summaryrefslogtreecommitdiffstats
path: root/source3/winbindd/winbindd_pam.c
Commit message (Collapse)AuthorAgeFilesLines
* s3-auth Use security_token_debug() from common codeAndrew Bartlett2010-10-141-1/+1
| | | | | | | | | This prints the security token including the privileges as strings instead of just a bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3: Remove a nesting level in winbindd_dual_pam_chauthtokVolker Lendecke2010-09-121-18/+19
|
* s3-auth Change struct nt_user_token -> struct security_tokenAndrew Bartlett2010-09-111-2/+2
| | | | | | | | This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Change type of num_sids to uint32_tAndrew Bartlett2010-09-111-1/+1
| | | | | | | | | | | | | | size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3: Simplify the logic in generate_krb5_ccacheVolker Lendecke2010-09-111-51/+28
| | | | gd, jra, others, please check!
* s3: Simplify generate_krb5_ccache slightlyVolker Lendecke2010-09-101-4/+0
| | | | strequal deals with a NULL string input just fine
* s3: These assignments are overwritten immediatelyVolker Lendecke2010-09-091-4/+0
| | | | Dump them
* s3: Remove "mem_ctx" from a few functionsVolker Lendecke2010-09-091-5/+1
|
* s3: Remove "mem_ctx" from lookup_cached_name()Volker Lendecke2010-09-091-2/+1
|
* s3: Remove a nested if-statementVolker Lendecke2010-09-091-5/+3
|
* s3: Fill in workstation in winbindd_pam_auth_crap_sendVolker Lendecke2010-09-091-6/+1
|
* s3: Fill in domain in winbindd_pam_auth_crap_sendVolker Lendecke2010-09-091-11/+1
|
* s3: Remove redundant flag checksVolker Lendecke2010-09-091-10/+0
| | | | | We're checking these in the parent already (winbindd_pam_auth_send and winbindd_pam_auth_crap_send). No point in doing it in the child as well
* s3: Remove unused arg "user_sid" from winbindd_store_credsVolker Lendecke2010-09-091-1/+1
| | | | All callers have passed in NULL
* s3: "== false" looks wrong :-)Volker Lendecke2010-09-081-1/+1
|
* s3-auth Rename NT_USER_TOKEN user_sids -> sidsAndrew Bartlett2010-08-311-1/+1
| | | | This is closer to the struct security_token from security.idl
* s3:auth Change winbindd -> auth interface to more standard structuresAndrew Bartlett2010-08-141-24/+5
| | | | | | | | | | This removes conversions to and from the source3 varient of the server_info structure when replaced in s3compat, and presents a tidier interface to winbindd in any case. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:auth Make Samba3 use the new common struct auth_usersupplied_infoAndrew Bartlett2010-08-141-1/+1
| | | | | | | | | | | | | This common structure will make it much easier to produce an auth module for s3compat that calls Samba4's auth subsystem. In order the make the link work properly (and not map twice), we mark both that we did try and map the user, as well as if we changed the user during the mapping. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-krb5: include krb5pac.h where needed.Günther Deschner2010-08-061-0/+1
| | | | Guenther
* s3: avoid global include of ads.h.Günther Deschner2010-08-051-0/+1
| | | | Guenther
* We should be using the winbindd separator in this case, not hardcoding a \\ ↵Jeremy Allison2010-07-291-1/+3
| | | | | | value. Jeremy.
* s3-winbindd: route samr chgpwd ops for own domain over internal samr pipe as ↵Günther Deschner2010-07-071-65/+26
| | | | | | well. Guenther
* s3: remove unused librpc/ndr/sid.c.Günther Deschner2010-06-031-0/+1
| | | | Guenther
* s3-samr: move chgpasswd.c out of smbd and into the samr server.Günther Deschner2010-05-261-0/+1
| | | | Guenther
* s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett2010-05-211-5/+5
| | | | | | | | | | This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3-rpc_client: move protos to cli_netlogon.hGünther Deschner2010-05-181-0/+1
| | | | Guenther
* s3-rpc_client: move protos to cli_samr.hGünther Deschner2010-05-181-0/+1
| | | | Guenther
* s3: Remove use of iconv_convenience.Jelmer Vernooij2010-05-181-1/+1
|
* s3-crypto: only include crypto headers when crypto is done.Günther Deschner2010-05-181-0/+1
| | | | Guenther
* s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner2010-05-181-1/+1
| | | | | | | Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
* s3:kerberos Return PAC_LOGON_INFO rather than the full PAC_DATAAndrew Bartlett2010-05-111-14/+15
| | | | | | | | | | | | | | | All the callers just want the PAC_LOGON_INFO, so search for that in ads_verify_ticket(), and don't bother the callers with the rest of the PAC. This change makes sense on it's own (removing boilerplate wrappers that just confuse the code), but it also makes it much easier to implement a matching ads_verify_ticket() function in Samba4 for the s3compat proposal. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3: only include gen_ndr headers where needed.Günther Deschner2010-05-061-0/+1
| | | | | | | | | | | | | | | | | This shrinks include/includes.h.gch by the size of 7 MB and reduces build time as follows: ccache build w/o patch real 4m21.529s ccache build with patch real 3m6.402s pch build w/o patch real 4m26.318s pch build with patch real 3m6.932s Guenther
* s3: Fix the code order in append_auth_dataVolker Lendecke2010-05-021-7/+7
| | | | | | | | This is to comply with the comment "currently, anything from here on potentially overwrites extra_data." Günther, please check!
* s3: Allow pdb password change using WINBINDD_PAM_CHNG_PSWD_AUTH_CRAPVolker Lendecke2010-04-231-0/+15
|
* s3: replace some data_blob_talloc by data_blob_constVolker Lendecke2010-04-231-8/+4
|
* s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async APIVolker Lendecke2010-04-231-42/+0
|
* s3: Move the in-memory ccache to the parentVolker Lendecke2010-04-191-41/+7
| | | | | None of this blocks, so there is no reason to keep this in a winbind child process
* s3-winbind: Allow changing the password for pdbVolker Lendecke2010-04-191-0/+47
|
* s3: Convert WINBINDD_PAM_LOGOFF to the new async APIVolker Lendecke2010-04-191-66/+0
|
* s3: Convert WINBINDD_PAM_CHAUTHTOK to the new async APIVolker Lendecke2010-04-191-57/+0
|
* s3: Convert WINBINDD_PAM_AUTH_CRAP to the new async APIVolker Lendecke2010-04-191-71/+0
|
* s3: Convert WINBINDD_PAM_AUTH to the new async APIVolker Lendecke2010-04-191-64/+0
|
* s3-winbind: Authenticate SAM usersVolker Lendecke2010-04-131-5/+71
|
* s3: Use sizeof(chal) instead of a constantVolker Lendecke2010-04-111-1/+1
|
* s3: Cosmetics -- I could not spot where "chal" was initializedVolker Lendecke2010-04-111-1/+1
|
* s3: Remove domain selection from dual_pam_authVolker Lendecke2010-04-101-53/+13
| | | | | | | | | We're in a child, the parent already has chosen the domain by picking the right child to connect to. Metze, you've done work on winbind lately, so it goes to you: Please check :-)
* s3: Ensure NULL termination before printing in winbindd_pam_logoffVolker Lendecke2010-04-011-3/+3
|
* s3: Fix a typo in winbindd_pam_logoffVolker Lendecke2010-04-011-1/+1
|
* s3: Fix an error message in winbindd_pam_chauthtok()Volker Lendecke2010-03-311-1/+1
|