summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
* r25403: grab latest changes form 3.2 tree in preparation for release of ↵Gerald Carter2007-09-281-1/+1
| | | | 3.2.0pre1
* r25387: Sync with 3.2.0 svn treeGerald Carter2007-09-271-3/+319
|
* r24991: Kill all those lots of trailing whitespaces from secrets.c.Michael Adam2007-09-071-74/+74
| | | | | | These red bars in vi really hurt my eyes... :-o Michael
* r24990: Kill an incredible amount of trailing whitespaces...Michael Adam2007-09-071-8/+10
| | | | | | Further reformat get_trust_pw to conform to coding rules. Michael
* r24950: Merge r21784Volker Lendecke2007-09-042-3/+22
| | | | | | | Replace smb_register_idle_event() with event_add_timed(). This fixes winbind which did not run the idle events to drop ldap connections. Volker
* r24546: Fix some C++ and type-punned warningsVolker Lendecke2007-08-191-1/+1
|
* r23801: The FSF has moved around a lot. This fixes their Mass Ave address.Andrew Tridgell2007-07-102-4/+2
|
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-07-1013-26/+13
|
* r23780: Find and fix more GPL2 -> GPL3.Jeremy Allison2007-07-0915-15/+15
| | | | Jeremy.
* r23688: Fix bug #4759 reported by Raul <ismell@ismell.org>.Jeremy Allison2007-07-031-1/+1
| | | | | "N" is not a valid format entry for ber_printf, should be "n" Jeremy.
* r23630: Found out what LSA_LOOKUP_NAMES level 5 means: Günther Deschner2007-06-271-1/+1
| | | | | | only query transitive forest trusts. Guenther
* r23511: Merge branches/SAMBA_3_0@23510James Peach2007-06-152-2/+2
| | | | | Tidy calls to smb_panic by removing trailing newlines. Print the failed expression in SMB_ASSERT.
* r23336: Merge r20824 from 3_0: Michael Adam2007-06-044-46/+123
| | | | | | | | | | Send access to the trusted domain passwords through the pdb backend. I did not yet find the time to implement the next step: trusted domain passwords support in pdb_ldap. But at I wanted to have the infrastructure available at least. Michael
* r23244: Fix loop with nscd and NSS recusive calls.Gerald Carter2007-05-301-4/+4
| | | | | | | | | | | | | | | | | | | | | | | > Here's the problem I hit: > > getgrnam("foo") -> nscd -> NSS -> winbindd -> > winbindd_passdb.c:nam_to_sid() -> lookup_global_sam_name() -> > getgrnam("foo") -> nscd -> .... > > This is in the SAMBA_3_0 specifically but in theory could happen > SAMBA_3_0_25 (or 26) for an unknown group. > > The attached patch passes down enough state for the > name_to_sid() call to be able to determine the originating > winbindd cmd that came into the parent. So we can avoid > making more NSS calls if the original call came in trough NSS > so we don't deadlock ? But you should still service > lookupname() calls which are needed for example when > doing the token access checks for a "valid groups" from > smb.conf. > > I've got this in testing now. The problem has shown up with the > DsProvider on OS X and with nscd on SOlaris and Linux.
* r23198: cherry pick more patches from SAMBA_3_0Gerald Carter2007-05-291-2/+1
|
* r23196: Cherry pick patches from SAMBA_3_0:Gerald Carter2007-05-293-37/+38
|\ | | | | | | | | | | | | | | | | * Move aclocal.m4 and replace with m4 directory * Merge VL's require-membership-of changes to winbindd_pam.c and associated changes to token_util.c * Fix warnings from tdb_pack/unpack in printing.c * merge ndr fixes and wkssvc service * formating merges to decrease the diff between branches
| * r23194: cherry pick two fixes from SAMBA_3_0_26 Gerald Carter2007-05-292-6/+10
| | | | | | | | | | * strptime() failure check * make legcacy sid/uid/gid calls static
| * r23192: Remove fallback to looking up group mappings by the Gerald Carter2007-05-291-17/+1
| | | | | | | | Unix name after discussion with Simo.
| * r23051: sid_to_[ug]id fixes for smbdSimo Sorce2007-05-211-12/+26
| |
| * r23046: Few missing merges from cleaning out the Centeris winbindd tree.Gerald Carter2007-05-211-1/+1
| | | | | | | | Nothing of major interest. Will fix a few problems with one way trusts.
| * r23005: If we're running on a system where time_t is 8 bytesJeremy Allison2007-05-181-16/+16
| | | | | | | | | | | | | | | | we have to take care to preserve the "special" values for Windows of 0x80000000 and 0x7FFFFFFF when casting between time_t and uint32. Add conversion functions (and use them). Jeremy.
| * r22977: Trim noise by removing redundant WARNING log message thatGerald Carter2007-05-171-4/+0
| | | | | | | | | | would flood at log level 2. We know when we're using the legacy mapping code anyways since it will log an informative msg.
| * r22844: Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL }; andVolker Lendecke2007-05-141-2/+2
| | | | | | | | replace all data_blob(NULL, 0) calls.
| * r22786: Some cleanup by Karolin Seeger: Remove unused pdb_find_alias, and changeVolker Lendecke2007-05-111-14/+6
| | | | | | | | | | | | return values of some alias-releated pdb functions from BOOL to NTSTATUS Thanks :-)
| * r22767: Argl. Typed in 'svn ci' in the wrong branch. Revert.Volker Lendecke2007-05-091-6/+13
| |
| * r22766: Merge from 3_0:Volker Lendecke2007-05-091-13/+6
| | | | | | | | | | | | | | | | r22412 | obnox | 2007-04-20 14:23:36 +0200 (Fr, 20 Apr 2007) | 5 lines Add a "deletelocalgroup" subcommand to net sam. Thanks to Karolin Seeger <ks@sernet.de>.
| * r22631: Remove the possibility of sid_check_is_domain andJames Peach2007-05-011-2/+1
| | | | | | | | sid_check_is_in_our_domain getting out of sync.
| * r22613: Fix an uninitialized variable warningVolker Lendecke2007-04-301-1/+1
| |
| * r22589: Make TALLOC_ARRAY consistent across all uses.Jeremy Allison2007-04-301-9/+27
| | | | | | | | Jeremy.
| * r22125: Fix a warningVolker Lendecke2007-04-071-1/+1
| |
| * r22096: become_root_uid_only() is unneeded - it's only used inJeremy Allison2007-04-052-16/+16
| | | | | | | | | | | | messages.c. Refactor to use become_root() instead and make it local to messages.c Jeremy.
| * r22066: Ensure that winbind can resolve SIDs in the S-1-22-{1,2}Gerald Carter2007-04-041-1/+21
| | | | | | | | domain to a uid.gid using the idmap_passdb backend.
| * r22009: change TDB_DATA from char * to unsigned char *Stefan Metzmacher2007-03-294-27/+28
| | | | | | | | | | | | and fix all compiler warnings in the users metze
| * r22001: change prototype of dump_data(), so that it takes unsigned char * now,Stefan Metzmacher2007-03-281-1/+1
| | | | | | | | | | | | | | | | which matches what samba4 has. also fix all the callers to prevent compiler warnings metze
| * r21983: make use of tdb_*_bystring() and string_term_tdb_data()Stefan Metzmacher2007-03-271-27/+25
| | | | | | | | | | | | to avoid creating the TDB_DATA struct from strings "by hand" metze
| * r21982: make use of tdb_*_bystring() and string_term_tdb_data()Stefan Metzmacher2007-03-271-29/+12
| | | | | | | | | | | | to avoid creating the TDB_DATA struct from strings "by hand" metze
| * r21981: as we use tdb_trans_store(), we should also use tdb_trans_delete()Stefan Metzmacher2007-03-271-1/+1
| | | | | | | | metze
| * r21954: Someone misused a '!' instead of a '~' for a binary NOTJeremy Allison2007-03-231-1/+1
| | | | | | | | | | command. Jerry, Simo, please check. Jeremy.
| * r21881: Make sure we are very specific when testing whether a backand can ↵James Peach2007-03-201-1/+2
| | | | | | | | | | | | | | | | | | handle a particular SID. Make sure that the passdb backend will accept the same set range of local SIDs that the idmap system sends it. Simo, Jerry - this is a 3_0_25 candidate. Can you please review?
| * r21853: Fix a valgrind errorVolker Lendecke2007-03-161-0/+5
| |
| * r21831: Back out r21823 for a while, this is going into a bzr tree first.Volker Lendecke2007-03-131-20/+1
| | | | | | | | Volker
| * r21823: Let secrets_store_machine_password() also store the account name. ↵Volker Lendecke2007-03-131-1/+20
| | | | | | | | | | | | | | | | | | Not used yet, the next step will be a secrets_fetch_machine_account() function that also pulls the account name to be used in the appropriate places. Volker
| * r21819: Wrap all steps in secrets_store_machine_password into one singleVolker Lendecke2007-03-131-12/+50
| | | | | | | | | | | | transaction. Succeed all or store nothing. Volker
| * r21818: Remove some unused codeVolker Lendecke2007-03-131-23/+0
| |
| * r21784: Replace smb_register_idle_event() with event_add_timed(). This fixes ↵Volker Lendecke2007-03-112-3/+22
| | | | | | | | | | | | | | | | winbind who did not run the idle events to drop ldap connections. Volker
| * r21782: Fix a memleakVolker Lendecke2007-03-101-0/+1
| |
| * r21738: Remove unused file.James Peach2007-03-071-80/+0
| |
| * r21609: Fix memory leaks in error code paths (and one in winbindd_group.c).Jeremy Allison2007-03-011-0/+2
| | | | | | | | | | Patch from Zack Kirsch <zack.kirsch@isilon.com>. Jeremy.
| * r21608: Fix a couple of memleaks in error code paths beforeJeremy Allison2007-03-011-0/+1
| | | | | | | | | | Coverity finds them :-) Jeremy.
| * r21606: Implement escaping function for ldap RDN valuesSimo Sorce2007-03-011-8/+60
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix escaping of DN components and filters around the code Add some notes to commandline help messages about how to pass DNs revert jra's "concistency" commit to nsswitch/winbindd_ads.c, as it was incorrect. The 2 functions use DNs in different ways. - lookup_usergroups_member() uses the DN in a search filter, and must use the filter escaping function to escape it Escaping filters that include escaped DNs ("\," becomes "\5c,") is the correct way to do it (tested against W2k3). - lookup_usergroups_memberof() instead uses the DN ultimately as a base dn. Both functions do NOT need any DN escaping function as DNs can't be reliably escaped when in a string form, intead each single RDN value must be escaped separately. DNs coming from other ldap calls (like ads_get_dn()), do not need escaping as they come already escaped on the wire and passed as is by the ldap libraries DN filtering has been tested. For example now it is possible to do something like: 'net ads add user joe#5' as now the '#' character is correctly escaped when building the DN, previously such a call failed with Invalid DN Syntax. Simo.
generated by cgit (git 2.34.1) at 2025-09-26 13:22:50 +0000