freeipa/ipaserver/install/plugins
Alexander Bokovoy 703497532a Support Samba 4.9
Samba 4.9 became a bit more strict about creating a local NT token and a
failure to resolve or create BUILTIN\Guests group will cause a rejection
of the connection for a successfully authenticated one.

Add a default mapping of the nobody group to BUILTIN\Guests.

BUILTIN\Guests is a special group SID that is added to the NT token for
authenticated users.

For real guests there is 'guest account' option in smb.conf which
defaults to 'nobody' user.

This was implicit behavior before as 'guest account = nobody' by
default would pick up 'nobody' group as well.

Fixes: https://pagure.io/freeipa/issue/7705
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2018-09-26 11:40:19 +02:00
..
__init__.py Server Upgrade: specify order of plugins in update files 2015-04-14 19:25:47 +02:00
adtrust.py Support Samba 4.9 2018-09-26 11:40:19 +02:00
ca_renewal_master.py Move config directives handling code 2018-05-29 17:03:56 +02:00
dns.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
fix_replica_agreements.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
rename_managed.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
update_ca_topology.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
update_dna_shared_config.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
update_fix_duplicate_cacrt_in_ldap.py Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
update_idranges.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
update_ldap_server_list.py Move ds.replica_populate to an update plugin 2016-11-11 12:13:56 +01:00
update_managed_permissions.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
update_nis.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
update_pacs.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
update_passsync.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
update_ra_cert_store.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
update_referint.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
update_services.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
update_uniqueness.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
upload_cacrt.py mod_ssl migration: fix upload_cacrt.py plugin 2018-02-21 07:57:40 +01:00