summaryrefslogtreecommitdiffstats
path: root/source3/passdb/pdb_ldap.c
Commit message (Collapse)AuthorAgeFilesLines
* s3-talloc Change TALLOC_ZERO_P() to talloc_zero()Andrew Bartlett2011-06-091-1/+1
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_ZERO_P isn't standard talloc.
* s3-talloc Change TALLOC_P() to talloc()Andrew Bartlett2011-06-091-1/+1
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_P isn't standard talloc.
* s3-talloc Change TALLOC_ARRAY() to talloc_array()Andrew Bartlett2011-06-091-5/+5
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_ARRAY isn't standard talloc.
* s3-talloc Change TALLOC_REALLOC_ARRAY() to talloc_realloc()Andrew Bartlett2011-06-091-1/+1
| | | | | | | Using the standard macro makes it easier to move code into common, as TALLOC_REALLOC_ARRAY isn't standard talloc. Andrew Bartlett
* More const fixes. Remove CONST_DISCARD.Jeremy Allison2011-05-061-6/+6
|
* s3-passdb: add passdb.h where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-winbind: remove global inclusion of libwbclient.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* lib/util/util_pw: share more code between lib/util/util_pw.c and ↵Günther Deschner2011-03-301-0/+1
| | | | | | source3/lib/username.c Guenther
* s3: Fix Coverity ID 513: UNINITVolker Lendecke2011-03-271-1/+1
|
* s3-ldapsam: fix ldapsam_create_user() with existing posix accounts.Günther Deschner2011-03-241-1/+1
| | | | | | | | | We were not taking into account the existing posix attributes and thus failed while trying to add a 2nd uid attribute. Found by Sumit. Guenther
* s3: Move EXOP definitions to smbldap.hVolker Lendecke2011-03-061-25/+0
| | | | | | | This attempts to fix the build on Solaris Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Mar 6 10:45:16 CET 2011 on sn-devel-104
* Fix some typesJelmer Vernooij2011-02-281-2/+2
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 28 23:30:06 CET 2011 on sn-devel-104
* s3:auth: change num_groups to from size_t to uint32_tStefan Metzmacher2011-02-221-4/+4
| | | | | | This will help with the change from UNIX_USER_TOKEN to security_unix_token metze
* s3: Add "len" to pdb_set_hoursVolker Lendecke2011-02-191-1/+1
|
* s3-passdb: make priv2ld() publicSumit Bose2011-02-161-1/+1
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-passdb: Add minimal stub for IPA passdb backendSumit Bose2011-02-161-0/+2
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.Günther Deschner2010-09-201-4/+5
| | | | Guenther
* s3-auth Change type of num_sids to uint32_tAndrew Bartlett2010-09-111-2/+3
| | | | | | | | | | | | | | size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-idmap: only include idmap headers where needed.Günther Deschner2010-08-261-0/+1
| | | | Guenther
* s3:pdb_ldap: move some code in ldapsam_create_dom_group()Michael Adam2010-08-141-22/+25
| | | | | | | | to make the flow more similar to ldapsam_create_user(). This prepares for calling winbind_sid_to_gid() instead of winbind_allocate_gid(): we need the group_sid for this... Michael
* s3-secrets: only include secrets.h when needed.Günther Deschner2010-08-051-0/+1
| | | | Guenther
* s3:pdb_ldap: change LDAP password before samba password hashesBjörn Jacke2010-07-061-33/+34
| | | | | | | this way we can catch up with password change refuses from ldap password policy overlays and abort the password change early. Thanks to Andy Hanton <andyhanton@gmail.com> for the initial patch.
* s3: Fix another aspect of bug 7262 and make paged results work againVolker Lendecke2010-07-061-4/+4
|
* s3: Make talloc_attrs() staticVolker Lendecke2010-07-051-1/+1
|
* s3: Fix EnumDomainAliases when no aliases are in LDAPVolker Lendecke2010-06-101-6/+4
| | | | | | | We used to return NT_STATUS_ACCESS_DENIED, now we just return 0 entries, just like W2k8 does. usrmgr.exe was pretty unhappy with the NT_STATUS_ACCESS_DENIED
* s3:pdb_ldap: fix bug 7505 - init_sam_from_ldap stores group in sid2uid cacheMichael Adam2010-06-101-1/+1
|
* s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett2010-05-211-51/+51
| | | | | | | | | | This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3:passdb Remove use of uint8 uint16 and uint32 in favour of C99 typesAndrew Bartlett2010-05-211-60/+60
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner2010-05-181-1/+1
| | | | | | | Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
* s3-pdb_ldap: fix memleak.Günther Deschner2010-04-291-2/+2
| | | | Guenther
* s3: Make login_cache_write take a pointerVolker Lendecke2010-03-161-1/+1
|
* s3: Make login_cache_read take a pointer, avoid a mallocVolker Lendecke2010-03-161-9/+8
|
* s3: Remove a typedefVolker Lendecke2010-03-161-2/+2
|
* s3: change ldap filter to what really was intendedBjörn Jacke2010-02-101-1/+1
|
* s3:pdb_ldap: don't search for the users primary group, if we already know itStefan Metzmacher2010-02-081-31/+35
| | | | metze
* s3:pdb_ldap: optimize ldapsam_alias_memberships() and cache ldap searches.Stefan Metzmacher2010-02-081-7/+29
| | | | | | | | | ldapsam_alias_memberships() does the same LDAP search twice, triggered via add_aliases() from create_local_nt_token(). This happens when no domain aliases are used. metze
* s3:pdb_ldap: try to build the full unix_pw structure with ldapsam:trusted ↵Stefan Metzmacher2010-02-081-5/+85
| | | | | | | | support And also store the gid_to_sid mappings in the idmap_cache. metze
* s3: shortcut gid_to_sid when "ldapsam:trusted = yes"Stefan Metzmacher2010-02-081-0/+71
| | | | | | | | | | | | | | The normal gid_to_sid behaviour is to call sys_getgrgid() to get the name for the given gid and then call the getsamgrnam passdb method for the resulting name. In the ldapsam:trusted case we can reduce the gid_to_sid operation to one simple search for the gidNumber attribute and only get the sambaSID attribute from the correspoinding LDAP object. This reduces the number of ldap roundtrips for this operation. metze
* s3: Hide some uses of pdb_get_init_flags (which I would love to remove...)Volker Lendecke2010-02-051-1/+1
|
* s3: Remove some pointless uses of string_sid_tallocVolker Lendecke2010-01-231-8/+6
|
* s3:pdb_ldap: Fix large paged search.Volker Lendecke2010-01-211-0/+1
| | | | | Fix bug #6981 (Paged Search with DirX LDAP server broken). (cherry picked from commit 0a3b576c0a4298cbe600ad8943e401e3a0639359)
* s3:pdb_ldap: restore Samba 3.0.x behavior and use the first "uid" value.Stefan Metzmacher2010-01-141-1/+1
| | | | | | | | | See bug #6157 for more details. metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 25806f43ddee7e2653e907eea2c6fcc075960fa1)
* s3: Remove a pointless if-statementVolker Lendecke2010-01-121-3/+2
|
* s3:pdb_ldap:init_sam_from_ldap: untangle an assignment from the checkMichael Adam2010-01-071-3/+3
| | | | | | to enhance readability and denbuggability. Michael
* s3:pdb_ldap: fix a comment typoMichael Adam2009-11-191-1/+1
| | | | Michael
* s3: shortcut uid_to_sid when "ldapsam:trusted = yes"Michael Adam2009-11-191-0/+75
| | | | | | | | | | | | | | The normal uid_to_sid behaviour is to call sys_getpwuid() to get the name for the given uid and then call the getsampwnam passdb method for the resulting name. In the ldapsam:trusted case we can reduce the uid_to_sid operation to one simple search for the uidNumber attribute and only get the sambaSID attribute from the correspoinding LDAP object. This reduces the number of ldap roundtrips for this operation. Michael
* s3:smbd: also fill the memcache with sid<->id mappings in ldapsam_sid_to_id()Michael Adam2009-11-131-0/+2
| | | | | | not only the persistent idmap cache. Michael
* s3:smbd: make idmap cache persistent for "ldapsam:trusted".Michael Adam2009-11-131-0/+4
| | | | | | | | | | This stores the mappings found in the idmap cache (which lives inside gencache). This cache is already read in sid_to_Xid() and Xid_to_sid() for ldapsam:trusted, this fills the opposite direction, massively reducing the number of ldap roundtrips across smbd restarts. Michael
* Fix large paged searchVolker Lendecke2009-11-131-0/+1
| | | | Signed-off-by: Michael Adam <obnox@samba.org>