summaryrefslogtreecommitdiffstats
path: root/source3/winbindd/winbindd_pam.c
Commit message (Collapse)AuthorAgeFilesLines
* s3-auth: Pass the remote_address down to user_info.Andreas Schneider2011-07-041-2/+13
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-winbind: Fix bug 7888 -- deal with buggy 3.0 based PDCsGünther Deschner2011-06-301-7/+19
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Jun 30 00:42:23 CEST 2011 on sn-devel-104
* s3-param Remove special case for global_myname(), rename to lp_netbios_name()Andrew Bartlett2011-06-091-3/+3
| | | | | | | | There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett
* s3-winbind: BUG 8166 - Don't lockout users when offline.Jim McDonough2011-05-251-1/+4
| | | | | | | Windows does not track bad password attempts when offline. We were locking users out but not honoring the lockout duration. Autobuild-User: Jim McDonough <jmcd@samba.org> Autobuild-Date: Wed May 25 18:11:10 CEST 2011 on sn-devel-104
* More simple const fixups.Jeremy Allison2011-05-051-3/+3
|
* Fix simple uses of safe_strcpy -> strlcpy. Easy ones where we just remove -1.Jeremy Allison2011-05-041-2/+2
|
* s3: remove various references to server side dcerpc structs (which are not ↵Günther Deschner2011-05-021-1/+0
| | | | | | needed). Guenther
* s3:rpc_client: map fault codes to NTSTATUS with dcerpc_fault_to_nt_status()Stefan Metzmacher2011-04-241-5/+5
| | | | | | | | | | | | | Most fault codes have a NTSTATUS representation, so use that. This brings the fault handling in common with the source4/librpc/rpc code, which make it possible to share more highlevel code, between source3 and source4 as the error checking can be the same now. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Apr 24 10:44:53 CEST 2011 on sn-devel-104
* s3-includes: only include ntdomain.h where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-auth: use auth.h where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-passdb: use passdb headers where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-rpc_client: Move client pipe functions to own header.Andreas Schneider2011-02-281-0/+1
|
* s3-winbindd: let winbind try to use samlogon validation level 6. (bug #7945)Günther Deschner2011-02-041-2/+57
| | | | | | | | | | | | | The benefit of this that it makes us more robust to secure channel resets triggered from tools outside the winbind process. Long term we need to have a shared tdb secure channel store though as well. Guenther Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Feb 4 18:11:04 CET 2011 on sn-devel-104
* s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_pam.c.Günther Deschner2011-02-021-13/+37
| | | | Guenther
* s3: inline get_uid_from_stateVolker Lendecke2011-01-281-6/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 28 23:38:16 CET 2011 on sn-devel-104
* s3: Lift winbindd_cli_state from fillup_password_policyVolker Lendecke2011-01-281-4/+6
|
* s3: Do not use state->mem_ctx in fillup_password_policyVolker Lendecke2011-01-281-4/+8
|
* s3: Lift winbindd_cli_state from winbindd_dual_pam_auth_samlogonVolker Lendecke2011-01-281-21/+27
|
* s3: Lift winbindd_cli_state from winbindd_raw_kerberos_loginVolker Lendecke2011-01-281-18/+26
|
* s3-winbind: share a common winbind_samlogon_retry_loop().Günther Deschner2011-01-261-168/+147
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Jan 26 12:41:14 CET 2011 on sn-devel-104
* Revert "s3: These assignments are overwritten immediately"Günther Deschner2011-01-261-0/+4
| | | | This reverts commit 18962ea3852d0d0fc7371e99813bebd54fae0a19.
* Revert "s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains."Günther Deschner2011-01-261-1/+0
| | | | This reverts commit cea36aeacf8778493463f31e6afc3f58384639e2.
* s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains.Günther Deschner2011-01-241-0/+1
| | | | | | | | | | After failing the netr_LogonSamLogonEx, we failed to retry with netr_LogonSamLogon. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon Jan 24 12:35:42 CET 2011 on sn-devel-104
* s3: Use the right uid winbindd_raw_kerberos_login()Volker Lendecke2010-12-191-1/+1
|
* s3: wcache_invalidate_samlogon only needs the SIDVolker Lendecke2010-12-191-4/+10
|
* s3-winbind Improve memory handling in NTLMv2-backend plaintext authenticationAndrew Bartlett2010-12-101-17/+6
| | | | Andrew Bartlett
* s3-winbind Don't send the LM password to the server, everAndrew Bartlett2010-12-101-11/+1
| | | | | | | | | | | This is for the case where we have the plaintext password locally, and can construct the challenge-response values here. We should never ever use the LM password in domain authentication. The last domain controller to only have LM passwords stored was NT 3.5. Andrew Bartlett
* s3: Return the correct result from winbindd_dual_auth_passdbVolker Lendecke2010-11-271-2/+3
|
* s3: Remove a reference to "winbindd_cli_state" from append_auth_dataVolker Lendecke2010-11-171-13/+14
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Nov 17 12:02:34 UTC 2010 on sn-devel-104
* s3: Remove a reference to "winbindd_cli_state" from append_info3_as_txtVolker Lendecke2010-11-171-28/+29
|
* s3: Remove a reference to "winbindd_cli_state" from append_afs_tokenVolker Lendecke2010-11-171-8/+6
|
* s3: Remove a reference to "winbindd_cli_state" from append_info3_as_ndrVolker Lendecke2010-11-171-4/+5
|
* s3: Remove a reference to "winbindd_cli_state" from append_unix_usernameVolker Lendecke2010-11-171-6/+6
|
* s3: Remove a reference to "winbindd_cli_state" from append_auth_dataVolker Lendecke2010-11-171-11/+11
|
* s3-auth Use security_token_debug() from common codeAndrew Bartlett2010-10-141-1/+1
| | | | | | | | | This prints the security token including the privileges as strings instead of just a bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3: Remove a nesting level in winbindd_dual_pam_chauthtokVolker Lendecke2010-09-121-18/+19
|
* s3-auth Change struct nt_user_token -> struct security_tokenAndrew Bartlett2010-09-111-2/+2
| | | | | | | | This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Change type of num_sids to uint32_tAndrew Bartlett2010-09-111-1/+1
| | | | | | | | | | | | | | size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3: Simplify the logic in generate_krb5_ccacheVolker Lendecke2010-09-111-51/+28
| | | | gd, jra, others, please check!
* s3: Simplify generate_krb5_ccache slightlyVolker Lendecke2010-09-101-4/+0
| | | | strequal deals with a NULL string input just fine
* s3: These assignments are overwritten immediatelyVolker Lendecke2010-09-091-4/+0
| | | | Dump them
* s3: Remove "mem_ctx" from a few functionsVolker Lendecke2010-09-091-5/+1
|
* s3: Remove "mem_ctx" from lookup_cached_name()Volker Lendecke2010-09-091-2/+1
|
* s3: Remove a nested if-statementVolker Lendecke2010-09-091-5/+3
|
* s3: Fill in workstation in winbindd_pam_auth_crap_sendVolker Lendecke2010-09-091-6/+1
|
* s3: Fill in domain in winbindd_pam_auth_crap_sendVolker Lendecke2010-09-091-11/+1
|
* s3: Remove redundant flag checksVolker Lendecke2010-09-091-10/+0
| | | | | We're checking these in the parent already (winbindd_pam_auth_send and winbindd_pam_auth_crap_send). No point in doing it in the child as well
* s3: Remove unused arg "user_sid" from winbindd_store_credsVolker Lendecke2010-09-091-1/+1
| | | | All callers have passed in NULL
* s3: "== false" looks wrong :-)Volker Lendecke2010-09-081-1/+1
|