summaryrefslogtreecommitdiff
path: root/source3/passdb
AgeCommit message (Collapse)AuthorFilesLines
2011-02-10s3: Align tldap_add and tldap_add_sendVolker Lendecke1-3/+3
2011-02-06s3: Add primary group in pdb_ads_enum_group_membershipsVolker Lendecke1-21/+27
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Feb 6 18:41:08 CET 2011 on sn-devel-104
2011-02-06s3: Fix auth_netlogond to cope with netlogon_creds_CredentialStateVolker Lendecke1-25/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Feb 6 17:30:48 CET 2011 on sn-devel-104
2011-02-06s3: Fix a potential memleak in secrets_fetch_trusted_domain_passwordVolker Lendecke1-1/+3
2011-02-06s3: In pdb_ads, cope with artificial samu structsVolker Lendecke1-2/+10
2011-02-06s3: Use strlcpy in pdb_ads_connectVolker Lendecke1-2/+2
2011-01-17s3-auth: Fixed account lockout check.Andreas Schneider1-1/+1
2010-12-07Make sure that user exists after running add user script before adding sam ↵Bjoern Baumbach1-0/+5
account. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Dec 7 17:37:52 CET 2010 on sn-devel-104
2010-12-01s3-waf: avoid module name uppercasing.Günther Deschner1-10/+10
This finally allows mixed case module names like the classic build (./configure --shared_modules=charset_CP850) Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 1 18:39:14 CET 2010 on sn-devel-104
2010-10-20Make getpwnam_alloc() static to lib/username.c, and ensure all username ↵Jeremy Allison3-5/+5
lookups go through Get_Pwnam_alloc(), which is the correct wrapper function. We were using it *some* of the time anyway, so this just makes us properly consistent. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Oct 20 16:02:12 UTC 2010 on sn-devel-104
2010-10-18s3-waf: fix pdb modules build.Günther Deschner1-14/+13
Guenther
2010-10-12libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett15-9/+15
This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
2010-10-03s3: Remove talloc_autofree_context from pdb_interfaceVolker Lendecke1-1/+1
None of the pdb backends have special destructors that need to be run at program exit.
2010-09-27s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.Günther Deschner1-0/+1
Guenther
2010-09-27s3-waf: move pdb subsystem to pdb/wscript_build.Günther Deschner1-0/+48
Guenther
2010-09-26s3: Remove talloc_autofree_context() from guest_user_info()Volker Lendecke1-1/+2
pwd is freed a few lines down
2010-09-26s3: Remove talloc_autofree_context() from lookup_unix_user_name()Volker Lendecke1-1/+1
pwd is freed in this routine immediately
2010-09-26s3: Remove talloc_autofree_context() from pdb_init_ads()Volker Lendecke1-1/+1
2010-09-20s3: Replace sid_binstring and sid_guidstring with PIDL-based alternativesAndrew Bartlett1-10/+11
This reduces the manual marshalling of these structures by removing the duplication here. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-20s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.Günther Deschner9-17/+26
Guenther
2010-09-11s3-auth Change type of num_sids to uint32_tAndrew Bartlett1-2/+3
size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-08-30s3-passdb: Try to unlock the account if it is locked out.Andreas Schneider1-10/+53
Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-30s3-passdb: Added a pdb_try_account_unlock function.Andreas Schneider1-0/+74
The function checks if the account has been autolocked. If we have a lockout_duration and a bad password time it checks if we can unlock the account. Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-26s3-build: use dbwrap.h only where needed.Günther Deschner5-0/+5
Guenther
2010-08-26s3-idmap: only include idmap headers where needed.Günther Deschner2-0/+2
Guenther
2010-08-26s3-build: only include nsswitch header where needed.Günther Deschner1-0/+1
Guenther
2010-08-26s3-build: only include memcache.h where needed.Günther Deschner2-0/+2
Guenther
2010-08-14s3:pdb_ldap: move some code in ldapsam_create_dom_group()Michael Adam1-22/+25
to make the flow more similar to ldapsam_create_user(). This prepares for calling winbind_sid_to_gid() instead of winbind_allocate_gid(): we need the group_sid for this... Michael
2010-08-06s3-passdb: include samr.h where needed.Günther Deschner3-0/+3
Guenther
2010-08-05s3-secrets: only include secrets.h when needed.Günther Deschner8-0/+8
Guenther
2010-07-11s3: [ug]id_to_unix_... can not failVolker Lendecke1-4/+12
Remove some silly failure checks
2010-07-06s3:pdb_ldap: change LDAP password before samba password hashesBjörn Jacke1-33/+34
this way we can catch up with password change refuses from ldap password policy overlays and abort the password change early. Thanks to Andy Hanton <andyhanton@gmail.com> for the initial patch.
2010-07-06s3: Fix another aspect of bug 7262 and make paged results work againVolker Lendecke1-4/+4
2010-07-05s3: Make talloc_attrs() staticVolker Lendecke1-1/+1
2010-07-01s3-libads: only include libds flags where needed.Günther Deschner1-0/+1
Guenther
2010-06-28s3-passdb: Make sure dn is initialized and don't free it.Andreas Schneider1-3/+1
dn is just a pointer to a memory which hasn't been duplicated. Found by clang-analyzer.
2010-06-28s3-passdb: Make sure we don't call free on a garbage pointer.Andreas Schneider1-1/+1
Found by clang-analyzer.
2010-06-28s3-passdb: Make sure that we don't assign garbage.Andreas Schneider1-1/+1
2010-06-10s3: Fix EnumDomainAliases when no aliases are in LDAPVolker Lendecke1-6/+4
We used to return NT_STATUS_ACCESS_DENIED, now we just return 0 entries, just like W2k8 does. usrmgr.exe was pretty unhappy with the NT_STATUS_ACCESS_DENIED
2010-06-10s3:pdb_ldap: fix bug 7505 - init_sam_from_ldap stores group in sid2uid cacheMichael Adam1-1/+1
2010-06-10s3-passdb: Fix typo in comment.Karolin Seeger1-1/+1
Karolin
2010-06-09s3: Fix bug 7253Volker Lendecke1-1/+8
acct_ctrl is 32 bit in LOGIN_CACHE, but "w" as a format specifier for tdb_unpack only writes 16 bits. Okay on x86, not okay on Solaris. Thanks to Vladimir.Marek@Sun.COM! Volker
2010-06-07s3:passdb Export function to calculate the proper primary group sidSimo Sorce2-86/+132
Don't keep it buried in passdb, this function need to be available for use in places where we do not want to construct an artificial samu struct just to play tricks. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-02s3: Allow previous password to be stored and use it to check ticketsMatthieu Patou1-4/+77
This patch is to fix bug 7099. It stores the current password in the previous password key when the password is changed. It also check the user ticket against previous password. Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-31s3-build: only use ndr_security.h where needed.Günther Deschner1-0/+1
Guenther
2010-05-29s3:passdb Fix memory leakSimo Sorce1-0/+1
We were allocating this passwd structure on sampass, but never freeing it nor assigning it to unix_pw where it could be reused.
2010-05-21s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett15-221/+221
This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-21s3:passdb Remove use of uint8 uint16 and uint32 in favour of C99 typesAndrew Bartlett5-229/+229
Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-18s3-passdb: move get_logon_hours_from_pdb() into samr server.Günther Deschner1-23/+0
Guenther
2010-05-18s3:split secrets.c to put machine account secrets in a new fileAndrew Bartlett2-366/+398
This helps the s3compat effort by allowing these functions to be replaced by functions that query the cli_credentials and secrets.ldb APIs. Also, this changes a couple of DOM_SID to struct dom_sid along the way. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
generated by cgit (git 2.34.1) at 2024-12-18 10:20:35 +0000