summaryrefslogtreecommitdiffstats
path: root/source/lib/smbldap.c
Commit message (Collapse)AuthorAgeFilesLines
* r23511: Merge branches/SAMBA_3_0@23510James Peach2007-06-151-10/+5
| | | | | Tidy calls to smb_panic by removing trailing newlines. Print the failed expression in SMB_ASSERT.
* r23411: We were missing displayName and that was preventing usSimo Sorce2007-06-111-0/+1
| | | | | | | | from successfully deleting an entry when "account" is the STRUCTURAL objectclass used for users and machines. "account" is used each time the user entry is in /etc/passwd and we have only the samba attributes in ldap, as well as for rfc2307(bis) standard based directories.
* r21264: LDAP_OPT_ERROR_NUMBER seems more portable than LDAP_OPT_RESULT_CODEVolker Lendecke2007-02-091-5/+5
|
* r21263: getpeername() returning -1 is not a reliable indication if a TCP ↵Volker Lendecke2007-02-091-15/+70
| | | | | | | | | | connection is dead. Might be my code, this rings a very distant bell... Attempt to fix bug # 4372. Volker
* r21186: * Merge nss_info and idmap interface changes to current Gerald Carter2007-02-061-25/+50
| | | | | | stable branch * Also include pam_winbind changes for multiple groups in the require-membership-of parameter
* r19801: grabbing minor changes (some missing pieces from jmcd's SAMR work as ↵Gerald Carter2006-11-201-6/+5
| | | | well)
* r19782: more compile fixes for mergeGerald Carter2006-11-191-3/+2
|
* r17219: Ensure this fix doesn't get missed again in a merge.Jeremy Allison2006-07-241-1/+1
| | | | Jeremy.
* r16124: catch a couple of fixes from GuentherGerald Carter2006-06-091-0/+2
|
* r16104: Set version to 3.0.23rc2Gerald Carter2006-06-081-0/+6
| | | | | Bring release tree up to current 3.0 tree (svn merge -r15845:16103 $SVNURL/branches/SAMBA_3_0)
* r15837: starting sync up for 3.0.23rc1 (in sync with SAMBA_3_0 r15822)Gerald Carter2006-05-231-13/+12
|
* r14462: Fix warning. ber_tag_t is an unsigned int forJeremy Allison2006-03-151-1/+1
| | | | | printing purposes. Jeremy.
* r14345: Fix Coverity #71. We don't currently propagate *any*Jeremy Allison2006-03-131-10/+15
| | | | | | alloc error back up the stack from smbldap_set_mod() so ensure we abort correctly. Jeremy.
* r14060: Only set the last rebind timestamp when we did rebind after a non-readGünther Deschner2006-03-091-2/+21
| | | | | | | LDAP operation. That way we avoid the replication sleep after a simple redirected search operation Guenther
* r13693: More Solaris/LDAP fixes from Bjoern <bjoern@j3e.de>Volker Lendecke2006-02-261-3/+3
|
* r13316: Let the carnage begin....Gerald Carter2006-02-031-48/+173
| | | | Sync with trunk as off r13315
* r12714: Fix segfault in pdb_nds.c.Günther Deschner2006-01-041-4/+4
| | | | Guenther
* r11876: When we are using START_TLS to secure the LDAP connection, we *have* toGünther Deschner2005-11-231-3/+12
| | | | | | | call START_TLS again after rebinding to another LDAP server. (ldaps:// uri's are handled at by recent versions of OpenLDAP). Guenther
* r11874: Merge LDAP connection setup in lib/smbldap.c and pdb_nds.c.Günther Deschner2005-11-231-50/+137
| | | | | | | Also allow to use START_TLS in the pdb_nds_update_login_attempts function when doing simple binds to eDir. Guenther
* r10656: BIG merge from trunk. Features not copied overGerald Carter2005-09-301-1/+5
| | | | | | | * \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck)
* r9953: get rid of compiler warning.Günther Deschner2005-09-021-1/+1
| | | | Guenther
* r8892: Fix #2942 - missing value in debug ! Doh !Jeremy Allison2005-08-011-1/+1
| | | | Jeremy.
* r8757: Add debug messages so we can see what attributes and values are beingJeremy Allison2005-07-251-0/+3
| | | | | set/deleted/modified in an ldap query. Jeremy.
* r7139: trying to reduce the number of diffs between trunk and 3.0; changing ↵Gerald Carter2005-05-311-246/+17
| | | | version to 3.0.20pre1
* r6351: This is quite a large and intrusive patch, but there are not many ↵Volker Lendecke2005-04-151-14/+144
| | | | | | | | | | | | | | | | pieces that can be taken out of it, so I decided to commit this in one lump. It changes the passdb enumerating functions to use ldap paged results where possible. In particular the samr calls querydispinfo, enumdomusers and friends have undergone significant internal changes. I have tested this extensively with rpcclient and a bit with usrmgr.exe. More tests and the merge to trunk will follow later. The code is based on a first implementation by Günther Deschner, but has evolved quite a bit since then. Volker
* r6149: Fixes bugs #2498 and 2484.Derrell Lipman2005-03-311-2/+5
| | | | | | | | | | | | | | | | | | 1. using smbc_getxattr() et al, one may now request all access control entities in the ACL without getting all other NT attributes. 2. added the ability to exclude specified attributes from the result set provided by smbc_getxattr() et al, when requesting all attributes, all NT attributes, or all DOS attributes. 3. eliminated all compiler warnings, including when --enable-developer compiler flags are in use. removed -Wcast-qual flag from list, as that is specifically to force warnings in the case of casting away qualifiers. Note: In the process of eliminating compiler warnings, a few nasties were discovered. In the file libads/sasl.c, PRIVATE kerberos interfaces are being used; and in libsmb/clikrb5.c, both PRIAVE and DEPRECATED kerberos interfaces are being used. Someone who knows kerberos should look at these and determine if there is an alternate method of accomplishing the task.
* r6127: Eliminated all compiler warnings pertaining to mismatched ↵Derrell Lipman2005-03-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | "qualifiers". The whole of samba comiles warning-free with the default compiler flags. Temporarily defined -Wall to locate other potential problems. Found an unused static function (#ifdefed out rather than deleted, in case it's needed for something in progress). There are also a number of uses of undeclared functions, mostly krb5_*. Files with these problems need to have appropriate header files included, but they are not fixed in this update. oplock_linux.c.c has undefined functions capget() and capset(), which need to have "#undef _POSIX_SOURCE" specified before including <sys/capability.h>, but that could potentially have other side effects, so that remains uncorrected as well. The flag -Wall should be added permanently to CFLAGS, and all warnings then generated should be eliminated.
* r5565: fix breakage on gcc 2.96Gerald Carter2005-02-251-1/+1
|
* r5556: Fix the build on AIX.Günther Deschner2005-02-251-4/+14
| | | | | | | use AF_UNIX instead of AF_LOCAL (thanks to Doug VanLeuven <roamdad-at-sonic.net>) and make smbldap_open() a bit more readable. Guenther
* r5522: Better handling of LDAP over IPC connections that have expired on theGünther Deschner2005-02-231-4/+1
| | | | | | LDAP-Server. Guenther
* r5428: Apply some const. LDAP attribs should now be declared const char ↵Volker Lendecke2005-02-171-8/+8
| | | | | | | | *attr[]. This gives some new warnings in smbldap.c, but a the callers are cleaned up. Volker
* r5349: After talking with Jerry, reverted the addition of account policies toGünther Deschner2005-02-121-87/+1
| | | | | | passdb in 3_0 (they are still in trunk). Guenther
* r4989: Display failed LDAP-server-uri.Günther Deschner2005-01-251-1/+2
| | | | Guenther
* r4925: Migrate Account Policies to passdb (esp. replicating ldapsam).Günther Deschner2005-01-221-1/+87
| | | | | | | | Does automated migration from account_policy.tdb v1 and v2 and offers a pdbedit-Migration interface. Jerry, please feel free to revert that if you have other plans. Guenther
* r4840: * Add more generic root-dse inspection function to check for givenGünther Deschner2005-01-191-0/+101
| | | | | | | | | controls or extensions. * Check and remember if ldapsam's LDAP Server support paged results (in preparation of adding async paged-results to set|get|end-sampwent in ldapsam). Guenther
* r4736: small set of merges from rtunk to minimize the diffsGerald Carter2005-01-141-1/+1
|
* r4289: Close LDAP-Connection before retrying to open a new connection in theGünther Deschner2004-12-201-0/+1
| | | | | | | | | | | | retry-loop. This fixes a deadlock-situation when ldapsam is used with the ldapi interface: getpeername won't fail while trying to detect dead connections on unix domain sockets. When the ldapi-connection was closed server-side (due to OpenLDAP's idletimeout) we *never* got a new LDAP connection. Guenther
* r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison2004-12-071-13/+12
| | | | | | | | | allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy.
* r3563: During a typical logon a modern workstation makes a lot of anonymous ↵Volker Lendecke2004-11-051-0/+4
| | | | | | | | | | | session setups on its way to open a pipe. This gets rid of many round-trips to the LDAP server during logon by setting up the server_info_guest once and not asking the LDAP server and nss every time. Make sure that the ldap connection is reopened in the child. (I did not look at the sql backends.) Volker
* r2729: Fix ldapsam_compat homeDrive. Thanks to jason@env.leeds.ac.ukVolker Lendecke2004-09-281-1/+1
| | | | Volker
* r2444: Based on jmcd's patch, implement special lists for the ldap user ↵Volker Lendecke2004-09-201-0/+48
| | | | | | | | | | | | | attributes to delete. Richard, IMHO this is the better solution to the problem you currently have. Please review. Thanks, Volker
* r2258: Attempt to fix Bug 1715. Not sure if all of ldapsam_compat works now, ↵Volker Lendecke2004-09-081-0/+7
| | | | | | | | but this definitely fixes two segfaults. Volker
* r1810: Patch from Richard Renard <rrenard@idealx.com> to storeJeremy Allison2004-08-131-0/+1
| | | | | logon hours attributes in an LDAP database. Jeremy.
* r1588: This is one of the more pathetic patches I ever checked in. Many hours ofVolker Lendecke2004-07-261-95/+72
| | | | | | | | | | | | | coding have passed, but I could not find a way to get the OpenLDAP libraries to reliably time out on any of the queries we make, *and* get correct error returns. No, async calls and ldap_result does NOT work, or I was simply too stupid to correctly interpret the OpenLDAP manpage and source. We can not allow to hang indefinitely in an ldap query, especially not for winbindd. "ldap timeout" now specifies the overall timeout for the complete operation, that's why I increased that to 15 seconds. Volker
* r1392: Added password history code to tdbsam backend. Not yet tested (ie. mayJeremy Allison2004-07-081-1/+1
| | | | | | core dump) but compiles and links correctly. I will run the full set of tests on the ldap sam and the tdb sam for password history tomorrow. Jeremy.
* r1388: Adding password history code for ldap backend, based on a patch fromJeremy Allison2004-07-071-13/+11
| | | | | | | | | "Jianliang Lu" <j.lu@tiesse.com>. Multi-string attribute changed to linearised pstring due to ordering issues. A few other changes to fix race conditions. I will add the tdb backend code next. This code compiles but has not yet been tested with password history policy set to greater than zero. Targeted for 3.0.6. Jeremy.
* r1325: Always use GetTimeOfDay() (wrapper). Ensure ldap replicationJeremy Allison2004-07-011-12/+11
| | | | | | sleep time is not more than 5 seconds. Should fix issue reported by Chris Garrigues <cwg@deepeddy.com>. Jeremy.
* r1317: Patch from Joe Meadows "Joe Meadows" <jameadows@webopolis.com> toJeremy Allison2004-07-011-1/+1
| | | | | | add a timeout to the ldap open calls. New parameter, ldap timeout added. Jeremy.
* r116: volker's patch for local group and group nestingGerald Carter2004-04-071-0/+2
|
* r53: Remove modifyTimestamp from list of our attributes. We just check it forJim McDonough2004-04-051-1/+0
| | | | | | cache entry time comparisons in password lockout. Fixes problems where pdb_ldap tries to delete the operational attribute modifyTimestamp when deleting a user account.
generated by cgit (git 2.34.1) at 2025-09-25 13:56:57 +0000