summaryrefslogtreecommitdiffstats
path: root/source/nsswitch
Commit message (Collapse)AuthorAgeFilesLines
...
* use LDSHFLAGS not -shared in several placesAndrew Tridgell2001-06-042-2/+2
|
* More compile fixups for winbind portability.Tim Potter2001-06-042-3/+7
|
* Compile fix for solaris.Tim Potter2001-06-041-7/+5
| | | | Fixed some compiler warnings.
* Try to fix build by adding autoconf tests for pam headers.Jeremy Allison2001-05-221-0/+2
| | | | Jeremy.
* Fixes to get pam_auth() functionality working again.Tim Potter2001-05-171-36/+13
|
* Zero-fill struct hostent.Jeremy Allison2001-05-151-0/+2
| | | | Jeremy.
* Fixed glibc crash problems with libnss_wins.soJeremy Allison2001-05-151-4/+44
| | | | Jeremy.
* Memory leak fixes from insure.Tim Potter2001-05-152-10/+5
|
* Compile fixes for dynamic samr_query_userinfo() stuff.Tim Potter2001-05-145-34/+14
|
* Use sid_peek_rid() instead of sid_split_rid().Tim Potter2001-05-101-3/+2
|
* Fixes from nsswitch testsuite. Lots of stuff works much better now. (-:Tim Potter2001-05-093-6/+9
|
* The substitution of %U and %D in the 'template homedir' is nowdoneTim Potter2001-05-081-10/+6
| | | | by lp_string() calling standard_sub_basic().
* Added S_ISSOCK macros for systems which treat UNIX domain sockets as FIFOsTim Potter2001-05-081-0/+10
| | | | (SCO).
* Misc fixes to get winbindd working. We can now do a 'getent passwd'Tim Potter2001-05-084-17/+88
| | | | and 'getent group' and have most things working.
* OK so I couldn't be as clever as I wanted to be with winbindd_glue.cTim Potter2001-05-074-82/+79
| | | | | so all the glue functions are prefixed with wb_ to avoid conflicts with the old rpc_client stuff which is still a dependency of smbd/nmbd.
* Ignore *.po files.Tim Potter2001-05-071-0/+1
|
* iAdditional files for winbind merge.Tim Potter2001-05-074-0/+852
|
* Preliminary merge of winbind into HEAD. Note that this compiles and linksTim Potter2001-05-0712-1634/+2686
| | | | but I haven't actually run it yet so it probably doesn't work. (-:
* Merge from TNG branch.Tim Potter2001-05-041-57/+183
|
* added solaris wrapper from tngAndrew Tridgell2001-04-251-0/+279
|
* merge some of the nsswitch code from tng to headAndrew Tridgell2001-04-254-267/+700
| | | | | the libnss_winbind.so from head now works with the winbindd from tng
* merge from 2_2Andrew Tridgell2001-04-251-3/+2
|
* Merge of Andrew's changes in 2.2.Jeremy Allison2001-04-131-1/+9
| | | | Jeremy.
* Got "medieval on our ass" about adding the -1 to slprintf.Jeremy Allison2001-04-086-27/+27
| | | | Jeremy.
* Fix for broken RelientUNIX.Jeremy Allison2001-04-041-0/+10
| | | | Jeremy.
* Fix for crash when doing name lookup with a quoted string. Part ofJeremy Allison2001-03-201-1/+1
| | | | | | lookup_name was expecting to be able to write to the string. Changed lookup_name to use const. Jeremy.
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-151-2/+9
| | | | | | | | | | | | | | | | | | | | | source/rpc_parse/parse_lsa.c - off by one unistr length bug in init_lsa_trans_name() source/lib/util_sid.c - resolve more BUILTIN sid values to names. source/nsswitch/wb_client.c - fix typo in debug message - set errno on error so we don't get bogus value from last failure. source/rpc_server/srv_spoolss_nt.c - add debug to track number of open printer handles for ease of tracking handle leaks in the future. source/rpc_server/srv_lsa.c - fix off-by-one string bug. This was preventing NT from displaying names for well-know SIDs in printer permissions dialog.
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-111-0/+1
| | | | | source/nsswitch/winbindd_idmap.c - convert tdb key to unix code-page when generating
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-111-1/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | testsuite/printing/psec.c - Use lock directory from smb.conf parameter when peeking at the ntdrivers.tdb file. source/rpc_parse/parse_sec.c - fix typo in debug message source/script/installbin.sh - create private directory as part of 'make install'. source/nsswitch/winbindd_cache.c source/nsswitch/winbindd_idmap.c source/passdb/secrets.c source/smbd/connection.c - always convert tdb key to unix code-page when generating. source/printing/nt_printing.c - always convert tdb key to unix code-page when generating. - don't prepend path to a filename that is NULL in add_a_printer_driver_3(). source/rpc_server/srv_spoolss_nt.c - always convert tdb key to unix code-page when generating. - don't prepend server name to a path/filename that is NULL in the fill_printer_driver_info functions. source/printing/printing.c - always convert tdb key to unix code-page when generating. - move access check for print_queue_purge() outside of job delete loop. source/smbd/unix_acls.c - fix for setting ACLs (this got missed earlier) source/lib/messages.c - trivial sync with appliance_head
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-041-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | source/Makefile.in - changes to ctags and etags rules that somehow got lost along the way. source/include/proto.h - make proto source/smbd/sec_ctx.c source/smbd/password.c - merge debugs for debugging user groups and NT token stuff. source/lib/util_str.c - capitalise domain name returned from parse_domain_user() source/nsswitch/wb_client.c - fix broken conditional in debug statement. source/include/rpc_secdes.h source/include/rpc_spoolss.h source/printing/nt_printing.c source/lib/util_seaccess.c - fix printer permission bugs related to ACE masks for printers. This adds mapping of generic access rights to object specific rights for NT printers. Still need to work out whether or not to ignore ACEs with certain flags set, though. See comments in util_seaccess.c:check_ace() for details. source/printing/nt_printing.c source/printing/printing.c - use PRINTER_ACCESS_ADMINISTER instead of JOB_ACCESS_ADMINISTER until we sort out printer/printjob permission stuff.
* Fix for uidtoname not returning DOMAIN\name but just name. This causedJeremy Allison2000-10-251-2/+9
| | | | | printer_access_check to break in a domain environment. Jeremy.
* Fixed merging mess.Tim Potter2000-10-131-1/+22
|
* Fix to allow smbd to call winbindd if it is running for all group enumeration,Jeremy Allison2000-10-131-196/+51
| | | | | | | | falling back to the UNIX calls on error. This should fix all problems with smbd enumerating all users in all groups in all trusted domains via winbindd. Also changed GETDC to query 1C name rather than 1b name as only the PDC registers 1b. Jeremy.
* Use sys_setgroups - systems with broken getgroups need this.Jeremy Allison2000-10-111-1/+1
| | | | Jeremy.
* Converted to call lib/wins_srv.c:wins_srv_ip() instead of lp_wins_server()Christopher R. Hertel2000-10-111-4/+4
| | | | | | | | | | | | | | | | | | | | when looking up the WINS server address. Please *don't* use lp_wins_server() any more! The wins_srv_ip() function has the following features: - If the WINS server was entered as a DNS name then the translation to an IP address will already have taken place. We used to do this every time a call to the WINS server was made. Ick. - The return value of wins_srv_ip() is a struct in_addr. Ready to go. - When WINS failover is fully implemented, you'll be able to enter a colon- separated list of WINS servers via the WINS SERVER parameter. Using lp_wins_server() directly will fail if this syntax is used. Chris -)-----
* Renamed WINBINDD_INITGROUPS constant to WINBINDD_GETGROUPS.Tim Potter2000-10-113-3/+3
|
* Modified initgroups to provide a get groups a user is a member ofTim Potter2000-10-112-7/+166
| | | | | | functionality. This is much faster than inverting the group database. Added client side command for this to wbinfo.
* Added debug so we can see how winbindd converts SIDS.Jeremy Allison2000-10-101-13/+40
| | | | Jeremy.
* Fixes to allow wins.c to compile to allow building of libnss_wins.so.John Terpstra2000-10-091-2/+11
|
* Spelling flames. (-:Tim Potter2000-10-051-6/+6
|
* Fixed compiler warnings.Tim Potter2000-10-051-4/+6
|
* Adding Herb's compile warning fixes to HEAD.Jeremy Allison2000-10-041-2/+2
| | | | Jeremy.
* the first cut of the internal messaging system.Andrew Tridgell2000-09-111-8/+0
| | | | | The motivation for this system is to replace the UDP message for oplocks, but this commit only does the "set debug level" message.
* Fix from John Reilly @ HP for my typo with the parameters being reversed. Ooops.Jeremy Allison2000-09-011-3/+3
| | | | Jeremy.
* Updated file with version in TNG.Tim Potter2000-08-251-2/+3
|
* Added code to do SID to uid/gid conversion. Needed for ACL support.Jeremy Allison2000-08-231-10/+178
| | | | Jeremy.
* Started to canonicalize our handling of uid -> sid code in order toJeremy Allison2000-08-021-23/+83
| | | | | | | | | | | | | | | | | | | | | | | | | get ready and fix se_access_check(). Added cannonical lookup_name(), lookup_sid(), uid_to_sid(), gid_to_sid() functions that look via winbind first the fall back on local lookup. All Samba should use these rather than trying to call winbindd code directly. Added NT_USER_TOKEN struct in user_struct, contains list of NT sids associated with this user. se_access_check() should use this (cached) value rather than attempting to do the same thing itself when given a uid/gid pair. More work needs to be done to preserve these things accross security context changes (especially with the tricky pipe problem) but I'm beginning to see how this will be done..... probably by registering a new vuid for an authenticated RPC pipe and not treating the pipe calls specially. More thoughts needed - but we're almost there... Jeremy.
* Instead of handing back a string (which might be a DNS name or an IPChristopher R. Hertel2000-07-191-4/+2
| | | | | | | | | | | | | | | | | | string), the wins_srv module now hands back a struct in_addr when it's called. It caches the IP address once it has been looked up. The IP is cleared (and must be looked up again) if the 'wins server' parameter is reread, or if the node is marked 'dead'. A dead node will not be re-tried for 10 minutes (per a #define in wins_srv.c). As it was, the code was reading the WINS server name or IP directly from lp_wins_server. That's okay, except that if the value was expressed as a name, then a DNS lookup would be done every time the client wanted to talk to the server. I still need to work out the implications of failover regarding the 'unicast subnet' list. Chris -)-----
* First cut toward adding WINS server failover.Christopher R. Hertel2000-07-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | *Note: failover doesn't actually work yet!* It's just that the code I'm adding provides all of the pieces necessary. I do have one big question. Something that I'll have to ask Jeremy, I'm thinkin'. In nmbd/nmbd_subnetdb.c the IP of the WINS server is used to set up the Unicast subnet. ...so what happens if the WINS server changes? My guess is either: a) nothing. b) I'd have to change the unicast subnet entry whenever the WINS server changes. Urq. BTW, the lp_wins_server() function no longer returns the WINS server name or IP. It returns the list of WINS servers entered in smb.conf. To get the currently 'live' WINS server, use the wins_srv() function. Fun, eh? Chris -)-----
* Renamed a parameter in init_request() function.Tim Potter2000-07-171-10/+19
| | | | Initialise response structure correctly.