summaryrefslogtreecommitdiffstats
path: root/source3/auth/auth_util.c
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:auth Remove NT_USER_TOKENAndrew Bartlett2010-09-111-2/+2
| | | | | | | | | The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth: Added get_server_info_system function.Andreas Schneider2010-09-091-0/+5
|
* s3-auth: fix uninitialized error code in get_guest_info3().Günther Deschner2010-09-011-2/+1
| | | | Guenther
* s3-auth Rename NT_USER_TOKEN user_sids -> sidsAndrew Bartlett2010-08-311-5/+5
| | | | This is closer to the struct security_token from security.idl
* s3-auth: Use SamInfo3_for_guest to create guest server_info.Andreas Schneider2010-08-301-19/+70
| | | | Signed-off-by: Simo Sorce <idra@samba.org>
* Fix const warning.Jeremy Allison2010-08-201-1/+1
|
* s3:auth Make Samba3 use the new common struct auth_usersupplied_infoAndrew Bartlett2010-08-141-38/+41
| | | | | | | | | | | | | This common structure will make it much easier to produce an auth module for s3compat that calls Samba4's auth subsystem. In order the make the link work properly (and not map twice), we mark both that we did try and map the user, as well as if we changed the user during the mapping. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3: [ug]id_to_unix_... can not failVolker Lendecke2010-07-111-9/+3
| | | | Remove some silly failure checks
* s3: Slightly simplify make_server_info_pwVolker Lendecke2010-07-081-3/+1
|
* s3: In make_server_info_info3, check the result of copy_netr_SamInfo3Volker Lendecke2010-06-251-0/+4
|
* s3-auth: in make_user_info_for_reply_enc make sure to check length and dataGünther Deschner2010-06-161-2/+2
| | | | | | | | pointer of nt and lm hash. This fixes kernel cifs client with sec=ntlmv2. Guenther
* s3:auth make sure the primary group sid is usableSimo Sorce2010-06-071-13/+30
| | | | | | | | | | This function was previously performed under the cover by converting back and forth from info3 to samu and then later from samu to info3. Since we now shortcircuit that in some cases, check explicitly using get_primary_group_sid() Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth return the full passwd struct from check_accountSimo Sorce2010-06-071-12/+6
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth remove unused structure memberSimo Sorce2010-06-071-75/+1
| | | | | | | sids are now completely handled using info3, remove dead code that fills server info sids and the structure members themselves Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth create nt token from info3 directlySimo Sorce2010-06-071-12/+5
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth handle unix domain sids in samuSimo Sorce2010-06-071-2/+3
| | | | | | | | When we generate a user out of thin air we may end up adding sids that are not part of the sam domain (unix domain sids). Handle the case and preserve these sids as extra sids. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth set the resolved user sid in the fake sam accountSimo Sorce2010-06-071-0/+3
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth check the user is valid firstSimo Sorce2010-06-071-43/+39
| | | | | | | | It makes no sense to go through all the hoops to build samu and convert it to info3, just to discard them later if the user was not valid. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth make sure we set the right usernameSimo Sorce2010-06-071-0/+5
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:auth Rename wksta_name -> workstation_name in auth_usersupplied_infoAndrew Bartlett2010-06-011-8/+8
|
* s3:smbd map_username() doesn't need sconn anymoreSimo Sorce2010-05-311-4/+2
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-auth: add "system" bool flag to auth_serversupplied_info.Günther Deschner2010-05-311-1/+10
| | | | Guenther
* s3:auth Fix segfault when the user cannot be found by getpwnam()Andrew Bartlett2010-05-291-3/+10
| | | | | | Add comment to notify when getpwnam() fails. Reviewed-by: Simo Sorce <idra@samba.org>
* s3-auth: Added a function to get the server_info from the system user.Andreas Schneider2010-05-281-0/+39
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3:auth remove login_server from server infoSimo Sorce2010-05-271-3/+0
| | | | | It is not used anymore, we have that information in info3->base.logon_server already
* s3:auth Free sampass as soon as we have server_infoSimo Sorce2010-05-281-1/+4
| | | | | | | We don't keep sampass in server_info anymore So it makes no sense to keep it around. Signed-off-by: Günther Deschner <gd@samba.org>
* s3:auth use info3 in auth_serversupplied_infoSimo Sorce2010-05-281-366/+41
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett2010-05-211-10/+10
| | | | | | | | | | This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3-crypto: only include crypto headers when crypto is done.Günther Deschner2010-05-181-0/+1
| | | | Guenther
* s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner2010-05-181-1/+1
| | | | | | | Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
* s3: Move [make|free]_user_info to auth/user_info.cVolker Lendecke2010-04-111-108/+0
|
* s3: Move make_server_info_sam to auth/server_info_sam.cVolker Lendecke2010-04-111-121/+0
|
* s3: Move sanitize_username to lib/util_str.cVolker Lendecke2010-04-111-8/+0
|
* s3: Move make_server_info to auth/server_info.cVolker Lendecke2010-04-111-32/+0
|
* s3: Move user_in_group() and create_token_from_username() to token_utils.cVolker Lendecke2010-04-111-315/+0
| | | | Goal is to be able to call check_sam_security from winbind
* s3: Use talloc_stackframe() in user_in_groupVolker Lendecke2010-04-111-7/+1
|
* s3: Use talloc_stackframe() in user_in_group_sidVolker Lendecke2010-04-111-8/+1
|
* s3: Use talloc_stackframe() in create_token_from_usernameVolker Lendecke2010-04-111-7/+1
|
* s3: Fix a memleak in user_in_group_sidVolker Lendecke2010-04-111-0/+1
|
* s3: Remove the make_auth_methods routineVolker Lendecke2010-04-111-26/+0
| | | | This was just TALLOC_ZERO_P
* s3: Make "auth_context" its own talloc parentVolker Lendecke2010-04-111-1/+1
| | | | Remove "mem_ctx" from "struct auth_context"
* s3: Fix a typoVolker Lendecke2010-04-091-1/+1
|
* Fix valgrind error when running under share level security. plaintext_passwordJeremy Allison2010-03-221-2/+2
| | | | | | is a data blob with a data pointer pointing to an allocation of length zero. Jeremy.
* s3: Fix some nonempty blank linesVolker Lendecke2010-02-201-59/+57
|
* s3: Remove some calls to memset -- reduces text size by some bytes for meVolker Lendecke2010-01-241-8/+3
|
* s3: Replace most calls to sid_append_rid() by sid_compose()Volker Lendecke2010-01-101-6/+4
|
* s3: Remove the typedef for "auth_serversupplied_info"Volker Lendecke2010-01-101-18/+18
|
* s3: Remove the typedef for "auth_usersupplied_info"Volker Lendecke2010-01-101-9/+9
|
* s3:fix a comment typoMichael Adam2009-11-141-1/+1
| | | | Michael
* s3:is_trusted_domain: shortcut if domain name == global_sam_nameMichael Adam2009-11-141-0/+4
| | | | | | | A domain can't have a trust with itself. This saves some roundtrips to the ldap server for ldapsam. Michael