summaryrefslogtreecommitdiffstats
path: root/source3/nsswitch/winbindd.h
Commit message (Collapse)AuthorAgeFilesLines
* Moved definition of winbind username/password secrets into secrets.hTim Potter2002-04-101-6/+0
| | | | (This used to be commit b618b5943d53f33e6f03d8d47cf87efc5e1ad3e5)
* Winbind cleanup.Andrew Bartlett2002-02-151-0/+1
| | | | | | | | | | | | | | | | | | | This patch fixes the segfaults I introduced in the previous conneciton caching patch. It cleans up the connection cache a *lot* - in particular it adds significant robustness to the operation. If a the DC goes down, we no longer fail the next operation - the code checks if the connection died during one of its own operations on the socket, and restarts the conneciton as required. There is still a memory leak in here somewhere - but this code also cleans up a number of these. Also added is the abilty to sepecify the domain of the 'get around restrict anonymous' user that winbind uses. Andrew Bartlett (This used to be commit 92cbefdf2783bf9dbbb2179c1b2f7cdb802d84a9)
* Removed version number from file header.Tim Potter2002-01-301-2/+1
| | | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header. (This used to be commit 6a58c9bd06d0d7502a24bf5ce5a2faf0a146edfa)
* Always query the PDC for the list of trusted domains rather than interatingTim Potter2002-01-111-17/+26
| | | | | | | | | | | | | | | | | | the list received at startup or we get an out of date list. I thought there might be some sequence number that is incremented when a trusted domain is added or removed - perhaps there is but I just haven't found it yet. - Renamed get_domain_info() to init_domain_list() - Made an accessor function to return the list of trusted domains rather than using a global so we don't have to remember to put a magic init function - The getent state can not keep a pointer to a winbind_domain structure as it may be freed if init_domain_list() is called again so we keep the domain name instead (This used to be commit 37216c649a394b449eaaaa6644709eafb3bf37ff)
* added trusted realm support to ADS authenticationAndrew Tridgell2001-12-191-0/+1
| | | | | | | the method used for checking if a domain is a trusted domain is very crude, we should really call a backend fn of some sort. For now I'm using winbindd to do the dirty work. (This used to be commit adf44a9bd0d997ba4dcfadc564a29149531525af)
* Modify winbindd to use authenticated user info from secrets.tdb when makingTim Potter2001-12-111-0/+5
| | | | | IPC$ connections to domain controllers. (This used to be commit 1217ef28a6c18c085fcb2eac3bf04866c166d959)
* removed the start_ndx parameter from group enumerationAndrew Tridgell2001-12-111-3/+2
| | | | | | | I tried testing this by lowering the buffer size in cli_samr_enum_dom_groups() but that didn't work - I think this needs more looking into (This used to be commit 34328e30315e4b42087d0ee11ed0c3fb715bc250)
* got rid of start_ndx from query_user_list()Andrew Tridgell2001-12-111-3/+2
| | | | (This used to be commit 1c909afe76566807fb576c965eb869f98e72f2bd)
* winbindd backends can now be marked "consistent" or "inconsistent"Andrew Tridgell2001-12-101-2/+4
| | | | | | | | consistent backends (like ADS) always give correct primary group info, so we can play cache tricks to speed things up a lot inconsistent backends (like MSRPC) need to fetch stuff more often (This used to be commit 217c39f23282e20f96a61a0d5a2434b3f5f66a86)
* moved the domain sid lookup and enumeration of trusted domains intoAndrew Tridgell2001-12-101-0/+11
| | | | | | | | | the backends at startup, loop until we get the domain sid for our primary domain, trying every 10 seconds. This makes winbindd handle a room-wide power failure better (This used to be commit 7c60ae59378be1b2af2e57ee3927966a29a797a5)
* completely new winbindd cache infrastructureAndrew Tridgell2001-12-091-1/+3
| | | | | | | | | | | | | | | | | | | | this one looks like just another winbind backend, and has the following properties: - does -ve and +ve cacheing of all queries - can be disabled with -n switch to winbindd - stores all records packed, so even huge domains are not a problem for a complete cache - handles the server being down - uses sequence numbers for all entries This fixes a lot of problems with winbindd. Serving from cache is now *very* fast. (This used to be commit fddb4f4c04473a60a97212c0c8e143d6a4d68380)
* moved the sequence number fetch into the backend, and fetch theAndrew Tridgell2001-12-051-0/+3
| | | | | sequence number via ldap when using ads (This used to be commit 9a084f0bb91883224ad44e2b76417d10c15cce42)
* added very basic ads connection cacheingAndrew Tridgell2001-12-051-0/+1
| | | | (This used to be commit 7de670cd15c1a87dd01ab22d74a7e6cbf5ae6673)
* finally worked out how to do ldap lookups by binary blobs, so I canAndrew Tridgell2001-12-051-5/+17
| | | | | | | | now do searches on SID. This allows me to do a true ldap sid_to_name() function one one function to go! (This used to be commit 7d44aa3915bc88fd2b2f8454f190b11677cbb848)
* added lookup_groups() to the ads backendAndrew Tridgell2001-12-041-2/+3
| | | | | winbindd/ADS can now do initgroups() (This used to be commit 43edeaca9f3a42699131939ed0d917111f57b678)
* moved lookup_usergroups() into the backend structureAndrew Tridgell2001-12-041-0/+5
| | | | (This used to be commit 689f45d2079d06b09947b2cdd314867df98c938d)
* added a query_user backendAndrew Tridgell2001-12-041-0/+7
| | | | | fixed a winbindd crash when the group membership can't be looked up (This used to be commit 088f4cc5be4a1a38781e4d019146d53993ed8c6f)
* changed query_dispinfo to query_user_listAndrew Tridgell2001-12-031-3/+3
| | | | (This used to be commit 80010d80f93cfb32c53a1720c7564fb080846f35)
* put sid_to_name behind the winbindd backend interfaceAndrew Tridgell2001-12-031-0/+6
| | | | | | | | I spent quite a while trying to work out how to make this call via ldap and failed. I then found that MS servers seem use rpc for sid_to_name, and it works even when in native mode, I ended up just implementing it via rpc (This used to be commit 789833b44e342c0b5de463ed8f9b5f7474a99f27)
* added name_to_sid to the backendAndrew Tridgell2001-12-031-0/+5
| | | | (This used to be commit 816e40a51af80a7f703c0451304de406deab3dd8)
* split winbindd_enum_dom_groups into the new backend structureAndrew Tridgell2001-12-031-1/+4
| | | | | | | also created winbindd_rpc.c which contains the functions that have been converted to the new structure. There will soon be a winbindd_ads.c for the ldap backend (This used to be commit e4ccc602ba65838646f2632120069f3274619dd9)
* The beginnings of alternative backends for winbinddAndrew Tridgell2001-12-011-1/+23
| | | | | | | This just splits off the dispinfo call behind a methods structure. I'll split off a few more functions soon, then we will be ready for LDAP replacement methods (This used to be commit 0216b0fca115c903ec31ed21427a83c62077dc95)
* Added transparent +ve caching for lookupname/lookupsid. -ve caching canJeremy Allison2001-11-211-1/+1
| | | | | | | | | be easily added (a one liner) once we know the correct error codes returned by a W2K DC. All other winbindd calls should go through a similar transparent caching layer (and will soon). Jeremy. (This used to be commit b16bb21d371772816a4331f5011c151be0e083d5)
* Fixed some memory leaks introduced by connection handling rewrite, as wellTim Potter2001-10-191-1/+0
| | | | | | | as one memory leak that has been there for ages! Changed the way talloc is used in get{pw,gr}nam routines. (This used to be commit d52cd1854fdff18c223d6dd1eca0e26f1f0bf01b)
* Converted some more functions to create and dispose of a talloc context on aTim Potter2001-10-191-0/+1
| | | | | | | | | per-call basis rather than per-connection. Had a bit more of a reformatting fest. Still need to run it through insure and handle downed connections. (This used to be commit 46fe5a8fb96974e1323bc3e5d94fda74edbeb852)
* Removed some unused code from the recent cleanup.Tim Potter2001-10-121-10/+2
| | | | (This used to be commit 4f12df9fc569b73dcf037b476976cb3be47ac43f)
* This is the start of a bit of a rewrite of winbindd's connection handling.Tim Potter2001-10-051-13/+9
| | | | | | | | | | | | I've wrapped up all the decisions about managing, making and closing connections into a connection manager in nsswitch/winbindd_cm.c. It's rather incomplete at the moment - only querying basic user info works at the moment (i.e finger -m DOMAIN/user) and everything else is broken. Jeremy, please take a look and I'll start moving across the rest of winbindd to this new system. (This used to be commit c369cf5af787ed9c642778d21f162716fbf0620e)
* Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter2001-10-021-4/+0
| | | | (This used to be commit 2d0922b0eabfdc0aaf1d0797482fef47ed7fde8e)
* merge from APPLIANCE_TNGGerald Carter2001-08-301-0/+1
| | | | (This used to be commit 2af0a65e4c56e9361ee03286edcf26b5926b39e4)
* Preliminary merge of winbind into HEAD. Note that this compiles and linksTim Potter2001-05-071-18/+46
| | | | | but I haven't actually run it yet so it probably doesn't work. (-: (This used to be commit 59f95416b66db6df05289bde224de29c721978e5)
* in head as well ...Andrew Tridgell2000-05-101-1/+1
| | | | | | renamed ntdom to winbind I think that using winbind in /etc/nsswitch.conf is better than ntdom (This used to be commit 80f85b5359c26dc26f8f88b984f27cfa4ac34e61)
* brought the winbindd code into headAndrew Tridgell2000-05-091-0/+106
this does not yet compile, but I'm working on that. (This used to be commit 3fb862531a4e78dca13d16d958517b16e5bdd4e2)