| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Andrew Bartlett
|
|
|
|
|
|
| |
work a bit better for password changing.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The global winbind file descriptor can cause havoc in some situations -
particulary when it becomes 0, 1 or 2. This patch (based on some very nice
work by Hannes Schmidt <mail@schmidt-net.via.t-online.de>) starts to recitfy
the problem by ensuring that the close-on-exec flag is set, and that we move
above 3 in the file descriptor table.
I've also decided that the PAM module can close it's pipe handle on every
request - this isn't performance-critical code.
The next step is to do the same for nss_winbind. (But things like getent()
might get in our way there).
This also cleans up some function prototypes, puts them in just one place.
Andrew Bartlett
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
to correctly allow password changes on expired passwords. (No security
implications, as its just a 'will I let you talk to the server' check).
pam_winbind checks the password prior to changing it, so that users don't
have to make up and type their new password when they havn't even got the
old one right. This also helps with stacking etc.
Andrew Bartlett
|
|
|
|
|
|
| |
applied these to 2.2.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- pam_winbind updates from vance, fixing a typo and making some the options
work properly.
- Extra parinoia in the winbind connection loop
- Allow pam_winbind to compile on HP-UX (Don Mcall, more work to do).
- Fix up configure.in to use the same method for building the test .so
as the Makefile uses.
Andrew Bartlett
|
| |
|
|
|
|
| |
be replaced by DEBUG() calls?
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error
conversions, and uses them to make the error handling in pam_winbind sane.
In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...'
stuff, and logs the NTSTATUS error that winbind now sends over the pipe.
Added code to wbinfo to display these - makes a big difference in debugging
winbindd.
The main change here is the code to allow pam_winbind password changing to
correctly stack - This code ripped from pam_unix, and the copyright attached.
(Same as for all pam modules, including pam_winbind)
Andrew Bartlett
|
|
|
|
|
| |
Part of Samuel Ziegler's patch to get winbind password changing working
again in HEAD.
|
|
|
|
| |
defined. This is done with --enable-developer mode.
|
| |
|
|
|
|
|
| |
renamed ntdom to winbind
I think that using winbind in /etc/nsswitch.conf is better than ntdom
|
|
this does not yet compile, but I'm working on that.
|