| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|
|
|
| |
Guenther
|
|
|
|
|
|
| |
metze
Signed-off-by: Michael Adam <obnox@samba.org>
|
|
|
|
|
|
|
|
|
|
| |
It seems that it is possible for idmap_init_passdb_domain() to be run
before idmap_init_domain(), so ensure we run the static init functions
in both.
Andrew Bartlett
Signed-off-by: Michael Adam <obnox@samba.org>
|
|
|
|
|
|
|
|
| |
This particular init function needs to be done in a native Samba3
build, but it turns out to be difficult for s3compat, which has other
code listening on the sockets.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
| |
This way everything is destoryed at the conclusion of
the connection correctly.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
|
|
|
|
|
|
|
|
|
|
|
|
| |
By putting this code inline in winbindd_setup_listeners() we remove 2
static variables and simplify the code.
By putting the get_winbind_priv_pipe_dir() in the same file, we allow
it to be reimplemented in s3compat.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
|
|
|
|
|
|
| |
I'm experimenting with a different entry point
This reverts commit f5c0f90da5f5372ca6b7a72daa8d073a2444a068.
|
|
|
|
|
|
|
|
|
| |
The code is not yet in common, but I hope to fix that soon.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Signed-off-by: Stefan Metzmacher <metze@samba.org>
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
|
|
| |
This matches the structure that new code is being written to,
and removes one more of the old-style named structures, and
the need to know that is is just an alias for struct dom_sid.
Andrew Bartlett
Signed-off-by: Günther Deschner <gd@samba.org>
|
| |
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
|
| |
This pidl attribute avoids the need for this dummy function, which
helps s3compat.
Andrew Bartlett
Signed-off-by: Günther Deschner <gd@samba.org>
|
| |
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
| |
Well known rids don't really belong into an rpc header, just use the ones
defined in security.idl.
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
|
|
|
| |
Note that this failure was hard to track, as winbind did only log a super helpful
"cm_prepare_connection: Success" debug message.
IPv6 gurus, please check
Successfully tested in two independent IPv6 networks now.
Guenther
|
|
|
|
|
|
|
|
| |
There is no point in checking the ranges this if the record found had an
invalid/unknown type: the mapping is not filled in. If it were initialized
to some defaults before, the check just might replace the status
NT_STATUS_INTERNAL_DB_ERROR with a NT_STATUS_NONE_MAPPED, which is not
as precise.
|
|
|
|
|
|
|
| |
This function provides a useful entry point for s3compat to set things
up in winbindd.
Andrew Bartlett
|
|
|
|
|
|
| |
This provides a more useful entry point for s3compat.
Andrew Bartlett
|
|
|
|
|
|
| |
This allows this function to be easily replaced in s3compat
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
This call only prints a DEBUG()
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
All the callers just want the PAC_LOGON_INFO, so search for that in
ads_verify_ticket(), and don't bother the callers with the rest of the
PAC.
This change makes sense on it's own (removing boilerplate wrappers
that just confuse the code), but it also makes it much easier to
implement a matching ads_verify_ticket() function in Samba4 for the
s3compat proposal.
Andrew Bartlett
Signed-off-by: Günther Deschner <gd@samba.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This shrinks include/includes.h.gch by the size of 7 MB and reduces build time
as follows:
ccache build w/o patch
real 4m21.529s
ccache build with patch
real 3m6.402s
pch build w/o patch
real 4m26.318s
pch build with patch
real 3m6.932s
Guenther
|
|
|
|
|
|
| |
I don't think it makes sense to #ifdef this one case separately.
Metze, Bo Yang, please check!
|
| |
|
|
|
|
|
|
|
|
| |
This is to comply with the comment
"currently, anything from here on potentially overwrites extra_data."
Günther, please check!
|
|
|
|
|
| |
Not doing so results in the id mapping succeeding once unchecked and later on
being refused, because when reading from the tdb we do the checks.
|
|
|
|
|
| |
When we find an invalid record in the database, there's no point in checking
the non-existing value against the range limits.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Don't store information explicitly as boolean flags that can be easily
retrieved from the domain when it's actually needed.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This fixes a crash in winbindd_dual_pam_chng_pswd_auth_crap when given
global_sam_name() in the domain field
|
| |
|
| |
|
|
|
|
|
|
| |
Volker, please check.
Guenther
|
|
|
|
|
|
|
|
| |
add_trusted_domain() for a new domain always needs to be followed by a
setup_domain_child(). This was not always done, in particular not when walking
to the forest root for additional trusts.
This is a minimal patch, we need to fix add_trusted_domain().
|