summaryrefslogtreecommitdiffstats
path: root/source3/winbindd
Commit message (Collapse)AuthorAgeFilesLines
* Remove a duplicate prototypeVolker Lendecke2009-07-281-1/+0
|
* Added prefer_ipv4 bool parameter to resolve_name().Jeremy Allison2009-07-281-2/+2
| | | | | | | | | | W2K3 DC's can have IPv6 addresses but won't serve krb5/ldap or cldap on those addresses. Make sure when we're asking for DC's we prefer IPv4. If you have an IPv6-only network this prioritizing code will be a no-op. And if you have a mixed network then you need to prioritize IPv4 due to W2K3 DC's. Jeremy.
* Fix a typoVolker Lendecke2009-07-271-1/+1
|
* Fix a valgrind error in winbindVolker Lendecke2009-07-271-1/+2
| | | | | | When looking for idle clients, we dereferenced state->response. As this is dynamically allocated now, the proper test is whether state->response exists at all. This is the case when an async operation is in process at that moment.
* Fix some nonempty blank linesVolker Lendecke2009-07-271-105/+103
|
* Fix a winbind memleakVolker Lendecke2009-07-251-0/+1
|
* s3: compile warning and upn handlingBo Yang2009-07-182-1/+7
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3: don't do this, upper callbacks will check itBo Yang2009-07-181-4/+0
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* Make gencache more stableVolker Lendecke2009-07-151-0/+2
| | | | | | | | | | This provides a compromise between stability and performance: gencache is a persistent database these days that for performance reasons can not use tdb transactions for all writes. This patch splits up gencache into gencache.tdb and gencache_notrans.tdb. gencache_notrans is used with CLEAR_IF_FIRST, writes to it don't use transactions. By default every 5 minutes and when a program exits, all entries from _notrans.tdb are transferred to gencache.tdb in one transaction.
* s3-account_policy: add pdb_policy_type enum.Günther Deschner2009-07-141-5/+5
| | | | Guenther
* libds: merge the UF<->ACB flag mapping functions.Günther Deschner2009-07-131-1/+1
| | | | Guenther
* Make escape_ldap_string take a talloc contextVolker Lendecke2009-07-091-3/+3
|
* Fix bug 4699: Remove pidfile on clean shutdownVolker Lendecke2009-06-181-0/+4
|
* Remove "winbindd_request" and "winbindd_response" from winbindd_cli_stateVolker Lendecke2009-06-143-11/+15
| | | | | This shrinks the memory footprint of an idle client by 5592 bytes to 60 bytes on my 32-bit box.
* Make winbindd_cli_state->response a pointer instead of a struct memberVolker Lendecke2009-06-1414-240/+246
| | | | | | Same comment as in baa6084378e530b: This is just a preparatory checkin. Volker
* Remove an unused struct member in winbindd_cli_stateVolker Lendecke2009-06-141-1/+0
|
* Fix an error message: We get the errno in "err"Volker Lendecke2009-06-141-1/+1
|
* winbind: replace process_loop() by tevent_loop_once()Volker Lendecke2009-06-141-68/+5
|
* Make rescan_trusted_domains a timed eventVolker Lendecke2009-06-143-26/+20
|
* Do not store the listening fdeVolker Lendecke2009-06-141-15/+11
|
* Avoid scanning the client list when a client exitsVolker Lendecke2009-06-142-20/+6
|
* Do not use "finished" in winbind childVolker Lendecke2009-06-141-10/+8
|
* Remove unused init_child_connection()Volker Lendecke2009-06-142-139/+0
|
* Convert winbindd_domain_info to wb_domain_request_sendVolker Lendecke2009-06-141-59/+75
|
* Add winbindd_dual_ping to all childrenVolker Lendecke2009-06-145-0/+20
|
* Convert async_domain_request to wb_domain_request_sendVolker Lendecke2009-06-141-20/+22
|
* Add async wb_pingVolker Lendecke2009-06-143-0/+62
|
* Add an async wb request loopVolker Lendecke2009-06-142-0/+63
|
* Add wb_domain_request_send/recvVolker Lendecke2009-06-142-0/+190
|
* Remove some unused codeVolker Lendecke2009-06-144-264/+0
|
* Convert the winbind parent->child communication to wb_reqtransVolker Lendecke2009-06-146-239/+166
|
* Convert the main winbind client communication to wb_reqtrans.cVolker Lendecke2009-06-142-125/+65
|
* Make winbindd_cli_state->request a pointer instead of a struct memberVolker Lendecke2009-06-1414-423/+426
| | | | | | | | In itself, this is pretty pointless. But in the next steps I'll convert the winbind internal communication to wb_reqtrans which allocates the request properly. This minimizes the later diff. Volker
* Pass a talloc_ctx to pdb_enum_aliasmemVolker Lendecke2009-06-081-2/+2
|
* s3-winbindd: workaround alias enumeration in expand_groups().Günther Deschner2009-06-081-3/+16
| | | | | | alias enumeration in NSS is not done properly done atm and needs to be fixed. Guenther
* s3-winbindd: add some debug statements while tracking down a bug.Günther Deschner2009-06-062-2/+20
| | | | Guenther
* s3-winbindd: fix remaining callers of sid_binstring().Günther Deschner2009-05-282-4/+4
| | | | Guenther
* Make sid_binstring & friends take a talloc contextVolker Lendecke2009-05-282-12/+10
|
* s3:idmap_ldap: filter out of range mappings in default idmap configMichael Adam2009-05-281-16/+55
| | | | | | This fixes bug #6417 Michael
* s3: Allow child processes to exit gracefully if we are out of fdsMarc VanHeyningen2009-05-272-4/+6
| | | | | | | | | | When we run out of file descriptors for some reason, every new connection forks a child that immediately panics causing smbd to coredump. This seems unnecessarily harsh; with this code change we now catch that error and merely log a message about it and exit without the core dump. Signed-off-by: Tim Prouty <tprouty@samba.org>
* s3:idmap: fix a comment typoMichael Adam2009-05-271-1/+1
| | | | Michael
* s3:idmap_tdb2: filter out of range mappings in default idmap configMichael Adam2009-05-271-12/+49
| | | | | | This fixes bug #6416 Michael
* s3:idmap_tdb: add an entry debug statment to idmap_tdb_db_init()Michael Adam2009-05-271-0/+2
| | | | Michael
* s3:idmap_tdb: filter out of range mappings in default idmap configMichael Adam2009-05-271-16/+57
| | | | | | This fixes bug #6415 Michael
* s3:winbind_util: remove trailing spacesMichael Adam2009-05-251-56/+56
| | | | Michael
* s3:winbind:idmap_ldap: warn about duplicate SID->XID mappings (bug #6387)Michael Adam2009-05-251-2/+11
| | | | | | | | With the current infrastructure, we should not return error on duplicate mappings but just warn instead (because an error would trigger the attempt to create yet another mapping). Michael
* s3:winbind:idmap_ldap: warn about duplicate XID->SID mappings (bug #6387)Michael Adam2009-05-251-0/+8
| | | | | | | | With the current infrastructure, we should not return error on duplicate mappings but just warn instead (because an error would trigger the attempt to create yet another mapping). Michael
* Fix a race condition in winbind leading to a panicVolker Lendecke2009-05-241-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | In winbind, we do multiple events in one select round. This needs fixing, but as long as we're still using it, for efficiency reasons we need to do that. What can happen is the following: We have outgoing data pending for a client, thus state->fd_event.flags == EVENT_FD_WRITE Now a new client comes in, we go through the list of clients to find an idle one. The detection for idle clients in remove_idle_client does not take the pending data into account. We close the socket that has pending outgoing data, the accept(2) one syscall later gives us the same socket. In new_connection(), we do a setup_async_read, setting up a read fde. The select from before however had found the socket (that we had already closed!!) to be writable. In rw_callback we only want to see a readable flag, and we panic in the SMB_ASSERT(flags == EVENT_FD_READ). Found using bin/smbtorture //127.0.0.1/tmp -U% -N 500 -o 2 local-wbclient Volker
* s3:winbind:idmap_ldap: fix a crash bug in idmap_ldap_unixids_to_sids (#6387)Michael Adam2009-05-221-1/+1
| | | | | | | | | | | | | | | | | | | | This fixes a crash bug hit when multiple mappings were found by the ldap search. This crash was caused by an ldap asssertion in ldap_next_entry because was set to NULL in each iteration. The corresponding fix was applied to the idmap_ldap_sids_to_unixids() by Jerry in 2007 (b066668b74768d9ed547f16bf7b6ba6aea5df20a). This fixes the crash part of bug #6387. There is a logic part, too: The problem currently only occurs when multiple mappings are found for one given unixid. Now winbindd does not crash any more but it does not correctly handle this situation. It just returns the last mapping from the ldap search results. This needs fixing. Michael
* s3: ignore EPIPE error when winbind finally writes to wb client because ↵Bo Yang2009-05-221-2/+8
| | | | | | client might have already closed the socket Signed-off-by: Bo Yang <boyang@samba.org>