| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
LDAP_SUCCESS but not returning a result.
Jeremy
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 97190ae184dff6450b1390c854f7426e2ee3f980)
(cherry picked from commit 0f7757e94bfa35d22a7349d78578685c0dba22d7)
|
|
|
|
|
| |
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit 011ad7245d53a716c4c766f5ef8d317bb3a53d0f)
|
|
|
|
|
|
|
|
|
|
|
| |
work correctly with "security = domain"
1. If DNS server is invalid, the get_sorted_dc_list() is called with
realm(FQDN) and it fails.
2. On the next step, the get_sorted_dc_list() is called with realm(FQDN) again.
I think "again" is wrong place.
On the 2nd step, get_sorted_dc_list() should be called with realm(WORKGROUP).
|
|
|
|
|
| |
Guenther
(cherry picked from commit 97f1514ce95800f1296b1979f1b34dcc5d56a376)
|
|
|
|
|
|
|
|
|
|
| |
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit 543fa85a711337e979c7b631bda5db95d109ef59)
(cherry picked from commit 17efebde11eafd065c2cac39cdbe55b8d40d40be)
(cherry picked from commit 9e78bfdbe107519f2ddfa4d532771945a7691b46)
|
|
|
|
|
|
|
|
|
|
| |
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit f86ef9b53a903485deba94febf90dd4e657cc02b)
(cherry picked from commit a8040d59659e58c5cb92c1107a7ff012eff12729)
(cherry picked from commit 7baceea20252dec6b64e86ec8b5a73b62b373758)
|
|
|
|
|
|
|
|
|
|
| |
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit c2d4a84abe1b6cbf68d6e9f1bb1f8974d0b628fc)
(cherry picked from commit 2f27ffc4a2ba745341a5961b8f04e62da3fb089a)
(cherry picked from commit 132911954715bfa6df8566c0fb382ef07a7da96e)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We use get_dc_name() for LDAP because it generates the selfwritten
krb5.conf with the correct kdc addresses and sets KRB5_CONFIG.
For CLDAP we need to use get_sorted_dc_list() to avoid recursion.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit d2f7f81f4d61bae9c4be65cbc1bf962b6c24a31f)
(cherry picked from commit 7f779450cb0b0d9f36665c56c4acd0950daaeab2)
(cherry picked from commit 95c9a0272a72c029d75c3ffd1b5fad360b30f139)
|
|
|
|
|
|
|
|
|
|
|
|
| |
ads->config.tried_closest_dc was never set.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit dfe5b00db35e1e7c7bb3ba36729fc3f97eb48db3)
(cherry picked from commit 588f5aae669910fee6da7f807f330163496b4170)
(cherry picked from commit b609f41baa035a15dafb18b2ec569a2b96968b17)
|
|
|
|
| |
conflicts
|
|
|
|
|
|
|
|
|
|
| |
The bug was triggered by "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't exist)
and "disable netbios = yes".
metze
Signed-off-by: Michael Adam <obnox@samba.org>
(cherry picked from commit e2a60d2e1fd7455f08e73f8d1c513ca240c0f0af)
|
|
|
|
|
|
|
|
|
|
|
| |
Some AD objects, like Exchange Public Folders, can be members of Security
Groups but do not have a SID attribute. This patch adds more granular return
errors to ads_get_sid_from_extended_dn(). Callers can now determine if a parse
error occured because of bad input, or the DN was valid but contained no SID.
I updated all callers to ignore SIDless objects when appropriate.
Also did some cleanup to the out paths of lookup_usergroups_memberof()
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Guenther
(cherry picked from commit 18a26f08b6fab4119a1421a7ca59c32dde8bb8cb)
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
(cherry picked from commit 9e9bab2dd859c7bb8082b4c932f1a95adf1895c6)
|
|
|
|
| |
This reverts commit 6bcfa82ff15531c64e0db27dcc58e5847c513aa6.
|
|
|
|
|
| |
Guenther
(cherry picked from commit 1ce726b951621cb4b34069c31d1318fc04ad2389)
|
|
|
|
|
| |
This is really not a proper place to fix this, but as get_gc_list() and friends
are about to be replaced anyway, just work around the broken existing API
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
Guenther
(cherry picked from commit 0388b2f0cc4d14b005c5b42f2c17ddcbc8bef12a)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 5b0eda98f3d127399770f7a037ad3277dbe23393)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 56be9c98d24e64bf855439df21766d30f448f407)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 6f9d5e1cc94bc90685b54c04622b8f3357bd2f69)
|
|
|
|
|
| |
Guenther
(cherry picked from commit b261f063125f8454d8f4e8f6b6f8aa5bc393ea34)
|
|
|
|
|
| |
Guenther
(cherry picked from commit f3251ba03a69c2fd0335861177159a32b2bc9477)
|
|
|
|
|
|
|
|
|
| |
On AIX, Solaris, and possibly some older glibc systems (e.g. SLES8)
truncated replies never give back a resp_len > buflen
which ends up causing DNS resolve failures on large tcp DNS replies.
Also add more debug lines about processing the DNS reply.
(cherry picked from commit 5ed9b92097460cd8180db806a08213e97cfb8daa)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
of entries
The ads_do_search_all_args() function attempts to string together several
LDAPMessage structures, returned across several paged ldap requests, into a
single LDAPMessage structure. It does this by pulling entries off the second
LDAPMessage structure and appending them to the first via the OpenLDAP specific
ldap_add_result_entry() call.
The problem with this approach is it skips non-entry messages such as the
result, and controls. These messages are leaked.
The short term solution as suggested by Volker is to replace the ads_*_entry()
calls with ads_*_message() calls so we don't leak any messages.
This fixes the leak but doesn't remove the dependence on the OpenLDAP specific
implementation of ldap_add_result_entry().
|
|
|
|
| |
This reverts commit 783afab9c891dd7bcb78895b2a639b6f3a0edf5b.
|
|
|
|
| |
This reverts commit 1d261e78b38e8080ca7122037d33c8ef913a4558.
|
|
|
|
|
|
| |
rpc_pipe_client->cli->user_name"
This reverts commit 3f6c5b99664a75a6f490ee3b6980b89cacf7f579.
|
|
|
|
| |
This reverts commit 42de50d2cd43e760d776694f7b5f003ba51d7f84.
|
| |
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Also make sure that rpc_pipe_client->user_name is always talloced.
|
| |
|
|
|
|
| |
This reduces the dependency on cli_state
|
|
|
|
| |
Karolin
|
|
|
|
| |
Karolin
|
|
|
|
| |
Guenther
|
|
|
|
| |
"status" was used uninitialized on success -- metze, please check
|
| |
|
| |
|