summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #6628 - "smbpassdb -a" using rid algorithm with tdbsam passdbSimo Sorce2009-08-121-1/+1
| | | | | | | | | | | | | samu_set_unix() does not use the rid allocator, but forces to use the algoritmic allocator unconditionally, this is wrong and inconsistent. Use samu_alloc_rid_unix() instead. (If we create a new user we should do it in a way consistent with all other commands like pdbedit -a and net rpc user add.) (cherry picked from commit e1d4db8f55b25c7e9c408cb334fb89ccfd4c6565) Signed-off-by: Michael Adam <obnox@samba.org> This fixes bug #6628.
* s3:passdb: fix bug #6509: use gid (not uid) cache in fetch_gid_from_cache().Michael Adam2009-08-111-1/+1
| | | | | | With the previous code, the cache can never have been hit at all. Michael
* s3/passdb: Fix debug message: 'net setmaxrid' does not exist.Karolin Seeger2009-06-061-2/+2
| | | | | | | | This is aiming bug #6351. Karolin (cherry picked from commit c94d1cd7b1dc3ff99ae5a1eb9058ed6015fb9749) (cherry picked from commit 11ed212591d612632fcb47f1eac10507b89ffdec)
* s3: zero an uninitialized arrayMarc VanHeyningen2009-05-281-1/+4
| | | | | | | | Invalid pointers were being dereferenced in lookup_sids causing occasional seg faults. Signed-off-by: Tim Prouty <tprouty@samba.org> (cherry picked from commit 34ca12c9396f7c8475cd1525bdbc40021b0e533f)
* s3/ldap: also handle DirX return codesBjörn Jacke2009-05-151-0/+2
| | | | | this is a backport of f238809d236443b8968e1b4b197a55935c7c7e85 from master (cherry picked from commit 1b040289f14bb22d3b6ab07a452236549d6c9bf6)
* Allow pdbedit to change a user rid/sid. Based on a fix from AlexanderJeremy Allison2009-04-011-3/+57
| | | | | Zagrebin <alexz@visp.ru>. Jeremy.
* s3: fix the fix for bug #6195 - dont let smbd child processes panicMichael Adam2009-04-011-2/+16
| | | | | | | | | | | This patch makes sure the original and temporary TDBs are closed _before_ the rename. Originally, the open TDB was renamed, and so the name passdb.tdb.tmp stayed around in the db context. Hence upon client connect, the smbd children died because reinit_after_fork() calling tdb_reopen_all() would try to reopen passdb.tdb.tmp which existed no longer... Michael
* Fix the problem of 3.0.x passdb databases being versionJeremy Allison2009-03-271-5/+43
| | | | | | | 3 but using a different hash calculation than 3.2.x passwd databases (also version 3). Introduces a minor version number. Jeremy.
* Fix bug #6195 - Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb ↵Jeremy Allison2009-03-271-1/+2
| | | | | | | | | | correctly. For the clustering case. Clustered setups should have only ever used the unsigned version of TDB_DATA in the first place so they can't be in this mess :-). Just do the normal upgrade in the clustered case. Jeremy.
* Fix bug 6097Volker Lendecke2009-03-241-1/+1
| | | | | | | A client sent a SID with authority 0 and 0 sub-authorities. W2k3 replies with NT_STATUS_INVALID_SID, even if other SIDs in the list are valid. Thanks to Pavel <wylda@volny.cz> for the bug report!
* Fix bug 6195 - Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb ↵Jeremy Allison2009-03-181-14/+201
| | | | | | | | | correctly. This is a really nasty one to fix as in order to successfully update the passdb.tdb we must do the equivalent of a tdbbackup to move to the new hash values before we do the upgrade. Jeremy.
* Fix bug #6035 - Possible race between fcntl F_SETLKW and alarm delivery.Jeremy Allison2009-01-141-1/+1
| | | | Jeremy.
* s3-ldapsam: Fix Bug 5957: do not abort rename process on valid rename script.Günther Deschner2008-12-091-1/+1
| | | | Guenther
* Make memcache_add_talloc NULL out the source pointerVolker Lendecke2008-11-141-7/+7
| | | | | This is an orthogonality measure to make clear this pointer now belongs to the cache.
* Fix bug #5825 - Account locking out doesnt work with an LDAP backend.Based ↵Jeremy Allison2008-11-061-1/+3
| | | | | | on a problem found by Boyang. Only the pdb_nds backend implements login attempts so this was broken for tdbsam and ldap. Jeremy.
* Use sys_getgrnam not getgrnam. Pointed out by Herb.Jeremy Allison2008-07-241-5/+5
| | | | Jeremy.
* pdb_ldap: Raise level for debug message to avoid log file flooding.John H Terpstra2008-07-241-1/+1
| | | | (cherry picked from commit 9b863a10da8762f715c16f147d6cd1e79422d248)
* Fix typo.Karolin Seeger2008-07-141-1/+1
| | | | | | | retieve -> retrieve Karolin (cherry picked from commit 37c64130701ab13b6f34998ac17fec2d128c2e08)
* Fix some uninitialized variable references via ndr_printVolker Lendecke2008-07-101-1/+3
|
* Give a nice error message if trying to join with a non-privileged userVolker Lendecke2008-07-101-1/+1
|
* Fix a memleak in secrets_fetch_afs_keyVolker Lendecke2008-06-071-0/+2
| | | | | Coverity ID 570 (cherry picked from commit 0f52dc3f7eae7e87b8a71bd099b99b0b3e76a387)
* Fix a memleak in secrets_fetch_trust_account_password_legacyVolker Lendecke2008-06-071-0/+1
| | | | | Coverity ID 571 (cherry picked from commit a551773e34af1c118f77784a285e1b885da8655d)
* Fix a memleak in fetch_ldap_pwVolker Lendecke2008-06-071-1/+2
| | | | | Fix Coverity ID 572, also fix the error check for secrets_fetch failing (cherry picked from commit 2663c81a782fd4394a9feaaaa987c7f6d38ca5da)
* Manually port Steven Dannenman fix for using the correct machine domain whenGerald W. Carter2008-05-231-3/+3
| | | | | | | | | | | | looking up trust credentials in our tdb. commit fd0ae47046d37ec8297396a2733209c4d999ea91 Author: Steven Danneman <sdanneman@isilon.com> Date: Thu May 8 13:34:49 2008 -0700 Use machine account and machine password from our domain when contacting trusted domains. (cherry picked from commit 69b37ae60757075a0712149c5f97f17ee22c2e41)
* Fix a panic in the [ug]id2sid valgrind bug fixVolker Lendecke2008-05-061-4/+6
| | | | Always, always run "make test" before pushing stuff :-)
* Fix a valgrind bug in the new [ug]id2sid cacheVolker Lendecke2008-05-061-6/+6
| | | | | When we're given a SID, it is not always padded with zeros. Only look at the initialized parts in the SID.
* pdb_tdb: fix the upgrade code, db_traverse returns the number of records!Stefan Metzmacher2008-04-151-1/+3
| | | | metze
* Convert dbwrap_trans_delete to NTSTATUSVolker Lendecke2008-04-011-1/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Convert dbwrap_trans_store to NTSTATUSVolker Lendecke2008-04-011-3/+6
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* pdb_tdb: use != 0 instead off == -1 for dbwrap functionsStefan Metzmacher2008-04-011-1/+1
| | | | metze
* passdb: guard pdb_generate_sam_sid() with a transactionStefan Metzmacher2008-04-011-2/+24
| | | | | | This prevents possible races with some dbwrap backends metze
* passdb/secrets: add secrets_db_ctx() to get the db_contextStefan Metzmacher2008-04-011-0/+9
| | | | metze
* pdb_tdb: use db_open_trans()Stefan Metzmacher2008-03-271-1/+1
| | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org>
* pdb_tdb: use db_sam->transaction_start(db_sam) != 0 consistentStefan Metzmacher2008-03-271-1/+1
| | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org>
* passdb/secrets: use db_open_trans()Stefan Metzmacher2008-03-271-1/+2
| | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org>
* passdb/secrets: it's enough to use traverse_read() in secrets_trusted_domains()Stefan Metzmacher2008-03-271-1/+1
| | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Coverity fixesMarc VanHeyningen2008-03-172-6/+14
|
* Convert pdb_tdb to use dbwrapVolker Lendecke2008-03-171-318/+316
|
* Fix bug 4901Volker Lendecke2008-03-141-3/+8
|
* Convert secrets.c to use dbwrapVolker Lendecke2008-03-111-128/+93
|
* Use a separate tdb for mutexesVolker Lendecke2008-03-101-31/+0
| | | | | | | Another preparation to convert secrets.c to dbwrap: The dbwrap API does not provide a sane tdb_lock_with_timeout abstraction. In the clustered case the DC mutex is needed per-node anyway, so it is perfectly fine to use a local mutex only.
* Convert secrets_lock_trust_account_password to tallocVolker Lendecke2008-03-101-8/+24
| | | | This is preparing the conversion of secrets.c to ctdb
* Make use of talloc_asprintf_strupper_m in secrets.cVolker Lendecke2008-03-101-37/+21
|
* Avoid some pointless checksVolker Lendecke2008-03-101-12/+0
| | | | secrets_init() makes sure that the tdb is initialized
* Use talloc_tos() in secrets_initVolker Lendecke2008-03-101-12/+5
|
* Fix a memleak -- Coverity ID 222Volker Lendecke2008-03-051-1/+2
| | | | (cherry picked from commit a40781bafa3a8f0c7737164bca6cf74b0a452e72)
* Fix crash bug in pdb_init_ldapsam().Günther Deschner2008-03-041-2/+2
| | | | | | Karolin, this needs to be in 3-2-stable. Guenther
* Fix some warningsVolker Lendecke2008-02-251-1/+4
| | | | warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result
* Change ldap search filter. This function is also used to search machine ↵Karolin Seeger2008-02-191-2/+2
| | | | | | accounts which may be located in a different ou. This is an extension to e71a48bb80cee85afcccacbce2884c0d600f4d72. Karolin
* Use netr_SamInfo3 in remaining places.Günther Deschner2008-02-172-2/+2
| | | | Guenther