summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:winbindd/idmap_ad: add support for trusted domains to idmap_ad (bug #3661)Michael Adam2008-12-011-126/+221
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This initial fix does at least work for explicitly configured domains. The patch has a few disadvantages: 1. It does work only for explicitly configured domains, not with the default backend (idmap backend = ad), since it relies on the domain name being passed in via the idmap_domain. One workaround for this would be to create clones of the default idmap_domain for domains not explicitly configured. 2. It calls find_domain_from_name_noinit() from idmap_ad_cached_connection. The problem here is that only the NetBIOS domain name (workgroup name) is passed in via the idmap_domain struct, and the module has to establish a connection to the domain based on that information. find_domain_from_name_noinit() has the disadvantage that it uses the state of the domain list at fork time (unless used from the main winbindd). But this should be ok as long as the primary domain was reachable at start time. For nss_info, the situation is similar - This will only work for domains explicitly configured in smb.conf as follows: "winbind nss info = rfc2307:dom1 sfu:dom2 rfc2307:dom3 template:dom4" Setting the default nss info to one of the ad backends (rfc2307, sfu, sfu20) will fail since the domain name is not passed in with the nss_domain_entry. Michael
* s3:winbindd/idmap_ad: refactor core of nss_{sfu|sfu20|rfc2307}_init to ↵Michael Adam2008-12-011-34/+48
| | | | | | common function. Michael
* s3:winbindd/idmap_ad: rename ctx to mem_ctx in nss_ad_get_info()Michael Adam2008-12-011-8/+8
| | | | | | in preparation to using the idmap_ad_context there Michael
* s3:winbindd/idmap: add diagnostic entry debug msg to ↵Michael Adam2008-12-011-0/+3
| | | | | | idmap_backends_sid_to_unixid Michael
* s3:winbindd/idmap: add diagnostic entry debug msg to ↵Michael Adam2008-12-011-0/+4
| | | | | | idmap_backends_unixid_to_sid Michael
* s3:winbindd/idmap: add diagnostic entry debug msg to idmap_find_domain().Michael Adam2008-12-011-0/+3
| | | | Michael
* s3:winbindd/idmap_util: unify entering debug messages and add ouput of domainMichael Adam2008-12-011-4/+8
| | | | Michael
* s3:winbindd/nss_info: change nss_map_{to|from}_alias to take nss_domain_entryMichael Adam2008-12-016-22/+24
| | | | | | instead of just the domain name Michael
* Set PRESENT flag when returning NULL [SD]ACL like Windows does.Steven Danneman2008-11-301-1/+9
| | | | | This could also be handled inside each ACL VFS module, by setting the PRESENT flag when a NULL [SD]ACL is created.
* remove the explicit mem_ctx from ntlmssp_state, use the state itselfVolker Lendecke2008-11-303-50/+45
|
* fix nonempty blank linesVolker Lendecke2008-11-302-30/+29
|
* Do not build the session request if it si not used anywayVolker Lendecke2008-11-301-4/+4
|
* fix nonempty blank linesVolker Lendecke2008-11-301-19/+19
|
* s3-libnetjoin: Fix bug #5749. Re-set acctflags while joining. fix from metze.Günther Deschner2008-11-291-16/+29
| | | | Guenther
* s3-libnetjoin: remove unused md4_trust_password, found by metze.Günther Deschner2008-11-291-5/+0
| | | | Guenther
* s4-smbtorture: add some more testcases to pwdlastset test.Günther Deschner2008-11-281-30/+118
| | | | Guenther
* s4-smbtorture: fix RPC-SAMR-PASSWORDS-PWDLASTSET with samba3 option.Günther Deschner2008-11-281-1/+0
| | | | Guenther
* s3-samr: add init_samr_user_info25 and init_samr_user_info26.Günther Deschner2008-11-282-0/+118
| | | | Guenther
* selftest: s4 does not have a pwdlastset implementation yet.Günther Deschner2008-11-281-0/+1
| | | | Guenther
* s4-smbtorture: allow to disable full testing of all possible opcode ↵Günther Deschner2008-11-281-2/+19
| | | | | | combinations. Guenther
* s4-smbtorture: move test to SAMR-PASSWORDS-PWDLASTSET.Günther Deschner2008-11-282-5/+42
| | | | Guenther
* s4-smbtorture: add test for samr password_expired flag while setting passwords.Günther Deschner2008-11-281-1/+401
| | | | Guenther
* s4-smbtorture: add test_SetUserPass_level_ex.Günther Deschner2008-11-281-0/+131
| | | | Guenther
* s4-smbtorture: add samr_rand_pass_silent.Günther Deschner2008-11-281-1/+8
| | | | Guenther
* s4-samr: fix samr passwdord_expired callers.Günther Deschner2008-11-284-9/+11
| | | | Guenther
* s3-samr: fix init_samr_user_info{23,24} callers.Günther Deschner2008-11-285-14/+14
| | | | Guenther
* s3-build: re-run make samba3-idl.Günther Deschner2008-11-282-8/+8
| | | | Guenther
* samr: fix samr_UserInfo24 and samr_UserInfo26.Günther Deschner2008-11-281-2/+2
| | | | Guenther
* Remove "conn" parameter from np_open, smb_request contains itVolker Lendecke2008-11-284-6/+7
|
* Remove inbuf references from the trans2ioctl codeVolker Lendecke2008-11-281-4/+4
|
* Consolidate the buffer checks for the reply_trans style functionsVolker Lendecke2008-11-283-169/+54
| | | | | | | | This is the one where I found the problem that led to 3.2.5. So if there is one checkin in the last year that I would like others to review and *understand*, it is this one :-) Volker
* Move cli_trans_oob to lib/util.cVolker Lendecke2008-11-283-17/+24
| | | | Rename it to trans_oob, it will be used in the server routines.
* Remove the variable "size" from reply_nttransVolker Lendecke2008-11-281-10/+13
| | | | | | | | | | | | | This converts the range checks for the setup[] array to rely on req->wct being set correctly in init_smb_request. As that already verifies the vwv array to be in the range of the smb_request inbuf, we don't have to do overflow checks here anymore. Jeremy, please check thoroughly! :-) Thanks, Volker
* Remove the variable "size" from reply_transVolker Lendecke2008-11-281-12/+16
| | | | | | | | | | | | | This converts the range checks for the setup[] array to rely on req->wct being set correctly in init_smb_request. As that already verifies the vwv array to be in the range of the smb_request inbuf, we don't have to do overflow checks here anymore. Jeremy, please check thoroughly! :-) Thanks, Volker
* Remove an unused variableVolker Lendecke2008-11-281-2/+0
|
* Remove two direct inbuf references from reply_sesssetup_and_X_spnego()Volker Lendecke2008-11-281-2/+2
|
* s3-samr: never allow to alter pwdlastset directly.Günther Deschner2008-11-271-0/+16
| | | | Guenther
* s3-samr: fix return code for invalid password sets in SetUserInfo.Günther Deschner2008-11-271-4/+4
| | | | Guenther
* s3-samr: fix return code for invalid name in _samr_LookupDomain.Günther Deschner2008-11-271-0/+3
| | | | Guenther
* s3-samr: avoid enumeration and user creation on builtin domain handle.Günther Deschner2008-11-271-0/+10
| | | | Guenther
* s3-samr: support samr_CreateUser as well.Günther Deschner2008-11-271-10/+20
| | | | Guenther
* s3-samr: support samr_QueryUserInfo2 as well.Günther Deschner2008-11-271-10/+15
| | | | Guenther
* s3-samr: add support for _samr_QueryUserInfo level 5.Günther Deschner2008-11-271-0/+108
| | | | Guenther
* s3-samr: add init_samr_user_info5.Günther Deschner2008-11-272-0/+66
| | | | Guenther
* s4-smbtorture: fix some build warnings.Günther Deschner2008-11-271-3/+3
| | | | Guenther
* Fix the offset checks in the trans routinesVolker Lendecke2008-11-273-9/+9
| | | | | | | | | This fixes a potential crash bug, a client can make us read memory we should not read. Luckily I got the disp checks right... Volker (cherry picked from commit 64a1d80851da5b05e70ec6c96f6e9bd473748369) (cherry picked from commit f04c5650a3aeca23591ddc781c4b297caaf9bb3f)
* Move netr_SamDatabaseID8Bit to netlogon.idl to prevent problems withJelmer Vernooij2008-11-2613-140/+122
| | | | forward enum declarations when compiled with C++.
* Don't filter out any variables for config.pm, only for config.mk.Jelmer Vernooij2008-11-262-3/+2
|
* Fix circular dependency error with autoconf 2.6.3.Andreas Schneider2008-11-261-0/+2
| | | | Signed-off-by: Andreas Schneider <anschneider@suse.de>
* Use a simple shell loop instead of _AC_SUBST_VARS.Jelmer Vernooij2008-11-261-3/+12
| | | | Autoconf has removed _AC_SUBST_VARS in newer versions.