summaryrefslogtreecommitdiffstats
path: root/source/nsswitch
Commit message (Collapse)AuthorAgeFilesLines
* Removed version number from file header.Tim Potter2002-01-3024-44/+24
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Fix for password change from Samuel Ziegler <sam@xpedion.com>Tim Potter2002-01-301-11/+11
|
* Removed silly fprintf(stderr, ...) debug.Tim Potter2002-01-301-2/+1
| | | | | Part of Samuel Ziegler's patch to get winbind password changing working again in HEAD.
* Some more 'winbind default domain' support patches from Alexander BokovoyAndrew Bartlett2002-01-271-81/+1
| | | | | | | | | | | <a.bokovoy@sam-solutions.net>. This patch is designed to remove the 'special cases' required for this support. In particular this now kills off winbind_initgroups, as it appears no longer to be required. Andrew Bartlett
* Back out some of the less well thought out ideas from last weeks work onAndrew Bartlett2002-01-261-5/+16
| | | | | | | | | | winbind default domains, particulary now I understand whats going on a lot better. This ensures that the RPC client code does as little 'magic' as possible - this is up to the application/user. (Where - for to name->sid code - it was all along). This leaves the change that allows the sid->name code to return domains and usernames in seperate paramaters. Andrew Bartlett
* Change the winbind interface to use seperate 'domain' and 'username' feilds forAndrew Bartlett2002-01-269-149/+56
| | | | | | | | | the sid->uid and uid->sid conversions. Remove some duplicate arguments from these funcitons, and update the request/response structures for this and the 'winbind domain name' feature. As such 'winbindd_lookup_name' now takes both a domain and username.
* Allow a winbind client to obtain the server's domain name.Andrew Bartlett2002-01-261-1/+13
|
* Removed dodgy init of local variable.Tim Potter2002-01-251-1/+1
|
* Much more useful handling of backup domain controllers in winbindd. HonourTim Potter2002-01-251-25/+51
| | | | | | | | the "password server" smb.conf parameter when choosing a DC to connect to. Due to the origin of the code in cm_get_dc_name() it wouldn't try additional DCs if the first DC didn't work. This would wedge winbindd if you had "password server = foo1, foo2" and foo1 was down.
* Call pidfile_create() as part of init sequence.Tim Potter2002-01-221-0/+3
|
* This patch makes the 'winbind use default domain' code interact better withAndrew Bartlett2002-01-208-116/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | smbd, and also makes it much cleaner inside winbindd. It is mostly my code, with a few changes and testing performed by Alexander Bokovoy <a.bokovoy@sam-solutions.net>. ab has tested it in security=domain and security=ads, but more testing is always appricatiated. The idea is that we no longer cart around a 'domain\user' string, we keep them seperate until the last moment - when we push that string into a pwent on onto the socket. This removes the need to be constantly parsing that string - the domain prefix is almost always already provided, (only a couple of functions actually changed arguments in all this). Some consequential changes to the RPC client code, to stop it concatonating the two strings (it now passes them both back as params). I havn't changed the cache code, however the usernames will no longer have a double domain prefix in the key string. The actual structures are unchanged - but the meaning of 'username' in the 'rid' will have changed. (The cache is invalidated at startup, so on-disk formats are not an issue here). Andrew Bartlett
* Fix to close winbindd_idmap on exit. Pointed out by Alexander Bokovoy.Jeremy Allison2002-01-193-0/+10
| | | | Jeremy.
* fixes (asprintf) from 2.2Simo Sorce2002-01-191-4/+6
|
* This is the 'winbind default domain' patch from Alexander BokovoyAndrew Bartlett2002-01-187-46/+138
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <a.bokovoy@sam-solutions.net>. The idea is the domain\username is rather harsh for unix systems - people don't expect to have to FTP, SSH and (in particular) e-mail with a username like that. This 'corrects' that - but is not without its own problems. As you can see from the changes to files like username.c and wb_client.c (smbd's winbind client code) a lot of assumptions are made in a lot of places about lp_winbind_seperator determining a users's status as a domain or local user. The main change I will shortly be making is to investigate and kill off winbind_initgroups() - as far as I know it was a workaround for an old bug in winbind itself (and a bug in RH 5.2) and should no longer be relevent. I am also going to move to using the 'winbind uid' and 'winbind gid' paramaters to determine a user/groups's 'local' status, rather than the presence of the seperator. As such, this functionality is recommended for servers providing unix services, but is currently less than optimal for windows clients. (TODO: remove all references to lp_winbind_seperator() and lp_winbind_use_default_domain() from smbd) Andrew Bartlett
* Fix from 2.2. It didn't break on HEAD because it isn't being compiled. Herb?Jim McDonough2002-01-151-10/+10
|
* adding wins commands to winbindd - will check in the rest of the changesHerb Lewis2002-01-151-0/+211
| | | | after further testing in 2.2 branch.
* Initialise cli variables and try not to do a cli_shutdown() of uninitialsedAndrew Bartlett2002-01-141-4/+10
| | | | | | | | | memory. The winbind connection caching code isn't exactly a plesent beast, and there is more work that needs to be done to nail this properly. Andrew Bartlett
* I'm doing some things towards the NamedPipes game with lckl and he has asked meAndrew Bartlett2002-01-131-86/+2
| | | | | | | | | | to move this from being a static to matching its mate in lib/util_sock.c. In any case, this should discorage anybody from using the 'wrong' version of this function. (ie the one from TNG, which needs a bit more error checking depending on use). Andrew Bartlett
* Many thanks to Alexander Bokovoy <a.bokovoy@sam-solutions.net>.Andrew Bartlett2002-01-123-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This work was sponsored by Optifacio Software Services, Inc. Andrew Bartlett (various e-mails announcements merged into some form of commit message below:) This patch which adds basics of universal groups support into Samba 3. Currently, only Winbind with RPC calls supports this, ADS support requires additional (possibly huge) work on KRB5 PAC. However, basic infrastructure is here. This patch adds: 1. Storing of universal groups for particular user logged into Samba software (smbd/ two winbind-pam methods) into netlogon_unigrp.tdb as array of uint32 supplemental group rids keyed as DOMAIN_SID/USER_RID in tdb. 2. Fetching of unversal groups for given user rid and domain sid from netlogon_unigrp.tdb. Since this is used in both smbd and winbindd, main code is in source/lib/netlogon_uingrp.c. Dependencies are added to AUTH_OBJ as UNIGRP_OBJ and WINBINDD_OBJ as UNIGRP_OBJ. This patch has had a few versions, the final version in particular: Many thanks to Andrew Bartlett for critics and comments, and partly rewritten code. New: - updated fetching code to changed byte order macros - moved functions to proper namespace - optimized memory usage by reusing caller's memory context - enhanced code to more follow Samba coding rules Todo: - proper universal group expiration after timeout
* force the time difference in cache comparisons to be unsigned to copeAndrew Tridgell2002-01-111-1/+4
| | | | with the local machine time changing
* make the winbind sequence number code more robustAndrew Tridgell2002-01-111-1/+1
| | | | when switching from rpc to ADS this now should make sense
* Always query the PDC for the list of trusted domains rather than interatingTim Potter2002-01-117-114/+179
| | | | | | | | | | | | | | | | | the list received at startup or we get an out of date list. I thought there might be some sequence number that is incremented when a trusted domain is added or removed - perhaps there is but I just haven't found it yet. - Renamed get_domain_info() to init_domain_list() - Made an accessor function to return the list of trusted domains rather than using a global so we don't have to remember to put a magic init function - The getent state can not keep a pointer to a winbind_domain structure as it may be freed if init_domain_list() is called again so we keep the domain name instead
* Some memory leak fixes.Tim Potter2002-01-111-17/+23
|
* Since AB has been changing the winbind interface it's time to add the "mockTim Potter2002-01-103-21/+21
| | | | | | | | | | | swedish" test to client calls. This is putting a length field at the start of a request so we can disconnect clients talking with an out of date libnss_winbind.so rather than deadlock them. Misc cleanups: - made some int values uint32 - moved WINBIND_INTERFACE_VERSION to start of cmd list
* merge tpots name changes into IRIX part of code. When you change the nameHerb Lewis2002-01-101-8/+8
| | | | of a define you need to grep for the old name and change ALL places.
* Return the winbind separator over the socket, so programs don't have to parseAndrew Bartlett2002-01-105-18/+78
| | | | | | | | | | | | | | | | smb.conf to get it right. While wb_client needs its lp_load() for samba dependency reasons, it now uses the new method both to example and test the new code. Also add an interface version function, and return the winbind's samba version string. In preperation for default domains, its now up to winbindd to reject plaintext auths that don't have a seperator, but NTLM (CRAP) auths now have two feilds, hence need parsing. Andrew Bartlett
* This changes the winbind protcol a bit:Andrew Bartlett2002-01-106-38/+84
| | | | | | | | | | | | | | It adds a 'ping' request, just to check winbind is in fact alive It also changes winbindd_pam_auth_crap to take usernames and domain seperatly. (backward incompatible change, needs merge to 2.2, but this is not yet released code, so no workarounds) Finally, it adds some debugs and fixes a few memory leaks (uses talloc to do it). Andrew Bartlett
* A big tidyup while thinking about getting trusted domains being re-readTim Potter2002-01-108-132/+142
| | | | | | | | | | | | | | | | | | when they are added or removed on the PDC. - renamed GETPWNAM_FROM_{UID,USER} constants and functions to GETPW{NAM,UID} - renamed GETGRNAM_FROM_{GID,GROUP} constants and functions to GETGR{NAM,GID} - use SIGUSR2 in winbindd for debugging/logging instead of SIGUSR1 in preparation for moving to smbcontrol type messages (not sure whether to ditch this altogether or not) - tidy debugging messages in top level winbind user and group routines - convert talloc_init() to talloc_init_named() - make enumerations of the domain list use the same local variable names
* Fixed typo.Jeremy Allison2002-01-091-1/+1
| | | | Jeremy.
* HPUX nss fix.Jeremy Allison2002-01-091-2/+18
| | | | Jeremy.
* Getting ready to add winbindd support for HPUX 11.Jeremy Allison2002-01-082-0/+154
| | | | Jeremy.
* Don't log the password in pam_sm_authenticate() unless DEBUG_PASSWORD isTim Potter2002-01-071-2/+10
| | | | defined. This is done with --enable-developer mode.
* Further rpc_client removal, this time from winbindd.Andrew Bartlett2002-01-012-39/+61
| | | | | | | | | Also removed the dependency on auth_util.o, which makes things nicer. Finally, this kills off the NECESSARY_BECAUSE_SAMBA_DEPENDENCIES_ARE_SO_BROKEN_OBJ makefile variable - becouse Samba dependencies are starting to be sane again! Andrew Bartlett
* When running interactive we want to set our own process group forJeremy Allison2001-12-301-0/+9
| | | | | signal management. Jeremy.
* merge Jeremy's gcc3 warning fix from 2.2Herb Lewis2001-12-221-1/+1
|
* merge IRIX winbind support from Samba 2.2 branchHerb Lewis2001-12-223-97/+666
|
* Append to log.winbindd instead of overwriting it so we are consistent withTim Potter2001-12-211-0/+7
| | | | smbd/nmbd behaviour.
* added ads_domain_sid() functionAndrew Tridgell2001-12-201-15/+5
|
* Removed global debugf. Replaced with lp_set_logfile(name).Jeremy Allison2001-12-201-5/+13
| | | | | Fixed winbindd to finally stop leaving log. file droppings :-). Jeremy.
* Setup global_myworkgroup. Needed for secrets fetch code.Jeremy Allison2001-12-201-8/+11
| | | | Jeremy.
* net ads password and net ads chostpass commands from Remus KoosAndrew Tridgell2001-12-201-0/+1
|
* use "ads server" option if set for primary domainAndrew Tridgell2001-12-191-4/+10
|
* add support for mixtures of ADS/NT4 domains, as long as the primaryAndrew Tridgell2001-12-191-0/+9
| | | | domain is ADS
* much better ADS error handling systemAndrew Tridgell2001-12-192-72/+68
|
* added trusted realm support to ADS authenticationAndrew Tridgell2001-12-193-1/+8
| | | | | | the method used for checking if a domain is a trusted domain is very crude, we should really call a backend fn of some sort. For now I'm using winbindd to do the dirty work.
* - added initial support for trusted domains in winbindd_adsAndrew Tridgell2001-12-194-18/+81
| | | | | | - gss error code patch from a.bokovoy@sam-solutions.net - better sid dumping in ads_dump - fixed help in wbinfo
* fixed handling of empty or dead domain in wbinfo -gAndrew Tridgell2001-12-181-60/+9
|
* Added the group enum code from 2.2Jeremy Allison2001-12-141-0/+1
| | | | Jeremy.
* make sure we find NSS_STATUS structAndrew Tridgell2001-12-131-0/+1
|
* allow IRIX to build nsswitch/libnss_wins.soHerb Lewis2001-12-121-12/+82
|
generated by cgit (git 2.34.1) at 2025-09-26 10:13:08 +0000