summaryrefslogtreecommitdiff
path: root/source3/passdb
AgeCommit message (Collapse)AuthorFilesLines
2009-06-30Fix bug #6431 - local groups from 3.0 setups no longer found.Volker Lendecke1-8/+8
Search for groups without group suffix, group suffix is only used for new entries.
2009-06-29s3-pdb_tdb: give 'unknown_str' the proper name 'comment' and set comment in ↵Günther Deschner1-10/+15
passdb. pdb_{get,set}_comment were already existing in the API but were never used. Guenther
2009-06-29s3:pdb_ads: we need to make the fd for tldap/tsocket non-blockingStefan Metzmacher1-0/+2
metze
2009-06-28Turn the pdb_rid_algorithm into a capabilities call that returns flagsVolker Lendecke6-19/+19
2009-06-28Make pdb_ads survive a restart of Samba4Volker Lendecke1-106/+225
The search function retries once, the modifying call that hits a dead smbd returns an error. The next try will reconnect. This was simple to implement and provides a good compromise against Samba4 idling our connection. Most of the modifying calls are quickly after a search (like OpenUser) anyway.
2009-06-26s3:passdb: fix bug #6509: use gid (not uid) cache in fetch_gid_from_cache().Michael Adam1-1/+1
With the previous code, the cache can never have been hit at all. Michael
2009-06-24Only set the password if there is oneVolker Lendecke1-4/+8
2009-06-20Prepare control supportVolker Lendecke1-10/+11
We will have arrays of controls passed to tldap.c. Follow a mantra from the classic book "Thinking Forth" by Leo Brodie: Favor counts over terminators :-) This makes the parameter lists to tldap pretty long, but everyone will have wrapper routines anyway, see for example tldap_search_fmt. And the OpenLDAP manpages call the non-_ext routines deprecated, probably for a reason.
2009-06-20Fix setting passwords in pdb_adsVolker Lendecke1-6/+7
The samba4 password_hash module does not allow changing the password fields via the "delete oldval" -> "add newval" set of modify operations, it requires a single "replace with newval" operation. Andrew, Samba3 by default uses that delete/add pair to detect if between fetching the old value and storing the new one the old value has changed. This is lost by using the "replace" operation. Would it make sense to add this to the password_hash module? Volker
2009-06-20talloc_tos() aborts if it can not get a stackframeVolker Lendecke1-3/+0
2009-06-12Activate tldap tracing in pdb_adsVolker Lendecke1-0/+34
2009-06-11s3 passdb ads: add missing characterTim Prouty1-1/+1
2009-06-11Implement pdb_enum_alias_membershipsVolker Lendecke1-3/+88
2009-06-10Implement pdb_ads_set_aliasinfoVolker Lendecke1-1/+68
2009-06-10pdb_default_aliasinfo is just fine for pdb_ads right nowVolker Lendecke1-8/+1
2009-06-10Implement pdb_ads_lookup_ridsVolker Lendecke1-3/+69
2009-06-10Fix a segfault in pdb_ads_delete_user()Volker Lendecke1-3/+11
If a user comes from the passdb cache, priv is NULL
2009-06-09If there are no mods, don't bother the ldap serverVolker Lendecke1-0/+5
2009-06-09Some more fields in pdb_ads_init_ads_from_sam()Volker Lendecke1-0/+20
2009-06-09Do not pull samAccountName twiceVolker Lendecke1-7/+0
2009-06-09No need to free twice -- thanks gd :-)Volker Lendecke1-1/+0
2009-06-09Implement pdb_ads_[add|del]_groupmemVolker Lendecke1-11/+69
2009-06-09Implement pdb_ads_delete_dom_groupVolker Lendecke1-1/+47
2009-06-08Implement pdb_ads_enum_group_membersVolker Lendecke1-3/+57
2009-06-08Fix some nonempty blank linesVolker Lendecke1-34/+34
2009-06-08Fix two 64-bit warningsVolker Lendecke1-2/+2
2009-06-08Implement pdb_[add|del]aliasmemVolker Lendecke1-2/+99
2009-06-08Do not use a variable format stringVolker Lendecke1-1/+1
2009-06-08Implement pdb_ads_enum_aliasmemVolker Lendecke1-3/+86
2009-06-08Pass a talloc_ctx to pdb_enum_aliasmemVolker Lendecke3-5/+9
2009-06-08Implement pdb_ads_delete_aliasVolker Lendecke1-1/+44
2009-06-08Implement pdb_ads_create_dom_group()Volker Lendecke1-1/+69
2009-06-07More pdb_ads stuffVolker Lendecke1-6/+108
2009-06-07Make "net sam list" work for groups, aliases and builtinsVolker Lendecke1-7/+58
2009-06-07Return full info in pdb_ads_search_users()Volker Lendecke1-5/+17
2009-06-07s3-samr: fix return code of _samr_LookupRids when run with pdb_ldap.Günther Deschner1-0/+5
when _samr_LookupRids is called with no rids, it needs to return NT_STATUS_NONE_MAPPED (not NT_STATUS_NO_MEMORY). Found by RPC-SAMR torture test. Guenther
2009-06-06s3/passdb: Fix debug message: 'net setmaxrid' does not exist.Karolin Seeger1-2/+2
This is aiming bug #6351. Karolin
2009-06-06Add an early prototyp of pdb_ads.c.Volker Lendecke1-0/+1284
The purpose of this module is to connect to a locally running samba4 ldap server for an alternative "Franky" setup. Right now it contains a couple of gross hacks: For example it just takes the s4-chosed RID directly as uid/gid... Checking in tldap and pdb_ads now, I think 3777 insertions are enough for a start...
2009-05-31Fix some nonempty blank linesVolker Lendecke1-52/+52
2009-05-29s3-passdb: fix uninitialized variable in local_password_change().Günther Deschner1-1/+1
Guenther
2009-05-29Consolidate user create/delete paths in smbpasswdSimo Sorce1-147/+179
This patch changes the way smbpasswd behaves when adding/deleting users. smbpasswd now calls pdb_create_user/pdb_delete_user, this means that if add/delete user scripts are configured then they are used to create or delete unix users as well. If the scripts are not defined the behavioris unchanged. This also allow to use smbpasswd -a/-x with ldapsam:editposix to allow automatic creation/deletion of users. Signed-off-by: Günther Deschner <gd@samba.org>
2009-05-29util: move add_gid_to_array_unique to toplevel and add add_uid_to_array_unique.Günther Deschner1-20/+0
Guenther
2009-05-28TALLOC_ZERO_P->talloc_zeroVolker Lendecke1-1/+2
2009-05-28Do not segfault in pdb_search_destructor if no real search was startedVolker Lendecke1-1/+2
2009-05-27s3: zero an uninitialized arrayMarc VanHeyningen1-1/+4
Invalid pointers were being dereferenced in lookup_sids causing occasional seg faults. Signed-off-by: Tim Prouty <tprouty@samba.org>
2009-05-26Introduce "struct stat_ex" as a replacement for SMB_STRUCT_STATVolker Lendecke1-1/+1
This patch introduces struct stat_ex { dev_t st_ex_dev; ino_t st_ex_ino; mode_t st_ex_mode; nlink_t st_ex_nlink; uid_t st_ex_uid; gid_t st_ex_gid; dev_t st_ex_rdev; off_t st_ex_size; struct timespec st_ex_atime; struct timespec st_ex_mtime; struct timespec st_ex_ctime; struct timespec st_ex_btime; /* birthtime */ blksize_t st_ex_blksize; blkcnt_t st_ex_blocks; }; typedef struct stat_ex SMB_STRUCT_STAT; It is really large because due to the friendly libc headers playing macro tricks with fields like st_ino, so I renamed them to st_ex_xxx. Why this change? To support birthtime, we already have quite a few #ifdef's at places where it does not really belong. With a stat struct that we control, we can consolidate the nanosecond timestamps and the birthtime deep in the VFS stat calls. At this moment it is triggered by a request to support the birthtime field for GPFS. GPFS does not extend the system level struct stat, but instead has a separate call that gets us the additional information beyond posix. Without being able to do that within the VFS stat calls, that support would have to be scattered around the main smbd code. It will very likely break all the onefs modules, but I think the changes will be reasonably easy to do.
2009-05-16Move smb_create_user() in samsyncSimo Sorce1-60/+0
It is not used anywhere else, so make it also static and remove it from proto.h
2009-05-12s3: Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.Aravind Srinivasan2-26/+4
This is very similar to be1dfff02d562e42a7847bd02fed8538630d3f41
2009-05-12Fix the last few format arg missmatches I missed.Jeremy Allison1-4/+4
Jeremy.
2009-05-12Fix bug 6157Volker Lendecke1-1/+1
This patch picks the alphabetically smallest one of the multi-value attribute "uid". This fixes a regression against 3.0 and also becomes deterministic.