summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #136: "passdb backend = " caused smbd to segfault.Jim McDonough2003-06-201-0/+5
| | | | Instead, spit out an error message.
* Ok, this patch removes the privilege stuff we had in, unused, for some time.Simo Sorce2003-06-183-31/+26
| | | | | | | | | | | | | The code was nice, but put in the wrong place (group mapping) and not supported by most of the code, thus useless. We will put back most of the code when our infrastructure will be changed so that privileges actually really make sense to be set. This is a first patch of a set to enhance all our mapping code cleaness and stability towards a sane next beta for 3.0 code base Simo.
* And some more memory leaks in mapping.c and pdb_tdb.c. tdb_nextkeyVolker Lendecke2003-06-181-2/+13
| | | | | | mallocs its key, so we should free it after use. Volker
* Better panic cleanly than segfault later when no sid can be found and created.Volker Lendecke2003-06-181-2/+3
| | | | | | | Everybody who calls get_global_sam_sid expects this to return non-NULL, and there are way too many places where this is called. Volker
* Fix a memory leak in pdb_tdb.c.Volker Lendecke2003-06-171-0/+2
| | | | | | | Simo, I remember you complaining about a memleak there, could it be this one, or did you resolve it at that time? Volker
* Make static (patch from metze)Jelmer Vernooij2003-06-172-2/+2
|
* The return value of init_module functions is NTSTATUS, not intJelmer Vernooij2003-06-172-6/+4
|
* Update link to DTDJelmer Vernooij2003-06-161-1/+1
|
* Quieten another debug message.Tim Potter2003-06-161-1/+1
|
* Quieten debug message.Tim Potter2003-06-161-1/+1
|
* Rename some uuid functions so as not to conflict with systemTim Potter2003-06-131-1/+1
| | | | versions. Fixes bug #154.
* Try to fix memory leaks found by valgrind in pdb_ldap code.Andrew Bartlett2003-06-071-3/+3
| | | | Andrew Bartlett
* support LDAP_EXOP_MODIFY_PASSWORD (not experiemental in OpenLDAP 2.1)Gerald Carter2003-06-061-9/+21
|
* * break out more common code used between pdb_ldap and idmap_ldapGerald Carter2003-06-061-128/+36
| | | | | | | | | | * remove 'winbind uid' and 'winbind gid' parameters (replaced by current idmap parameter) * create the sambaUnixIdPool entries automatically in the 'ldap idmap suffix' * add new 'ldap idmap suffix' and 'ldap group suffix' parametrer * "idmap backend = ldap" now accepts 'ldap:ldap://server/' format (parameters are passed to idmap init() function
* working draft of the idmap_ldap code.Gerald Carter2003-06-051-282/+3
| | | | | | | | Includes sambaUnixIdPool objectclass Still needs cleaning up wrt to name space. More changes to come, but at least we now have a a working distributed winbindd solution.
* cut-n-paste errorGerald Carter2003-05-271-1/+1
|
* fix bug 118; replace hard coded 'next[User|Group]Rid' attribute namesGerald Carter2003-05-271-6/+8
|
* I'm pretty sure these uint32's should be uid_t's. Can the passdb guysTim Potter2003-05-272-3/+3
| | | | please check this?
* fix bug #108; sambaSambaAccount string attributes are case insensitive; ↵Gerald Carter2003-05-221-2/+5
| | | | don't try to change a string that only differs in case
* Well spotted typo by Marco Berger <MARCOB@voelcker.com>Andrew Bartlett2003-05-161-1/+1
| | | | Andrew Bartlett
* Fix from Alex Deiter <tiamat@komi.mts.ru>Simo Sorce2003-05-161-1/+1
| | | | Reversed check.
* add metze's patch for smb_register functionsSimo Sorce2003-05-161-1/+1
|
* readding reverted changes during idmap merge (noticed by Andrew b.)Gerald Carter2003-05-141-16/+33
|
* fix group mapping in LDAP under new schemaGerald Carter2003-05-141-35/+61
|
* *****LDAP schema changes*****Gerald Carter2003-05-141-292/+802
| | | | | | | | | | | | New objectclass named sambaSamAccount which uses attribute prefaced with the phrase 'samba' to prevent future name clashes. Change in functionality of the 'ldap filter' parameter. This always defaults to "(uid=%u)" now and is and'd with the approriate objectclass depending on whether you are using ldapsam_compat or ldapsam conversion script for migrating from sambaAccount to sambaSamAccount will come next.
* Fix pointer return bug in get_unix_attributes()Tim Potter2003-05-141-1/+1
|
* spellingTim Potter2003-05-142-3/+3
|
* spellingTim Potter2003-05-141-2/+2
|
* Restore a number of fixes that idra removed when he merged hisAndrew Bartlett2003-05-133-10/+4
| | | | | | | | | | | idmap-and-the-rest from HEAD. These are correctness fixes that were already in 3.0, and a memory leak fix. The pdb_ldap changes are held back at jerry's request (he is also playing with pdb_ldap ATM). Andrew Bartlett
* Try to fix up some code in pdb_smbpasswd that assumed we still had a 'uid'.Andrew Bartlett2003-05-131-12/+22
| | | | | | This is to get non-unix accounts going for the build farm. Andrew Bartlett
* Fix obvious compiler warnings.Jeremy Allison2003-05-123-3/+0
| | | | Jeremy.
* And finally IDMAP in 3_0Simo Sorce2003-05-128-637/+294
| | | | | | | | | | | | | | | | | | | | We really need idmap_ldap to have a good solution with ldapsam, porting it from the prvious code is beeing made, the code is really simple to do so I am confident it is not a problem to commit this code in. Not committing it would have been worst. I really would have been able to finish also the group code, maybe we can put it into a followin release after 3.0.0 even if it may be an upgrade problem. The code has been tested and seem to work right, more testing is needed for corner cases. Currently winbind pdc (working only for users and not for groups) is disabled as I was not able to make a complete group code replacement that works somewhat in a week (I have a complete patch, but there are bugs) Simo.
* fixing typos in debug statementsGerald Carter2003-05-121-1/+1
|
* As discussed on samba-technical - move to 'primaryGroupSid' insted ofAndrew Bartlett2003-05-111-17/+45
| | | | | | | | | | primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid for the primary user identifier. Also cope with legacy installations where primaryGroupID might have been stored as 0. Andrew Bartlett
* Using /dev/urandom for determining an ldap server backoff is a waste of systemAndrew Bartlett2003-05-111-2/+6
| | | | | | entropy - use sys_random() instead. Andrew Bartlett
* Reverse previous patch from Stefan and me after comments by Andrew BartlettJelmer Vernooij2003-05-101-2/+2
|
* Patch from metze and me that adds dummy smb_register_*() functions soJelmer Vernooij2003-05-101-2/+2
| | | | | that is now possible to, for example, load a module which contains an auth method into a binary without the auth/ subsystem built in.
* Fix typo.John Terpstra2003-05-101-1/+1
|
* Fix irritating typo - non arg functions should be fn(void).Jeremy Allison2003-05-071-1/+1
| | | | Jeremy.
* Set our 'global sam name' in one place. For domain controllers, this isAndrew Bartlett2003-05-073-8/+10
| | | | | | | | | | | | | | lp_workgroup(), for all other server this is global_myname(). This is the name of the domain for accounts on *this* system, and getting this wrong caused interesting bugs with 'take ownership' on member servers and standalone servers at Snap. (They lookup the username that they got, then convert that to a SID - but becouse the domain out of the smbpasswd entry was wrong, we would fail the lookup). Andrew Bartlett
* Make the version numbers ints (patch from metze)Jelmer Vernooij2003-04-302-3/+3
|
* Use a common function to create the SAM_ACCOUNT being used to add accountsAndrew Bartlett2003-04-291-25/+36
| | | | | | | | to the system. This means that we always run Get_Pwnam(), and can never add FOO when foo exists on the system (the idea is to instead add foo into the passdb, using it's full name, RID etc). Andrew Bartlett
* don't implement any group mapping functions in the guest sam moduleGerald Carter2003-04-291-0/+11
|
* Use NTSTATUS as return value for smb_register_*() functions and init_module()Jelmer Vernooij2003-04-288-26/+36
| | | | function. Patch by metze with some minor modifications.
* The caller must always set the RID on the SAM_ACCOUNT, so don't try and guessAndrew Bartlett2003-04-281-3/+1
| | | | | | it from the UID. Andrew Bartlett
* The RID must be 'SET', not 'DEFAULT' or we won't set it into LDAP, and tryAndrew Bartlett2003-04-281-2/+2
| | | | | | to make it up from the algorithm... Andrew Bartlett
* Guenther Deschner <gd@suse.de> notes that I missed out setting the defaultAndrew Bartlett2003-04-281-1/+3
| | | | | | for the 'normal' case (not --with-ldapsam). Andrew Bartlett
* A new pdb_ldap!Andrew Bartlett2003-04-283-276/+722
| | | | | | | | | | | | | | | | | | | | | | This patch removes 'non unix account range' (same as idra's change in HEAD), and uses the winbind uid range instead. More importanly, this patch changes the LDAP schema to use 'ntSid' instead of 'rid' as the primary attribute. This makes it in common with the group mapping code, and should allow it to be used closely with a future idmap_ldap. Existing installations can use the existing functionality by using the ldapsam_compat backend, and users who compile with --with-ldapsam will get this by default. More importantly, this patch adds a 'sambaDomain' object to our schema - which contains 2 'next rid' attributes, the domain name and the domain sid. Yes, there are *2* next rid attributes. The problem is that we don't 'own' the entire RID space - we can only allocate RIDs that could be 'algorithmic' RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be mapped by IDMAP, not the algorithm. Andrew Bartlett
* Merge of a debuglevel downgrade from HEAD.Tim Potter2003-04-281-2/+2
|
* Fix number of arguments to asprintf()Jelmer Vernooij2003-04-281-1/+1
|