Re: pw_user.c change for samba (& perl scripts!)

2002-12-03 Thread Lyndon Nerenberg
>>I can't find any shell script 'adduser' in >>http://www.freebsd.org/cgi/cvsweb.cgi/ >>Where can I find it? I'm not sure about the one Terry (?) mentioned, but I have a shell replacement for adduser that's 98% complete. There's one remaining bug. I wasn't going to say anything until I had rmuser

Re: pw_user.c change for samba

2002-12-01 Thread Matthew D. Fuller
On Sat, Nov 30, 2002 at 10:24:58PM -0500 I heard the voice of Garance A Drosihn, and lo! it spake thus: > > However, that doesn't answer the question of which 'adduser' is > actually expected to be used in 5.0-current. Does someone have > the shell-script (non-perl) version of adduser? Is it nam

Re: pw_user.c change for samba

2002-11-30 Thread Garance A Drosihn
At 7:06 PM -0800 11/27/02, Terry Lambert wrote: NAKAJI Hiroyuki wrote: > My /usr/sbin/adduser, updated on Nov/23/2002 21:58 JST, does > not call pw command. It adds account to /etc/master.passwd and > invokes 'pwd_mkdb'. > See 'sub new_users' function in /usr/sbin/adduser. There are two "a

Re: pw_user.c change for samba (& perl scripts!)

2002-11-28 Thread Bruno Miguel
On 28 Nov 2002 at 0:05, Garance A Drosihn wrote... > At 1:24 PM +0900 11/28/02, NAKAJI Hiroyuki wrote: > > > In <[EMAIL PROTECTED]> > >>Terry Lambert <[EMAIL PROTECTED]> wrote: > > > >> There are two "adduser" scripts. One is perl, and one was written > >> to use "pw" and provi

Re: pw_user.c change for samba (& perl scripts!)

2002-11-27 Thread Garance A Drosihn
At 1:24 PM +0900 11/28/02, NAKAJI Hiroyuki wrote: > In <[EMAIL PROTECTED]> Terry Lambert <[EMAIL PROTECTED]> wrote: There are two "adduser" scripts. One is perl, and one was written to use "pw" and provide the same semantics, in a shell script, as part of the "perl purge" that happen

Re: pw_user.c change for samba

2002-11-27 Thread Garance A Drosihn
At 7:06 PM -0800 11/27/02, Terry Lambert wrote: NAKAJI Hiroyuki wrote: > My /usr/sbin/adduser, updated on Nov/23/2002 21:58 JST, does not > call pw command. It adds account to /etc/master.passwd and > invokes 'pwd_mkdb'. > See 'sub new_users' function in /usr/sbin/adduser. There are two "a

Re: pw_user.c change for samba

2002-11-27 Thread NAKAJI Hiroyuki
> In <[EMAIL PROTECTED]> > Terry Lambert <[EMAIL PROTECTED]> wrote: > There are two "adduser" scripts. One is perl, and one was written > to use "pw" and provide the same semantics, in a shell script, as > part of the "perl purge" that happened recently. I can't find any shell script

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
NAKAJI Hiroyuki wrote: > > "David W. Chapman Jr." <[EMAIL PROTECTED]> wrote: > > David> Wouldn't pw still have to be updated. I haven't looked at adduser but I > David> thought it was a wrapper for pw? > > No. > > My /usr/sbin/adduser, updated on Nov/23/2002 21:58 JST, does not call > pw

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
Giorgos Keramidas wrote: > On 2002-11-27 12:55, Terry Lambert <[EMAIL PROTECTED]> wrote: > > Will this open up a security hole for a nomal user account > > being used to compromise the domain system security? > > Probably 'yes'. I haven't tried this, but I guess one could name his > machine "Admi

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
> > > The '$' is a pain. None of the examples in the original post > > > would have worked, because the '$' was not '\$', and the shell > > > would have blown chunks over the "variable expansion". > > > > Your foundation is flawed, we allow $ in passwd just fine, and > > the only problem here is w

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
Juli Mallett wrote: > > The '$' is a pain. None of the examples in the original post > > would have worked, because the '$' was not '\$', and the shell > > would have blown chunks over the "variable expansion". > > Your foundation is flawed, we allow $ in passwd just fine, and > the only problem

Re: pw_user.c change for samba

2002-11-27 Thread NAKAJI Hiroyuki
> In <005501c29670$d5fd8360$fe01a8c0@dwcjr> > "David W. Chapman Jr." <[EMAIL PROTECTED]> wrote: David> Wouldn't pw still have to be updated. I haven't looked at adduser but I David> thought it was a wrapper for pw? No. My /usr/sbin/adduser, updated on Nov/23/2002 21:58 JST, does not

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
> > David> Last I checked adduser doesn't even let you use $ > > How about to set > > usernameregexp = '^[a-z0-9_][a-z0-9_-]*[a-z0-9_$-]$' > > in /etc/adduser.conf? > > It allows to make a 'machine account' ending with '$'. I checked this > about two months ago. Wouldn't pw still have to be up

Re: pw_user.c change for samba

2002-11-27 Thread NAKAJI Hiroyuki
> "David W. Chapman Jr." <[EMAIL PROTECTED]> wrote: David> Last I checked adduser doesn't even let you use $ How about to set usernameregexp = '^[a-z0-9_][a-z0-9_-]*[a-z0-9_$-]$' in /etc/adduser.conf? It allows to make a 'machine account' ending with '$'. I checked this about two mo

Re: pw_user.c change for samba

2002-11-27 Thread Marcin Dalecki
David W. Chapman Jr. wrote: On Wed, Nov 27, 2002 at 01:37:05PM -0800, Terry Lambert wrote: "David W. Chapman Jr." wrote: If it's allowed, it whould probably only be allowed in the user name (i.e. the patch is wrong; it should probably add another parameter to the allowable values of 'int gecos

Re: pw_user.c change for samba

2002-11-27 Thread Juli Mallett
* De: Terry Lambert <[EMAIL PROTECTED]> [ Data: 2002-11-27 ] [ Subjecte: Re: pw_user.c change for samba ] > "David W. Chapman Jr." wrote: > > > Why is this actually necessary for SAMBA? > > > > > > Is it necessary for all three of these to

Re: pw_user.c change for samba

2002-11-27 Thread Giorgos Keramidas
On 2002-11-27 12:55, Terry Lambert <[EMAIL PROTECTED]> wrote: > It seems to me that another alternative is that all these > names end in '$'; therefore, when you are expecting one of > these names, you could imply a '$', without needing to actually > have it in the password file -- in other words,

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
On Wed, Nov 27, 2002 at 01:37:05PM -0800, Terry Lambert wrote: > "David W. Chapman Jr." wrote: > > > If it's allowed, it whould probably only be allowed in the > > > user name (i.e. the patch is wrong; it should probably add > > > another parameter to the allowable values of 'int gecos', and > > >

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
Oops. Better patch attached (damn Makefile dependencies are broken unless you manually build them via "make depend"). -- Terry Index: pw.h === RCS file: /cvs/src/usr.sbin/pw/pw.h,v retrieving revision 1.13 diff -c -r1.13 pw.h *** pw.

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
Garance A Drosihn wrote: > >the machine account always ends with a $ > > > >So it would only have to be for the account name > > I think I'd prefer a somewhat more involved change, one which > allowed $ only for account-name, and only as the last character. > That seems like a good idea to me. >

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
"David W. Chapman Jr." wrote: > > If it's allowed, it whould probably only be allowed in the > > user name (i.e. the patch is wrong; it should probably add > > another parameter to the allowable values of 'int gecos', and > > change it to 'int checktype' or similar). > > I don't have a problem wit

Re: pw_user.c change for samba

2002-11-27 Thread Garance A Drosihn
At 2:34 PM -0600 11/27/02, David W. Chapman Jr. wrote: > Why is this actually necessary for SAMBA? Is it necessary for all three of these to permit this, or is it sufficient to (for example) allow it in the group name? Samba needs a user account for the domain "machine account" the machin

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
> I gathered that from the SAMBA site, too. > > The '$' is a pain. None of the examples in the original post > would have worked, because the '$' was not '\$', and the shell > would have blown chunks over the "variable expansion". The patch I sent in works with "pw add user asdf$", but you may b

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
"David W. Chapman Jr." wrote: > > Why is this actually necessary for SAMBA? > > > > Is it necessary for all three of these to permit this, or is > > it sufficient to (for example) allow it in the group name? > > > > Samba needs a user account for the domain "machine account" > > the machine accou

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
> > Go read the SAMBA website, there's a good deal about how us lucky > FreeBSD + SAMBA users get to vipw+vi /etc/group by hand, since pw(8) > doesn't let one do what [adduser] does. Last I checked adduser doesn't even let you use $ It claims to support it with the RE it shows you, but then when

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
> Why is this actually necessary for SAMBA? > > Is it necessary for all three of these to permit this, or is > it sufficient to (for example) allow it in the group name? > Samba needs a user account for the domain "machine account" the machine account always ends with a $ So it would only have

Re: pw_user.c change for samba

2002-11-27 Thread Juli Mallett
* De: Terry Lambert <[EMAIL PROTECTED]> [ Data: 2002-11-27 ] [ Subjecte: Re: pw_user.c change for samba ] > "David W. Chapman Jr." wrote: > > I know we're in a code freeze right now, but would anyone have a > > problem with this patch once the freeze

Re: pw_user.c change for samba

2002-11-27 Thread Terry Lambert
"David W. Chapman Jr." wrote: > I know we're in a code freeze right now, but would anyone have a > problem with this patch once the freeze is up? This brings us closer > to allowing samba to automatically joining machines to the domain. This change permits '$' in the account name, group name, and

Re: pw_user.c change for samba

2002-11-27 Thread David W. Chapman Jr.
On Wed, Nov 27, 2002 at 02:32:22PM -0500, David Rhodus wrote: > Can you provide more meaning as to what the patch does? > It allows usage of $ signs for adding users like pw add user asdf$ which for samba asdf$ would be a computer name -- David W. Chapman Jr. [EMAIL PROTECTED] Raintree Netw