summaryrefslogtreecommitdiffstats
path: root/source3/passdb/passdb.c
Commit message (Collapse)AuthorAgeFilesLines
* First part of fix for bug 8310 - toupper_ascii() is broken on big-endian systemsJeremy Allison2011-07-191-4/+4
| | | | | | | | | | Remove int toupper_ascii(int c); int tolower_ascii(int c); int isupper_ascii(int c); int islower_ascii(int c); and replace with their _m equivalents, as they are identical.
* s3-param Remove special case for global_myname(), rename to lp_netbios_name()Andrew Bartlett2011-06-091-4/+4
| | | | | | | | There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett
* s3-talloc Change TALLOC_ZERO_P() to talloc_zero()Andrew Bartlett2011-06-091-1/+1
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_ZERO_P isn't standard talloc.
* s3: only include tdb headers where needed.Günther Deschner2011-05-061-0/+1
| | | | Guenther
* Simple +1 changes in hardcoded lengths when changing from safe_strcpy to ↵Jeremy Allison2011-05-041-3/+3
| | | | strlcpy.
* s3-passdb: add passdb.h where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-includes: only include system/passwd.h when needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* lib/util/util_pw: share more code between lib/util/util_pw.c and ↵Günther Deschner2011-03-301-0/+1
| | | | | | source3/lib/username.c Guenther
* s3: Add "len" to pdb_set_hoursVolker Lendecke2011-02-191-4/+4
|
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-121-0/+1
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3-secrets: only include secrets.h when needed.Günther Deschner2010-08-051-0/+1
| | | | Guenther
* s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett2010-05-211-2/+2
| | | | | | | | | | This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3:passdb Remove use of uint8 uint16 and uint32 in favour of C99 typesAndrew Bartlett2010-05-211-103/+103
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-passdb: move get_logon_hours_from_pdb() into samr server.Günther Deschner2010-05-181-23/+0
| | | | Guenther
* s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner2010-05-181-5/+5
| | | | | | | Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
* s3: Fix bug 5198 -- parse chfn(1)-change gecos fieldVolker Lendecke2010-02-131-1/+34
|
* s3: Make pdb_copy_sam_account also copy the group sidVolker Lendecke2010-02-081-0/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Replace most calls to sid_append_rid() by sid_compose()Volker Lendecke2010-01-101-2/+1
|
* s3: use enum netr_SchannelType all over the place.Günther Deschner2009-10-131-2/+4
| | | | Guenther
* s3-account_policy: add pdb_policy_type enum.Günther Deschner2009-07-141-8/+8
| | | | Guenther
* s3-pdb_tdb: give 'unknown_str' the proper name 'comment' and set comment in ↵Günther Deschner2009-06-291-10/+15
| | | | | | | | passdb. pdb_{get,set}_comment were already existing in the API but were never used. Guenther
* Turn the pdb_rid_algorithm into a capabilities call that returns flagsVolker Lendecke2009-06-281-1/+1
|
* talloc_tos() aborts if it can not get a stackframeVolker Lendecke2009-06-201-3/+0
|
* s3-passdb: fix uninitialized variable in local_password_change().Günther Deschner2009-05-291-1/+1
| | | | Guenther
* Consolidate user create/delete paths in smbpasswdSimo Sorce2009-05-291-147/+179
| | | | | | | | | | | | This patch changes the way smbpasswd behaves when adding/deleting users. smbpasswd now calls pdb_create_user/pdb_delete_user, this means that if add/delete user scripts are configured then they are used to create or delete unix users as well. If the scripts are not defined the behavioris unchanged. This also allow to use smbpasswd -a/-x with ldapsam:editposix to allow automatic creation/deletion of users. Signed-off-by: Günther Deschner <gd@samba.org>
* Move smb_create_user() in samsyncSimo Sorce2009-05-161-60/+0
| | | | | It is not used anywhere else, so make it also static and remove it from proto.h
* Rework Samba3 to use new libcli/auth code (partial)Andrew Bartlett2009-04-141-0/+1
| | | | | | | | | | | This commit is mostly to cope with the removal of SamOemHash (replaced by arcfour_crypt()) and other collisions (such as changed function arguments compared to Samba3). We still provide creds_hash3 until Samba3 uses the credentials code in netlogon server Andrew Bartlett
* s3-passdb: add smb_create_user().Günther Deschner2009-04-011-0/+59
| | | | Guenther
* s3: Added new parameter "map untrusted to domain"Steven Danneman2009-02-121-0/+18
| | | | | | | When enabled this reverts smbd to the legacy domain remapping behavior when a user provides an untrusted domain This partially reverts d8c54fdd
* s3: Change behavior when seeing an unknown domain.Dan Sledz2009-02-111-19/+0
| | | | | | | After a lot of testing against various Windows servers (W2K, W2K3, W2K8), within an AD domain it seems that unknown domains will only be translated to the local account domain, not the netbios name of the member server's domain. This makes samba act more like Windows.
* Fix nonempty blank linesVolker Lendecke2009-02-011-61/+60
|
* s3:passdb: add SAMU_BUFFER_V4 with no changesStefan Metzmacher2008-12-291-1/+16
| | | | | | | The upgrade is required because of the followin TDBSAM_VERSION upgrade. metze
* s3:passdb: make marshalling struct samu from and to a buffer more genericStefan Metzmacher2008-12-291-13/+654
| | | | | | | This marshalling isn't specific to tdbsam and it's ugly to have the related functions in two different files. metze
* Fix more "warning: ignoring return value of ‘asprintf’, declared withJeremy Allison2008-12-231-23/+62
| | | | | attribute warn_unused_result" Jeremy.
* Make us clean under valgrind --leak-check=full by using ↵Jeremy Allison2008-11-061-1/+1
| | | | | | | | | | talloc_autofree_context() instead of NULL. Remove the code in memcache that does a TALLOC_FREE on stored pointers. That's a disaster waiting to happen. If you're storing talloc'ed pointers, you can't know their lifecycle and they should be deleted when their parent context is deleted, so freeing them at some arbitrary point later will be a double-free. Jeremy.
* Use standard types.Jelmer Vernooij2008-10-221-8/+8
|
* Remove unused function is_trusted_domain_situation().Michael Adam2008-05-261-6/+0
| | | | | | | | This combined check has been replaced by is_dc_trusted_domain_situation() which does not check for lp_allow_trusted_domains(). Michael (This used to be commit 0a24c038b7bc6edef0021eb121a072cc7e8f9165)
* passdb: check for is_dc_trusted_domain_situation() in get_trust_pw_hash().Michael Adam2008-05-261-1/+1
| | | | | | | | Before fetching legacy password hash, check for trusted domain situation, but also fail if trusted domain support is not enabled. Michael (This used to be commit aa1b8287f44f47f23bd4158112d0a132df04426c)
* passdb: add comment explaining logic in get_trust_pw_clear().Michael Adam2008-05-261-2/+16
| | | | | Michael (This used to be commit 5f197c659e9c8a573ba5032c7f90c816df45770c)
* passdb: in get_trust_pw_clear() correctly fail if trusted domains not supportedMichael Adam2008-05-261-1/+5
| | | | | | | | | | (but trusted domain situation was found) This completes the fix for bugs #5425 and #5451 by Steven Dannemann, in that now no special cases are left uncovered. Michael (This used to be commit 0b26bcd3becb869319bca48bbf244c18b6e8e3dd)
* Add function is_dc_trusted_domain_situation().Michael Adam2008-05-261-3/+7
| | | | | | | | This is like is_trusted_domain_situation() except that it does not check for lp_allow_trusted_domains(). Michael (This used to be commit a284c8843528972904d142b573f1170a08c97751)
* Manually port Steven Dannenman fix for using the correct machine domain whenGerald W. Carter2008-05-231-3/+3
| | | | | | | | | | | | looking up trust credentials in our tdb. commit fd0ae47046d37ec8297396a2733209c4d999ea91 Author: Steven Danneman <sdanneman@isilon.com> Date: Thu May 8 13:34:49 2008 -0700 Use machine account and machine password from our domain when contacting trusted domains. (This used to be commit 69b37ae60757075a0712149c5f97f17ee22c2e41)
* Use netr_SamInfo3 in remaining places.Günther Deschner2008-02-171-1/+1
| | | | | Guenther (This used to be commit 92fca97951bf7adf8caaeabdaff21682b18dd91f)
* Add get_logon_hours_from_pdb() (inspired by samba4).Günther Deschner2008-02-121-0/+23
| | | | | Guenther (This used to be commit e1bcb7d82f22810e342a18aacbcfe49c3902bcb4)
* Remove a staticVolker Lendecke2008-02-041-4/+1
| | | | | | I very much doubt that this is called enough to justify a global. If this turns out to be a hot code path, we might reconsider :-) (This used to be commit 5223d18ea2d891418a0f833f58cc3502cb26ce03)
* Prevent another segfault.Michael Adam2007-12-181-1/+3
| | | | | Michael (This used to be commit 0a9874c1c76c0ccc71caba7ee85a0ee1a91808c5)
* Replace sid_string_static by sid_string_dbg in DEBUGsVolker Lendecke2007-12-151-3/+2
| | | | (This used to be commit bb35e794ec129805e874ceba882bcc1e84791a09)
* Pass NULL instead of unneeded &sid: pdb_get_trusteddom_pw() checks.Michael Adam2007-12-131-2/+1
| | | | | Michael (This used to be commit b2e12365b56f24586a7dfcb845f4de51f0b0e7d5)
* Rename get_trust_pw() to get_trust_pw_hash().Michael Adam2007-12-131-2/+2
| | | | | Michael (This used to be commit 0cde7ac9cb39a0026a38ccf66dbecefc12931074)
* Export logic of get_trust_pw() to new function get_trust_pw_clear().Michael Adam2007-12-131-16/+58
| | | | | | | | | | get_trust_pw() just now computes the md4 hash of the result of get_trust_pw_clear() if that was successful. As a last resort, in the non-trusted-domain-situation, get_trust_pw() now tries to directly obtain the hashed version of the password out of secrets.tdb. Michael (This used to be commit 4562342eb84e6fdcec15d8b7ae83aa146aabe2b7)