samba.git/source3/passdb/ABI, branch master

s3:passdb: add optional get_trusteddom_creds() hooks

2014-12-18T03:22:05+00:00

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11016

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

pdb: Increase version number to fix ABI

2014-12-03T03:21:09+00:00

In the process, we can also rename pdb to avoid conflicts with libpdb.

We don't depend directly on pdb to avoid duplicate symbols.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10355
Change-Id: I4df6ba2f4ce35d3718dc4198b527cca46a139efe
Pair-programmed-with: Andrew Bartlett 
Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

s3:passdb: add pdb_get_trust_credentials()

2014-09-27T17:42:37+00:00

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Andrew Bartlett 
Reviewed-by: Andrew Bartlett 
Pair-programmed-with: Andrew Bartlett

passdb: Allow a passdb module to do idmap for everything

2014-06-15T22:26:26+00:00

This patch seems odd, but the pdb_samba_dsdb module has exactly this
semantics.  That is, the pdb_samba_dsdb is responsible for all IDMAP
values, due to backing on to the idmap.ldb allocator.  This option is
added so we can continue to support the mappings written into that
database even when switching winbindd implementations - the source4/
winbind code would only ask the idmap_ldb code, no matter what the
SID.

Almost all of the behaviour for this is already in winbindd, but we
need this extra flag function so as to avoid (currently intentional)
errors at startup due to not having a per-domain allocation
configured in the smb.conf.

Andrew Bartlett

Change-Id: I6b0d7a1463fe28dfd36715af0285911ecc07585c
Signed-off-by: Andrew Bartlett 
Reviewed-by: Kamen Mazdrashki

s3-lib: Add winbind_lookup_usersids().

2014-02-04T22:41:25+00:00

Pair-Programmed-With: Guenther Deschner 
Signed-off-by: Guenther Deschner 
Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

s3:passdb add a gid argument to pdb_create_builtin_alias

2013-06-21T08:44:24+00:00

make it possible to skip the allocation of a new gid from winbind
by specifying the gid to be used

Signed-off-by: Christian Ambach 
Reviewed-by: Michael Adam

s3:passdb expose pdb_create_builtin function

2013-06-21T08:44:23+00:00

this one first tries to map the principal before
allocating a new gid

Signed-off-by: Christian Ambach 
Reviewed-by: Michael Adam

s3:passdb add pdb__is_responsible_for functions

2013-06-21T08:44:19+00:00

allows PDB modules to specify for which special domains they
are responsible when it comes to SID->xid conversion

By default, passdb modules will be responsible for local BUILTIN,
local SAM and Unix Users/Groups

Pair-Programmed-With: Michael Adam 

Signed-off-by: Christian Ambach 
Signed-off-by: Michael Adam

PASSDB: add support to set and enumerate UPN suffixes associated with our forest

2013-04-09T18:29:18+00:00

Samba PDC may manage a forest containing DNS domains in addition to the primary one.
Information about them is advertised via netr_DsRGetForestTrustInformation when
trusted_domain_name is NULL, according to MS-NRPC and MS-LSAD, and
via netr_GetForestTrustInformation.

This changeset only expands PASSDB API; how suffixes are maintained is left
to specific PDB modules. Set function is added so that suffixes could be
managed through 'net' and other Samba utilities, if possible.

One possible implementation is available for ipasam module in FreeIPA:
http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cc56723151c9ebf58d891e85617319d861af14a4

Reviewed-by: Andreas Schneider

s3:passdb: fix building pdb_ldap as shared module

2012-12-03T18:12:29+00:00

Signed-off-by: Michael Adam 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Mon Dec  3 19:12:29 CET 2012 on sn-devel-104