From 401398642f32873cd1440359ba37bf2802d1e95b Mon Sep 17 00:00:00 2001 From: "Michael J. Cohen" Date: Mon, 21 Oct 2002 02:59:56 +0000 Subject: [PATCH] patch to allow non-uid0 users to bind to ldap. (needed for portldap stuff, use flag) --- net-fs/samba/files/nonroot-bind.diff | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 net-fs/samba/files/nonroot-bind.diff diff --git a/net-fs/samba/files/nonroot-bind.diff b/net-fs/samba/files/nonroot-bind.diff new file mode 100644 index 000000000000..d03bdf7a93bc --- /dev/null +++ b/net-fs/samba/files/nonroot-bind.diff @@ -0,0 +1,18 @@ +--- passdb/pdb_ldap.c.old 2002-10-20 18:48:43.000000000 -0400 ++++ passdb/pdb_ldap.c 2002-10-20 18:50:27.000000000 -0400 +@@ -132,10 +132,15 @@ + + /* check that the user is in the domain admin group for connecting */ + ++/* Q&D patch : permit non root bind to LDAP ++ because if so (original code), you cannot add W2K/WXP workstations accounts ++ via the W2K/WXP requester, using an uid != from 0 (ex: user 'administrator' ++ from a " @"Domain Admin" " group (from 'domain admin group' directive in smb.conf) + if ( (uid != 0) && !user_in_list(pass->pw_name, lp_domain_admin_group()) ) { + DEBUG(0, ("ldap_open_connection: cannot access LDAP when not root or a member of domain admin group..\n")); + return False; + } ++*/ + + port = lp_ldap_port(); + -- 2.26.2