summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
* Don't bail if we have a badly formed record, just move on to the next one.Andrew Bartlett2003-04-061-1/+1
|
* The ldap idmap backend from Anthony Liguori (aliguori@us.ibm.com):Jim McDonough2003-04-031-703/+94
| | | | | | | This patch moves the ldap routines out of passdb into a generic library and implements an LDAP backend for IDMAP. THe backend can be enabled with "idmap backend = ldap" in smb.conf. THere are also schema changes to make sure to update teh ldap schema files.
* Add staticJelmer Vernooij2003-04-021-1/+1
|
* Fix a crash bug if LDAP doesn't fill in ld_error.Andrew Bartlett2003-04-021-18/+18
| | | | | Andrew Bartlett C VS: ----------------------------------------------------------------------
* This fixes group updates in LDAP the same way as user updatesVolker Lendecke2003-03-301-77/+98
| | | | | | | | are handled, though we assume that always everything needs to be updated in LDAP. PDB_IS_* is not done yet for groups. Do we need it? Volker
* - Point users at the HOWTO Collection instead of 'README' in modules/mysql.cJelmer Vernooij2003-03-301-1/+4
| | | | - Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works now). vfs, rpc and charset will follow
* Merge from HEAD - get better error strings from the ldap server in pdb_ldap.Andrew Bartlett2003-03-281-11/+38
| | | | Andrew Bartlett
* This is no functional change. It just makes pdb_ldap.c a bitVolker Lendecke2003-03-271-24/+50
| | | | | | | easier to understand by moving the logic for init_ldap_from_sam and friends around. Volker
* Apply metze's change correctly this time. Playing 'patch' byVolker Lendecke2003-03-251-6/+6
| | | | | | hand can be somewhat error-prone.. Volker
* Implement abartlet's suggestion to add attribs to ldap if theyVolker Lendecke2003-03-231-24/+30
| | | | | | | | | are 'SET' when adding the account. I really don't like passing flags down to inner routines and complicated if/else conditions, but this time he might be right. ;-) Volker
* This adds 'ldap delete dn' as the recommended parameterVolker Lendecke2003-03-231-2/+2
| | | | | | | | for the 'ldap del only sam attr' functionality. So we are compatiple to the current SuSE patches as well as to TNG... ;-) Volker
* Metzes change:Volker Lendecke2003-03-231-4/+10
| | | | | | | | | | | > Hi Volker, > > if 'displayName' is not available we should fallback to 'cn' for map->nt_name > 'cn' is used as unix group name by nss_ldap. > > and if nt_name is not available we should fail (so does this patch) Volker
* Return value in non-void functionJelmer Vernooij2003-03-221-0/+1
|
* Never touch complicated if/else/elsif structures :-)Volker Lendecke2003-03-221-23/+27
| | | | | | | This repairs domain join with fully existing wks-account which I broke with my last patch... Volker
* This changes the way we do LDAP updates. We don't use LDAP_MOD_MODIFYVolker Lendecke2003-03-221-121/+175
| | | | | | | | | | | | | | | anymore, but instead look at what is currently stored in the database. Then we explicitly delete the existing attribute and add the new value if it is not NULL or "". This way we can handle appearing and disappearing attributes quite nicely. This currently breaks pdbedit -o, as this does not set the CHANGED flag on the SAM_ACCOUNT. Jelmer suggested that we set all the fields on CHANGED in context_add_sam_account. This sounds not too unreasonable. Volker
* Patch from Jianliang Lu <j.lu@tiesse.com> to set the 'minimum password age'Andrew Bartlett2003-03-221-0/+11
| | | | | | when setting the password. Andrew Bartlett
* FALSE -> False (reported by Paul Green)Jelmer Vernooij2003-03-221-1/+1
|
* Use True, not TRUE and False, not FALSEJelmer Vernooij2003-03-203-3/+3
|
* Fix typoVolker Lendecke2003-03-201-3/+3
|
* I like debug level 10, but these messages always get into my wayVolker Lendecke2003-03-201-5/+5
| | | | | | when debugging pdc stuff... Volker
* Merge Herb's change.Volker Lendecke2003-03-201-1/+1
| | | | Volker
* Fix corrupt memory reading in smb_register_passdbJelmer Vernooij2003-03-191-1/+1
|
* Put in the new modules system. It's now used by passdb and rpc. I willJelmer Vernooij2003-03-197-75/+42
| | | | put a doc about it in dev-doc later today.
* Add paramter 'ldap del only sam attr'.Volker Lendecke2003-03-191-59/+97
| | | | | | | This patch is heavily based on a patch by SuSE. Thanks to Guenther Deschner <gd@suse.de> for providing it. Volker
* Hey -- there is an error code NT_STATUS_CANNOT_DELETE :-)Volker Lendecke2003-03-191-1/+1
|
* If we fail, return an error code :-)Volker Lendecke2003-03-191-0/+1
| | | | Volker
* Put group mapping into LDAP.Volker Lendecke2003-03-191-1/+501
| | | | Volker
* Fix memory leak.Volker Lendecke2003-03-171-0/+2
| | | | Volker
* Fix invalid SAFE_FREE() of talloc()ed memory.Andrew Bartlett2003-03-171-3/+0
| | | | Andrew Bartlett
* Fresh meat in trusted domains code:Rafal Szczesniak2003-03-141-30/+47
| | | | | | | | | | | | | | | - packing/unpacking utility functions for trusted domain password struct; can be used to prepare buffer to store in secrets.tdb or (soon) passdb backend - similiar functions for DOM_SID - respectively modified secrets_(fetch|store) routines - new auth mapping code utilising introduced is_trusted_domain function - added tdb (un)packing of single bytes Rafal
* This patch attemptes to clean up winbindd's mutex locking.Andrew Bartlett2003-03-111-23/+7
| | | | | | | | | | | | | | | | | | | | | | | | | The current locking scheme in winbind is a complete mess - indeed, the next step should be to push the locking into cli_full_connection(), but I'll leave it for now. This patch works on the noted behaviour that 2 parts of the connection process need protection - and independent protection. Tim Potter did some work on this a little while back, verifying the second case. The two cases are: - between connect() and first session setup - during the auth2 phase of the netlogon pipe setup. I've removed the counter on the lock, as I fail to see what it gains us. This patch also adds 'anonymous fallback' to our winbindd -> DC connection. If the authenticated connection fails (wbinfo -A specifed) - say that account isn't trusted by a trusted DC - then we try an anonymous. Both tpot and mbp like the patch. Andrew Bartlett
* - Rename 'modules = ' to 'preload modules = 'Jelmer Vernooij2003-02-271-19/+34
| | | | | | - Add smb_probe_module() - Add init_modules() - Call these functions
* Fix comment - the other bits of code don't call this any more.Andrew Bartlett2003-02-221-4/+1
|
* Remove 'unixsam' from the default passdb backends.Andrew Bartlett2003-02-227-279/+204
| | | | | | | | | | | | | | | | | | | | | | The intention is to remove the muliple passdb backends, but we need the 'guest' account to always be there. If the admin adds the guest account to (say) LDAP, there will only be one backend required for operation. This helps remove some nasty behaviours with adding accounts to the system for both the RPC 'create user' and the SAMSYNC code. Users 'added' with an 'add user/machine' script won't magicly appear, and machine accounts 'pre-added' to unix, but not the smbpasswd file will not cause mayhem. This commit also implements somthing tridge discussed with me, the concept of 'default' passdb operation pointers - so that each backend does not need it's own stub funcitons wrapping the default tdb privilages/group mapping code. This also removes an implicit 'sid->name' and 'name->sid' mapping from our own local SID space, to winbind usernames. When adding mapping for NIS/LDAP non-sam users in future, we need to be careful. Andrew Bartlett
* initial server side privileges implementation, using a tdb. This needs to be ↵Andrew Tridgell2003-02-121-0/+341
| | | | hooked into pdb, and we need some access control on changing privileges. That's next
* More ldap parinoia - if we ever get more than one result, bail. The order weAndrew Bartlett2003-02-011-5/+23
| | | | | | | get them in should be indeterminate, so just picking the first one would be bad... Andrew Bartlett
* Always escape ldap filter strings. Escaping code was from pam_ldap, but I'm toAndrew Bartlett2003-02-011-3/+19
| | | | | | | | blame for the realloc() stuff. Plus a couple of minor updates to libads. Andrew Bartlett
* A couple more signed/unsigned issues.Andrew Bartlett2003-02-011-2/+2
|
* Fixed up mutex protection around winbindd logon code. Sync with APP-HEAD.Jeremy Allison2003-01-161-8/+24
| | | | Jeremy.
* initialize acct_ctrl before using itHerb Lewis2003-01-151-2/+1
| | | | remove ldap_msgfree(result); as result is unitialized at this point
* Fix some debug lines, and add a bit more info to help track down ldapAndrew Bartlett2003-01-141-8/+15
| | | | | | connectivity problems. Andrew Bartlett
* clearer debug message when the user is already in the ldap dbAndrew Tridgell2003-01-141-1/+2
|
* Always initialise this variable - and don't set the 'must change now' if it wasAndrew Bartlett2003-01-131-0/+1
| | | | | | | | last changed at '0'. We need to actually change this password sometime... Andrew Bartlett
* Fix open problem with changing attributes on an existing file - basedJeremy Allison2003-01-081-1/+0
| | | | | on work by <steve@griffin.sio2.nl>. Jeremy.
* We already have one function to move unistr2 -> multibyte-static, so weAndrew Bartlett2003-01-021-19/+0
| | | | | | | | | don't need a second just for pdb. Also, remove magic 'is lp_guest_account' test - the magic RID should be up to the passdb backend to set. Andrew Bartlett
* BIG patch...Andrew Bartlett2003-01-026-16/+16
| | | | | | | | | | | | | | | | This patch makes Samba compile cleanly with -Wwrite-strings. - That is, all string literals are marked as 'const'. These strings are always read only, this just marks them as such for passing to other functions. What is most supprising is that I didn't need to change more than a few lines of code (all in 'net', which got a small cleanup of net.h and extern variables). The rest is just adding a lot of 'const'. As far as I can tell, I have not added any new warnings - apart from making all of tdbutil.c's function const (so they warn for adding that const string to struct). Andrew Bartlett
* Forward port the change to talloc_init() to make all talloc contextsJeremy Allison2002-12-202-2/+2
| | | | | named. Ensure we can query them. Jeremy.
* merge of get_dc_name()-like code from APP_HEAD; better support password ↵Gerald Carter2002-12-121-0/+30
| | | | server = DC1 *
* use FILE_MACRO instead of __FILE__Herb Lewis2002-12-031-5/+5
| | | | use FUNCTION_MACRO instead of __FUNCTION_
* Move from NT_STATUS_UNSUCCESSFUL to NT_STATUS_NO_SUCH_USER, and other slightlyAndrew Bartlett2002-11-241-16/+21
| | | | more useful error codes.
generated by cgit (git 2.34.1) at 2025-09-25 18:28:31 +0000