summaryrefslogtreecommitdiffstats
path: root/source/nsswitch/pam_winbind.c
Commit message (Collapse)AuthorAgeFilesLines
* Return the 'freindly' NT error message if at all possible.Andrew Bartlett2003-01-111-1/+2
| | | | Andrew Bartlett
* Updates to winbind's PAM client and server - make the debug logsAndrew Bartlett2002-10-261-19/+37
| | | | | | work a bit better for password changing. Andrew Bartlett
* Winbind client-side cleanups.Andrew Bartlett2002-09-071-10/+11
| | | | | | | | | | | | | | | | | | The global winbind file descriptor can cause havoc in some situations - particulary when it becomes 0, 1 or 2. This patch (based on some very nice work by Hannes Schmidt <mail@schmidt-net.via.t-online.de>) starts to recitfy the problem by ensuring that the close-on-exec flag is set, and that we move above 3 in the file descriptor table. I've also decided that the PAM module can close it's pipe handle on every request - this isn't performance-critical code. The next step is to do the same for nss_winbind. (But things like getent() might get in our way there). This also cleans up some function prototypes, puts them in just one place. Andrew Bartlett
* Add another message rather than 'internal module error'Andrew Bartlett2002-07-241-0/+4
| | | | Andrew Bartlett
* Another smattering of static and constAndrew Bartlett2002-07-211-7/+7
|
* Updates to better report some NTSTATUS errors into PAM, and update to PAMAndrew Bartlett2002-05-281-0/+9
| | | | | | | | | | | to correctly allow password changes on expired passwords. (No security implications, as its just a 'will I let you talk to the server' check). pam_winbind checks the password prior to changing it, so that users don't have to make up and type their new password when they havn't even got the old one right. This also helps with stacking etc. Andrew Bartlett
* More winbind for HPUX updates from Don Mccall. I think JRA has alreadyAndrew Bartlett2002-04-031-2/+23
| | | | | | applied these to 2.2. Andrew Bartlett
* Various winbind updates:Andrew Bartlett2002-03-231-3/+3
| | | | | | | | | | | | | | - pam_winbind updates from vance, fixing a typo and making some the options work properly. - Extra parinoia in the winbind connection loop - Allow pam_winbind to compile on HP-UX (Don Mcall, more work to do). - Fix up configure.in to use the same method for building the test .so as the Makefile uses. Andrew Bartlett
* Fix typo in copyrightAndrew Bartlett2002-03-131-1/+1
|
* Removed bogus calles to D() debugging function. Perhaps these shouldTim Potter2002-03-111-16/+1
| | | | be replaced by DEBUG() calls?
* Drastic impromvents to pam_winbind.Andrew Bartlett2002-02-051-245/+439
| | | | | | | | | | | | | | | | | This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error conversions, and uses them to make the error handling in pam_winbind sane. In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...' stuff, and logs the NTSTATUS error that winbind now sends over the pipe. Added code to wbinfo to display these - makes a big difference in debugging winbindd. The main change here is the code to allow pam_winbind password changing to correctly stack - This code ripped from pam_unix, and the copyright attached. (Same as for all pam modules, including pam_winbind) Andrew Bartlett
* Removed silly fprintf(stderr, ...) debug.Tim Potter2002-01-301-2/+1
| | | | | Part of Samuel Ziegler's patch to get winbind password changing working again in HEAD.
* Don't log the password in pam_sm_authenticate() unless DEBUG_PASSWORD isTim Potter2002-01-071-2/+10
| | | | defined. This is done with --enable-developer mode.
* Merge from TNG branch.Tim Potter2001-05-041-57/+183
|
* in head as well ...Andrew Tridgell2000-05-101-2/+2
| | | | | renamed ntdom to winbind I think that using winbind in /etc/nsswitch.conf is better than ntdom
* brought the winbindd code into headAndrew Tridgell2000-05-091-0/+388
this does not yet compile, but I'm working on that.