summaryrefslogtreecommitdiffstats
path: root/source4/winbind
Commit message (Collapse)AuthorAgeFilesLines
* Set trans to a value that is not LDB_SUCCESS (all LDB_ constants areMichele Baldessari2012-09-101-1/+1
| | | | | | | | positive) so that any "goto failed:" call does not end up calling ldb_transaction_cancel() if trans is initialized to 0 (LDB_SUCCESS) by chance. Signed-off-by: Jeremy Allison <jra@samba.org>
* s4:winbind: let wb_update_rodc_dns_send/recv use netlogon_queue (bug #9097)Stefan Metzmacher2012-08-251-3/+30
| | | | | | | metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Aug 25 05:06:18 CEST 2012 on sn-devel-104
* s4:winbind: let wb_sam_logon_send/recv() use the netlogon_queue (bug #9097)Stefan Metzmacher2012-08-251-3/+30
| | | | metze
* s4:winbind: add a netlogon_queue (tevent_queue)Stefan Metzmacher2012-08-252-0/+12
| | | | | | This will protect the netlogon_creds later. metze
* s4:winbind: convert wb_update_rodc_dns_send/recv to tevent_reqStefan Metzmacher2012-08-252-78/+122
| | | | metze
* s4:winbind: convert wb_sam_logon_send/recv to tevent_reqStefan Metzmacher2012-08-253-93/+140
| | | | metze
* s4:winbind: convert wb_sid2domain to tevent_req internallyStefan Metzmacher2012-08-251-74/+174
| | | | | | | The public wrapper still uses composite_context, because I don't have time to fix all the callers... metze
* s4 rfc2307 gids mapping fixSergey Urushkin2012-07-221-7/+8
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-param: Remove unused "idmap trusted only"Andrew Bartlett2012-07-191-6/+0
| | | | | | | | | When we revamp the idmap layer, we will end up just following the s3 options, and this option is not used there either. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* s4-idmap: Add parameter 'idmap_ldb:use rfc2307' and correct implementation ↵Andrew Bartlett2012-06-201-20/+45
| | | | errors
* s4-idmap: Add mapping using uidNumber and gidNumber like idmap_adAndrew Bartlett2012-06-162-2/+123
| | | | | | | | | | This is a solution for users who are upgrading from Samba 3.x in particuar, or have clients that will be using idmap_ad. This avoids needing to have duplicate values in idmap.ldb and in the directory. No check for conflicts is made with the idmap.ldb - the AD store always wins. Andrew Bartlett
* lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett2012-06-152-3/+6
| | | | | | | | | | | | | | | controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
* s4-libnet Always return after composite_error()Andrew Bartlett2012-04-232-0/+4
| | | | | | | | | | These instances should not cause a problem, but make it easier to audit for this kind of problem in the future with grep. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 23 14:29:45 CEST 2012 on sn-devel-104
* s4:winbind: use ncalrpc for connections to ourselfStefan Metzmacher2012-02-292-7/+38
| | | | | | That avoids recursion if "smbd" is used as file server. metze
* s4-winbindd: Do not ask for a tree that we will not useAndrew Bartlett2012-02-291-4/+0
|
* s4-librpc: Fix NETLOGON credential chain with Windows 2008.Andreas Schneider2011-12-141-2/+2
| | | | | | | | | | Windows Server 2008 returns NT_STATUS_DOWNGRADE_DETECTED if you call netrServerAuthenticate2 during a domain join without setting the strong keys flag (128bit crypto). Only for NT4 we need to do a downgrade to the returned negotiate flags. See also 0970369ca0cb9ae465cff40e5c75739824daf1d0.
* idl: Improve MS-PAC IDLSimo Sorce2011-10-242-7/+7
| | | | | | | | | | Change some misleading variable names to reflect the actual function. Add missing field name/types previously marked as unkown. Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon Oct 24 19:19:28 CEST 2011 on sn-devel-104
* build: build wbinfo only once in the waf buildAndrew Bartlett2011-10-081-4/+0
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sat Oct 8 04:52:03 CEST 2011 on sn-devel-104
* s4 winbind: Don't drop workgroup name for getpw*Kai Blin2011-09-242-2/+16
| | | | | Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sat Sep 24 22:49:50 CEST 2011 on sn-devel-104
* s4-winbindd: implement WINBINDD_SIDS_TO_XIDSAndrew Tridgell2011-09-082-1/+97
| | | | | | this fixes wbinfo --sids-to-unix-ids Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-winbindd: fixed handling of extra_data in s3 requestsAndrew Tridgell2011-09-081-1/+37
| | | | | | | | | extra_data in s3 winbind requests is appended to the end of the request, but does not change the length header of the packet. Instead you need to get it from the extra_len element of the request structure. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-winbind: added count argument to wb_sids2xids_recv()Andrew Tridgell2011-09-084-4/+7
| | | | | | this allows callers to know how many SIDs were mapped Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* build: provide tevent-util as a public libraryAndrew Bartlett2011-08-081-1/+1
| | | | | | | This is needed so that OpenChange can get at _tevent_req_nterr(), which is referenced by generated PIDL output. Andrew Bartlett
* s4-winbind handle all values for server roleAndrew Bartlett2011-07-141-0/+1
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Jul 14 08:20:13 CEST 2011 on sn-devel-104
* s4:winbind/wb_init_domain: use DCERPC_SCHANNEL_128 in order to work against ↵Stefan Metzmacher2011-06-221-1/+1
| | | | | | | | | w2k8r2 metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 19:40:47 CEST 2011 on sn-devel-104
* s4:winbind/wb_samba3_protocol.c - rework it using concrete enum valuesMatthias Dieter Wallnöfer2011-06-161-3/+27
| | | | | | | | This changes commit 49352cafb4259503e6afb44d38db9bfd525d5e0d to comply with kblin's plans. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Jun 16 10:14:52 CEST 2011 on sn-devel-104
* s4:winbind/wb_samba3_protocol.c - quiet enum warningMatthias Dieter Wallnöfer2011-06-091-22/+3
| | | | | | | Don't enumerate all unimplemented types of call which simply leads to incompleteness. Reviewed-by: Tridge
* s4-param Remove 'idmap database'Andrew Bartlett2011-06-061-1/+1
| | | | This is now just idmap.ldb in the private dir, which remains.
* Fix simple uses of safe_strcpy -> strlcpy. Easy ones where we just remove -1.Jeremy Allison2011-05-041-1/+1
|
* source4/winbind: Fix prototypes for all functions.Jelmer Vernooij2011-03-193-0/+7
|
* s4-waf: move wbinfo buildrule to winbind.Günther Deschner2011-02-171-0/+4
| | | | | | Will be moved back later, once we have a more common samba-util.so Guenther
* ldb: use #include <ldb.h> for ldbAndrew Tridgell2011-02-101-1/+1
| | | | | | | | thi ensures we are using the header corresponding to the version of ldb we're linking against. Otherwise we could use the system ldb for link and the in-tree one for include Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* pam: share pam errors in a common location.Günther Deschner2011-02-081-1/+1
| | | | Guenther
* s4:winbind/idmap.c - we cannot use "failed" until we are in a transactionMatthias Dieter Wallnöfer2011-01-121-8/+14
| | | | We've to wait until "trans" is initialised.
* Add some debug in s4's winbind serverMatthieu Patou2011-01-123-2/+3
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Jan 12 01:43:11 CET 2011 on sn-devel-104
* s4:libcli/finddc.h - fix header dependanciesMatthias Dieter Wallnöfer2010-12-121-2/+0
| | | | And optimise includes
* s4-server: make server sockets a child of the task contextAndrew Tridgell2010-11-151-2/+2
| | | | | | | | | | | | We previously allocated sockets as direct children of the event context. That led to crashes if a service called task_server_terminate(), as it left the socket open and handling events for a dead protocol. Making them a child of the task allows the task to terminate and take all its sockets with it. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* winbind: Build as shared module.Jelmer Vernooij2010-11-141-2/+3
|
* ldbsamba: Lowercase library name.Jelmer Vernooij2010-11-071-1/+1
|
* s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij2010-10-311-81/+0
| | | | | | | | The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
* s4-smbd: don't initialise process models more than onceAndrew Tridgell2010-10-301-1/+1
| | | | | | | | | this also removes the event_context parameter from process model initialisation. It isn't needed, and is confusing when a process model init can be called from more than one place, possibly with different event contexts. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* waf: Stop automaticaly changing dashes to underscores in library names.Jelmer Vernooij2010-10-261-3/+3
|
* s4: Drop duplicate 'lib' prefix for private libraries.Jelmer Vernooij2010-10-261-1/+1
|
* s4: Rename LIBCLI_LDAP to libcli_ldap.Jelmer Vernooij2010-10-241-1/+1
|
* s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij2010-10-241-1/+1
|
* s4: Rename SAMDB_COMMON to samdb_common.Jelmer Vernooij2010-10-241-1/+1
|
* libcli/security Use common security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | This includes dom_sid.h and security_token.h and will be moved to the top level shortly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 03:35:36 UTC 2010 on sn-devel-104
* s4-param Refactor secrets code to not require an event context.Andrew Bartlett2010-10-111-3/+0
| | | | | | | | A new event context is constructed by LDB when required for secrets.ldb This will be essentially unused, as LDB on TDB will only trigger 'fake' events, and blocks on transactions and lock operations anyway. Andrew Bartlett
* idmap: Add missing dependency on ldbsamba.Jelmer Vernooij2010-10-101-1/+1
|
* s4-winbind Add a proxy method to update DNS records with a read-write DCAndrew Bartlett2010-09-174-1/+219
| | | | | | | | | | This must be done in winbindd as it already has the schannel connection and the credential chain. If we re-established that elsewhere, we would break the chain in winbindd. Andrew Bartlett Signed-Off-By: Andrew Tridgell <tridge@samba.org>