summaryrefslogtreecommitdiffstats
path: root/source/include/passdb.h
Commit message (Collapse)AuthorAgeFilesLines
* Remove unix_homedir from struct user_structVolker Lendecke2008-05-051-1/+0
| | | | This makes pdb_get_unix_homedir unused. I wonder if that was ever really used...
* Removing unused ACCT_-flags.Günther Deschner2008-02-121-30/+3
| | | | Guenther
* Remove the sampwent interfaceVolker Lendecke2007-12-261-7/+2
|
* RIP BOOL. Convert BOOL -> bool. I found a few interestingJeremy Allison2007-10-181-17/+17
| | | | | | | bugs in various places whilst doing this (places that assumed BOOL == int). I also need to fix the Samba4 pidl generation (next checkin). Jeremy.
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-10-101-2/+1
|
* r23779: Change from v2 or later to v3 or later.Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* r23341: pdb interfaces should be versioned. As SAMBA_3_0 and SAMBA_3_0_26Jeremy Allison2007-10-101-0/+1
| | | | | are now identical, use the same version number (16) for both. Jeremy.
* r22786: Some cleanup by Karolin Seeger: Remove unused pdb_find_alias, and changeVolker Lendecke2007-10-101-3/+0
| | | | | | return values of some alias-releated pdb functions from BOOL to NTSTATUS Thanks :-)
* r21188: bumping passdb version number to make sure this is different than ↵Gerald Carter2007-10-101-2/+1
| | | | the 3.0.25 branch
* r20827: Increment the interface version.Volker Lendecke2007-10-101-1/+2
| | | | | | Wilco: Existing modules should continue to work, they just must be recompiled. Volker
* r20824: Send access to the trusted domain passwords through the pdb backend, ↵Volker Lendecke2007-10-101-0/+13
| | | | | | | | | | so that in the next step we can store them in LDAP to be replicated across DCs. Thanks to Michael Adam <ma@sernet.de> Volker
* r20116: Start merging in the work done to create the new idmap subsystem.Simo Sorce2007-10-101-0/+2
| | | | Simo.
* r18271: Big change:Gerald Carter2007-10-101-5/+5
| | | | | | | | | | | * autogenerate lsa ndr code * rename 'enum SID_NAME_USE' to 'enum lsa_SidType' * merge a log more security descriptor functions from gen_ndr/ndr_security.c in SAMBA_4_0 The most embarassing thing is the "#define strlen_m strlen" We need a real implementation in SAMBA_3_0 which I'll work on after this code is in.
* r17554: CleanupVolker Lendecke2007-10-101-3/+5
|
* r17463: A bit of cleanup work:Volker Lendecke2007-10-101-3/+0
| | | | | | | | | | | | Remove some unused code: pdb_find_alias is not used anymore, and nobody I think has ever used the pdb_nop operations for group mapping. smbpasswd and tdb use the default ones and ldap has its own. Make the functions pdb_getgr* return NTSTATUS instead of BOOL. Nobody right now really makes use of it, but it feels wrong to throw away information so early. Volker
* r17451: Change pdb_getgrsid not to take a DOM_SID but a const DOM_SID * as anVolker Lendecke2007-10-101-2/+3
| | | | | | argument. Volker
* r16945: Sync trunk -> 3.0 for 3.0.24 code. Still needJeremy Allison2007-10-101-4/+4
| | | | | | | to do the upper layer directories but this is what everyone is waiting for.... Jeremy.
* r16628: Fix bug #3880, reported by jason@ncac.gwu.eduJeremy Allison2007-10-101-3/+5
| | | | | | by ensuring we return the correct enum for sid type, not a uint32. Jeremy.
* r14403: * modifies create_local_nt_token() to create a BUILTIN\AdministratorsGerald Carter2007-10-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | group IFF sid_to_gid(S-1-5-32-544) fails and 'winbind nested groups = yes' * Add a SID domain to the group mapping enumeration passdb call to fix the checks for local and builtin groups. The SID can be NULL if you want the old semantics for internal maintenance. I only updated the tdb group mapping code. * remove any group mapping from the tdb that have a gid of -1 for better consistency with pdb_ldap.c. The fixes the problem with calling add_group_map() in the tdb code for unmapped groups which might have had a record present. * Ensure that we distinguish between groups in the BUILTIN and local machine domains via getgrnam() Other wise BUILTIN\Administrators & SERVER\Administrators would resolve to the same gid. * Doesn't strip the global_sam_name() from groups in the local machine's domain (this is required to work with 'winbind default domain' code) Still todo. * Fix fallback Administrators membership for root and domain Admins if nested groups = no or winbindd is not running * issues with "su - user -c 'groups'" command * There are a few outstanding issues with BUILTIN\Users that Windows apparently tends to assume. I worked around this presently with a manual group mapping but I do not think this is a good solution. So I'll probably add some similar as I did for Administrators.
* r13711: * Correctly handle acb_info/acct_flags as uint32 not as uint16.Günther Deschner2007-10-101-5/+5
| | | | | | | | * Fix a couple of related parsing issues. * in the info3 reply in a samlogon, return the ACB-flags (instead of returning zero) Guenther
* r13679: Commiting the rm_primary_group.patch posted on samba-technicalGerald Carter2007-10-101-2/+3
| | | | | | | | | | * ignore the primary group SID attribute from struct samu* * generate the primary group SID strictlky from the Unix primary group when dealing with passdb users * Fix memory leak in original patch caused by failing to free a talloc * * add wrapper around samu_set_unix() to prevent exposing the create BOOL to callers. Wrappers are samu_set_unix() and samu-allic_rid_unix()
* r13601: * Remove unused code from pdb_ldap.cGerald Carter2007-10-101-1/+3
| | | | | | | | | * Add a 'struct passwd *' to the struct samu for later reference (I know this may be controversial but its easily reverted which is is why I'm checking this is as a seaparate patch before I get too deep). * Remove unix_homedir from struct samu {} and update the pdb wrapper functions associated with it.
* r13576: This is the beginnings of moving the SAM_ACCOUNT data structureGerald Carter2007-10-101-68/+60
| | | | | | | | | | | | | | | | | | | | | | | to make full use of the new talloc() interface. Discussed with Volker and Jeremy. * remove the internal mem_ctx and simply use the talloc() structure as the context. * replace the internal free_fn() with a talloc_destructor() function * remove the unnecessary private nested structure * rename SAM_ACCOUNT to 'struct samu' to indicate the current an upcoming changes. Groups will most likely be replaced with a 'struct samg' in the future. Note that there are now passbd API changes. And for the most part, the wrapper functions remain the same. While this code has been tested on tdb and ldap based Samba PDC's as well as Samba member servers, there are probably still some bugs. The code also needs more testing under valgrind to ensure it's not leaking memory. But it's a start......
* r13509: remove unnecessary sql flagsGerald Carter2007-10-101-2/+0
|
* r13494: Merge the stuff I've done in head the last days.Volker Lendecke2007-10-101-0/+26
| | | | Volker
* r13460: by popular demand....Gerald Carter2007-10-101-155/+5
| | | | | | | | | * remove pdb_context data structure * set default group for DOMAIN_RID_GUEST user as RID 513 (just like Windows) * Allow RID 513 to resolve to always resolve to a name * Remove auto mapping of guest account primary group given the previous 2 changes
* r13316: Let the carnage begin....Gerald Carter2007-10-101-5/+25
| | | | Sync with trunk as off r13315
* r12055: More cruftVolker Lendecke2007-10-101-23/+0
|
* r12051: Merge across the lookup_name and lookup_sid work. Lets see how the ↵Volker Lendecke2007-10-101-0/+14
| | | | | | | | build farm reacts :-) Volker
* r11924: Added Volkers's (C) to srv_samr_nt.c, removed separate "builtin"Jeremy Allison2007-10-101-1/+4
| | | | | | | | | | | | search enumeration, fixed count of groups and users to return zero if we're getting domain info on the builtin domain (need to fix the enumgroup and enumuser calls also). Added count_sam_aliases to return the correct alias count. Need to push the SID arg down into the group mapping interface so we only return the correct aliases. Upped passdb version numer for Volkers changes. SAM-MYSQL guys - you will need to fix your backend now. More tests needed. Jeremy.
* r11922: Looks bigger than it is: There's no point in allocating arrays inVolker Lendecke2007-10-101-6/+4
| | | | | | | samr_lookup_rids twice. It was done in the srv_samr_nt.c code as well as in the pdb module. Remove the latter, this might happen more often. Volker
* r11137: Compile with only 2 warnings (I'm still working on that code) on a gcc4Jeremy Allison2007-10-101-31/+29
| | | | | x86_64 box. Jeremy.
* r10911: part of #2861: add rename support for usrmgr.exe when using tdbsamJim McDonough2007-10-101-1/+5
| | | | This gets it working before replacing tdb with the samba4 version.
* r10656: BIG merge from trunk. Features not copied overGerald Carter2007-10-101-1/+19
| | | | | | | * \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck)
* r7882: Looks like a large patch - but what it actually does is make SambaJeremy Allison2007-10-101-3/+3
| | | | | | safe for using our headers and linking with C++ modules. Stops us from using C++ reserved keywords in our code. Jeremy
* r6367: Slim down pdb_interface.c a bit. next_entry and search_end are functionVolker Lendecke2007-10-101-10/+3
| | | | | | | | pointers now. Yes, Jeremy, this is about re-inventing C++... :-) Volker
* r6351: This is quite a large and intrusive patch, but there are not many ↵Volker Lendecke2007-10-101-34/+52
| | | | | | | | | | | | | | | | pieces that can be taken out of it, so I decided to commit this in one lump. It changes the passdb enumerating functions to use ldap paged results where possible. In particular the samr calls querydispinfo, enumdomusers and friends have undergone significant internal changes. I have tested this extensively with rpcclient and a bit with usrmgr.exe. More tests and the merge to trunk will follow later. The code is based on a first implementation by Günther Deschner, but has evolved quite a bit since then. Volker
* r6277: This implements a new caching API for enumerating the pdb elements. It isVolker Lendecke2007-10-101-0/+23
| | | | | | | | | | | | | | | | | | | | | modeled after query_displayinfo and should hide the differences between users, groups and aliases while allowing a cache analog load_sampw_entries: struct pdb_search *pdb_search_users(uint16 acct_flags); struct pdb_search *pdb_search_groups(void); struct pdb_search *pdb_search_aliases(const DOM_SID *sid); uint32 pdb_search_entries(struct pdb_search *search, uint32 start_idx, uint32 max_entries, struct samr_displayentry **result); void pdb_search_destroy(struct pdb_search *search); Why this API? Eventually we will need to apply the work gd has started on enumerating users with paged ldap searches to groups and aliases. Before doing that I want to clean up the search routines we have. The sample application (more to follow) is 'net maxrid'. Volker
* r6092: This much const causes the compiler on Fedora Core 2Jeremy Allison2007-10-101-2/+2
| | | | | to throw up. Jeremy.
* r6080: Port some of the non-critical changes from HEAD to 3_0. The main one ↵Volker Lendecke2007-10-101-5/+10
| | | | | | | | is the change in pdb_enum_alias_memberships to match samr.idl a bit closer. Volker
* r5965: Apply Volker's patch for "ldapsam trusted = yes" for ↵Jim McDonough2007-10-101-0/+15
| | | | | | samr_lookup_rids. Gives us again up to ~6x improvement on group membership lookups.
* r5655: Added support for Novell NDS universal password. Code donated byJeremy Allison2007-10-101-1/+5
| | | | | | | | Vince Brimhall <vbrimhall@novell.com> - slight tidyup by me to use Samba conventions. Vince - thanks a *lot* for this code - please test to make sure I haven't messed anything up. Jeremy.
* r5467: Optimize _samr_query_groupmem with LDAP backend for large domains.Volker Lendecke2007-10-101-0/+12
| | | | | | | | | | Could someone else please look at this patch, verifying that I did not break the ldapsam:trusted = False fallback to the old behaviour? It works fine for me, but you never know. You're certainly free to review the new code as well :-) Thanks, Volker
* r5349: After talking with Jerry, reverted the addition of account policies toGünther Deschner2007-10-101-12/+0
| | | | | | passdb in 3_0 (they are still in trunk). Guenther
* r4932: Forgot to increase version with the account-policy-commit.Günther Deschner2007-10-101-1/+1
| | | | Guenther
* r4925: Migrate Account Policies to passdb (esp. replicating ldapsam).Günther Deschner2007-10-101-0/+12
| | | | | | | | Does automated migration from account_policy.tdb v1 and v2 and offers a pdbedit-Migration interface. Jerry, please feel free to revert that if you have other plans. Guenther
* r4847: Hand over a acb_mask to pdb_setsampwent in load_sampwd_entries().Günther Deschner2007-10-101-3/+3
| | | | | | | | | | | | | | | | | This allows the ldap-backend to search much more effeciently. Machines will be searched in the ldap_machine_suffix and users in the ldap_users_suffix. (Note that we already use the ldap_group_suffix in ldapsam_setsamgrent for quite some time). Using the specific ldap-bases becomes notably important in large domains: On my testmachine "net rpc trustdom list" has to search through 40k accounts just to list 3 interdomain-trust-accounts, similiar effects show up the non-user query_dispinfo-calls, etc. Also renamed all_machines to only_machines in load_sampwd_entries() since that reflects better what is really meant. Guenther
* r3705: Nobody has commented, so I'll take this as an ack...Volker Lendecke2007-10-101-0/+12
| | | | | | | | | | | | | | | | | abartlet, I'd like to ask you to take a severe look at this! We have solved the problem to find the global groups a user is in twice: Once in auth_util.c and another time for the corresponding samr call. The attached patch unifies these and sends them through the passdb backend (new function pdb_enum_group_memberships). Thus it gives pdb_ldap.c the chance to further optimize the corresponding call if the samba and posix accounts are unified by issuing a specialized ldap query. The parameter to activate this ldapsam behaviour is ldapsam:trusted = yes Volker
* r3566: Completely replace the queryuseraliases call. The previous ↵Volker Lendecke2007-10-101-3/+5
| | | | | | | | | | | | | | implementation does not exactly match what you would expect. XP workstations during login actually do this, so we should better become a bit more correct. The LDAP query issued is not really fully optimal, but it is a lot faster and more correct than what was there before. The change in passdb.h makes it possible that queryuseraliases is done with a single ldap query. Volker
* r1388: Adding password history code for ldap backend, based on a patch fromJeremy Allison2007-10-101-3/+5
| | | | | | | | | "Jianliang Lu" <j.lu@tiesse.com>. Multi-string attribute changed to linearised pstring due to ordering issues. A few other changes to fix race conditions. I will add the tdb backend code next. This code compiles but has not yet been tested with password history policy set to greater than zero. Targeted for 3.0.6. Jeremy.
generated by cgit (git 2.34.1) at 2025-09-03 11:29:18 +0000