summaryrefslogtreecommitdiffstats
path: root/source/passdb/passdb.c
Commit message (Collapse)AuthorAgeFilesLines
* r24990: Kill an incredible amount of trailing whitespaces...Michael Adam2007-09-071-8/+10
| | | | | | Further reformat get_trust_pw to conform to coding rules. Michael
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-07-101-2/+1
|
* r23780: Find and fix more GPL2 -> GPL3.Jeremy Allison2007-07-091-1/+1
| | | | Jeremy.
* r23336: Merge r20824 from 3_0: Michael Adam2007-06-041-0/+43
| | | | | | | | | | Send access to the trusted domain passwords through the pdb backend. I did not yet find the time to implement the next step: trusted domain passwords support in pdb_ldap. But at I wanted to have the infrastructure available at least. Michael
* r23196: Cherry pick patches from SAMBA_3_0:Gerald Carter2007-05-291-10/+11
|\ | | | | | | | | | | | | | | | | * Move aclocal.m4 and replace with m4 directory * Merge VL's require-membership-of changes to winbindd_pam.c and associated changes to token_util.c * Fix warnings from tdb_pack/unpack in printing.c * merge ndr fixes and wkssvc service * formating merges to decrease the diff between branches
| * r23192: Remove fallback to looking up group mappings by the Gerald Carter2007-05-291-17/+1
| | | | | | | | Unix name after discussion with Simo.
| * r23005: If we're running on a system where time_t is 8 bytesJeremy Allison2007-05-181-16/+16
| | | | | | | | | | | | | | | | we have to take care to preserve the "special" values for Windows of 0x80000000 and 0x7FFFFFFF when casting between time_t and uint32. Add conversion functions (and use them). Jeremy.
| * r22096: become_root_uid_only() is unneeded - it's only used inJeremy Allison2007-04-051-4/+4
| | | | | | | | | | | | messages.c. Refactor to use become_root() instead and make it local to messages.c Jeremy.
| * r22009: change TDB_DATA from char * to unsigned char *Stefan Metzmacher2007-03-291-2/+2
| | | | | | | | | | | | and fix all compiler warnings in the users metze
| * r21954: Someone misused a '!' instead of a '~' for a binary NOTJeremy Allison2007-03-231-1/+1
| | | | | | | | | | command. Jerry, Simo, please check. Jeremy.
| * r20985: leave room for terminating NULL when printing password hashes via ↵Gerald Carter2007-01-241-2/+2
| | | | | | | | 'pdbedit -L -w'
| * r20851: To read account policies from LDAP we need root.Volker Lendecke2007-01-171-2/+12
| | | | | | | | Volker
| * r20824: Send access to the trusted domain passwords through the pdb backend, ↵Volker Lendecke2007-01-161-0/+43
| | | | | | | | | | | | | | | | | | | | so that in the next step we can store them in LDAP to be replicated across DCs. Thanks to Michael Adam <ma@sernet.de> Volker
| * r20614: Dummy-checkin to trigger the buildVolker Lendecke2007-01-081-4/+5
| |
| * r20243: Make lookup_name resolve both the mapped and the real unix group nameSimo Sorce2006-12-181-7/+23
| |
| * r19058: Implement "user cannot change password", and complete "user must changeJim McDonough2006-10-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | password at next logon" code. The "password last set time" of zero now means "user must change password", because that's how windows seems to use it. The "can change" and "must change" times are now calculated based on the "last set" time and policies. We use the "can change" field now to indicate that a user cannot change a password by putting MAX_TIME_T in it (so long as "last set" time isn't zero). Based on this, we set the password-can-change bit in the faked secdesc.
| * r18271: Big change:Gerald Carter2006-09-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | * autogenerate lsa ndr code * rename 'enum SID_NAME_USE' to 'enum lsa_SidType' * merge a log more security descriptor functions from gen_ndr/ndr_security.c in SAMBA_4_0 The most embarassing thing is the "#define strlen_m strlen" We need a real implementation in SAMBA_3_0 which I'll work on after this code is in.
| * r17924: Get rid of warnings now that talloc is merged.Volker Lendecke2006-08-291-3/+1
| | | | | | | | | | | | Destructors now take a pointer to the "real" destroyed object as an argument. Volker
| * r17815: Revert Volker's change in 16014. I really do not believe Gerald Carter2006-08-241-1/+0
| | | | | | | | | | | | | | | | | | the this should be necessary. If there is still a bug, I believe that setting thr group RID from the passdb is masking it. Not fixing it. It is very likely that the change was necessary before but is no longer with the recent changes. But I'm not taking the chance of merging it to 3.0.23c. :-)
| * r17813: Remove another instance of manually setting the group SID.Gerald Carter2006-08-241-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | The would have been primaryly used when adding a user to an smbpasswd file, but could have been introduce to other backends by using pdbedit -i -e. The symptom was [2006/08/09 13:07:43, 0] rpc_parse/parse_samr.c:init_sam_user_info21A(6276) init_sam_user_info_21A: User nobody has Primary Group SID S-1-22-2-99, which conflicts with the domain sid S-1-5-21-1825997848-4107600307-1754506280. Failing operation.
| * r17669: Remove RID algorithm support from unmapped users and groupsGerald Carter2006-08-211-1/+1
| | | | | | | | when using smbpasswd
| * r17554: CleanupVolker Lendecke2006-08-151-1/+1
| |
| * r17463: A bit of cleanup work: Volker Lendecke2006-08-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Remove some unused code: pdb_find_alias is not used anymore, and nobody I think has ever used the pdb_nop operations for group mapping. smbpasswd and tdb use the default ones and ldap has its own. Make the functions pdb_getgr* return NTSTATUS instead of BOOL. Nobody right now really makes use of it, but it feels wrong to throw away information so early. Volker
| * r16945: Sync trunk -> 3.0 for 3.0.24 code. Still needJeremy Allison2006-07-111-9/+11
| | | | | | | | | | | | | | to do the upper layer directories but this is what everyone is waiting for.... Jeremy.
| * r16593: Make the invarient explicit to Klocwork. Bug #2023.Jeremy Allison2006-06-281-0/+1
| | | | | | | | Jeremy.
| * r16241: Fix Klocwork #106 and others like it.Jeremy Allison2006-06-151-25/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Make 2 important changes. pdb_get_methods() returning NULL is a *fatal* error. Don't try and cope with it just call smb_panic. This removes a *lot* of pointless "if (!pdb)" handling code. Secondly, ensure that if samu_init() fails we *always* back out of a function. That way we are never in a situation where the pdb_XXX() functions need to start with a "if (sampass)" test - this was just bad design, not defensive programming. Jeremy.
| * r16014: Correctly set the group RID in init_sam_from_buffer.Volker Lendecke2006-06-021-0/+1
| | | | | | | | | | | | BIG THANKS to Tom Bork for reporting that Bug! Volker
| * r15601: Fix segfaults with 'security=share' and 'guest only = yes'Volker Lendecke2006-05-141-0/+3
| | | | | | | | Volker
* | r23005: If we're running on a system where time_t is 8 bytesJeremy Allison2007-05-181-16/+16
| | | | | | | | | | | | | | | | we have to take care to preserve the "special" values for Windows of 0x80000000 and 0x7FFFFFFF when casting between time_t and uint32. Add conversion functions (and use them). Jeremy.
* | r22945: merge 22009 from SAMBA_3_0 + some warning fixes for new code:Stefan Metzmacher2007-05-161-2/+2
| | | | | | | | | | | | | | | | change TDB_DATA from char * to unsigned char * and fix all compiler warnings in the users metze
* | r21954: Someone misused a '!' instead of a '~' for a binary NOTJeremy Allison2007-03-231-1/+1
| | | | | | | | | | command. Jerry, Simo, please check. Jeremy.
* | r20985: leave room for terminating NULL when printing password hashes via ↵Gerald Carter2007-01-241-2/+2
| | | | | | | | 'pdbedit -L -w'
* | r20851: To read account policies from LDAP we need root.Volker Lendecke2007-01-171-2/+12
| | | | | | | | Volker
* | r19810: more merge work....does not compile currently. Working on smbd mergeGerald Carter2006-11-211-6/+8
| |
* | r19795: * bring the 'enum lsa_SidType', 'struct GUID', & 'structGerald Carter2006-11-191-1/+1
| | | | | | | | policy_handle' over from SAMBA_3_0.
* | r19783: making more progressGerald Carter2006-11-191-7/+4
| |
* | r17813: Remove another instance of manually setting the group SID.Gerald Carter2006-08-241-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | The would have been primaryly used when adding a user to an smbpasswd file, but could have been introduce to other backends by using pdbedit -i -e. The symptom was [2006/08/09 13:07:43, 0] rpc_parse/parse_samr.c:init_sam_user_info21A(6276) init_sam_user_info_21A: User nobody has Primary Group SID S-1-22-2-99, which conflicts with the domain sid S-1-5-21-1825997848-4107600307-1754506280. Failing operation.
* | r17669: Remove RID algorithm support from unmapped users and groupsGerald Carter2006-08-211-1/+1
| | | | | | | | when using smbpasswd
* | r16674: After removing each individual post-3.0.23rc3 change:Gerald Carter2006-06-291-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This pulls is what I considered safe fixes from SAMBA_3_0. This boiled down to either Klocwork fixes or obvious compiler warning fixes. I did not include any changes to fnuction signatures not the version change to the passdb API. Also pulled in the 3 nmbd fixes requested by Jeremy and the wildcard delete fix. This code will sit for a few days in the cooker and then become 3.0.23 if nothing blows up. I don't care how many more compile warning fixes people throw into SAMBA_3_0.
* | r16254: pulling klocwork fixes for 3.0.23rc3 (current up to r16251)Gerald Carter2006-06-151-25/+16
| |
* | r16104: Set version to 3.0.23rc2Gerald Carter2006-06-081-0/+1
| | | | | | | | | | Bring release tree up to current 3.0 tree (svn merge -r15845:16103 $SVNURL/branches/SAMBA_3_0)
* | r15837: starting sync up for 3.0.23rc1 (in sync with SAMBA_3_0 r15822)Gerald Carter2006-05-231-0/+3
|/
* r14457: Add a few more special cases for RID 513 in the samr code.Gerald Carter2006-03-151-0/+12
| | | | | | Now that I know what all the requirements for this group are I can generalize the code some more and make it cleaner. But at least this is working with lusrmgr.msc on XP and 2k now.
* r13776: Merge in the editposix ldapsam optimizationSimo Sorce2006-03-011-1/+1
|
* r13711: * Correctly handle acb_info/acct_flags as uint32 not as uint16. Günther Deschner2006-02-271-24/+25
| | | | | | | | * Fix a couple of related parsing issues. * in the info3 reply in a samlogon, return the ACB-flags (instead of returning zero) Guenther
* r13679: Commiting the rm_primary_group.patch posted on samba-technicalGerald Carter2006-02-241-251/+125
| | | | | | | | | | * ignore the primary group SID attribute from struct samu* * generate the primary group SID strictlky from the Unix primary group when dealing with passdb users * Fix memory leak in original patch caused by failing to free a talloc * * add wrapper around samu_set_unix() to prevent exposing the create BOOL to callers. Wrappers are samu_set_unix() and samu-allic_rid_unix()
* r13601: * Remove unused code from pdb_ldap.cGerald Carter2006-02-211-1/+6
| | | | | | | | | * Add a 'struct passwd *' to the struct samu for later reference (I know this may be controversial but its easily reverted which is is why I'm checking this is as a seaparate patch before I get too deep). * Remove unix_homedir from struct samu {} and update the pdb wrapper functions associated with it.
* r13600: Move functions local to tdbsam to pdb_tdb.cGerald Carter2006-02-211-384/+9
|
* r13593: consolidate pdb_set_sam_sids() into samu_set_unix() whichGerald Carter2006-02-211-116/+84
| | | | was the only place it was called from.
* r13590: * replace all pdb_init_sam[_talloc]() calls with samu_new()Gerald Carter2006-02-211-92/+28
| | | | * replace all pdb_{init,fill}_sam_pw() calls with samu_set_unix()