summaryrefslogtreecommitdiffstats
path: root/source3/passdb
Commit message (Collapse)AuthorAgeFilesLines
...
| * Hey -- there is an error code NT_STATUS_CANNOT_DELETE :-)Volker Lendecke2003-03-191-1/+1
| | | | | | | | (This used to be commit aa9b8382d38346cb3e94ddf2e7caf6d663034579)
| * If we fail, return an error code :-)Volker Lendecke2003-03-191-0/+1
| | | | | | | | | | Volker (This used to be commit a5218499eb3f0a62cd663a06157591fbb0dfcbef)
| * Put group mapping into LDAP.Volker Lendecke2003-03-191-1/+501
| | | | | | | | | | Volker (This used to be commit f0f1518fc450834725902e9cdf33fb8d35f99360)
| * Fix memory leak.Volker Lendecke2003-03-171-0/+2
| | | | | | | | | | Volker (This used to be commit e8975d6e7bdcceb78a83a3446cf1430e1e3f1a72)
| * Fix invalid SAFE_FREE() of talloc()ed memory.Andrew Bartlett2003-03-171-3/+0
| | | | | | | | | | Andrew Bartlett (This used to be commit 21add5f97d0d112094e34a02e6319991a1d2af4d)
| * Fresh meat in trusted domains code:Rafal Szczesniak2003-03-141-30/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - packing/unpacking utility functions for trusted domain password struct; can be used to prepare buffer to store in secrets.tdb or (soon) passdb backend - similiar functions for DOM_SID - respectively modified secrets_(fetch|store) routines - new auth mapping code utilising introduced is_trusted_domain function - added tdb (un)packing of single bytes Rafal (This used to be commit 5281ee7e84421b9be746aed2f1718ceaf2a2fe3d)
| * This patch attemptes to clean up winbindd's mutex locking.Andrew Bartlett2003-03-111-23/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current locking scheme in winbind is a complete mess - indeed, the next step should be to push the locking into cli_full_connection(), but I'll leave it for now. This patch works on the noted behaviour that 2 parts of the connection process need protection - and independent protection. Tim Potter did some work on this a little while back, verifying the second case. The two cases are: - between connect() and first session setup - during the auth2 phase of the netlogon pipe setup. I've removed the counter on the lock, as I fail to see what it gains us. This patch also adds 'anonymous fallback' to our winbindd -> DC connection. If the authenticated connection fails (wbinfo -A specifed) - say that account isn't trusted by a trusted DC - then we try an anonymous. Both tpot and mbp like the patch. Andrew Bartlett (This used to be commit 0620320002082298a15cbba72bd79aecfc607947)
| * - Rename 'modules = ' to 'preload modules = 'Jelmer Vernooij2003-02-271-19/+34
| | | | | | | | | | | | | | - Add smb_probe_module() - Add init_modules() - Call these functions (This used to be commit f8f21653225792c0001d183c6efe8b7d89a0785d)
| * Fix comment - the other bits of code don't call this any more.Andrew Bartlett2003-02-221-4/+1
| | | | | | | | (This used to be commit 523d1429b1072c999d376d2b4e13a1c08349990a)
| * Remove 'unixsam' from the default passdb backends.Andrew Bartlett2003-02-227-279/+204
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The intention is to remove the muliple passdb backends, but we need the 'guest' account to always be there. If the admin adds the guest account to (say) LDAP, there will only be one backend required for operation. This helps remove some nasty behaviours with adding accounts to the system for both the RPC 'create user' and the SAMSYNC code. Users 'added' with an 'add user/machine' script won't magicly appear, and machine accounts 'pre-added' to unix, but not the smbpasswd file will not cause mayhem. This commit also implements somthing tridge discussed with me, the concept of 'default' passdb operation pointers - so that each backend does not need it's own stub funcitons wrapping the default tdb privilages/group mapping code. This also removes an implicit 'sid->name' and 'name->sid' mapping from our own local SID space, to winbind usernames. When adding mapping for NIS/LDAP non-sam users in future, we need to be careful. Andrew Bartlett (This used to be commit 6f32fa234961a525760a05418a08ec48d22d7617)
* | Merge from HEAD.Volker Lendecke2003-03-191-59/+97
| | | | | | | | | | Volker (This used to be commit f42032060812e9bf409042c790e71fefb40ff17a)
* | merge from HEADVolker Lendecke2003-03-191-0/+1
| | | | | | | | (This used to be commit 12110a263b5ac65d6b965ccbe19b7be3025f0373)
* | Put group mapping into LDAP.Volker Lendecke2003-03-191-30/+471
| | | | | | | | | | Volker (This used to be commit da83d97eb50c3c3a67985e22410842100207431f)
* | Merge from HEAD - make winbindd locking sane again:Andrew Bartlett2003-03-171-18/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Original message: This patch attemptes to clean up winbindd's mutex locking. The current locking scheme in winbind is a complete mess - indeed, the next step should be to push the locking into cli_full_connection(), but I'll leave it for now. This patch works on the noted behaviour that 2 parts of the connection process need protection - and independent protection. Tim Potter did some work on this a little while back, verifying the second case. The two cases are: - between connect() and first session setup - during the auth2 phase of the netlogon pipe setup. I've removed the counter on the lock, as I fail to see what it gains us. This patch also adds 'anonymous fallback' to our winbindd -> DC connection. If the authenticated connection fails (wbinfo -A specifed) - say that account isn't trusted by a trusted DC - then we try an anonymous. Both tpot and mbp like the patch. Andrew Bartlett (This used to be commit b5283c00a900393b83f0edb2785c5caf402404eb)
* | Fix memory leak.Volker Lendecke2003-03-171-0/+2
| | | | | | | | | | Volker (This used to be commit 115cd4b27f84343c7f98622717edda6da4866a6b)
* | Merge doxygen, signed/unsigned, const and other small fixes from HEAD to 3.0.Andrew Bartlett2003-02-241-7/+4
| | | | | | | | | | Andrew Bartlett (This used to be commit 9ef0d40c3f8aef52ab321dc065264c42065bc876)
* | This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This ↵cvs2svn Import User2003-02-181-0/+341
|\| | | | | | | used to be commit c31455779d7948e866fe1916425c3746134dea01)
| * initial server side privileges implementation, using a tdb. This needs to be ↵Andrew Tridgell2003-02-121-0/+341
| | | | | | | | | | | | hooked into pdb, and we need some access control on changing privileges. That's next (This used to be commit f4f1f84a6bf1d356ccc83f0ecb135bef4a39619e)
| * More ldap parinoia - if we ever get more than one result, bail. The order weAndrew Bartlett2003-02-011-5/+23
| | | | | | | | | | | | | | | | get them in should be indeterminate, so just picking the first one would be bad... Andrew Bartlett (This used to be commit 21da8c3bb39c507eb90865549c3bb3538dcea138)
| * Always escape ldap filter strings. Escaping code was from pam_ldap, but I'm toAndrew Bartlett2003-02-011-3/+19
| | | | | | | | | | | | | | | | | | blame for the realloc() stuff. Plus a couple of minor updates to libads. Andrew Bartlett (This used to be commit 34b2e558a4b3cfd753339bb228a9799e27ed8170)
| * A couple more signed/unsigned issues.Andrew Bartlett2003-02-011-2/+2
| | | | | | | | (This used to be commit 01d78b828b89f04b70b53ded01a7f4b356979317)
| * Fixed up mutex protection around winbindd logon code. Sync with APP-HEAD.Jeremy Allison2003-01-161-8/+24
| | | | | | | | | | Jeremy. (This used to be commit 3d04872499332ef2d8e7479b924afc8fc1ac29d7)
| * initialize acct_ctrl before using itHerb Lewis2003-01-151-2/+1
| | | | | | | | | | remove ldap_msgfree(result); as result is unitialized at this point (This used to be commit dc8882778694289ca461de57d443992f52ab7524)
| * Fix some debug lines, and add a bit more info to help track down ldapAndrew Bartlett2003-01-141-8/+15
| | | | | | | | | | | | | | connectivity problems. Andrew Bartlett (This used to be commit 68de9a59203ed9778f11b78f233dc437b9dab55d)
| * clearer debug message when the user is already in the ldap dbAndrew Tridgell2003-01-141-1/+2
| | | | | | | | (This used to be commit 31894ba0e5847eb934688598cd8d65bead23c58b)
| * Always initialise this variable - and don't set the 'must change now' if it wasAndrew Bartlett2003-01-131-0/+1
| | | | | | | | | | | | | | | | | | last changed at '0'. We need to actually change this password sometime... Andrew Bartlett (This used to be commit 740bf439d2d1512127c873cf0e57697161d6566b)
| * Fix open problem with changing attributes on an existing file - basedJeremy Allison2003-01-081-1/+0
| | | | | | | | | | | | on work by <steve@griffin.sio2.nl>. Jeremy. (This used to be commit 465d86d95fbdeda423d1f4b06cee46c119a31447)
| * We already have one function to move unistr2 -> multibyte-static, so weAndrew Bartlett2003-01-021-19/+0
| | | | | | | | | | | | | | | | | | | | don't need a second just for pdb. Also, remove magic 'is lp_guest_account' test - the magic RID should be up to the passdb backend to set. Andrew Bartlett (This used to be commit f71c8338d35a2e8c73c3d8006ea6858cb522c715)
| * BIG patch...Andrew Bartlett2003-01-026-16/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch makes Samba compile cleanly with -Wwrite-strings. - That is, all string literals are marked as 'const'. These strings are always read only, this just marks them as such for passing to other functions. What is most supprising is that I didn't need to change more than a few lines of code (all in 'net', which got a small cleanup of net.h and extern variables). The rest is just adding a lot of 'const'. As far as I can tell, I have not added any new warnings - apart from making all of tdbutil.c's function const (so they warn for adding that const string to struct). Andrew Bartlett (This used to be commit 92a777d0eaa4fb3a1c7835816f93c6bdd456816d)
| * Forward port the change to talloc_init() to make all talloc contextsJeremy Allison2002-12-202-2/+2
| | | | | | | | | | | | named. Ensure we can query them. Jeremy. (This used to be commit 842e08e52a665ae678eea239759bb2de1a0d7b33)
| * merge of get_dc_name()-like code from APP_HEAD; better support password ↵Gerald Carter2002-12-121-0/+30
| | | | | | | | | | | | server = DC1 * (This used to be commit 6b18ca9511ddcf1718f222af3f61491d1e5f3b60)
| * use FILE_MACRO instead of __FILE__Herb Lewis2002-12-031-5/+5
| | | | | | | | | | use FUNCTION_MACRO instead of __FUNCTION_ (This used to be commit 243763d6eb107ab2444d81025232c8fe795baaf1)
| * Move from NT_STATUS_UNSUCCESSFUL to NT_STATUS_NO_SUCH_USER, and other slightlyAndrew Bartlett2002-11-241-16/+21
| | | | | | | | | | more useful error codes. (This used to be commit 5b1185b4e8592e6bc1abe581950571e249c03a78)
| * fixed a number of places where we can try to free a wild pointer orAndrew Tridgell2002-11-201-2/+14
| | | | | | | | | | | | look for the record count after an invalid search. This fixes a segv in ldapsam (This used to be commit d076823c73731a4c83f49a21f13360a38d54406e)
| * Use smb_register_passdb() - plus some small fixesJelmer Vernooij2002-11-153-1603/+0
| | | | | | | | (This used to be commit 2addbaff358993923a58ad3845c63168678c2c21)
| * Add smb_register_passdb()Jelmer Vernooij2002-11-152-86/+59
| | | | | | | | (This used to be commit b5b3b2e6bef431c9c30dc8f2899dc22328801c0e)
| * Remove the #ifdef's for NISPLUS_SAM - there are no function name collisions ↵Jelmer Vernooij2002-11-141-4/+0
| | | | | | | | | | | | anymore (This used to be commit f6ef18df11cc48f25adeee464e79e63ee209b08c)
| * Removed global_myworkgroup, global_myname, global_myscope. Added liberalJeremy Allison2002-11-125-25/+19
| | | | | | | | | | | | | | dashes of const. This is a rather large check-in, some things may break. It does compile though :-). Jeremy. (This used to be commit 82b8f749a36b42e22186297482aad2abb04fab8a)
| * More improvement of DEBUG outputJelmer Vernooij2002-11-111-2/+5
| | | | | | | | (This used to be commit 21530f06b2b89d159657646fe15e16a3fcfdb668)
| * Add extra debug infoJelmer Vernooij2002-11-111-2/+2
| | | | | | | | (This used to be commit 79207d56929de2acc15a761b23c8b33369c298ee)
| * Print the number of returned rows, not the number of fieldsJelmer Vernooij2002-11-101-2/+2
| | | | | | | | (This used to be commit f4110a0f80a4f62d548b6d6cae81692476ef85ba)
| * Make smbpasswd use the group mapping, and fix spelling in ldapsam.Andrew Bartlett2002-11-082-30/+38
| | | | | | | | | | | | | | This gets user mangler for doamins working again. Andrew Bartlett (This used to be commit 205209f77f154a2a5d5f7a255194d7953860a4db)
* | Merge LDAP filter parinoia from HEAD, a few other pdb_ldap updates and someAndrew Bartlett2003-02-011-17/+59
| | | | | | | | | | | | | | misc libads fixes. Andrew Bartlett (This used to be commit 9c3a1710efba9fa4160004a554687d4b85927bb1)
* | Merge of signed/unsigned fixes from HEAD.Andrew Bartlett2003-02-011-2/+2
| | | | | | | | (This used to be commit e9f56a157bd472914eebf64fde586104d8274717)
* | Fixed up mutex protection around winbindd logon code. Sync with APP-HEAD.Jeremy Allison2003-01-161-8/+24
| | | | | | | | | | Jeremy. (This used to be commit daf179bcd6297b525bfc644efb154734723f4d58)
* | initialize acct_ctrl variable before it is usedHerb Lewis2003-01-151-2/+1
| | | | | | | | | | remove ldap_msgfree(result); as result is unitialized at this point (This used to be commit 1102a6f8cdf295d564df5447a223b354be72895d)
* | Merge indirection, signed/unsigned and uninitialiased-value fixes from HEAD.Andrew Bartlett2003-01-141-0/+1
| | | | | | | | | | Andrew Bartlett (This used to be commit 2a1adb8f81d8966e8919fffb9b4c69f3e6acd44f)
* | Fix open problem with changing attributes on an existing file - basedJeremy Allison2003-01-081-1/+0
| | | | | | | | | | | | on work by <steve@griffin.sio2.nl>. Jeremy. (This used to be commit 1cff725e37d04e25d2cd5523683b35c82d5040fa)
* | Merge from HEAD - we already have one function for converting a unistr2 to aAndrew Bartlett2003-01-041-17/+0
| | | | | | | | | | | | | | static 'unix' string, so we don't need a second pdb specific version. Andrew Bartlett (This used to be commit 91ca4771c6b834747b06fff21822a14e929de2c1)
* | Merge from HEAD - don't base RID on a name being the lp_guest_account(), letAndrew Bartlett2003-01-041-2/+0
| | | | | | | | | | | | | | the actual passdb modules decide that. Andrew Bartlett (This used to be commit f3432869b9c761a029fd804d244d0ea26b26173d)