summaryrefslogtreecommitdiffstats
path: root/nsswitch/pam_winbind.c
Commit message (Collapse)AuthorAgeFilesLines
* Remove uid_wrapper related code.Andreas Schneider2014-04-171-2/+0
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* Revert "pam_winbind: fix segfault in pam_sm_authenticate()"Garming Sam2014-01-151-4/+3
| | | | | | | | | | | | | This reverts commit ec0f51b200d6e5b99bbd872e169621c17f33524c. A more generic fix is now in use. Pair-programmed-with: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jan 15 01:37:38 CET 2014 on sn-devel-104
* pam_winbind: Do not honour require_membership_of in the acct module parametersGarming Sam2014-01-141-16/+41
| | | | | | | | This needs a password to work, and it confuses users for it to appear to be valid here. Pair-programmed-with: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: David Disseldorp <ddiss@samba.org>
* pam_winbind: Fix segfault caused by invalid configuration optionsGarming Sam2014-01-141-3/+3
| | | | | | | | | | This is a better fix for 8564 and will allow ec0f51b200d6e5b99bbd872e169621c17f33524c to be reverted. BUG: https://bugzilla.samba.org/show_bug.cgi?id=8564 Pair-programmed-with: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: David Disseldorp <ddiss@samba.org>
* fail authentication for single group name which cannot be converted to sidNoel Power2013-11-291-0/+6
| | | | | | | | | | | | | | furthermore if more than one name is supplied and no sid is converted then also fail. Bug: https://bugzilla.samba.org/show_bug.cgi?id=8598 Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Fri Nov 29 15:45:11 CET 2013 on sn-devel-104
* pam_winbind: Use strlcat in safe_append_stringVolker Lendecke2013-11-281-9/+3
| | | | | | | | | | We have that available via libreplace, so use it. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Thu Nov 28 14:33:32 CET 2013 on sn-devel-104
* handle later iniparser version assigning a zero length string value for 'key='Noel Power2013-11-201-4/+19
| | | | | | | | | | | | | | | | | | | | older iniparser versions ( like that used in upstream samba ) ignore 'key=' entries, the key is not entered into the dictionary at all. Later versions of iniparse specifically handle the following special cases * key= * key=; * key=# by assigning a value of "" ( a zero length string ) to the key in the dictionary. Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Wed Nov 20 16:12:13 CET 2013 on sn-devel-104
* BUG 9735: Fix winbind seperator in upn to username conversion.Andreas Schneider2013-03-221-1/+1
| | | | | | | Reviewed-by: Günther Deschner <gd@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Mar 22 16:18:06 CET 2013 on sn-devel-104
* nsswitch: Fix pam_get_{item,data} build warnings.Andreas Schneider2012-12-121-31/+15
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
* nsswitch: Remove unused variable in _pam_winbind_change_pwd().Andreas Schneider2012-12-121-3/+1
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
* pam_winbind: fix segfault in pam_sm_authenticate()David Disseldorp2012-10-261-3/+4
| | | | | | | | | | | | Ensure the potentially null winbind context is not dereferenced on cleanup. https://bugzilla.samba.org/show_bug.cgi?id=8564 Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Oct 26 22:40:57 CEST 2012 on sn-devel-104
* pam_winbind: match more return codes when wbcGetPwnam has failed.Günther Deschner2012-09-191-0/+3
| | | | | | | | | | This is required to properly return PAM_USER_UNKNOWN in case winbind had a problem. Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Sep 19 15:06:10 CEST 2012 on sn-devel-104
* nsswitch: fix crash on null pam change pw responseLuca Lorenzetto2012-09-121-1/+1
| | | | | | | | | | | | The function _pam_winbind_change_pwd crashes due to a null value passed to the function strcasecmp and denies to login via graphical login manager. Check for a null value before doing a strcasecmp. Bug-Ubuntu: https://bugs.launchpad.net/bugs/1003296 Bug: https://bugzilla.samba.org/show_bug.cgi?id=9013 Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Wed Sep 12 00:07:28 CEST 2012 on sn-devel-104
* Fix pam_winbind build against newer iniparser librarySimo Sorce2012-04-241-4/+4
| | | | | | | | iniparser_getstr is deprecated and has been removed in newer libraries available in Fedora. Use iniparse_getstring instead. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue Apr 24 02:56:10 CEST 2012 on sn-devel-104
* s3: No value change, just use the correct enum valueVolker Lendecke2012-01-061-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 6 16:33:42 CET 2012 on sn-devel-104
* nsswitch: Disable uid_wrapper in libwbclient.Andreas Schneider2011-10-271-0/+2
| | | | This way we don't have to link against it in the autoconf build.
* s3-talloc Change TALLOC_ZERO_P() to talloc_zero()Andrew Bartlett2011-06-091-1/+1
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_ZERO_P isn't standard talloc.
* Remove a PATH_MAX.Jeremy Allison2011-06-011-2/+3
|
* More const fixes. Remove CONST_DISCARD.Jeremy Allison2011-05-061-2/+0
|
* More const fixes for compiler warnings from the waf build.Jeremy Allison2011-05-051-14/+14
|
* pam_winbind: Use wbcSidToStringBufVolker Lendecke2011-03-051-12/+3
|
* nsswitch: wbcFreeMemory deals fine with NULLVolker Lendecke2011-03-051-3/+1
|
* pam_winbind: Fix shadowing a global on FreeBSDVolker Lendecke2010-07-171-5/+5
| | | | FreeBSD defines a function pam_error()
* s3-winbind: Make sure we crash if domain is really not found.Andreas Schneider2010-06-291-1/+1
| | | | Found by clang-analyzer.
* s3: Add i18n/l10n strings in pam_winbind.c coming from winbindd.Bo Yang2010-03-061-1/+1
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* nsswitch: libpam remove depedance on locale.h use directly LOCALEDIRMatthieu Patou2010-03-031-1/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* pam_winbind: Remove a nested if-statement. Bo, please check!Volker Lendecke2010-02-061-4/+2
|
* pam_winbind: Use strchr instead of strstr for a single characterVolker Lendecke2010-02-061-1/+1
|
* s3: Fix malformed require_membership_of_sid.Bo Yang2010-02-071-0/+12
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3: check for PAM_RADIO_TYPE.Bo Yang2009-12-101-3/+1
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3: Fix build on non-linux platform.Bo Yang2009-12-101-0/+8
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3: Give the user a chance to change password when password will expire soon.Bo Yang2009-12-101-11/+109
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* pam_winbind: fix a printf type mismatch warningBjörn Jacke2009-11-141-2/+2
|
* s3: Fix crash in pam_winbind, another reference to freed memory.Bo Yang2009-10-241-3/+7
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3: Don't fail authentication when one or some group of ↵Bo Yang2009-10-201-2/+23
| | | | | | require-membership-of is invalid. Signed-off-by: Bo Yang <boyang@samba.org>
* Fix the build, missing ->.Jeremy Allison2009-10-141-2/+2
| | | | Jeremy.
* s3: Fix reference to freed memory in pam_winbind.Bo Yang2009-10-151-2/+3
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* winbind: adapt the new reject constants also thereMatthias Dieter Wallnöfer2009-10-081-4/+4
| | | | | | Please note: in the past the value "0" was misinterpreted as other error. This isn't true. "0" means no error. Therefore a solution for this one has to found.
* s3: Don't overwrite password in pam_winbind, subsequent pam modulesBo Yang2009-09-161-4/+0
| | | | | | might use the old password and new password. Signed-off-by: Bo Yang <boyang@samba.org>
* s3: add failure check.Bo Yang2009-07-181-1/+4
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3: compile warning and upn handlingBo Yang2009-07-181-13/+24
| | | | Signed-off-by: Bo Yang <boyang@samba.org>
* s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.Günther Deschner2009-06-191-1/+2
| | | | | | Based on patch from Blindauer Emmanuel <samba@mooby.net>. Guenther
* s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.Günther Deschner2009-05-051-1/+1
| | | | | | Patch from Blindauer Emmanuel <samba@mooby.net>. Guenther
* s3-nsswitch: Fix Bug #6238 2nd part. zero blob pointer in wbcLogoffUserParams.Günther Deschner2009-04-031-0/+1
| | | | | | Patch from Rashid N. Achilov <citycat4@ngs.ru>. Guenther
* s3-nsswitch: Fix Bug #6238. Make sure logoff is bla bla.Günther Deschner2009-04-031-2/+2
| | | | | | Fix inspired by patch from Rashid N. Achilov <citycat4@ngs.ru>. Guenther
* Avoid flooding of syslog with failing pam_putenv messages.Andreas Schneider2009-01-191-1/+1
| | | | | Signed-off-by: Andreas Schneider <anschneider@suse.de> Signed-off-by: Günther Deschner <gd@samba.org>
* nsswitch: Move source3 files to top level dir.Kai Blin2008-12-161-0/+3204
Don't move source4 files yet to not confuse git's rename tracking too much.