samba.git/source3/winbindd, branch master

s3-winbind: Fix chached user group lookup of trusted domains.

2015-03-09T18:23:25+00:00

If a user group lookup has aleady been done before with a machine
account we did always return the incomplete information from the cache.
This patch makes sure we return the correct group information from the
netsamlogon cache.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11143

Pair-Programmed-With: Andreas Schneider 
Signed-off-by: Michael Adam 
Signed-off-by: Andreas Schneider 
Reviewed-by: Volker Lendecke 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Mon Mar  9 19:23:25 CET 2015 on sn-devel-104

winbind: Make wb_sids2xids_recv work on an array

2015-03-07T14:28:59+00:00

The trigger for this is that Coverity got confused by the dual use of &xid
as an array with the implicit length equality between wb_sids2xids_send
and the array passed in to wb_sids2xids_recv for the result.

I don't want to start doing things just for the Coverity scan, but this
makes the code clearer to me by removing this implicit expected array
length equality.

Signed-off-by: Volker Lendecke 
Signed-off-by: David Disseldorp 
Reviewed-by: Volker Lendecke 
Reviewed-by: David Disseldorp 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Sat Mar  7 15:28:59 CET 2015 on sn-devel-104

winbind: Fix CID 1273294 Uninitialized scalar variable

2015-03-04T13:46:07+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: David Disseldorp

winbind: Fix CID 1273295 Uninitialized scalar variable

2015-03-04T13:46:07+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: David Disseldorp

winbind: Slightly simplify wb_sids2xids

2015-02-27T21:53:06+00:00

We only needs "names" and "domains" wb_sids2xids_lookupsids_done. It confused
me when reading this code that these variables are stored in "state".

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

winbind: Simplify winbindd_dsgetdcname_recv

2015-02-27T00:16:10+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Feb 27 01:16:10 CET 2015 on sn-devel-104

winbind: Fix idmap initialization

2015-01-22T16:58:16+00:00

The fix is in the sscanf line: %u in the sscanf format mandates the use of
a pointer to an "unsigned". idmap_domain->[low|high]_id are uint32_t. On
little endian 64-bit this might at least put the correct values into
low_id and high_id, but might overwrite the read_only bit set earlier,
depending on structure alignment and packing. On big endian 64-bit,
this will just fail.

Automatic conversion to uint32_t will happen only at assignment, not
when you take a pointer of such a thing.

Signed-off-by: Volker Lendecke 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Thu Jan 22 17:58:16 CET 2015 on sn-devel-104

Add a script-only idmap module.

2015-01-08T03:30:32+00:00

In this third version I have cleaned up some unused variable warnings that
only the Samba 3 build found and added a man page based on the idmap_tdb2
man page. I have also added support for ID_TYPE_BOTH mappings and replaced
calls to popen with something safer. Also, I removed some non-PC macros.

Signed-off-by: Richard Sharpe 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Thu Jan  8 04:30:32 CET 2015 on sn-devel-104

winbind: Retry after SESSION_EXPIRED error in ping-dc

2015-01-06T01:58:57+00:00

Trying to establish a netlogon connection when the service ticket
expires might fail with NT_STATUS_NETWORK_SESSION_EXPIRED. The
underlying client code already marks the session as invalid, so retry
the netlogon connect in this case.

Signed-off-by: Christof Schmit 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Jan  6 02:58:57 CET 2015 on sn-devel-104

s3:winbindd: improve logic to use CLDAP for a given domain.

2015-01-05T18:23:39+00:00

As an AC Domain Controller we should try CLDAP for active directory domains.
E.g. FreeIPA domains doesn't provide NBT at all...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Guenther Deschner 

Autobuild-User(master): Günther Deschner 
Autobuild-Date(master): Mon Jan  5 19:23:40 CET 2015 on sn-devel-104