summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r21057: More refactoring into functions.Jeremy Allison2-65/+95
Jeremy. (This used to be commit fe2d7cb2dcd7c4d25d71f196aa557ce3e287bb4c)
2007-10-10r21056: Moving the set_domain_online_request to fork_domain_child() (formerlyGünther Deschner1-9/+12
lived in trustdom_recv(). Jeremy, this is the better place I think but please check. Guenther (This used to be commit beed8b8b320ae9bd8aef669564a5403e4bb35bfd)
2007-10-10r21054: More function refactoring.Jeremy Allison1-24/+52
Jeremy. (This used to be commit b6f43e9509cfedbf77c883cff793c469d6f86370)
2007-10-10r21053: More refactoring and fix the tests (set position infoJeremy Allison1-53/+93
on a pathname is ignored). Jeremy. (This used to be commit 3c7a876c909d3ba1fdf8f0e38735279a874ab245)
2007-10-10r21052: Refactoring.Jeremy Allison1-25/+43
Jeremy. (This used to be commit 9e31d7dba383c5c14f746537a631a4119dac0cd0)
2007-10-10r21051: More function refactoring... Added #if 0 forJeremy Allison1-34/+55
questionable practice (ignoring bad fsp on handle based call). Jeremy. (This used to be commit 5a8c9286c30319f2d2685d4ae29db37679b87e02)
2007-10-10r21050: Factor out SMB_SET_FILE_DISPOSITION_INFO. MyJeremy Allison1-23/+57
intent is to factor out all cases where we always return from the case. Jeremy. (This used to be commit 3eca52ba435954f338281f0a9d00b942bab28bab)
2007-10-10r21049: Start to refactor some of the setpath set codeJeremy Allison1-74/+73
into separate functions (tridge mailed me a fresh batch) to make it easier to add the POSIX open we'll need soon. Jeremy. (This used to be commit 63bd8759fefe6af80186ab15b470658614690b48)
2007-10-10r21047: Hand marshalling hack from Martin Zielinski <mz@seh.de>Jeremy Allison1-0/+9
to allow Vista to upload printer drivers (it wants level 8 which we don't support yet). Downgrade in the same way that Windows servers do. Jeremy. (This used to be commit 01c659692c3e054904f1af815cf243b8a1dde109)
2007-10-10r21046: Backing out svn r20403 (Andrew's krb5 ticket cleanupGerald Carter2-0/+53
as this is causing the WRONG_PASSWORD error in the SetUserInfo() call during net ads join). We are now back to always list RC4-HMAC first if supported by the krb5 libraries. (This used to be commit 4fb57bce87588ac4898588ea4988eadff3a7f435)
2007-10-10r21036: Fix the ad nss info backend to not abort the search when called ↵Gerald Carter1-16/+10
outside the idmap daemon (This used to be commit 57160e3dd96a7a776389da604393c20a738202ea)
2007-10-10r21035: Remove unneeded checks on incoming uid/gid forJeremy Allison1-15/+35
mknod (fifo) unix extensions code. Problem discovered by Anders Karlsson <anders.karlsson@redhat.com>. Jeremy. (This used to be commit ec6033ad7c8d343969e3dcf59232cb16d075364f)
2007-10-10r21034: Don't force user to have pidl in their PATH.James Peach1-1/+5
(This used to be commit 9e2118969d444d2ffd1e9818cbbb155238fab719)
2007-10-10r21033: To make the logs a bit more readable let the winbind dc connect childGünther Deschner1-0/+3
write to a separate logfile. Guenther (This used to be commit 0313edc0d66c26b5acb6250e0f146218a02b42cd)
2007-10-10r21021: Fix memleak.Günther Deschner1-0/+1
Guenther (This used to be commit 4e622572eb7939c6aa8e99fd9595bf28836bd5a3)
2007-10-10r21020: Some pam_winbind fixes:Günther Deschner1-14/+13
* make debug_state also configurable from the config file * minor code cleanup Guenther (This used to be commit c562095953df55c91e3dad8f5c29c0b66664b62b)
2007-10-10r21019: Fix typo.Günther Deschner1-1/+1
Guenther (This used to be commit adb40884e04069e7de7580b6531675ebaed5c117)
2007-10-10r21018: Removing the set_domain_online_request again in trustdom_recv().Günther Deschner1-9/+0
Jeremy, we really can't do that. There are setups with hundred and more trusted domains out there, I have one customer who tells me it takes more then half an hour for him after winbind is up and running. That request registers the check_domain_online_handler which in turn forks off the child immediately. Also discussed with Volker. Guenther (This used to be commit ccd4812c0b436a12b809668d09c5681111125f3d)
2007-10-10r21016: Fix pam_sm_setcred again.Günther Deschner1-1/+1
Jerry, the switch statement must ignore the PAM_SILENT flag. Guenther (This used to be commit 46d23c72bf4f3bd04021a9caf8d6b1380352b811)
2007-10-10r21015: fix typo that breaks the buildGerald Carter1-1/+1
(This used to be commit f82a5175304a12b18abb2bc3d9fd9f7023998357)
2007-10-10r21014: move some functionss to winbindd_group.c and make staticGerald Carter2-148/+144
(This used to be commit af5a2fa9eccf753106cd944be31f38845363ace6)
2007-10-10r21013: * Remove "inline" keywordGerald Carter1-5/+5
* Remove anpther check for PAM_SILENT that prevents logging to syslog * Add missing check for TRY_FIRST_PASS when using authtok (missed from previous merge) (This used to be commit ed794f0872b749955f56112507fd3ae7a6c6e6f5)
2007-10-10r21012: Patch from Danilo Almeida @ Centeris (via me):Gerald Carter2-21/+168
Details: Improve PAM logging - The improved logging is far tracking down PAM-related bugs - PAM_SILENT was being mis-used to suppress syslog output instead of suppressing user output. This lets PAM_SILENT still log to syslog. - Allow logging of item & data state via debug_state config file option. - Logging tracks the pam handle used. (This used to be commit cc1a13a9f06e5c15c8df19d0fbb31dbdeb81a9cc)
2007-10-10r21011: Another patch from Danilo Almeida @ Centeris (via me):Gerald Carter1-4/+7
Details: Reset the "new password prompt required" state whenever we do a new auth. In more detail, in pam_sm_authenticate, if not settting PAM_WINBIND_NEW_AUTHTOK_REQD, then clean any potentially present PAM_WINBIND_NEW_AUTHTOK_REQD. (This used to be commit 402e8594759b42c1986f4f8d69273f68ec5160af)
2007-10-10r21010: fix the pstring change in ntlm_auth for require-membership-of in ↵Gerald Carter1-1/+1
ntlm_auth (This used to be commit 2d877e41d1fdf71b45074f257930062539e379d8)
2007-10-10r21009: Patch from Danilo Almeida @ Centeris (via me).Gerald Carter3-49/+236
Patch details: Support most options in pam_winbind.conf; support comma-separated names in require-membership-of. Details below: 1) Provides support for almost all config options in pam_winbind.conf (all except for use_first_pass, use_authtok, and unknown_ok). - That allows us to work well when invoked via call_modules from pam_unix2.conf as well as allowing use of spaces in names used w/require_membership_of. 2) Support for comma-separated list of names or SID strings in require_membership_of/require-membership-of. - Increased require_membership_of field in winbind request from fstring (256) to pstring (1024). - In PAM side, parse out multiple names or SID strings and convert all of them to SID strings. - In Winbind side, support membership check against multiple SID strings. (This used to be commit 4aca9864896b3e0890ffc9a6980d7ef1311138f7)
2007-10-10r21007: move $(SOCKET_WRAPPER_OBJ) to OBJ definition instead of link line likeHerb Lewis1-6/+8
all other uses - merge from 3_0_24 (This used to be commit 99172f56c0041d43890167150cfc575d7c1b59f1)
2007-10-10r21005: Add a debug message for EAGAIN error of setresuid.Volker Lendecke1-1/+7
Volker (This used to be commit 70c589a8323637ff8e1f96a56f8acaf550a58dc4)
2007-10-10r21004: Patch from Mathias Dietz <MDIETZ@de.ibm.com> to fix multi-nodeJim McDonough1-1/+1
sharemodes in gpfs. (This used to be commit 61841b225c2a09dcdb4b1242cb0ad0429ec1948e)
2007-10-10r21003: Display LDAP base in debug statement.Günther Deschner1-2/+2
Guenther (This used to be commit fb5830f87a16dbec16893348080bcdfc61e27ab0)
2007-10-10r21002: Get rid of unused macros - merge change from 3_0_24Herb Lewis3-48/+40
(This used to be commit 9d23cf0cc4a8974bf0cf74b219a1138383083360)
2007-10-10r21001: * Use a simple '#define LDAPMessage void' to fix the buildGerald Carter5-45/+9
problems in the nss_info interface when HAVE_LDAP is undefined. * Revert previous ifdef HAVE_ADS brakets * Remove an unused init function wrapper. (This used to be commit 2ba353848b6d8d36520e7fd82576653a39c602cd)
2007-10-10r20998: Fix debug messageVolker Lendecke1-1/+2
(This used to be commit a5a1c8c785939e7cf6108adb573ac277726f584b)
2007-10-10r20996: Build fix from Kai BlinAndrew Bartlett1-1/+2
(This used to be commit 91fdbd4cf5f8fe44adcbe8dc8ef38579a8306c39)
2007-10-10r20994: Remove unused code.James Peach1-122/+0
(This used to be commit 8052a18f29d32f37c52868b17143af8d76bf5e6e)
2007-10-10r20993: temporary build fix to get things going again on non-ADS systemsGerald Carter1-0/+4
(This used to be commit 8c23158f053b181421cb6206db7c8030ddcc2cea)
2007-10-10r20992: another attempt at fixing the build breakageGerald Carter4-26/+37
(This used to be commit 7011a1b5abc7d56da5beba904e3328014f315f0d)
2007-10-10r20987: fix build farm breakage when ADS support is not present (caused by ↵Gerald Carter1-0/+4
nss_info_methods API) (This used to be commit 4982be312151c4d9b97f06afe88c30d8065be4be)
2007-10-10r20986: Commit the prototype of the nss_info plugin interface.Gerald Carter18-456/+893
This allows a provider to supply the homedirectory, etc... attributes for a user without requiring support in core winbindd code. The idmap_ad.c module has been modified to provide the idmap 'ad' library as well as the rfc2307 and sfu "winbind nss info" support. The SID/id mapping is working in idmap_ad but the nss_info still has a few quirks that I'm in the process of resolving. (This used to be commit aaec0115e2c96935499052d9a637a20c6445986e)
2007-10-10r20985: leave room for terminating NULL when printing password hashes via ↵Gerald Carter1-2/+2
'pdbedit -L -w' (This used to be commit 2a7311db272b5a504e2db672d92adbb3cf2bea15)
2007-10-10r20982: Fix a segfault -- I wonder why my make test did not show this earlier...Volker Lendecke1-1/+2
(This used to be commit 4984b0627c84cc192868238c0936ca1a38628cd8)
2007-10-10r20979: Fix description, thanks to Michael Adam <ma@sernet.de>Volker Lendecke1-1/+1
(This used to be commit 4610465d7f8b1d145b4923f03bd1559c79ad8e70)
2007-10-10r20970: Allow to define workstation for samlogon in rpcclient (for testing).Günther Deschner2-8/+17
Guenther (This used to be commit 5d4747fdf2e5874cb5d2238ee62e4fcac1676134)
2007-10-10r20966: Only attempt to reload the config file atfer the fork point if weJames Peach1-2/+6
are in daemon mode. If we are in inetd mode, there's really no point in rechecking it so soon. (This used to be commit 029d4bb5e3ea02a8a396adc3ca564a714bcdfdb8)
2007-10-10r20965: Fix spelling.James Peach1-2/+2
(This used to be commit 0eb19b57286f176dd4b7e86504d004e1450f6a10)
2007-10-10r20951: Remove the DOM_SID field in the struct idmap_domain and bounceGerald Carter3-142/+128
domain SID lookups through the struct winbindd_domain *domain_list by searching by name. Refactor the order lookup when searching for the correct idmap_domain to a single function and remove the requirement that the default domain be listed first in the config file. I would still like to make the idmap_domain array a linked list and remove the existing code which makes use of indexes into the list. Basic testing with tdb pans out ok. (This used to be commit e6c300829ff08dd354f6e9460d396261681e4809)
2007-10-10r20933: Fix the build without inotifyVolker Lendecke1-2/+2
(This used to be commit 4587d8097255c8b8fb8990bc8a13f8145986d29d)
2007-10-10r20932: This is the basic infrastructure for inotify support. This is far ↵Volker Lendecke4-1/+283
from being complete, in particular the various mask bits are not correctly supported yet. Checkin in now, I want to see how the build farm likes it. Volker (This used to be commit c9a5d011a91359b242f6c26f46e96ecea6a44a3b)
2007-10-10r20931: This changes the notify infrastructure from a polling-based to an ↵Volker Lendecke12-785/+484
event-driven based approach. The only remaining hook into the backend is now void *(*notify_add)(TALLOC_CTX *mem_ctx, struct event_context *event_ctx, files_struct *fsp, uint32 *filter); (Should we put this through the VFS, so that others can more easily plug in?) The trick here is that the backend can pick filter bits that the main smbd should not handle anymore. Thanks to tridge for this idea. The backend can notify the main smbd process via void notify_fsp(files_struct *fsp, uint32 action, char *name); The core patch is not big, what makes this more than 1800 lines are the individual backends that are considerably changed but can be reviewed one by one. Based on this I'll continue with inotify now. Volker (This used to be commit 9cd6a8a82792b7b6967141565d043b6337836a5d)
2007-10-10r20917: Fix missing error returns pointed out by "Li, Ying (ESG)" ↵Jeremy Allison1-0/+3
<ying.li2@hp.com> Jeremy. (This used to be commit 78387b3cd2e4eff8f09b6c498ca37b016ed9ecbc)