summaryrefslogtreecommitdiffstats
path: root/source/winbindd
Commit message (Collapse)AuthorAgeFilesLines
* Fix for bug 5571Simo Sorce2008-09-113-1/+27
| | | | | Make sure that usernames are parsed using the correct separator. Otherwise group memeberships in winbind may be result broken.
* Revert "winbindd: the ad trusted_domains call should return talloced strings."Günther Deschner2008-09-051-5/+2
| | | | This reverts commit b57cbf62e8180c8fdb8f541c43358d36d8dbbdfa.
* Fix a memleakQiao Yang2008-09-051-1/+2
| | | | | | request.extra_data is not freed if there is no extra_data in response or when there is some error happens in processing. This patch will free the buffer right after processing a request before sending back a response.
* Fix winbindd crash bug with trusted domains. Bug #5736James Ding2008-09-041-0/+2
|
* get rid of unneeded argument in get_methods and get_alloc_methodsHerb Lewis2008-09-041-14/+9
|
* Cleanup of DC enumeration in get_dcs()Steven Danneman2008-09-041-24/+74
| | | | | | | | | | | This is a fix for a few small inefficiencies/bugs in the get_dcs() path. * because the third add_one_dc_unique() loop was outside the ADS check all DCs returned from the non-sitename lookup were being tacked onto the dc_name_ip list twice. * add_one_dc_unique() now checks if the given IP address already exists before adding it to the list, making the returned list actually unique * added more thorough doxygen comment headers
* Revert "Split lookup_name() and create a new functiong called"Simo Sorce2008-09-031-13/+15
| | | | This reverts commit 8594edf666c29fd4ddf1780da842683dd81483b6.
* Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-develSimo Sorce2008-09-034-6/+34
|\
| * winbindd: the ad trusted_domains call should return talloced strings.Günther Deschner2008-09-021-2/+5
| | | | | | | | Guenther
| * Fix Coverity ID 592Volker Lendecke2008-08-311-0/+4
| | | | | | | | | | | | | | | | The scanner did not figure out that we always have a primary domain, so it complained about us potentially passing a NULL pointer down to set_domain_online_request() where it is dereferenced. Make the code a bit clearer.
| * winbindd: fix invalid sid copy (hit when enumerating sibling domains).Günther Deschner2008-08-281-1/+1
| | | | | | | | Guenther
| * Fix the wcache_invalidate_samlogon calls.Jeremy Allison2008-08-272-3/+24
| | | | | | | | Jeremy.
* | Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-develSimo Sorce2008-08-269-543/+409
|\|
| * Move idmap_cache.c from winbindd/ to lib/Volker Lendecke2008-08-261-261/+0
| |
| * winbindd: use set_auth_errors() in winbindd_dual_check_machine_acct as well.Günther Deschner2008-08-251-4/+1
| | | | | | | | Guenther
| * winbindd: move set_auth_errors to util functions.Günther Deschner2008-08-253-12/+13
| | | | | | | | Guenther
| * winbindd: only create machine pwd change event when in primary domain child.Günther Deschner2008-08-251-1/+1
| | | | | | | | Guenther
| * Fix some nonempty blank linesVolker Lendecke2008-08-231-26/+26
| |
| * Use talloc_stackframe() in machine_password_change_handlerVolker Lendecke2008-08-231-9/+5
| |
| * Fix a memleak in calculate_next_machine_pwd_changeVolker Lendecke2008-08-231-2/+7
| |
| * winbindd: add event based machine password change.Günther Deschner2008-08-232-0/+120
| | | | | | | | Guenther
| * Don't re-initialize a token when we already have one. This fixes the build ↵Jeremy Allison2008-08-221-0/+3
| | | | | | | | | | | | | | farm failures when winbindd connects as guest. This one took a *lot* of tracking down :-). Jeremy.
| * idmap_gid_to_sid: Fix a cut-a-npaste error.Gerald (Jerry) Carter2008-08-221-1/+1
| | | | | | | | The call was looking up a uid and not gid in the cache.
| * winbindd: Fix crash in cm_connect_sam()Gerald (Jerry) Carter2008-08-221-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | Fix segv when talking to parent DC (joined to child domain). The root cause was (a) storing the parent domain in the cli_state struct caused the NTLMSSP pipe bind to fail which made us fallover to the schannel code path (b) the dcinfo pointer in cm_get_schannel_dcinfo() was returning NULL even though the function indicated success.
| * Here is a re-working of the winbinddJeremy Allison2008-08-203-9/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | reconnect code to cope with rebooting a DC. This replaces the code I asked Volker to revert. The logic is pretty simple. It adds a new parameter, "winbind reconnect delay", set to 30 seconds by default, which determines how long to wait between connection attempts. To avoid overwhelming the box with DC-probe forked children, the code now keeps track of the DC probe child per winbindd_domain struct and only starts a new one if the existing one has died. I also added a little logic to make sure the dc probe child always sends a message whatever the reason for exit so we will always reschedule another connect attempt. Also added documentation. Jeremy.
| * winbindd: consistently use false/true.Günther Deschner2008-08-191-27/+27
| | | | | | | | Guenther
| * winbindd: use set_auth_errors (avoid code duplication).Günther Deschner2008-08-191-28/+6
| | | | | | | | Guenther
| * winbindd: fill_in_password_policy (to avoid redundant code).Günther Deschner2008-08-191-20/+18
| | | | | | | | Guenther
| * winbindd: kill some trailing/leading whitespace.Günther Deschner2008-08-191-159/+159
| | | | | | | | Guenther
* | Split lookup_name() and create a new functiong calledSimo Sorce2008-08-171-15/+13
|/ | | | | lookup_domain_name(). This new function accept separated strings for domain and name.
* Fix bug 5696. The problem was when smbdJeremy Allison2008-08-161-2/+18
| | | | | | | | | | | | | | | | | | | | | was asking for a winbindd name to SID lookup of "Unix Group\name" where "name" was also a valid username, the winbindd passdb lookup of that name was losing the domain string info before calling lookup name (ie. lookup_name() was being called with just the string "name", not the full string "Unix Group\name"). The passdb backend of winbindd has to cope with not only names from it's own global SAM domain, but it does lookups for BUILTIN and "Unix User" and "Unix Group" also, so making it guess by losing the domain string is "A Bad Idea" (tm) :-). Note that as winbind globally calls winbind_off() at startup, it's safe for winbind to call sys_getgrnam() to do the "Unix Group" lookup from inside lookup_name(). Jeremy.
* Attempt to fix Coverity ID 596Volker Lendecke2008-08-161-1/+1
| | | | Jeremy, please check & push if it's ok.
* I think the problem with these functions is that lookup_usergroupsHerb Lewis2008-08-151-1/+1
| | | | | | | | | should never include the user SID. The comment for the function in winbindd/winbindd_ads.c says /* Lookup groups a user is a member of. */ The following patch makes the wbinfo calls return the correct data before and after a login. wbinfo --user-domgroups and --user-sids
* Revert "Add winbind:online check timeout parameter"Volker Lendecke2008-08-141-16/+0
| | | | This reverts commit 9920473cc165e75ee9aa5cbb9e568eb5fb67e9e6.
* use transactions in idmap_tdb2Andrew Tridgell2008-08-131-18/+42
|
* first cut at adding full transactions for ctdb to samba3Andrew Tridgell2008-08-131-4/+0
|
* got rid of the redundent cache databaseAndrew Tridgell2008-08-131-134/+28
|
* idmap tdb2: fix inconsistent mappings by checking for race and retrying to ↵Michael Adam2008-08-132-57/+22
| | | | | | fetch mapping. Michael
* idmap tdb2: fix broken logic in tdb2_delete_bystring().Michael Adam2008-08-131-5/+8
| | | | | | | | 1. use the return value that idmap_tdb2_open_perm_db() gives us 2. don't delete frep the local db if deleting from the perm db failed. 3. fix wrong interpretation of return value of the local delete Michael
* idmap tdb2: fix broken logic in tdb2_store_bystring().Michael Adam2008-08-131-5/+8
| | | | | | | | 1. use the return value that idmap_tdb2_open_perm_db() gives us 2. don't write to the local db if writing to the perm db failed. 3. fix wrong interpretation of return value of the local store Michael
* Add winbind:online check timeout parameterVolker Lendecke2008-08-131-0/+16
| | | | | | | | | | | | | | | | | | | This is a band-aid for the rather convoluted offline/online mess in winbind right now. Winbind re-uses the offline functionality that is targeted at domain client installations on laptops to not overload disfunctional DCs. It uses the winbind cache timeout as the retry timeout after a DC reboot. I am using a parametric options because when this mess is cleaned up, that parameter needs to go away again. I'd recommend to use something like winbind:online check timeout = 30 in typical LAN environments. This means a reconnect is attempted every 30 seconds. Volker
* Attempt to fix the build on Irix CCVolker Lendecke2008-08-131-1/+3
| | | | (cherry picked from commit 666bf8456ac44cbbbd5524af2bf4fd89e18ddf62)
* Remove two unused variablesVolker Lendecke2008-08-121-2/+1
|
* Do not create a new mapping if a domain with an explicit config failsVolker Lendecke2008-08-121-0/+18
|
* Some doxygen comments for idmapVolker Lendecke2008-08-122-15/+157
|
* Fix prototypesVolker Lendecke2008-08-121-2/+2
|
* Remove "idmap alloc config : range" parameterVolker Lendecke2008-08-123-135/+76
| | | | | This was overwritten by "idmap uid/gid" anyway. These are now the range parameters for the alloc backend.
* idmap rewriteVolker Lendecke2008-08-1218-1031/+650
|
* Remove the multi-ID lookup code and the 3.2.0 version of idmap_cacheVolker Lendecke2008-08-125-1069/+0
|
* Directly call backends from idmap_[ugs]_to_[ugs]idVolker Lendecke2008-08-122-22/+45
|
generated by cgit (git 2.34.1) at 2025-08-28 21:02:27 +0000