summaryrefslogtreecommitdiffstats
path: root/source3/passdb
Commit message (Collapse)AuthorAgeFilesLines
...
* passdb: guard pdb_generate_sam_sid() with a transactionStefan Metzmacher2008-04-011-2/+24
| | | | | | | This prevents possible races with some dbwrap backends metze (This used to be commit 9322442510d9c2cf16c25f5109fe81b277c44881)
* passdb/secrets: add secrets_db_ctx() to get the db_contextStefan Metzmacher2008-04-011-0/+9
| | | | | metze (This used to be commit 986bc7e8b260265da019b67ec751509eb589d24b)
* pdb_tdb: use db_open_trans()Stefan Metzmacher2008-03-271-1/+1
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (This used to be commit 9925cc01a2a4739d6cde5991eb0d0b79ae13353b)
* pdb_tdb: use db_sam->transaction_start(db_sam) != 0 consistentStefan Metzmacher2008-03-271-1/+1
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (This used to be commit 3bf9ab640e9a79157fcfee0b5d0cde5badc92755)
* passdb/secrets: use db_open_trans()Stefan Metzmacher2008-03-271-1/+2
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (This used to be commit b61b8ca4944f399216d8e67a48ea7d259258b432)
* passdb/secrets: it's enough to use traverse_read() in secrets_trusted_domains()Stefan Metzmacher2008-03-271-1/+1
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (This used to be commit 729f7b9ff30e81537a7257daeaa1728c7ae96853)
* Coverity fixesMarc VanHeyningen2008-03-172-6/+14
| | | | (This used to be commit 3fc85d22590550f0539215d020e4411bf5b14363)
* Convert pdb_tdb to use dbwrapVolker Lendecke2008-03-171-318/+316
| | | | (This used to be commit 948ab77863b12b1b0bd1c970004b84b9bb1bb2fa)
* Fix bug 4901Volker Lendecke2008-03-141-3/+8
| | | | (This used to be commit 1dd8fa9a521046f1de8173ac00224706c5249665)
* Convert secrets.c to use dbwrapVolker Lendecke2008-03-111-128/+93
| | | | (This used to be commit 9d30e5991c6fe77ef5fd505efb756554bbe77256)
* Use a separate tdb for mutexesVolker Lendecke2008-03-101-31/+0
| | | | | | | | Another preparation to convert secrets.c to dbwrap: The dbwrap API does not provide a sane tdb_lock_with_timeout abstraction. In the clustered case the DC mutex is needed per-node anyway, so it is perfectly fine to use a local mutex only. (This used to be commit f94a63cd8f94490780ad9331da229c0bcb2ca5d6)
* Convert secrets_lock_trust_account_password to tallocVolker Lendecke2008-03-101-8/+24
| | | | | This is preparing the conversion of secrets.c to ctdb (This used to be commit 1307f0130c47b8d740d2b7afe7a5d8d1a655e2a2)
* Make use of talloc_asprintf_strupper_m in secrets.cVolker Lendecke2008-03-101-37/+21
| | | | (This used to be commit 3ac4f935c074af768d0b83514f86d010c387817a)
* Avoid some pointless checksVolker Lendecke2008-03-101-12/+0
| | | | | secrets_init() makes sure that the tdb is initialized (This used to be commit 8725dbc8888cf7a1d3d9d1205678fcd3ca3c6350)
* Use talloc_tos() in secrets_initVolker Lendecke2008-03-101-12/+5
| | | | (This used to be commit 27065382d9b692b5885265c9d60ffb7ec7748c38)
* Fix a memleak -- Coverity ID 222Volker Lendecke2008-03-051-1/+2
| | | | | (cherry picked from commit a40781bafa3a8f0c7737164bca6cf74b0a452e72) (This used to be commit 86cabcad74ac06d888f2a352a2bef3abea1ed85c)
* Fix crash bug in pdb_init_ldapsam().Günther Deschner2008-03-041-2/+2
| | | | | | | Karolin, this needs to be in 3-2-stable. Guenther (This used to be commit 0d73bde6de4391e7aec862424762473441fa0905)
* Fix some warningsVolker Lendecke2008-02-251-1/+4
| | | | | warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result (This used to be commit ad37b7b0aee265a3e4d8b7552610f4b9a105434d)
* Change ldap search filter. This function is also used to search machine ↵Karolin Seeger2008-02-191-2/+2
| | | | | | | accounts which may be located in a different ou. This is an extension to e71a48bb80cee85afcccacbce2884c0d600f4d72. Karolin (This used to be commit e5cc8b683cba3f2f3a84b1636b3d5bee1bfc0dda)
* Use netr_SamInfo3 in remaining places.Günther Deschner2008-02-172-2/+2
| | | | | Guenther (This used to be commit 92fca97951bf7adf8caaeabdaff21682b18dd91f)
* nsswitch: convert winbind_env_set(), winbind_on() and winbind_off() into macrosStefan Metzmacher2008-02-131-2/+2
| | | | | metze (This used to be commit 5f623f54a919cc687d0ff16c16038c05a501008d)
* Add get_logon_hours_from_pdb() (inspired by samba4).Günther Deschner2008-02-121-0/+23
| | | | | Guenther (This used to be commit e1bcb7d82f22810e342a18aacbcfe49c3902bcb4)
* Change ldap search filter. This function is also used to search machine ↵Karolin Seeger2008-02-111-1/+1
| | | | | | | accounts which may be organized in a different ou. Karolin (This used to be commit e71a48bb80cee85afcccacbce2884c0d600f4d72)
* More paranoid checks for secrets_init() success.Günther Deschner2008-02-091-13/+35
| | | | | Guenther (This used to be commit 5e60852bae61be72dee9d5b93c59ac900aba73ae)
* Fix typo.Karolin Seeger2008-02-081-1/+1
| | | | | Karolin (This used to be commit 53b83bb53ff02878748fada589fd2faf3520d260)
* Don't return true on talloc fail.Jeremy Allison2008-02-051-0/+12
| | | | | Jeremy. (This used to be commit 21594cb34c683262ed4f743b68c35e586676ff75)
* Fix valgrind errorsVolker Lendecke2008-02-041-1/+17
| | | | | | | | We need to keep the names around on the search. Probably a tdb_move would do it here as well, but RPC is not the fastest thing on earth anyway... Thanks to Günther for pointing that out to me! (This used to be commit c9472ae61039adf178e047d89dbcc698dfa57059)
* Remove a staticVolker Lendecke2008-02-041-4/+1
| | | | | | I very much doubt that this is called enough to justify a global. If this turns out to be a hot code path, we might reconsider :-) (This used to be commit 5223d18ea2d891418a0f833f58cc3502cb26ce03)
* Fix lookup_sids to detect unix_groups and unix_users domain sids.Michael Adam2008-01-251-0/+10
| | | | | | | | This fixes panics in wbcLookupRids when 1-2-22 was passed as a domain sid. Michael (This used to be commit c0d9732cf4482b0db02c75f316ff2b41f3336425)
* Add a debug message: show the sid lookup_sid() was called for.Michael Adam2008-01-251-0/+2
| | | | | Michael (This used to be commit 6c7c6c3f85a4bd171c62031b2b8e59d3f7054061)
* Add a debug message to lookup_rids() printing the domain SID.Michael Adam2008-01-251-0/+3
| | | | | | | | This is to ease debugging. I sporadically get panics that are apparently due to NULL domain sid passed to lookup_rids somewhere. Michael (This used to be commit 723e877c241dd5a0c8addb89507c9eda75b88ea4)
* Fix CID 469. new_acct can't be NULL here.Jeremy Allison2008-01-121-2/+1
| | | | | Jeremy. (This used to be commit c79e9414c4baed6e61fc6a3f766395b873bcc4ea)
* Fix memleak in ldapsam_rename_sam_account() found by IBM checker.Michael Adam2008-01-091-1/+1
| | | | | | | The check for out of memory was the wrong way round. Michael (This used to be commit d7a7b793203b986823859ac5171d2d4c30e52415)
* Convert add_sid_to_array() add_sid_to_array_unique() to return NTSTATUS.Michael Adam2008-01-091-7/+11
| | | | | Michael (This used to be commit 6b2b9a60ef857ec31da5fea631535205fbdede4a)
* Add secrets_shutdown().Günther Deschner2008-01-071-0/+13
| | | | | Guenther (This used to be commit dd3fbd93b6e5fe8b5e3a3727a64a38d5ae46fcbf)
* Fix for bug #5163 from Laurent Pinchart <pinchart@skynet.be>Jeremy Allison2008-01-021-0/+4
| | | | | | Failure to change password in ldap is mapped to NT_STATUS_UNSUCCESSFUL unconditionally. Jeremy. (This used to be commit 9369d6e907a49da1fbf2a5690118412b8d1a0383)
* Make pdb_tdb honour a private dir overridden in smb.conf.Michael Adam2007-12-291-1/+1
| | | | | | | | | | | | | One lp_private_dir() has to be used instead of get_dyn_PRIVATE_DIR() to determine the location of the passdb.tdb. I noticed this when running make test as a "normal user" from a build, where I had done "make install" as root before, and so the passdb.tdb could not be accessed during the startup phase "CREATE TEST ENVIRONMENT IN ./st ..." in selftest.sh. Michael (This used to be commit 1f96389afa7250af7393489fb538b8aed93d815c)
* passdb.tdb is located in the private directoryVolker Lendecke2007-12-291-1/+2
| | | | | | | | | | | | | Jerry, as part of d6cdbfd87 the default location of passdb.tdb has changed from the private directory to the state directory. I think because passdb.tdb holds the password hashes, it is reasonable to keep this next to the smbpasswd file. Please review and potentially push. Thanks, Volker (This used to be commit c9c7607c402c0a9df9796c767b689d207d67d8e4)
* Convert csamuser to memcacheVolker Lendecke2007-12-281-27/+26
| | | | (This used to be commit 476d3abf9c6142d99822212141fc3d843aca4798)
* Remove the sampwent interfaceVolker Lendecke2007-12-264-446/+1
| | | | (This used to be commit 9e80b969fb40766de2c9b1a05d16bf4d4c6e46f7)
* smbpasswd_search_usersVolker Lendecke2007-12-261-0/+114
| | | | (This used to be commit 84af4fb65677cf137f14f57c8820c77c9d006d89)
* Add tdbsam_search_usersVolker Lendecke2007-12-261-0/+134
| | | | (This used to be commit 02f0b0bd393bd942fc934f251bd6afed8e5424b0)
* Convert the [gu]id_sid cache to memcacheVolker Lendecke2007-12-231-134/+62
| | | | (This used to be commit 4baf36784f6496121a6863af0283821785eb0cf1)
* Remove Get_Pwnam and its associated static variableVolker Lendecke2007-12-191-1/+2
| | | | | All callers are replaced by Get_Pwnam_alloc (This used to be commit 735f59315497113aebadcf9ad387e3dbfffa284a)
* Add and use some keystr functions using talloc_tos() in secrets api.Günther Deschner2007-12-191-44/+123
| | | | | Guenther (This used to be commit 6ccbf67a0c6f117978df55d4e2565d34fddf9317)
* Prevent another segfault.Michael Adam2007-12-181-1/+3
| | | | | Michael (This used to be commit 0a9874c1c76c0ccc71caba7ee85a0ee1a91808c5)
* Remove direct caller of secrets_fetch_trusted_domain_password().Michael Adam2007-12-171-1/+1
| | | | | | | | This is a regession introduced by f7efc0eca9426e63b751c07a90265a12bb39cf95. This calls pdb_get_trusteddom_pw() instead, again. Michael (This used to be commit 91be824d2ba0b8dccf42ba2b8555a204aa1fa56c)
* Fix for bug #4801: Correctly implement lsa lookup levels for lookupnames.Michael Adam2007-12-171-13/+32
| | | | | | | | | This patch is still incomplete in that winbindd does not walk the the trusted domains to lookup unqualified names here. Apart from that this fix should be pretty much complete. Michael (This used to be commit f7efc0eca9426e63b751c07a90265a12bb39cf95)
* s/sid_to_string/sid_to_fstring/Volker Lendecke2007-12-152-9/+9
| | | | | least surprise for callers (This used to be commit eb523ba77697346a365589101aac379febecd546)
* Replace sid_string_static with sid_to_stringVolker Lendecke2007-12-152-6/+11
| | | | | | This adds 28 fstrings on the stack, but I think an fstring on the stack is still far better than a static one. (This used to be commit c7c885078be8fd3024c186044ac28275d7609679)