summaryrefslogtreecommitdiffstats
path: root/source3/passdb
Commit message (Collapse)AuthorAgeFilesLines
* s3-waf: fix pdb modules build.Günther Deschner2010-10-181-14/+13
| | | | Guenther
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-1215-9/+15
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3: Remove talloc_autofree_context from pdb_interfaceVolker Lendecke2010-10-031-1/+1
| | | | | None of the pdb backends have special destructors that need to be run at program exit.
* s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.Günther Deschner2010-09-271-0/+1
| | | | Guenther
* s3-waf: move pdb subsystem to pdb/wscript_build.Günther Deschner2010-09-271-0/+48
| | | | Guenther
* s3: Remove talloc_autofree_context() from guest_user_info()Volker Lendecke2010-09-261-1/+2
| | | | pwd is freed a few lines down
* s3: Remove talloc_autofree_context() from lookup_unix_user_name()Volker Lendecke2010-09-261-1/+1
| | | | pwd is freed in this routine immediately
* s3: Remove talloc_autofree_context() from pdb_init_ads()Volker Lendecke2010-09-261-1/+1
|
* s3: Replace sid_binstring and sid_guidstring with PIDL-based alternativesAndrew Bartlett2010-09-201-10/+11
| | | | | | | | | This reduces the manual marshalling of these structures by removing the duplication here. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.Günther Deschner2010-09-209-17/+26
| | | | Guenther
* s3-auth Change type of num_sids to uint32_tAndrew Bartlett2010-09-111-2/+3
| | | | | | | | | | | | | | size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-passdb: Try to unlock the account if it is locked out.Andreas Schneider2010-08-301-10/+53
| | | | Signed-off-by: Simo Sorce <idra@samba.org>
* s3-passdb: Added a pdb_try_account_unlock function.Andreas Schneider2010-08-301-0/+74
| | | | | | | | The function checks if the account has been autolocked. If we have a lockout_duration and a bad password time it checks if we can unlock the account. Signed-off-by: Simo Sorce <idra@samba.org>
* s3-build: use dbwrap.h only where needed.Günther Deschner2010-08-265-0/+5
| | | | Guenther
* s3-idmap: only include idmap headers where needed.Günther Deschner2010-08-262-0/+2
| | | | Guenther
* s3-build: only include nsswitch header where needed.Günther Deschner2010-08-261-0/+1
| | | | Guenther
* s3-build: only include memcache.h where needed.Günther Deschner2010-08-262-0/+2
| | | | Guenther
* s3:pdb_ldap: move some code in ldapsam_create_dom_group()Michael Adam2010-08-141-22/+25
| | | | | | | | to make the flow more similar to ldapsam_create_user(). This prepares for calling winbind_sid_to_gid() instead of winbind_allocate_gid(): we need the group_sid for this... Michael
* s3-passdb: include samr.h where needed.Günther Deschner2010-08-063-0/+3
| | | | Guenther
* s3-secrets: only include secrets.h when needed.Günther Deschner2010-08-058-0/+8
| | | | Guenther
* s3: [ug]id_to_unix_... can not failVolker Lendecke2010-07-111-4/+12
| | | | Remove some silly failure checks
* s3:pdb_ldap: change LDAP password before samba password hashesBjörn Jacke2010-07-061-33/+34
| | | | | | | this way we can catch up with password change refuses from ldap password policy overlays and abort the password change early. Thanks to Andy Hanton <andyhanton@gmail.com> for the initial patch.
* s3: Fix another aspect of bug 7262 and make paged results work againVolker Lendecke2010-07-061-4/+4
|
* s3: Make talloc_attrs() staticVolker Lendecke2010-07-051-1/+1
|
* s3-libads: only include libds flags where needed.Günther Deschner2010-07-011-0/+1
| | | | Guenther
* s3-passdb: Make sure dn is initialized and don't free it.Andreas Schneider2010-06-281-3/+1
| | | | | | dn is just a pointer to a memory which hasn't been duplicated. Found by clang-analyzer.
* s3-passdb: Make sure we don't call free on a garbage pointer.Andreas Schneider2010-06-281-1/+1
| | | | Found by clang-analyzer.
* s3-passdb: Make sure that we don't assign garbage.Andreas Schneider2010-06-281-1/+1
|
* s3: Fix EnumDomainAliases when no aliases are in LDAPVolker Lendecke2010-06-101-6/+4
| | | | | | | We used to return NT_STATUS_ACCESS_DENIED, now we just return 0 entries, just like W2k8 does. usrmgr.exe was pretty unhappy with the NT_STATUS_ACCESS_DENIED
* s3:pdb_ldap: fix bug 7505 - init_sam_from_ldap stores group in sid2uid cacheMichael Adam2010-06-101-1/+1
|
* s3-passdb: Fix typo in comment.Karolin Seeger2010-06-101-1/+1
| | | | Karolin
* s3: Fix bug 7253Volker Lendecke2010-06-091-1/+8
| | | | | | | | | acct_ctrl is 32 bit in LOGIN_CACHE, but "w" as a format specifier for tdb_unpack only writes 16 bits. Okay on x86, not okay on Solaris. Thanks to Vladimir.Marek@Sun.COM! Volker
* s3:passdb Export function to calculate the proper primary group sidSimo Sorce2010-06-072-86/+132
| | | | | | | | Don't keep it buried in passdb, this function need to be available for use in places where we do not want to construct an artificial samu struct just to play tricks. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3: Allow previous password to be stored and use it to check ticketsMatthieu Patou2010-06-021-4/+77
| | | | | | | | This patch is to fix bug 7099. It stores the current password in the previous password key when the password is changed. It also check the user ticket against previous password. Signed-off-by: Günther Deschner <gd@samba.org>
* s3-build: only use ndr_security.h where needed.Günther Deschner2010-05-311-0/+1
| | | | Guenther
* s3:passdb Fix memory leakSimo Sorce2010-05-291-0/+1
| | | | | We were allocating this passwd structure on sampass, but never freeing it nor assigning it to unix_pw where it could be reused.
* s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett2010-05-2115-221/+221
| | | | | | | | | | This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3:passdb Remove use of uint8 uint16 and uint32 in favour of C99 typesAndrew Bartlett2010-05-215-229/+229
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-passdb: move get_logon_hours_from_pdb() into samr server.Günther Deschner2010-05-181-23/+0
| | | | Guenther
* s3:split secrets.c to put machine account secrets in a new fileAndrew Bartlett2010-05-182-366/+398
| | | | | | | | | | | | | This helps the s3compat effort by allowing these functions to be replaced by functions that query the cli_credentials and secrets.ldb APIs. Also, this changes a couple of DOM_SID to struct dom_sid along the way. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3: Remove use of iconv_convenience.Jelmer Vernooij2010-05-182-11/+11
|
* s3-tldap: only include tldap when actually needed.Günther Deschner2010-05-181-0/+2
| | | | Guenther
* security: merge builtin rid tables.Günther Deschner2010-05-181-18/+18
| | | | Guenther
* s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner2010-05-185-13/+13
| | | | | | | Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
* s3-passdb: moving account_pol.c into passdb.Günther Deschner2010-05-081-0/+453
| | | | Guenther
* s3-pdb_ldap: fix memleak.Günther Deschner2010-04-291-2/+2
| | | | Guenther
* s3: Make a debug msg more readableVolker Lendecke2010-04-281-1/+1
|
* s3:passdb: avoid sid_to_gid() if the sid is "domain users"Stefan Metzmacher2010-03-251-3/+7
| | | | | | If the call fails we would use the "domain users" sid anyway. metze
* Fix some nonempty blank linesVolker Lendecke2010-03-251-3/+3
|
* s3-builtin: Add missing builtin groups.Karolin Seeger2010-03-231-0/+8
| | | | Karolin
generated by cgit (git 2.34.1) at 2025-09-26 21:24:03 +0000