summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
* r20998: Fix debug messageVolker Lendecke2007-10-101-1/+2
|
* r20985: leave room for terminating NULL when printing password hashes via ↵Gerald Carter2007-10-101-2/+2
| | | | 'pdbedit -L -w'
* r20851: To read account policies from LDAP we need root.Volker Lendecke2007-10-101-2/+12
| | | | Volker
* r20824: Send access to the trusted domain passwords through the pdb backend, ↵Volker Lendecke2007-10-104-46/+123
| | | | | | | | | | so that in the next step we can store them in LDAP to be replicated across DCs. Thanks to Michael Adam <ma@sernet.de> Volker
* r20707: Clean up pdb_interface.c a bit -- patch from Michael Adam <ma@sernet.de>Volker Lendecke2007-10-101-23/+38
|
* r20644: Make some functions static, thanks to Michael Adam <ma@sernet.de> ↵Volker Lendecke2007-10-101-3/+3
| | | | for the hint.
* r20614: Dummy-checkin to trigger the buildVolker Lendecke2007-10-101-4/+5
|
* r20402: Fix spelling: samba bug #4292 debian #402392Andrew Bartlett2007-10-101-1/+1
|
* r20243: Make lookup_name resolve both the mapped and the real unix group nameSimo Sorce2007-10-101-7/+23
|
* r20212: Attempt to fix the Solaris buildVolker Lendecke2007-10-101-2/+4
|
* r20169: Support for fallback to legacy mapping code was not completely tested.Simo Sorce2007-10-101-12/+18
| | | | Add necessary fixes.
* r20116: Start merging in the work done to create the new idmap subsystem.Simo Sorce2007-10-103-98/+202
| | | | Simo.
* r20090: Fix a class of bugs found by James Peach. EnsureJeremy Allison2007-10-102-25/+56
| | | | | | | | | | | | | we never mix malloc and talloc'ed contexts in the add_XX_to_array() and add_XX_to_array_unique() calls. Ensure that these calls always return False on out of memory, True otherwise and always check them. Ensure that the relevent parts of the conn struct and the nt_user_tokens are TALLOC_DESTROYED not SAFE_FREE'd. James - this should fix your crash bug in both branches. Jeremy.
* r19945: Fix a segfault -- lookup_rids needs to init the names even on failureVolker Lendecke2007-10-101-0/+2
|
* r19943: Fix bug 4267 -- Thanks to David!Volker Lendecke2007-10-101-0/+2
|
* r19579: BUG 4075: patch from Dmitry Butskoy <dmitry@butskoy.name>.Gerald Carter2007-10-101-2/+4
| | | | | Allow smbd to use winbindd to lookup uids/gids outside the idmap range if 'winbind trusted domains only = yes'
* r19419: BUG 4109: Patch from Timur Bakeyev. Fix bug causing smbd to turn offGerald Carter2007-10-101-10/+6
| | | | winbindd and fail to disable the _NO_WINBIND environment.
* r19083: Fix objectclassVolker Lendecke2007-10-101-1/+1
|
* r19058: Implement "user cannot change password", and complete "user must changeJim McDonough2007-10-104-77/+36
| | | | | | | | | | | | password at next logon" code. The "password last set time" of zero now means "user must change password", because that's how windows seems to use it. The "can change" and "must change" times are now calculated based on the "last set" time and policies. We use the "can change" field now to indicate that a user cannot change a password by putting MAX_TIME_T in it (so long as "last set" time isn't zero). Based on this, we set the password-can-change bit in the faked secdesc.
* r18722: Fix up password change times. The can change and must change times areJim McDonough2007-10-101-2/+22
| | | | | | | calculated based on the last change time, policies, and acb flags. Next step will be to not bother storing them. Right now I'm just trying to get them reported correctly.
* r18703: Fix the annoying effect that happens when nscd is running:Günther Deschner2007-10-104-0/+18
| | | | | | | | | We usually do not get the results from user/group script modifications immediately. A lot of users do add nscd restart/refresh commands into their scripts to workaround that while we could flush the nscd caches directly using libnscd. Guenther
* r18684: pdb_get_group_sid() has to use the Get_Pwnam_alloc() callGerald Carter2007-10-101-1/+1
| | | | to ensure it finds the Unix user.
* r18654: Rename "struct uuid" => "struct GUID" for consistency.Jelmer Vernooij2007-10-101-8/+8
|
* r18527: Janitor for Jeremy ;-)Volker Lendecke2007-10-101-12/+12
|
* r18483: Ensure all pdb_XXX calls are wrapped in become_root()/unbecome_root()Jeremy Allison2007-10-101-5/+32
| | | | | pairs. Should fix bug #4097. Jeremy.
* r18313: Nobody said "no" (yet.... gd?), so commit it:Volker Lendecke2007-10-101-10/+0
| | | | | | | | Remove the account_policy_migrated() thingy, and make cache_account_policy_set use gencache. Account policies are now handled like groups and users are with respect to "passdb backend". Volker
* r18271: Big change:Gerald Carter2007-10-105-39/+39
| | | | | | | | | | | * autogenerate lsa ndr code * rename 'enum SID_NAME_USE' to 'enum lsa_SidType' * merge a log more security descriptor functions from gen_ndr/ndr_security.c in SAMBA_4_0 The most embarassing thing is the "#define strlen_m strlen" We need a real implementation in SAMBA_3_0 which I'll work on after this code is in.
* r17971: Disable storing SIDs in the S-1-22-1 and S-1-22-2 domain to the ↵Gerald Carter2007-10-101-0/+10
| | | | SID<->uid/gid cache. FIxes a bug in token creation
* r17924: Get rid of warnings now that talloc is merged.Volker Lendecke2007-10-101-3/+1
| | | | | | Destructors now take a pointer to the "real" destroyed object as an argument. Volker
* r17831: Attempt to fix the build farm: 0x7fffffffffffffff needs special ↵Volker Lendecke2007-10-101-1/+1
| | | | | | | | | | | | | | | | | | | casing too I think. This broke 'make test' because the newly created user was set to be kicked off Mi, 22 Jan 1975 23:55:33 CET (unix time 159663333) with the setuserinfo21 call. I'm not 100% sure that 0x7ff... means max time as I do it here, I vaguely remember it to mean "don't touch". Does anybody know that for sure? Jeremy, please check this. Thanks, Volker
* r17815: Revert Volker's change in 16014. I really do not believeGerald Carter2007-10-101-1/+0
| | | | | | | | | the this should be necessary. If there is still a bug, I believe that setting thr group RID from the passdb is masking it. Not fixing it. It is very likely that the change was necessary before but is no longer with the recent changes. But I'm not taking the chance of merging it to 3.0.23c. :-)
* r17813: Remove another instance of manually setting the group SID.Gerald Carter2007-10-101-1/+7
| | | | | | | | | | | | | The would have been primaryly used when adding a user to an smbpasswd file, but could have been introduce to other backends by using pdbedit -i -e. The symptom was [2006/08/09 13:07:43, 0] rpc_parse/parse_samr.c:init_sam_user_info21A(6276) init_sam_user_info_21A: User nobody has Primary Group SID S-1-22-2-99, which conflicts with the domain sid S-1-5-21-1825997848-4107600307-1754506280. Failing operation.
* r17709: Fix cut-n-paste error with the name of gid_to_unix_group_sid().Gerald Carter2007-10-102-2/+2
|
* r17673: volker's patch for re-adding Getpwnam() lookups to smbpasswd backend ↵Gerald Carter2007-10-101-5/+1
| | | | (I hate username level)
* r17669: Remove RID algorithm support from unmapped users and groupsGerald Carter2007-10-104-92/+19
| | | | when using smbpasswd
* r17592: Remove some unused functions pointed out by John E. Malmberg, makeVolker Lendecke2007-10-101-0/+46
| | | | | | do_file_lock static to pdb_smbpasswd.c, the only user of it. Volker
* r17554: CleanupVolker Lendecke2007-10-104-32/+34
|
* r17468: To minimize the diff later on, pre-commit some changes ↵Volker Lendecke2007-10-101-9/+12
| | | | | | | | independently: Change internal mapping.c functions to return NTSTATUS instead of BOOL. Volker
* r17465: Get rid of add_initial_entry. In the two places it was called in it ↵Volker Lendecke2007-10-101-5/+7
| | | | | | | | seemed a bit pointless to me. Volker
* r17463: A bit of cleanup work:Volker Lendecke2007-10-103-17/+10
| | | | | | | | | | | | Remove some unused code: pdb_find_alias is not used anymore, and nobody I think has ever used the pdb_nop operations for group mapping. smbpasswd and tdb use the default ones and ldap has its own. Make the functions pdb_getgr* return NTSTATUS instead of BOOL. Nobody right now really makes use of it, but it feels wrong to throw away information so early. Volker
* r17451: Change pdb_getgrsid not to take a DOM_SID but a const DOM_SID * as anVolker Lendecke2007-10-103-9/+9
| | | | | | argument. Volker
* r17407: Don't do strchr_m twice when once will do.Jeremy Allison2007-10-101-5/+4
| | | | Jeremy.
* r17406: We need to do a translation of winbind separator -> '\\' inVolker Lendecke2007-10-101-1/+18
| | | | | | | | | | | lookup_name_smbconf, otherwise force user = domain+administrator can not work. Also attempt to fix the 'valid users = domain+group' bug at the same time. Volker
* r17404: Is this XP (extreme programming)? :-)Volker Lendecke2007-10-101-3/+3
| | | | | | With lp_workgroup we end up with remote names again... Volker
* r17403: add a helpful debug msgGerald Carter2007-10-101-0/+3
|
* r17402: Added lookup_name_smbconf() to be called when lookingJeremy Allison2007-10-101-0/+50
| | | | | | | | | up names from smb.conf. If the name is unqualified it causes the lookup to be done in WORKGROUP\name, then "Unix [users|groups]"\name rather than searching the domain. Should fix the problems with "force user" selecting a domain user by preference. Jeremy.
* r17271: Fix a regression in the ldapsam uri syntax.Gerald Carter2007-10-101-7/+12
| | | | Allow multiple LDAP URIs to be grouped by ""
* r17246: BUG 3964: lower case username prior to getpwnam() call in smbpasswdGerald Carter2007-10-101-1/+5
|
* r17150: MMC User & group plugins fixes:Gerald Carter2007-10-103-11/+52
| | | | | | | | | * Make sure to lower case all usernames before calling the create, delete, or rename hooks. * Preserve case for usernames in passdb * Flush the getpwnam cache after renaming a user * Add become/unbecome root block in _samr_delete_dom_user() when trying to verify the account's existence.
* r17075: Even without talloc_steal you can still create memory problems.... ;-)Volker Lendecke2007-10-101-1/+1
|
generated by cgit (git 2.34.1) at 2024-11-10 00:42:43 +0000