summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
...
| * r22745: Add local groups to the --required-membership-sid test. This needsVolker Lendecke2007-05-072-91/+64
| | | | | | | | | | merging to 3_0_26 once Michael's net conf changes have been merged. It depends on token_utils.c.
| * r22744: Fix a valgrind error. parse_domain_username does not necessarily fill inVolker Lendecke2007-05-071-0/+3
| | | | | | | | the domain.
| * r22740: Move debug_*_user_token to token_utils.cVolker Lendecke2007-05-072-47/+47
| |
| * r22739: Make prototypes in include/util_tdb.h of some functions fromMichael Adam2007-05-071-6/+6
| | | | | | | | | | | | lib/util_tdb.c exactly match the definitions. (There were some [u]int_32_t instead of [u]int32, which made a gcc 2.95 on an old AIX without system [u]int32[_t] types complain...)
| * r22738: Fix a debug message.Volker Lendecke2007-05-071-1/+2
| | | | | | | | | | | | | | | | Günther, please check this! Thanks, Volker
| * r22737: Fix crash bug (info3 is now talloced).Günther Deschner2007-05-071-1/+1
| | | | | | | | Guenther
| * r22736: Start to merge the low-hanging fruit from the now 7000-line cluster ↵Volker Lendecke2007-05-0737-160/+149
| | | | | | | | | | | | | | | | | | patch. This changes "struct process_id" to "struct server_id", keeping both is just too much hassle. No functional change (I hope ;-)) Volker
| * r22732: - Testing of libsmbclient against Vista revealed what is likely a bug inDerrell Lipman2007-05-073-1/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Vista. Vista provides a plethora of kludges to simulate older versions of Windows. The kludges are in the form of shortcuts (or more likely symbolic links, but I don't know enough about Vista to determine that definitively) and in most cases, attempts to access them get back an "access denied" error. On one particular folder, however, "<share>/Users/All Users", it returns an unknown (to ethereal and the Samba3 code) NT status code: 0x8000002d. Although this code does not have a high byte of 0xc0 indicating that it is an error, it appears to be an alternate form of "access denied". Without this patch, libsmbclient times out on an attempt to enumerate that folder rather than returning an error to the caller. This patch corrects that problem.
| * r22731: - Fix bug #4594.Derrell Lipman2007-05-0710-102/+141
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | configure.in determines if -Werror-implicit-function-declaration is available, and if so it enables that flag if --enable-developer is specified. Since the configure tests themselves did not use that flag, it was possible for a configure test to succeed, followed by a failed compilation due to a facility being available but not having a proper declaration in a header file. (This bit me with readahead().) This patch ensures that if implicit function declarations will kill the build, the feature being tested is deselected so the build will succeed. The autoconf manual suggests using return instead of exit in configure tests because the declaration for exit is often missing. We require this now, since we error if prototypes are missing. See section 5.5.1 of http://www.gnu.org/software/autoconf/manual/autoconf.html. This patch makes these changes, because in fact, an external declaration for exit is missing here (and likely elsewhere). I've verified that the features selected (here) with the original configure.in and the new one are the same except for, in my case, readahead. I've also confirmed that the generated Makefile is identical. These changes are not being applied to the 3.0.26 branch because it does not exhibit the initial problem this patch is supposed to solve since it doesn't attempt to use -Werror-implicit-function-declaration.
| * r22730: Fix password changes via pam_winbindd when using "winbind normalize ↵Gerald Carter2007-05-061-0/+2
| | | | | | | | | | | | | | names" and the username has been munged. Make sure to munge it back before performing the change_password() request.
| * r22729: add help text for osver and osname options to 'net ads join' (patch ↵Gerald Carter2007-05-061-1/+6
| | | | | | | | from Dnailo A.)
| * r22728: Patch from Danilo Almeida <dalmeida@centeris.com>:Gerald Carter2007-05-062-9/+101
| | | | | | | | | | | | When asked to create a machine account in an OU as part of "net ads join" and the account already exists in another OU, simply move the machine object to the requested OU.
| * r22727: remove outdated comment about templatre shell and homedirGerald Carter2007-05-061-3/+1
| |
| * r22726: When performing an offline logon for a user in a trusted domain,Gerald Carter2007-05-061-0/+8
| | | | | | | | | | take care not to expire the name2sid cache entry just because that child does not know that the primary domain is offline.
| * r22725: * Don't try to update the sequence_number when offlineGerald Carter2007-05-061-3/+11
| | | | | | | | | | | | | | * Log the NTSTATUS when saving name/sid cache entry * Allow the backend loolkup_usergroups() call in winbindd_{rpc,ads}.c to inform the wcache manager that the group list should not be cached (needed for one-way trusts).
| * r22724: Call an nss_info backend's init() function if the Gerald Carter2007-05-061-3/+8
| | | | | | | | | | previous call was unsuccessful. needed for offline logons.
| * r22720: Fixes for offline auth when using krb5_auth = yes in pam_winbind.Gerald Carter2007-05-061-8/+26
| | | | | | | | | | Assume that "NO_DOMAIN_CONTROLLERS_FOUND" means that the domain is offline.
| * r22719: Missed change for one-way trust support. Ignore password policy Gerald Carter2007-05-061-1/+5
| | | | | | | | | | | | | | settings from one trusted domain with no incoming trust path. Guenther, I think this is ok as we only need the pw policy to give feedback on upcoming expiration times.
| * r22717: Add Everyone and AuthenticatedUsers to the user's tokenGerald Carter2007-05-061-1/+10
| | | | | | | | for use by the require-membership-of pam_winbind option.
| * r22716: Clarify comment in winbindd_domain structureGerald Carter2007-05-061-2/+2
| |
| * r22715: When our primary domain does on or offline, make sure to send a msgGerald Carter2007-05-062-23/+37
| | | | | | | | | | | | | | to the idmap child. Also remove the check for the global offline state in child_msg_offline() as this means we cannot mark domains offline due to network outages.
| * r22714: Prevent DNS lookup storms when the DNS servers are unreachable.Gerald Carter2007-05-061-9/+40
| | | | | | | | | | | | | | | | Helps when transitioning from offline to online mode. Note that this is a quick hack and a better solution would be to start the DNS server's state between processes (similar to the namecache entries).
| * r22713: Offline logon fixes for idmap manager:Gerald Carter2007-05-063-60/+80
| | | | | | | | | | | | | | | | | | | | | | (a) Ignore the negative cache when the domain is offline (b) don't delete expired entries from the cache as these can be used when offline (same model as thw wcache entries) (c) Delay idmap backend initialization when offline as the backend routines will not be called until we go online anyways. This prevents idmap_init() from failing when a backend's init() function fails becuase of lack of network connectivity
| * r22712: Inform the user when logging in via pam_winbindGerald Carter2007-05-064-0/+38
| | | | | | | | and the krb5 tkt cache could not be created due to clock skew.
| * r22711: Fix a compile warnign in query_user(). Ensure that user_ridGerald Carter2007-05-062-3/+2
| | | | | | | | is initialized.
| * r22710: Support one-way trusts. Gerald Carter2007-05-068-20/+290
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Rely on the fact that name2sid will work for any name in a trusted domain will work against our primary domain (even in the absense of an incoming trust path) * Only logons will reliably work and the idmap backend is responsible for being able to manage id's without contacting the trusted domain * "getent passwd" and "getent group" for trusted users and groups will work but we cannot get the group membership of a user in any fashion without the user first logging on (via NTLM or krb5) and the netsamlogon_cache being updated.
| * r22709: we can only use tschannel when commectcing to our primary (might ↵Gerald Carter2007-05-061-1/+8
| | | | | | | | need some fixing here for a Samba DC)
| * r22708: disable saving the trusted domain list as we want to the parent ↵Gerald Carter2007-05-061-0/+6
| | | | | | | | daemon to manage the complete trusted domain cache
| * r22707: missed merge from local tree: pass the correct state to the domain ↵Gerald Carter2007-05-061-1/+1
| | | | | | | | when calling the async lookupsid() routine
| * r22706: missed one reference to domain->native_mode in the previous commitGerald Carter2007-05-061-1/+1
| |
| * r22705: Implement new set_dc_type_and_flags() called based on theGerald Carter2007-05-063-9/+170
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | information return from our DC in the DsEnumerateDomainTrusts() call. If the fails, we callback ot the older connect-to-the-remote-domain method. Note that this means we can only reliably expect the native_mode flag to be set for our own domain as this information in not available outside our primary domain from the trusted information. This is ok as we only really need the flag when trying to determine to enumerate domain local groups via RPC. Use the AD flag rather than the native_mode flag when using ldap to obtain the seq_num for a domain.
| * r22704: Implement three step method for enumerating domain trusts.Gerald Carter2007-05-066-27/+339
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (a) Query our primary domain for trusts (b) Query all tree roots in our forest (c) Query all forest roots in trusted forests. This will give us a complete trust topology including domains via transitive Krb5 trusts. We also store the trust type, flags, and attributes so we can determine one-way trusted domains (outgoing only trust path). Patch for one-way trusts coming in a later check-in. "wbinfo -m" now lists all domains in the domain_list() as held by the main winbindd process.
| * r22703: Convert winbindd_getgrgid() and winbindd_getgetpwnam()Gerald Carter2007-05-061-113/+113
| | | | | | | | | | to use the same code path after we resolve the name/gid to a SID. Use the async lookupname/lookupsid interface.
| * r22702: Convert both lookup name and lookup sid to follow theGerald Carter2007-05-062-31/+105
| | | | | | | | | | | | | | | | | | | | same heuristic. First try our DC and then try a DC in the root of our forest. Use a temporary state since winbindd_lookupXXX_async() is called from various winbindd API entry points. Note this will break the compile. That will be fixed in the next commit.
| * r22701: Fix the krb5_nt_status error table and add the "no DCs found" mappingGerald Carter2007-05-061-2/+4
| |
| * r22700: Add a simple wcache TRUSTDOM api for maintaing a completeGerald Carter2007-05-062-1/+478
| | | | | | | | | | | | | | | | list of trusted domains without requiring each winbindd process to aquire this on its own. This is needed for various idmap plugins and for dealing with different trust topoligies. list_trusted_domain() patches coming next.
| * r22695: Dummy checkin (reformatting) to make the AIX hosts retry.Volker Lendecke2007-05-061-6/+6
| |
| * r22693: Always compile before checkin.... I've now installed dmapi on my ↵Volker Lendecke2007-05-061-1/+2
| | | | | | | | laptop :-)
| * r22692: Fix compilation of explicit --without-winbind.Volker Lendecke2007-05-051-4/+4
| | | | | | | | | | | | Thanks to Tom Bork for reporting this! Volker
| * r22691: Fix a 64-bit warning and a const const discard warningVolker Lendecke2007-05-052-5/+5
| |
| * r22688: Change lock_data in struct byte_range_lock from void * to struct ↵Volker Lendecke2007-05-052-25/+16
| | | | | | | | lock_struct *
| * r22677: One line fix to make net idmap restore work againSimo Sorce2007-05-041-0/+1
| | | | | | | | Jerry, please add this for 3.0.25 final
| * r22676: Fix zero alloc with create_rpc_blob().Jeremy Allison2007-05-041-13/+21
| | | | | | | | Jeremy.
| * r22675: Simo's patch for 0 size allocation. Still needJeremy Allison2007-05-045-19/+29
| | | | | | | | | | to examine parse_misc.c fix. Jeremy.
| * r22673: Fix for Jerry's reversion. We still need to check sizeJeremy Allison2007-05-041-4/+16
| | | | | | | | | | before talloc. Jeremy.
| * r22666: Expand kerberos_kinit_password_ext() to return NTSTATUS codes and makeGünther Deschner2007-05-043-7/+35
| | | | | | | | | | | | winbindd's kerberized pam_auth use that. Guenther
| * r22664: When we have krb5_get_init_creds_opt_get_error() then try to get the ↵Günther Deschner2007-05-044-0/+167
| | | | | | | | | | | | | | | | NTSTATUS codes directly out of the krb5_error edata. Guenther
| * r22663: Restructure kerberos_kinit_password_ext() error path.Günther Deschner2007-05-041-53/+33
| | | | | | | | Guenther
| * r22659: merge from SAMBA_4_0:Stefan Metzmacher2007-05-042-1/+14
| | | | | | | | | | | | | | | | - add AC_GNU_SOURCE macro for systems which don't have it (sles8) - fix compiler warning on some systems metze
| * r22655: Call correct free-macros in netsamlogon_cache_get() error paths. ↵Günther Deschner2007-05-031-4/+3
| | | | | | | | | | | | | | | | Forgot those in the previous commit. Guenther
generated by cgit (git 2.34.1) at 2025-09-26 15:09:36 +0000