summaryrefslogtreecommitdiff
path: root/nsswitch
AgeCommit message (Collapse)AuthorFilesLines
2013-01-18nsswitch: Fix two bitfield constants being the same.Ira Cooper1-3/+1
WBFLAG_PAM_AUTH_PAC and WBFLAG_BIG_NTLMV2_BLOB are the same causing errors in NTLMv2 authentication. Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jan 18 22:13:09 CET 2013 on sn-devel-104
2013-01-18Sort winbind request flags. Ira saw we have a duplicate.Jeremy Allison1-9/+9
Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed by: Ira Cooper <ira@wakeful.net> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2013-01-10selftest: Add test for rfc2307 mapping handlingAndrew Bartlett1-0/+181
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-12-21libwbclient: Fix null check in process_domain_info_string().Andreas Schneider1-5/+0
Found by Coverity. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
2012-12-21nsswitch: Fix wbclient BAIL macros.Andreas Schneider1-2/+2
In the code you normally use: BAIL_ON_WBC_ERROR; but the last ; is statement never reached, so dead code. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
2012-12-12nsswitch: Fix pam_get_{item,data} build warnings.Andreas Schneider1-31/+15
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
2012-12-12nsswitch: Remove unused variable in _pam_winbind_change_pwd().Andreas Schneider1-3/+1
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
2012-12-12nsswitch: Cleanup code in parse_wbinfo_domain_user().Andreas Schneider1-1/+2
Found by Coverity. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
2012-12-03wbinfo: Use new samba_getpass() function.Andreas Schneider1-4/+11
Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
2012-11-22build: Do not install testing binariesAndrew Bartlett1-3/+4
These binaries are for developer or selftest use, and are not supported for installation onto the system. The autoconf build does not install these binaries, and so neither should the waf build. Andrew Bartlett Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Thu Nov 22 12:00:36 CET 2012 on sn-devel-104
2012-10-26pam_winbind: fix segfault in pam_sm_authenticate()David Disseldorp1-3/+4
Ensure the potentially null winbind context is not dereferenced on cleanup. https://bugzilla.samba.org/show_bug.cgi?id=8564 Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Oct 26 22:40:57 CEST 2012 on sn-devel-104
2012-10-22waf: Create a libnss_winbind.so symlink.Andreas Schneider1-0/+1
This fixes bug #9299.
2012-10-03nsswitch: Build nss_winbind on all supported platformsAndrew Bartlett1-10/+49
This matches what the autoconf build can do. Andrew Bartlett
2012-10-03selftest: Always build a linux-style nss_winbind for nss_wrapperAndrew Bartlett1-0/+9
2012-09-30s3: Fix libnss_winbind.so's build on Illumos/SolarisIra Cooper2-7/+20
Due to not building and linking in the winbind_nss_solaris bits in addition to the linux bits, nss was broken on Solaris. Autobuild-User(master): Ira Cooper <ira@samba.org> Autobuild-Date(master): Sun Sep 30 22:56:30 CEST 2012 on sn-devel-104
2012-09-26nsswitch: Add waf tests for solaris special casesAndrew Bartlett1-0/+16
These are in configure.in for autoconf. Found in the config.h comparison on the smbtorture4 build. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Sep 26 11:50:10 CEST 2012 on sn-devel-104
2012-09-21libwbclient: bump ABI to 0.11 as wbcAuthenticateUserEx now provides PAC parsingAndrew Bartlett3-2/+79
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Sep 21 06:37:15 CEST 2012 on sn-devel-104
2012-09-20winbind: Extend wbcAuthenticateUserEx to provide PACChristof Schmitt3-21/+38
With this new interface, external applications that have authenticated to an ADS can pass the PAC from the Kerberos ticket to wbcAuthenticateUserEx. winbindd decodes and extracts the info3 information for the external application. If winbindd can verify the PAC signature, the info3 from the PACis also added to the netsamlogon_cache. The info3 data can be used by the external application to get the uid and primary gid. The data in netsamlogon_cache allows to retrieve the complete group list through the NSS function getgrouplist. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-09-19pam_winbind: match more return codes when wbcGetPwnam has failed.Günther Deschner1-0/+3
This is required to properly return PAM_USER_UNKNOWN in case winbind had a problem. Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Sep 19 15:06:10 CEST 2012 on sn-devel-104
2012-09-12nsswitch: fix crash on null pam change pw responseLuca Lorenzetto1-1/+1
The function _pam_winbind_change_pwd crashes due to a null value passed to the function strcasecmp and denies to login via graphical login manager. Check for a null value before doing a strcasecmp. Bug-Ubuntu: https://bugs.launchpad.net/bugs/1003296 Bug: https://bugzilla.samba.org/show_bug.cgi?id=9013 Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Wed Sep 12 00:07:28 CEST 2012 on sn-devel-104
2012-08-23Extending space for fqdn in wbinfo --trusted-domains in verbose modeDaniel Liberman1-2/+2
Microsoft documentation states that maximum fqdn length is 64 characters, so extending DNS Domain column to 65 characters. Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Aug 23 03:49:00 CEST 2012 on sn-devel-104
2012-08-15libwbclient: Add test for wbcPingDc2Christof Schmitt1-0/+14
The internal domain used in 'make test' does not report a DC name, so just add tests similar to the old wbcPingDc call. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-15wbinfo: Improve output of wbinfo --ping-dcChristof Schmitt1-3/+5
Use wbcPingDc2 to get the DC name and print it. Cleanup error messages: Remove "Could not ping our DC", there is always a more specific message. Avoid printing "failed to call wbcPingDc" in case the ping has been attempted and it returns an error, the error is already printed. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-15libwbclient: Add wbcPingDc2Christof Schmitt4-2/+115
Add wbcPingDc2 that optionally returns the DC that was attempted to ping. wbcPing is implemented as a wrapper around wbcPingDc2. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-10nsswitch: add ABI checking and symbol versions to libwbclientAndrew Bartlett2-0/+78
This will ensure that we do not unintentionally break the ABI. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Aug 10 04:08:54 CEST 2012 on sn-devel-104
2012-06-12nsstest: fix use of a non-existent word (existant)Michael Adam1-4/+4
2012-05-16libwbclient: Fix an invalid free()Volker Lendecke1-1/+1
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Wed May 16 00:00:00 CEST 2012 on sn-devel-104
2012-05-15wbinfo: Fix Coverity ID 242684 Resource leakVolker Lendecke1-0/+1
2012-05-15wbinfo: Fix Coverity ID 242685 Resource leakVolker Lendecke1-0/+1
2012-05-09allow to use system iniparser library.Günther Deschner1-1/+1
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed May 9 17:38:33 CEST 2012 on sn-devel-104
2012-04-25Fix bug reported by Dina_Fine@Dell.com.Jeremy Allison1-16/+19
Don't ask the DC for an IP list when locating kdc's. Ask for the name and use getaddrinfo to get all possible addresses instead. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Apr 25 22:01:18 CEST 2012 on sn-devel-104
2012-04-24Fix pam_winbind build against newer iniparser librarySimo Sorce1-4/+4
iniparser_getstr is deprecated and has been removed in newer libraries available in Fedora. Use iniparse_getstring instead. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue Apr 24 02:56:10 CEST 2012 on sn-devel-104
2012-04-23build: Remove support for system libwbclientAndrew Bartlett1-8/+19
This effectively reverts commit 2c49782dc1069eebc9f5a5cd2a055b5912665595 This also adds explaination about what would need to be done to support a system libwbclient Andrew Bartlett
2012-04-23selftest: Add test for bug #8884: wbinfo --group-info=administrator ↵Andrew Bartlett1-0/+2
segfaults s4-winbindd Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 23 07:44:50 CEST 2012 on sn-devel-104
2012-04-20selftest: Add extra info on what is failing in wbclient testsAndrew Bartlett1-65/+71
This may help me chase down the failure in my idmap rework. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Apr 20 09:51:35 CEST 2012 on sn-devel-104
2012-04-20libwbclient: bump version to 0.9, and add this version to .pc fileAndrew Bartlett2-3/+7
2012-04-17waf: Add possibility to build with system libwbclient.Andreas Schneider2-9/+28
2012-02-25nsswitch: Remove a pointless if-clauseVolker Lendecke1-1/+1
gr->num_gr_mem is a uint32, so it can never be < 0
2012-02-20nsstest: Allocate the correct sized buffer for initgroupsAndrew Bartlett1-1/+1
Found by chance due to a re-order of the tests to start s3member earlier and chasing down a malloc Abort into a valgrind error. Only happens when a user has more than 4 groups. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Feb 20 05:23:04 CET 2012 on sn-devel-104
2012-02-06s3-nsswitch: Fix warnings on Solaris.Ira Cooper1-0/+1
Add "system/passwd.h" so struct group is declared. Autobuild-User: Ira Cooper <ira@samba.org> Autobuild-Date: Mon Feb 6 18:28:53 CET 2012 on sn-devel-104
2012-02-01selftest: Remove unused support for --exeextAndrew Bartlett1-1/+1
2012-01-06s3: No value change, just use the correct enum valueVolker Lendecke1-1/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 6 16:33:42 CET 2012 on sn-devel-104
2011-10-27nsswitch: Disable uid_wrapper in libwbclient.Andreas Schneider3-0/+5
This way we don't have to link against it in the autoconf build.
2011-10-11lib/param move source4 param code to the top levelAndrew Bartlett1-1/+1
This is done so that the lpcfg_ functions are available across the whole build, either with the struct loadparm_context loaded from an smb.conf directly or as a wrapper around the source3 param code. This is not the final, merged loadparm, but simply one step to make it easier to solve other problems while we make our slow progress on this difficult problem. Andrew Bartlett
2011-10-08build: build wbinfo only once in the waf buildAndrew Bartlett2-1/+7
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sat Oct 8 04:52:03 CEST 2011 on sn-devel-104
2011-10-06Add missing com_err dependenciesEwoud Kohl van Wijngaarden1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Oct 6 02:10:21 CEST 2011 on sn-devel-104
2011-09-23build: avoid util.h as a public header name due to conflict with MacOSAndrew Bartlett1-1/+1
2011-09-23wbclient: added support for handling WBC_ID_TYPE_BOTH mappingsAndrew Tridgell1-0/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Michael Adam <obnox@samba.org>
2011-09-23libwbclient: added support for WBC_ID_TYPE_BOTHAndrew Tridgell2-1/+6
the Samba4 winbindd allows for a single SID to map to both a user and group id. This is used to support files with the owner_sid set to a group Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Michael Adam <obnox@samba.org>
2011-09-08nsswitch: make the wbcSidsToUnixIds() parser more robustAndrew Tridgell1-2/+2
this allows it to handle new types of responses Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>