summaryrefslogtreecommitdiffstats
path: root/source3/winbindd/winbindd_group.c
Commit message (Collapse)AuthorAgeFilesLines
* s3:winbindd fix a return code checkChristian Ambach2011-08-241-2/+2
| | | | | | | | | talloc_traverse_dict will return with -1 in case of an error and might return positive values that indicate the count of found entries Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Wed Aug 24 18:09:11 CEST 2011 on sn-devel-104
* Fix simple uses of safe_strcpy -> strlcpy. Easy ones where we just remove -1.Jeremy Allison2011-05-041-2/+2
|
* s3: Remove unused get_sam_group_entriesVolker Lendecke2009-12-211-135/+0
|
* s3: Remove unused winbindd_dual_getsidaliasesVolker Lendecke2009-12-211-83/+0
|
* s3: Remove an unused struct definitionVolker Lendecke2009-12-211-20/+0
|
* s3: Remove unused winbindd_dual_getuserdomgroupsVolker Lendecke2009-12-211-46/+0
|
* s3:winbind: Convert WINBINDD_LIST_GROUPS to the new APIVolker Lendecke2009-08-291-6/+0
|
* s3:winbind: Convert the getgrent functions to the new APIVolker Lendecke2009-08-291-1031/+0
|
* s3:winbind: Fix a bug found by RPC-SAMRVolker Lendecke2009-08-291-2/+5
| | | | | | We need to enumerate passdb alias members Thanks to gd for bugging me :-)
* s3:winbind: Rename wbint_GroupMember to wbint_PrincipalVolker Lendecke2009-08-291-4/+4
|
* s3:winbind: Convert WINBINDD_GETUSERSIDS to the new APIVolker Lendecke2009-08-271-84/+0
|
* s3:winbind: Convert WINBINDD_GETGRNAM to the new APIVolker Lendecke2009-08-161-252/+0
|
* s3:winbind: Convert WINBINDD_GETGRGID to the new APIVolker Lendecke2009-08-161-51/+0
|
* s3:winbind: Add winbindd_print_groupmemVolker Lendecke2009-08-161-0/+72
| | | | | This converts a talloc_dict retrieved from wb_group_members to the string that the pipe protocol expects
* s3:winbind: Make fill_grent publically availableVolker Lendecke2009-08-161-3/+2
|
* s3:winbind: Convert WINBINDD_GETGROUPS to the new APIVolker Lendecke2009-08-051-172/+0
|
* s3:winbind: Convert WINBINDD_GETUSERDOMGROUPS to the new APIVolker Lendecke2009-08-051-26/+0
|
* s3:winbind: Convert WINBINDD_GETSIDALIASES to the new APIVolker Lendecke2009-08-051-26/+0
|
* Make winbindd_cli_state->response a pointer instead of a struct memberVolker Lendecke2009-06-141-33/+33
| | | | | | Same comment as in baa6084378e530b: This is just a preparatory checkin. Volker
* Make winbindd_cli_state->request a pointer instead of a struct memberVolker Lendecke2009-06-141-30/+30
| | | | | | | | In itself, this is pretty pointless. But in the next steps I'll convert the winbind internal communication to wb_reqtrans which allocates the request properly. This minimizes the later diff. Volker
* Pass a talloc_ctx to pdb_enum_aliasmemVolker Lendecke2009-06-081-2/+2
|
* s3-winbindd: workaround alias enumeration in expand_groups().Günther Deschner2009-06-081-3/+16
| | | | | | alias enumeration in NSS is not done properly done atm and needs to be fixed. Guenther
* s3-winbindd: add some debug statements while tracking down a bug.Günther Deschner2009-06-061-2/+14
| | | | Guenther
* Convert response.extra_data.data from malloc to tallocVolker Lendecke2009-05-121-22/+14
|
* Make opt_nocache static to winbindd.cVolker Lendecke2009-03-121-2/+0
|
* s3: Implement wbcGetSidAliasesDan Sledz2009-02-111-0/+115
| | | | | | * Adds wbcGetSidAliases that calls the lookup_useraliases function. * Updates wbinfo and winbind_util.c to call the new function. * Also added winbind_get_groups helper function.
* s3 build: Fix "assignment discards qualifiers from pointer target type" warningsTim Prouty2009-02-021-6/+2
|
* s3:winbind_group: fix "getent group" to allocate new gids.Michael Adam2009-02-021-2/+8
| | | | | | | | | | | | | | | | | | "getent group" used to fill the idmap cache with negative cache entries for unmapped group sids. Don't pass domain name unconditionally to idmap_sid_to_gid(). idmap_sid_to_gid() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_gid() functions here, in the main winbindd. The correct fix would be to send a sid_to_gid request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael
* Memory leaks and other fixes found by Coveritytodd stecher2009-01-211-1/+7
|
* s3:winbindd: fix horrible mis-indentation of toplvl braces in ↵Michael Adam2008-12-041-2/+2
| | | | | | | | getgrsid_sid2gid_recv to make code more readble Michael
* s3:winbindd: don't open a new dc connection in winbindd_getgrnam (main winbindd)Michael Adam2008-12-041-1/+1
| | | | | | | This is just to find the corresponding domain struct. Actual connection is handled by the domain child. Michael
* Whitespace and >80 column cleanups.Steven Danneman2008-11-181-2/+2
|
* [s3]winbindd: speed up fill_grent_mem (i.e. winbindd_getgrent) a lot.Michael Adam2008-11-021-13/+20
| | | | | | | | | | With large groups, getgrent ran into timeouts because after each single user that was added to the expanded group list, the list was sorted and made unique. Now the list is sorted just once after all members have been added. Michael
* [s3]winbindd_group: don't list the domain twice when expanding internal aliasesMichael Adam2008-09-231-1/+1
| | | | | | | Before this, "getent group builtin\\administrators" expanded domain group members in the form DOMAIN\domain\user. Michael
* [s3]winbindd_group: sanely handle NULL domain in add_member().Michael Adam2008-09-231-1/+5
| | | | Michael
* winbindd: Update the calls to ws_name_XX() to reflect API changes.Gerald (Jerry) Carter2008-09-161-30/+152
| | | | | | * Ensures that all points an which a name is received or returned to/from a client passes through the name aliases layer (users and groups).
* Fix for bug 5571Simo Sorce2008-09-111-1/+1
| | | | | | Make sure that usernames are parsed using the correct separator. Otherwise group memeberships in winbind may be result broken. (This used to be commit 20b9c0aa7b4e6d6be5bb6e4e96bd8a1cbb6edd37)
* idmap rewriteVolker Lendecke2008-08-121-2/+4
| | | | (This used to be commit 30a180f2fce8cf6a3e5548f6bba453272ba70b33)
* Clean up winbindd_group.c tooSimo Sorce2008-07-061-210/+255
| | | | (This used to be commit 50a347f5503ebed0fcc7b9de60f8368677585bb1)
* Fix from Atte Peltomäki - atte.peltomaki@f-secure.com to correctly checkJeremy Allison2008-06-301-1/+1
| | | | | | error code in winbindd group expansion. Jeremy. (This used to be commit e321377174f579ba57a70f260f4d4bc234a07439)
* From Steve Danneman @ Isilon.Jeremy Allison2008-06-261-103/+1
| | | | | | | | | | | | | | | | | | Attached is the companion patch to (037b9689d9042a398cb91e4628a82fcdfa913c21), which made handling of WINBINDD_LIST_GROUPS asynchronous. Because most all of the list_groups code was reusable, I abstracted it, and implemented both list_groups and list_users on top of it. On my large test domain a "wbinfo -u" call went from 70 seconds to 30 seconds with this patch. Plus, the parent process is no longer blocked from receiving new requests during that time. Steven Danneman | Software Development Engineer Isilon Systems P +1-206-315-7500 F +1-206-315-7501 www.isilon.com (This used to be commit 5188f2861137ff06d5399561d55d7d00c3a08644)
* Fix two c++ warningsVolker Lendecke2008-05-251-1/+2
| | | | (This used to be commit 3b1dae7c31b881834ca4494c4434ae97a56ce6c7)
* Make WINBINDD_LIST_GROUPS handler asynchronous.Steven Danneman2008-05-221-58/+78
| | | | | | | | | | | | | | | | | | | | | | | Previously WINBINDD_LIST_GROUPS requests (ex: wbinfo -g) were handled by the winbindd parent process in a sequential fashion. This patch, delegates the work to the winbindd children so that the request is handled much faster in large domain topologies, and doesn't block the parent from receiving new requests. The core group enumeration and conversion that was handled in winbindd_list_groups() has been moved into winbindd_dual_list_groups() to be done by the child. The parent winbindd_list_groups() simply calls each of the children asynchronously. listgroups_recv() aggregates the final group list that will be returned to the client and tracks how many of the children have returned their lists. The domain name of the child is passed back through the callbacks to be used in debugging messages. There are also several fixes to typos in various comments. (This used to be commit 037b9689d9042a398cb91e4628a82fcdfa913c21)
* Fix wbinfo --group-info if the winbind separator set to non \Volker Lendecke2008-04-221-2/+4
| | | | | | | In getgrsid_lookupsid_recv() we use parse_domain_user which itself looks at lp_winbind_separator(). Thus when building up that group name we should better use it as well. (This used to be commit 5df75578ef1da41164936cd11b14114889201d47)
* winbindd: fix break out early condition in fill_grent_mem().Michael Adam2008-04-071-1/+1
| | | | | | | | if (!&new_glist) would always be skipped, if (new_glist == NULL) is what must have been meant... Michael (This used to be commit c1b60cdecff2a53f0a75a432a1ad7730eb734908)
* Don't let winbind getgroups crash when we have no gids in the token.Günther Deschner2008-03-291-3/+5
| | | | | Guenther (This used to be commit 6a576cfe9b87e69af6acbe9abc04124b8b743fd3)
* Convert add_sid_to_array() add_sid_to_array_unique() to return NTSTATUS.Michael Adam2008-01-091-9/+6
| | | | | Michael (This used to be commit 6b2b9a60ef857ec31da5fea631535205fbdede4a)
* Ensure that winbindd_getgroups() can deal with a UPN name.Gerald (Jerry) Carter2008-01-041-1/+10
| | | | | | | | A user logging in via GDM was not getting a complete list of supplementary groups in his/her token. This is because getgroup() was not able to find the winbindd_domain* using the DNS name. Fallback to matching the DNS name is the short name match failes. (This used to be commit 2030a8de19a2c7c735a8aa367dd953e4a5c447b8)
* Add NT error to debug to try and track this down.Jeremy Allison2007-12-211-1/+4
| | | | | Jermey. (This used to be commit a1482b09150f4d292965c77bc73d47fb14f5eb85)
* s/sid_to_string/sid_to_fstring/Volker Lendecke2007-12-151-2/+2
| | | | | least surprise for callers (This used to be commit eb523ba77697346a365589101aac379febecd546)