summaryrefslogtreecommitdiffstats
path: root/source3/winbindd/winbindd_samr.c
Commit message (Collapse)AuthorAgeFilesLines
* winbindd: Call set_dc_type_and_flags on the internal domainAndrew Bartlett2014-06-111-89/+2
| | | | | | | | | | | | | | | | | | This allows the AD DC to be picked up correctly and gives the correct DNS name. To ensure no confusion, we also always init it with the full DNS name. It also means that, aside from the BUILTIN domain the initialized flag is set only in one place, which will help when we add more details to the domain structure in the future. This in turn allows kerberos authentication against winbindd on the AD DC. Andrew Bartlett Change-Id: Idc829cfe5f2e867c87107b49275b17f294821dcd Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* winbindd: Use rpc_pipe_open_interface() so that winbindd uses the correct ↵Andrew Bartlett2014-06-041-12/+31
| | | | | | | | | | | | | rpc servers This means that in the AD DC, we use the AD DC servers, while in the classic DC or file server we continue to use the built-in SAMR and LSA servers. Andrew Bartlett Change-Id: I63b1443f5665016f7fcbed35907ec29d4424ab18 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* winbindd: Remove pointless if statementAndrew Bartlett2014-06-041-14/+10
| | | | | | Change-Id: I7d2646078f6e7ba596b92da7d37c285d10ad38c0 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* samr: don't block the sam sid or the builtin domain sid in sid_to_nameStefan Metzmacher2014-02-251-0/+2
| | | | | | | | | | | | | Previously only members of these domains were handled. But we also need to handle the domain itself. Bug: https://bugzilla.samba.org/show_bug.cgi?id=10463 Change-Id: I44f85267eda243d586fffd24a799e153de0ff982 Pair-Programmed-With: Gregor Beck <gbeck@sernet.de> Signed-off-by: Gregor Beck <gbeck@sernet.de> Signed-off-by: Stefan Metzmacher <metze@sernet.de> Reviewed-by: Michael Adam <obnox@samba.org>
* s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam()Michael Adam2012-07-121-2/+2
| | | | | | | | | This does not check whether the given sid is in our domain, but but whether it belongs to the local sam, which is a different thing on a domain member server. Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Thu Jul 12 18:36:02 CEST 2012 on sn-devel-104
* s3: rename sid_check_is_domain() to sid_check_is_our_sam()Michael Adam2012-07-121-1/+1
| | | | | | This does not check whether the given sid is the domain sid, but whether it is the sid of the local sam, which is different for a domain member server.
* s3: Fix Coverity ID 242184 Dereference after null checkVolker Lendecke2012-05-101-5/+3
| | | | rpc_query_user unconditionally dereferences user_info if successfull
* s3: Fix two int/enum mixupsVolker Lendecke2011-08-261-2/+2
|
* s3-winbind: We need to use internal rpc connections in winbind.Andreas Schneider2011-08-211-2/+2
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Simo Sorce <idra@samba.org>
* s3-auth Use the common auth_session_infoAndrew Bartlett2011-07-201-4/+4
| | | | | | | | | | | This patch finally has the same structure being used to describe the authorization data of a user across the whole codebase. This will allow of our session handling to be accomplished with common code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Use struct auth3_session_info outside the auth subsystemAndrew Bartlett2011-07-201-4/+4
| | | | | | | | | | | | | | | This seperation between the structure used inside the auth modules and in the wider codebase allows for a gradual migration from struct auth_serversupplied_info -> struct auth_session_info (from auth.idl) The idea here is that we keep a clear seperation between the structure before and after the local groups, local user lookup and the session key modifications have been processed, as the lack of this seperation has caused issues in the past. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* Revert "s3-winbind: Fix paranoia checks in winbindd_samr.c."Stefan Metzmacher2011-06-161-2/+2
| | | | | | | | This reverts commit 207a84d725b905c2b119d2ef0f4f4d4eb391140d. This is the wrong fix for the problem, see bug #8215. metze
* s3-winbind: Fix paranoia checks in winbindd_samr.c.Andreas Schneider2011-06-151-2/+2
| | | | | | | | | | | This fixes looking up the correct unix user instead of allocation a new uid and creating it. Fix bug #8215 (winbind unix username lookup doesn't work correctly). (cherry picked from commit 531edfdd1924bfb2ef486820f7f5787098bd953a) Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Jun 15 09:56:01 CEST 2011 on sn-devel-104
* s3-winbindd: remove unused headers.Günther Deschner2011-05-021-3/+0
| | | | Guenther
* s3-rpc_client: add and use rpc_client/rpc_client.h.Günther Deschner2011-04-131-0/+1
| | | | Guenther
* s3-auth: use auth.h where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-passdb: use passdb headers where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it.Günther Deschner2011-03-301-5/+5
| | | | Guenther
* Remove two unused labels.Jeremy Allison2011-03-291-2/+0
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Mar 29 02:23:02 CEST 2011 on sn-devel-104
* s3: Fix Coverity ID 2143: DEADCODEVolker Lendecke2011-03-281-4/+0
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Mar 28 12:06:19 CEST 2011 on sn-devel-104
* s3: Fix Coverity ID 2143: DEADCODEVolker Lendecke2011-03-281-4/+0
|
* s3: Fix Coverity ID 2144, DEADCODEVolker Lendecke2011-03-161-1/+1
| | | | | | We could never have assigned the real value in line 481. Andreas, please check!
* s3: sid->domain_sid in winbindd_samr sam_rids_to_namesVolker Lendecke2011-03-101-8/+8
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Mar 10 19:33:47 CET 2011 on sn-devel-104
* s3: Fix paranoia check in sam_rids_to_namesVolker Lendecke2011-03-101-4/+2
|
* s3-auth Rename auth_serversupplied_info varaiables: server_info -> session_infoAndrew Bartlett2011-02-221-8/+8
| | | | | | | | | | | | | | | | | | | | | These variables, of type struct auth_serversupplied_info were poorly named when added into 2001, and in good consistant practice, this has extended all over the codebase in the years since. The structure is also not ideal for it's current purpose. Originally intended to convey the results of the authentication modules, it really describes all the essential attributes of a session. This rename will reduce the volume of a future patch to replaced these with a struct auth_session_info, with auth_serversupplied_info confined to the lower levels of the auth subsystem, and then eliminated. (The new structure will be the output of create_local_token(), and the change in struct definition will ensure that this is always run, populating local groups and privileges). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Fix some nonempty blank lines and some typosVolker Lendecke2011-02-091-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Feb 9 00:01:45 CET 2011 on sn-devel-104
* s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbindd_samr.c.Günther Deschner2011-02-021-13/+25
| | | | Guenther
* s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_samr.c.Günther Deschner2011-02-021-43/+92
| | | | Guenther
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-121-0/+1
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3-winbindd: Use rpc_open_pipe_interface in winbindd.Simo Sorce2010-09-151-2/+3
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* s3: Add "client_id" to pipes_structVolker Lendecke2010-08-181-0/+2
|
* s3: Lift the smbd_messaging_context from rpc_pipe_open_internalVolker Lendecke2010-08-081-0/+2
|
* s3-rpc: when using rpc_pipe_open_internal, make sure to go through NDR.Günther Deschner2010-07-081-2/+0
| | | | | | | Otherwise a lot of information that is usually generated in the ndr_push remains in an uninitialized state. Guenther
* s3:winbindd_samr Do not use static contextsSimo Sorce2010-07-071-4/+4
| | | | | It is a very bad idea to use a static context within the open function. Use the memory hierarchy to keep track of a client connection.
* s3-winbindd: route samr chgpwd ops for own domain over internal samr pipe as ↵Günther Deschner2010-07-071-4/+4
| | | | | | well. Guenther
* s3-winbind: Fixed debug messages of open_internal_lsa_pipe().Andreas Schneider2010-07-061-2/+2
|
* s3-winbind: Make sure we close all policy handles in sam.Andreas Schneider2010-07-061-0/+83
|
* s3-winbind: Use rpc_trusted_domains in samr.Andreas Schneider2010-07-051-61/+20
|
* s3-winbind: Rename common_password_policy to sam_password_policy.Andreas Schneider2010-07-051-6/+6
|
* s3-winbind: Rename common_lockout_policy to sam_lockout_policy.Andreas Schneider2010-07-051-6/+6
|
* s3-winbind: Use rpc_sequence_number in samr.Andreas Schneider2010-07-051-52/+24
|
* s3-winbind: Use rpc_lookup_groupmem in samr.Andreas Schneider2010-07-051-105/+22
|
* s3-winbind: Use rpc_lookup_useraliases in samr.Andreas Schneider2010-07-051-82/+26
|
* s3-winbind: Use rpc_lookup_usergroups in samr.Andreas Schneider2010-07-051-56/+21
|
* s3-winbind: Use rpc_query_user in samr.Andreas Schneider2010-07-051-56/+13
|
* s3-winbind: Use rpc_rids_to_names in samr.Andreas Schneider2010-07-051-78/+39
|
* s3-winbind: Use rpc_sid_to_name in samr.Andreas Schneider2010-07-051-57/+41
|
* s3-winbind: Use rpc_name_to_sid in samr.Andreas Schneider2010-07-051-54/+23
|
* s3-winbind: Use rpc_enum_local_groups in samr.Andreas Schneider2010-07-051-44/+16
|
* s3-winbind: Use rpc_query_user_list in samr.Andreas Schneider2010-07-051-87/+13
|