Age | Commit message (Collapse) | Author | Files | Lines |
|
This patch fixes the segfaults I introduced in the previous conneciton caching
patch. It cleans up the connection cache a *lot* - in particular it adds
significant robustness to the operation.
If a the DC goes down, we no longer fail the next operation - the code checks
if the connection died during one of its own operations on the socket, and
restarts the conneciton as required.
There is still a memory leak in here somewhere - but this code also cleans up a
number of these.
Also added is the abilty to sepecify the domain of the 'get around restrict anonymous'
user that winbind uses.
Andrew Bartlett
(This used to be commit 92cbefdf2783bf9dbbb2179c1b2f7cdb802d84a9)
|
|
(This used to be commit a56298d56ae67a764e9b9a43c1c568b7125e1c18)
|
|
(This used to be commit 50fa21c995d33601920b3b56a3e03b09262e7fd9)
|
|
should be LDAP_MOD_REPLACE. Caught by Alexey Kotovich.
(This used to be commit be48a05ed95f0f4ed02ffb996cb1ecc10811d9a0)
|
|
(This used to be commit e18a7c26476e05f95850ac2bbeb42c2588115741)
|
|
(This used to be commit 09fc979172327d6396642e824f6d482c6f986850)
|
|
(This used to be commit d082d3a9fc2d6eddf82b1583eb1cbfcf5965f1a0)
|
|
(This used to be commit e097666499564ffe28836876a7a191149c14f199)
|
|
(This used to be commit 1f186c60ad957c0e8157a6fd903857121c65a2e0)
|
|
(This used to be commit 3f7ba70615008d74a145a94aa087cae08efab343)
|
|
(This used to be commit 6169b668fe955f298c7323c5d64f6c7b303aaac0)
|
|
malloc checks and return ADS_ERROR(LDAP_NO_MEMORY) if they fail.
(This used to be commit 81d76f05d8b886a86eb421d1bd8737ec7d05cbde)
|
|
(This used to be commit bb574aab8f3f4ac2f7ae919790481a419f8173cb)
|
|
(This used to be commit 46bd77a02a47c26c4981472c8cea09e64c2ef4d2)
|
|
Add a connection cache to the netlogon pipe. This makes a *massive* difference
to the time-per-auth. Also fix up *some* of the memory leaks in other
connection caches.
Add some debugging messages for the is_connected() code. I'm thinking we
should get a client implementation of SMBecho and call it here - as it would
allow us to always know the DC is around before we start.
Down the debug level for some of the pam_winbind code - I'll probably down it
further when I'm finished debugging.
Andrew Bartlett
(This used to be commit 49d3e476662220775ef8da7db01ea17e77e11b0b)
|
|
(This used to be commit 2df8df4cd9b271ac91245bd44d6384483c1a4524)
|
|
(if you remove the smbpasswd file, you wont be able to change the passwords
contained therein... :-)
Andrew Bartlett
(This used to be commit dd8388330e5ad0ae1a82f876e3a95fba854d1528)
|
|
Jeremy.
(This used to be commit 771ef92fc6e43725b7cc351079998a8acb74abef)
|
|
(This used to be commit b9c843532508ea5fd4633dd7d82452fd89d63eab)
|
|
Andrew Bartlett
(This used to be commit dfecd6a4534743a3e140eafc9836911286793951)
|
|
(This used to be commit e734c1971d2841b2cfe37414fe4893f4a66b22a9)
|
|
(This used to be commit dfc8883305abf7630e6446a0b865bae99ec2f5a4)
|
|
(This used to be commit 690c1fae9ce0ad6a8adef42ed5a7d8cfedab261d)
|
|
(This used to be commit 8ae0abb174aec0c76d6900b08914535d0a2d425c)
|
|
get trusted domains query but leave the domain SID blank - we need to
fail the add of the trusted domain in winbindd in that case
(This used to be commit 24c7e7a3849df3a3378f7e7f20099de048f0b7bd)
|
|
here at the UofM was burned today because they had left that line in its
default location.
(This used to be commit fd4d3496e142574e2bd25faab5c8f1534a21558f)
|
|
:-)
Andrew Bartlett
(This used to be commit 542e0e37455e6bcd8e0c248b3bb6ede8306d1656)
|
|
control for permissive modify.
(This used to be commit 01e7f7c3d9006883b71e43d917d32e325cff7a15)
|
|
(This used to be commit f424b691ea76819e90f10919b0506bb2216ecd0e)
|
|
(This used to be commit a9316754c7ef6244e69bec25ca20dad0019f77e1)
|
|
(This used to be commit dc3fb2e6dcd92efd7468bd8121fbc49e3dadb8ea)
|
|
(This used to be commit 6c08c233e6675056c0ee0bbc4ecdcbc205950f54)
|
|
Andrew Bartlett
(This used to be commit 59afc3d6daad2770219dba1ca113869967eefc23)
|
|
This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error
conversions, and uses them to make the error handling in pam_winbind sane.
In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...'
stuff, and logs the NTSTATUS error that winbind now sends over the pipe.
Added code to wbinfo to display these - makes a big difference in debugging
winbindd.
The main change here is the code to allow pam_winbind password changing to
correctly stack - This code ripped from pam_unix, and the copyright attached.
(Same as for all pam modules, including pam_winbind)
Andrew Bartlett
(This used to be commit dc1a72f896b83bc1ad3c7bf6c12c36ace3967280)
|
|
(This used to be commit 22be40b6b8c034c143ce5d804628bc12cb1cc3dd)
|
|
- show client count in progress
(This used to be commit 10ee1d22e606847d40fb013c694ed5733ef6b87b)
|
|
(This used to be commit 2c67b266cc4848dff6066fcbc875ab5f91113179)
|
|
Jeremy.
(This used to be commit d1e911afd08971c6cf5429bda929663a5dd8f63d)
|
|
(This used to be commit 36f816a5e12a80f0184f43cbd44ef5fac53fcb81)
|
|
(This used to be commit c78b16c1f850562b65acb6143e55b1aefc075753)
|
|
(This used to be commit e72c6fb36ebd3ea8fc6b6d8e1b1a9ff1ccb3ade9)
|
|
(This used to be commit 22f348a1f9501cc00d46d6c6064f71198558c0ee)
|
|
"code page directory", "character set", et. al.)
(This used to be commit 6ff236249559f8a11381cab9cc1757b26764a39d)
|
|
some problems under *BSD and etc ...
(This used to be commit 6bd91973bbacc718de5d32a6819cc7e6ae98dd6f)
|
|
(This used to be commit e3bb6867454307ae592115e205d32ddd53988678)
|
|
if new simpiler syntax was a bad idea...).
Andrew Bartlett
(This used to be commit 717f45ca3ca85ca47f6d7b9379c17480f0bf82e4)
|
|
We now have error messages for most of the failure cases, and the
'sid' arguments for delete and change can now take the nt group name
as a string.
Also fix up all the internal functions to be static, keeping the
namespace clean.
Andrew Bartlett
(This used to be commit f1687587010a2390b65bd5efa37cc199b67587f8)
|
|
they were only being used correctly in one location, and all other assumed the semicolon wasn't there. Amazing that none of them mattered syntactically, until today.
(This used to be commit 6515c3e8ef546975657e45fce7f147fe4a08e9ca)
|
|
printer modify, now that the ldap control is working.
(This used to be commit 76afc886a89e8c0d5a169435dde42b00db522060)
|
|
BOOLs. Add support for bervals in mod lists. Also put undocumented AD ldap control in to allow modifications when an attribute does not yet exist.
(This used to be commit 1a2d27b21e61be5a314f7d6c4ea0dff06a5307be)
|