summaryrefslogtreecommitdiffstats
path: root/source/nsswitch
Commit message (Collapse)AuthorAgeFilesLines
...
* Don't do a zero-length malloc (caught with dmalloc library).Jeremy Allison2002-03-261-1/+1
| | | | Jeremy.
* Spelling fixes.Tim Potter2002-03-241-1/+1
|
* Various winbind updates:Andrew Bartlett2002-03-234-6/+7
| | | | | | | | | | | | | | - pam_winbind updates from vance, fixing a typo and making some the options work properly. - Extra parinoia in the winbind connection loop - Allow pam_winbind to compile on HP-UX (Don Mcall, more work to do). - Fix up configure.in to use the same method for building the test .so as the Makefile uses. Andrew Bartlett
* Make debug statment less confusing.Tim Potter2002-03-221-2/+5
|
* Missed a couple of fetch/store_ints.Jeremy Allison2002-03-211-4/+4
| | | | Jeremy.
* Make winbindd_idmap tdb endian independent. This is very important forJeremy Allison2002-03-211-11/+46
| | | | | | | | sharing between machines with rsync. Finally removed tdb_store_int/tdb_fetch_int. Now only tdb_store_int32/tdb_fetch_int32 which are endian independent are allowed. Jeremy.
* When upgrading from an old idmap tdb, remember to overwrite the reverseJeremy Allison2002-03-211-0/+5
| | | | | | mapping as well as the forward one. Found this in doing the backport to 2.2.x. This is *essential* to upgrade an old idmap file to a new one. Jeremy.
* fixed the secondary group mappings for ADS usersAndrew Tridgell2002-03-211-8/+56
|
* Cache call to winbind separator.Tim Potter2002-03-201-46/+56
| | | | | | Some random reformatting and cleanup. Display output of wbinfo -s using actual winbind separator.
* Merge of Richard's lookupsid fix.Tim Potter2002-03-201-1/+4
|
* updated winbindd to used paged ldap searches for all ldap queriesAndrew Tridgell2002-03-191-1/+1
|
* Fix a double-free bug in wbinfo -t's call in winbindd.Andrew Bartlett2002-03-192-7/+8
| | | | | | | | | | I forgot to clean this up when netlogon move across to the connection cache arrangement. Also add some smb_panics to the connection_ok() code to try to catch this kind of thing better in future. Andrew Bartlett
* Allow us to see the difference between these two errors. (We need to chaseAndrew Bartlett2002-03-181-1/+7
| | | | | | down some bugs with it...). Andrew Bartlett
* Renamed get_nt_error_msg() to nt_errstr().Tim Potter2002-03-172-8/+8
|
* enable locking on the winbindd cache tdb so it can be backed up andAndrew Tridgell2002-03-151-1/+1
| | | | manipulated externally
* added a -h usage option to winbinddAndrew Tridgell2002-03-151-1/+16
|
* Now we have reliable signals take SIGTERM inband.Jeremy Allison2002-03-141-5/+4
| | | | Jeremy.
* Fix typo in copyrightAndrew Bartlett2002-03-131-1/+1
|
* fixed 2 reconnection bugs in the ADS backend supportAndrew Tridgell2002-03-121-7/+11
|
* get the test for disconnection the right way around!Andrew Tridgell2002-03-121-3/+3
|
* Removed bogus calles to D() debugging function. Perhaps these shouldTim Potter2002-03-111-16/+1
| | | | be replaced by DEBUG() calls?
* always make winbindd try for the PDC first before trying for a BDCAndrew Tridgell2002-03-111-5/+7
| | | | this prevents propogation delays in the SAM between the PDC and BDCs
* removed bogus prepend_domain() call which was screwing up getpwuid()Andrew Tridgell2002-03-091-10/+2
| | | | with the new default domain code
* prevent a segv when a trusted domain is unavailable at startupAndrew Tridgell2002-03-091-3/+2
|
* better detection of dead ADS connections, so we have some chance ofAndrew Tridgell2002-03-091-0/+6
| | | | reconnecting
* nicer message for --sequence when the server is disconnectedAndrew Tridgell2002-03-061-2/+7
|
* Allow Samba to trust NT4 Domains.Andrew Bartlett2002-03-021-2/+4
| | | | | | | | | | | | | | | | This commit builds on the auth subsystem to give Samba support for trusting NT4 domains. It is off by default, but is enabled by adding 'trustdomain' to the 'auth methods' smb.conf paramater. Tested against NT4 only - there are still some issues with the join code for Win2k servers (spnego stuff). The main work TODO involves enumerating the trusted domains (including the RPC calls to match), and getting winbind to run on the PDC correctly. Similarly, work remains on getting NT4 to trust Samba domains. Andrew Bartlett
* Move wbinfo over to d_printf(). Patch by Hasch@t-online.de (Juergen Hasch)Andrew Bartlett2002-03-011-55/+55
| | | | Andrew Bartlett
* enable locking on the idmap database to make it safe to dump/restoreAndrew Tridgell2002-02-281-1/+1
| | | | it externally while winbindd is running
* Ensure that winbindd and smbd both use identical logic to find dc's.Jeremy Allison2002-02-281-28/+27
| | | | | Fix bug where zeroip addresses were being checked. Jeremy.
* this allows us to support foreign SIDs in winbindd and smbdAndrew Tridgell2002-02-275-117/+173
| | | | | | | this means "xcopy /o" has a chance of working with ACLs that contain ACEs that use SIDs that the Samba server has no knowledge of. It's a bit hackish, Tim, can you look at my uid.c changes?
* make protoTim Potter2002-02-191-1/+0
|
* fixed a memory leak thanks to dleducq@arkoon.netAndrew Tridgell2002-02-181-0/+1
|
* Winbind cleanup.Andrew Bartlett2002-02-154-180/+220
| | | | | | | | | | | | | | | | | | This patch fixes the segfaults I introduced in the previous conneciton caching patch. It cleans up the connection cache a *lot* - in particular it adds significant robustness to the operation. If a the DC goes down, we no longer fail the next operation - the code checks if the connection died during one of its own operations on the socket, and restarts the conneciton as required. There is still a memory leak in here somewhere - but this code also cleans up a number of these. Also added is the abilty to sepecify the domain of the 'get around restrict anonymous' user that winbind uses. Andrew Bartlett
* A few small winbind updates:Andrew Bartlett2002-02-113-25/+60
| | | | | | | | | | | | | | | Add a connection cache to the netlogon pipe. This makes a *massive* difference to the time-per-auth. Also fix up *some* of the memory leaks in other connection caches. Add some debugging messages for the is_connected() code. I'm thinking we should get a client implementation of SMBecho and call it here - as it would allow us to always know the DC is around before we start. Down the debug level for some of the pam_winbind code - I'll probably down it further when I'm finished debugging. Andrew Bartlett
* Fix up some of the DEBUG lines in winbind_pam.cAndrew Bartlett2002-02-081-8/+10
|
* 0x is the traditional prefix for displaying hex numbers.Tim Potter2002-02-061-2/+2
|
* Drastic impromvents to pam_winbind.Andrew Bartlett2002-02-055-279/+538
| | | | | | | | | | | | | | | | | This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error conversions, and uses them to make the error handling in pam_winbind sane. In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...' stuff, and logs the NTSTATUS error that winbind now sends over the pipe. Added code to wbinfo to display these - makes a big difference in debugging winbindd. The main change here is the code to allow pam_winbind password changing to correctly stack - This code ripped from pam_unix, and the copyright attached. (Same as for all pam modules, including pam_winbind) Andrew Bartlett
* Fix from Michael Steffens <michael_steffens@hp.com> to make signalJeremy Allison2002-01-311-1/+4
| | | | | | processing work correctly in winbindd. This is a really good patch that gives full select semantics to the Samba modified select. Jeremy.
* reduced memory usage in winbindd with a rpc backend by using aAndrew Tridgell2002-01-311-6/+11
| | | | separate talloc context for each partial fetch
* Removed unused variables.Tim Potter2002-01-311-2/+0
|
* added 'wbinfo --sequence' to show sequence numbers of all domainsAndrew Tridgell2002-01-315-0/+67
|
* Removed version number from file header.Tim Potter2002-01-3024-44/+24
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Fix for password change from Samuel Ziegler <sam@xpedion.com>Tim Potter2002-01-301-11/+11
|
* Removed silly fprintf(stderr, ...) debug.Tim Potter2002-01-301-2/+1
| | | | | Part of Samuel Ziegler's patch to get winbind password changing working again in HEAD.
* Some more 'winbind default domain' support patches from Alexander BokovoyAndrew Bartlett2002-01-271-81/+1
| | | | | | | | | | | <a.bokovoy@sam-solutions.net>. This patch is designed to remove the 'special cases' required for this support. In particular this now kills off winbind_initgroups, as it appears no longer to be required. Andrew Bartlett
* Back out some of the less well thought out ideas from last weeks work onAndrew Bartlett2002-01-261-5/+16
| | | | | | | | | | winbind default domains, particulary now I understand whats going on a lot better. This ensures that the RPC client code does as little 'magic' as possible - this is up to the application/user. (Where - for to name->sid code - it was all along). This leaves the change that allows the sid->name code to return domains and usernames in seperate paramaters. Andrew Bartlett
* Change the winbind interface to use seperate 'domain' and 'username' feilds forAndrew Bartlett2002-01-269-149/+56
| | | | | | | | | the sid->uid and uid->sid conversions. Remove some duplicate arguments from these funcitons, and update the request/response structures for this and the 'winbind domain name' feature. As such 'winbindd_lookup_name' now takes both a domain and username.
* Allow a winbind client to obtain the server's domain name.Andrew Bartlett2002-01-261-1/+13
|
* Removed dodgy init of local variable.Tim Potter2002-01-251-1/+1
|