summaryrefslogtreecommitdiffstats
path: root/source3/passdb
Commit message (Collapse)AuthorAgeFilesLines
* Portability fix from schmitz@hp.com (Joachim Schmitz). Bug #547.Jeremy Allison2003-10-021-0/+4
| | | | | Jeremy. (This used to be commit bbc7b189b9b4b3a5ef0a5ddbb7d2d755f6341fdf)
* Make pdb_ldap.c compile with SUN iPlanet headers. Whether this works will beVolker Lendecke2003-10-021-1/+1
| | | | | | | tested soon, but this fix is somewhat obvious. Volker (This used to be commit 227882d6f79fb5909998996e1be08df723c49e8e)
* Fix a bug and warn when configuration file values are incorrect. Thanks toJelmer Vernooij2003-09-201-10/+28
| | | | | Wilco Baan Hofman <wilco@andoburg.nl> (This used to be commit 2c584efae69f328581d4f863a8f8ef3ff8228423)
* Fix pdb_mysql. Jelmer will look into details tonight.Alexander Bokovoy2003-09-191-3/+5
| | | | (This used to be commit b00a81b543a58f46e54ce0e5362ba21bb16fc35f)
* The "unknown_5" 32 bit field in the user structs is actually 2 16-bitJeremy Allison2003-09-185-23/+75
| | | | | | | | | | | | fields, bad_password_count and logon_count. Ensure this is stored/fetched in the various SAMs. As it replaces the unknown_5 field this fits exactly into the tdb SAM without any binary problems. It also is added to the LDAP SAM as two extra attributes. It breaks compatibility with the experimental SAMs xml and mysql. The maintainers of these SAMs must fix them so upgrades like this can be done transparently. I will insist on the "experimental" status until this is solved. Jeremy. (This used to be commit cd7bd8c2daff3293d48f3376a7c5a708a140fd94)
* Oops. Proper fix for #470.Jeremy Allison2003-09-181-18/+20
| | | | | Jeremy. (This used to be commit 82f98b066d345fdac40a584078a19453bda53d5b)
* Fix for #470 - unable to display SIDs in ACLs.Jeremy Allison2003-09-181-2/+11
| | | | | Jeremy. (This used to be commit 56df89eff38e4c89defa5fd56bbb6c9d2012f82d)
* Fix typo. Found by Aurelien DegremontJelmer Vernooij2003-09-161-1/+1
| | | | (This used to be commit 4765e56f92f0906afe3073184c4fa255e1b1a647)
* remove getpwnam() calls from init_sam_from_xxx().Gerald Carter2003-09-112-61/+30
| | | | | | | | This means that %u & %g will no longer expand, but %U and %G still do. The payback is that winbindd local accounts for users work with 'wbinfo -u' when winbind is running on a PDC. (This used to be commit eb02fcf3c212eee1dc267959f23da5a26c1eac4f)
* Fix a nasty mess, and also bug #296. passdb/pdb_ldap.c was not convertingJeremy Allison2003-09-101-250/+219
| | | | | | | to/from utf8 for some calls. The libads code gets this right. Wonder why the passdb code doesn't use it ? Jeremy. (This used to be commit 910d21d3164c2c64773031fddaad35ea88e72a04)
* Nobody complained on the team-list, so commit it ...Volker Lendecke2003-09-071-0/+53
| | | | | | | | | | | | | | This implements some kind of improved AFS support for Samba on Linux with OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile into secrets.tdb with 'net afskey'. If this is done, on each tree connect smbd creates a Kerberos V4 ticket suitable for use by the AFS client and gives it to the kernel via the AFS syscall. This is meant to be very light-weight, so I did not link in a whole lot of libraries to be more platform-independent using the ka_SetToken function call. Volker (This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
* Only set sids when they're retrurned by the MySQL queryJelmer Vernooij2003-09-061-2/+2
| | | | (This used to be commit 9a603f6f077a2e1ddc41849cca3641421ecbaf11)
* More tuning from cachegrind. Change most trim_string() calls to trim_char(0,Jeremy Allison2003-09-052-5/+7
| | | | | | as that's what they do. Fix string_replace() to fast-path ascii. Jeremy. (This used to be commit f35e9a8b909d3c74be47083ccc4a4e91a14938db)
* remove 'ldap trust ids' since there was no way for it to work nowGerald Carter2003-08-271-0/+5
| | | | (This used to be commit 3724063f1518c25e33ba6b65cd3bb1e36cec51fa)
* Fix bug 327 (again and I think for the last time). Make sure thatGerald Carter2003-08-271-0/+488
| | | | | | | | | pam_smbpass.so will load ok. Had to move some functions around to work around dependency problems (hence the new passdb/lookup_sid.c) Also make sure that libsmbclient.a is built and installed when we support shared libraries. (This used to be commit 780055f4422f11fb0524ac1f003cdc5f317f8b19)
* fix for BUG 245; make sure we set the sid type when falling back to the rid ↵Gerald Carter2003-08-211-1/+7
| | | | | | algorithm stuff (This used to be commit f6363aa31aa3479a9566328752ecb4aeadde10b7)
* get rid of some sompiler warnings on IRIXHerb Lewis2003-08-154-12/+11
| | | | (This used to be commit a6a39c61e8228c8b3b7552ab3c61ec3a6a639143)
* 2 fixesGerald Carter2003-08-131-0/+48
| | | | | | | | | | * bug #280 (my fault) - initialize sambaNextUserRid and sambaNextGroupRid * Unix users shared vis LDAP or NIS between a samba domain member of a Samba domain are not seen as domain users on the member servers. not as local users. (This used to be commit a030fa373aefde8628def54ca8152f237a0467dc)
* fix bug #281 by surrounding pdb_getgrgid() with become/unbecome_root()Gerald Carter2003-08-111-1/+8
| | | | (This used to be commit f6a01f51159ccd822c6e764b7243fff375f22747)
* fix bug #208; have to get the gid of the user's primary group for %GGerald Carter2003-08-062-1/+17
| | | | (This used to be commit 575483a1efe18a90055490117ba6894512ae568a)
* oops; fix typo. Noticed by gcc warningGerald Carter2003-08-061-2/+2
| | | | (This used to be commit 4c36ef65e5101899f730adaeacf754f5f3647d89)
* fix bug #245; local_lookupsid() needed to make a getpwuid() call to get the ↵Gerald Carter2003-08-051-9/+20
| | | | | | username instead of making up unix_user.## (This used to be commit b947fc3eed464d7a64914f3965964d29be031614)
* More printf portability fixes. Got caught out by some gcc'isms lastTim Potter2003-07-251-2/+2
| | | | | time. )-: (This used to be commit 59dae1da66a5eb7e128263bd578f167d8746e9f0)
* More printf fixes - size_t is long on some architectures.Tim Potter2003-07-241-1/+1
| | | | (This used to be commit ba4d334b822248d8ab929c9568533431603d967e)
* convert snprintf() calls using pstrings & fstringsGerald Carter2003-07-231-14/+14
| | | | | | | to pstr_sprintf() and fstr_sprintf() to try to standardize. lots of snprintf() calls were using len-1; some were using len. At least this helps to be consistent. (This used to be commit 9f835b85dd38cbe655eb19021ff763f31886ac00)
* removing unused functionGerald Carter2003-07-221-43/+0
| | | | (This used to be commit b8394a107d3448434f1a34076eaab8e6dd9a8a9d)
* Fixup a bunch of printf-style functions and debugs to use unsigned long whenTim Potter2003-07-222-15/+15
| | | | | | | displaying pid_t, uid_t and gid_t values. This removes a whole lot of warnings on some of the 64-bit build farm machines as well as help us out when 64-bit uid/gid/pid values come along. (This used to be commit f93528ba007c8800a850678f35f499fb7360fb9a)
* This creates passdb backend files automatically when adding first account.Rafal Szczesniak2003-07-202-3/+38
| | | | | | | | | | | | An extra message notifying that needed file didn't exist is displayed. There's still a little catch with tdb backend, but it's better than it was, from end-user's point of view. This fixes #198 rafal (This used to be commit b0be700605c289ce8e9dd3abe49d78ac77256911)
* Fix memleakVolker Lendecke2003-07-191-3/+3
| | | | (This used to be commit defc71d4cb9bb1efcb39157bad2806f73b3cc3f5)
* Fix two memleaks in pdb_ldap.c.Volker Lendecke2003-07-182-1/+13
| | | | | | | | | | | Whoever put the private.backend_private_data_free_fn thingy into SAM_ACCOUNT, could you please revisit my change to pdb_get_set.c and comment on my comment there? Thanks, Volker (This used to be commit 922ec277d1c80b5532f5cac0ee99ae7cd20f83f1)
* Fix memleakVolker Lendecke2003-07-161-1/+4
| | | | (This used to be commit 42a59d691019ee328920be25a1c505037f74151f)
* typoVolker Lendecke2003-07-161-1/+1
| | | | (This used to be commit 09e00970d4b3ec80467a4a292c39650d6c945847)
* fixes for 'net rpc vampire'. I can now take a blank Samba hostGerald Carter2003-07-161-6/+0
| | | | | | | | | | | | and migrate an NT4 domain and still logon from domain members (tested logon scripts, system policies, profiles, & home directories) (passdb backend = tdbsam) removed call to idmap_init_wellknown_sids() from winbindd.c since the local domain should be handled by the guest passdb backend (and you don't really always want the Administrator account to be root) ...and we didn't pay attention to this anyways now. (This used to be commit 837d7c54d3ca780160aa0d6a2f0a109bb691948e)
* Fix memleaksVolker Lendecke2003-07-151-1/+6
| | | | (This used to be commit 26134ac302f3296df6a65182f2585201a3ad833a)
* make sure to fallback to rid algoruthm for users not in smbpasswd (e.g. ↵Gerald Carter2003-07-151-7/+17
| | | | | | force user = foo) (This used to be commit 399799c68cbc91cb3908b0d83ee4f51fa3bf3023)
* use the specific funtion we have to check if a SID belong to our domainSimo Sorce2003-07-131-12/+6
| | | | (This used to be commit a926959391676d69bd7cbaf4ce0be0d3cb715418)
* Argl. Thinking twice and looking at the rest of callers of sid_compare_domainVolker Lendecke2003-07-131-1/+6
| | | | | | | | | proved the last patch wrong. Sorry. Volker (This used to be commit d8695eccc7acdee69ca0d0593b56a417f1f89167)
* We have an API to compare the domain parts of two SIDs, so use it.Volker Lendecke2003-07-131-6/+1
| | | | | Volker (This used to be commit 39308ff138da88c1a4c0958cd4c7a9090261d3d5)
* fix sid_to_[uid|gid] (spotted by Volker).Gerald Carter2003-07-111-1/+1
| | | | | | Still testing this, but I'm checking it in so Volker can test it as well. Should be right. (This used to be commit 8edf193722f699cc33baed410917a78a5e28d0a4)
* fix unitialised variableGerald Carter2003-07-111-0/+6
| | | | (This used to be commit 5efa0d7cc28d903c1986b8e40072ae49e9532a88)
* moving more code around.Gerald Carter2003-07-114-781/+68
| | | | | | | | | | | | | | | | | | * move rid allocation into IDMAP. See comments in _api_samr_create_user() * add winbind delete user/group functions I'm checking this in to sync up with everyone. But I'm going to split the add a separate winbindd_allocate_rid() function for systems that have an 'add user script' but need idmap to give them a RID. Life would be so much simplier without 'enable rid algorithm'. The current RID allocation is horrible due to this one fact. Tested idmap_tdb but not idmap_ldap yet. Will do that tomorrow. Nothing has changed in the way a samba domain is represented, stored, or search in the directory so things should be ok with previous installations. going to bed now. (This used to be commit 0463045cc7ff177fab44b25faffad5bf7140244d)
* i guess i'm the only one this ever annyoed...Gerald Carter2003-07-101-2/+2
| | | | | | | fix the confusion when we tdb_lock_bystring() but we retrieve an entry using tdb_fetch_by_string. It's now always tdb.*bystring() (This used to be commit 66359531b89368939f0e8f584a45844b5f2f99e7)
* Fix up become_root/unbecome_root pairs needed around local passdbJeremy Allison2003-07-091-3/+17
| | | | | | lookups. Jeremy. (This used to be commit 6bd47884030c9c124c4bba1f0d57cb8dd916530d)
* Moved SAM_ACCOUNT marshall/unmarshall functions to make them externallyJeremy Allison2003-07-082-401/+438
| | | | | | available. Removed extra auth_init (thanks metze). Jeremy. (This used to be commit 88135fbc4998c266052647f8b8e437ac01cf50ae)
* Cleaning up linking issues. sam/idmap*.c only links inGerald Carter2003-07-072-1/+115
| | | | | winbindd now. Also removing an unused file. (This used to be commit 688369c23c604e9b6654fcf07190d2e27c1138cf)
* Fixed a couple of const issues with the new code.Jeremy Allison2003-07-071-2/+2
| | | | | Jeremy. (This used to be commit e9fb6e45086a6170b6f6d5d3295398708ab1af58)
* and so it begins....Gerald Carter2003-07-072-6/+206
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove idmap_XX_to_XX calls from smbd. Move back to the the winbind_XXX and local_XXX calls used in 2.2 * all uid/gid allocation must involve winbindd now * move flags field around in winbindd_request struct * add WBFLAG_QUERY_ONLY option to winbindd_sid_to_[ug]id() to prevent automatic allocation for unknown SIDs * add 'winbind trusted domains only' parameter to force a domain member server to use matching users names from /etc/passwd for its domain (needed for domain member of a Samba domain) * rename 'idmap only' to 'enable rid algorithm' for better clarity (defaults to "yes") code has been tested on * domain member of native mode 2k domain * ads domain member of native mode 2k domain * domain member of NT4 domain * domain member of Samba domain * Samba PDC running winbindd with trusts Logons tested using 2k clients and smbclient as domain users and trusted users. Tested both 'winbind trusted domains only = [yes|no]' This will be a long week of changes. The next item on the list is winbindd_passdb.c & machine trust accounts not in /etc/passwd (done via winbindd_passdb) (This used to be commit 8266dffab4aedba12a33289ff32880037ce950a8)
* Fix ldapsam_getsampwsid to correctly only say 'no such user' when indeed thereAndrew Bartlett2003-07-061-13/+13
| | | | | | | | | | | is no such user... Thanks to jerry for spotting this. Also clean up the function a bit, to avoid this happening again... Andrew Bartlett (This used to be commit d9a6859e2bd963f28cf3c3a62e483e868822597f)
* Fix commentAndrew Bartlett2003-07-051-1/+1
| | | | (This used to be commit f7bf48114cec83a3f3107cce2b413221276a486d)
* Add some debug statments to our vampire code - try to make it easier to trackAndrew Bartlett2003-07-053-9/+28
| | | | | | | | | | | | | | down failures. Add a 'auto-add on modify' feature to guestsam Fix some segfault bugs on no-op idmap modifications, and on new idmappings that do not have a DN to tack onto. Make the 'private data' a bit more robust. Andrew Bartlett (This used to be commit 6c48309cda9538da5a32f3d88a7bb9c413ae9e8e)