnamediv>
|
|
+
|
|
+
|
|
+<refsect1>
|
|
+ <title>DESCRIPTION</title>
|
|
+
|
|
+ <para>
|
|
+ This plugin is part of the
|
|
+ <citerefentry><refentrytitle>samba</refentrytitle>
|
|
+ <manvolnum>7</manvolnum></citerefentry> suite.
|
|
+ </para>
|
|
+
|
|
+ <para>
|
|
+ <command>winbind_krb5_localauth</command> is a plugin that
|
|
+ permits the MIT Kerberos libraries that Kerberos principals can
|
|
+ be validated against local user accounts.
|
|
+ </para>
|
|
+</refsect1>
|
|
+<refsect1>
|
|
+ <title>PREREQUISITES</title>
|
|
+ <para>
|
|
+ MIT Kerberos (at least version 1.12) is required.
|
|
+ </para>
|
|
+
|
|
+ <para>
|
|
+ The plugin queries the <citerefentry><refentrytitle>winbindd</refentrytitle>
|
|
+ <manvolnum>8</manvolnum></citerefentry> daemon which needs to be configured
|
|
+ and started separately.
|
|
+ </para>
|
|
+
|
|
+ <para>
|
|
+ The following sections needs to be added to the
|
|
+ <filename>krb5.conf</filename> file.
|
|
+
|
|
+ <programlisting>
|
|
+[plugins]
|
|
+ localauth = {
|
|
+ module = winbind:/usr/lib64/samba/krb5/winbind_krb5_localauth.so
|
|
+ enable_only = winbind
|
|
+ }
|
|
+ </programlisting>
|
|
+ </para>
|
|
+</refsect1>
|
|
+
|
|
+<refsect1>
|
|
+ <title>VERSION</title>
|
|
+
|
|
+ <para>
|
|
+ This man page is part of version &doc.version; of the Samba
|
|
+ suite.
|
|
+ </para>
|
|
+</refsect1>
|
|
+
|
|
+<refsect1>
|
|
+ <title>AUTHOR</title>
|
|
+
|
|
+ <para>
|
|
+ The original Samba software and related utilities were created
|
|
+ by Andrew Tridgell. Samba is now developed by the Samba Team as
|
|
+ an Open Source project similar to the way the Linux kernel is
|
|
+ developed.
|
|
+ </para>
|
|
+
|
|
+ <para>
|
|
+ The winbind_krb5_localauth manpage was written by Andreas
|
|
+ Schneider.
|
|
+ </para>
|
|
+</refsect1>
|
|
+
|
|
+</refentry>
|
|
diff --git a/docs-xml/wscript_build b/docs-xml/wscript_build
|
|
index 2d686eb38b0..ec5d28fc62a 100644
|
|
--- a/docs-xml/wscript_build
|
|
+++ b/docs-xml/wscript_build
|
|
@@ -104,6 +104,7 @@ pam_winbind_manpages = '''
|
|
'''
|
|
|
|
krb5_locator_manpages = 'manpages/winbind_krb5_locator.8'
|
|
+krb5_localauth_manpages = 'manpages/winbind_krb5_localauth.8'
|
|
|
|
def smbdotconf_generate_parameter_list(task):
|
|
parameter_all = task.outputs[0].bldpath(task.env)
|
|
@@ -162,5 +163,8 @@ if ('XSLTPROC_MANPAGES' in bld.env and bld.env['XSLTPROC_MANPAGES']):
|
|
if bld.CONFIG_SET('HAVE_KRB5_LOCATE_PLUGIN_H'):
|
|
bld.SAMBAMANPAGES(krb5_locator_manpages)
|
|
|
|
+ if bld.CONFIG_SET('HAVE_KRB5_LOCALAUTH_PLUGIN_H'):
|
|
+ bld.SAMBAMANPAGES(krb5_localauth_manpages)
|
|
+
|
|
if bld.SAMBA3_IS_ENABLED_MODULE('vfs_zfsacl'):
|
|
bld.SAMBAMANPAGES('manpages/vfs_zfsacl.8')
|
|
--
|
|
2.17.1
|
|
|
|
|