summaryrefslogtreecommitdiff
path: root/source3/winbindd/winbindd.c
AgeCommit message (Collapse)AuthorFilesLines
2010-11-14Move error reporting of messaging context creation fail intoJeremy Allison1-0/+10
the daemons themselves. Allows client utilities to silently fail to create a messaging context due to access denied on the messaging tdb (which I need for the following patch). Jeremy.
2010-11-02s3-debug Impove setup_logging() to specify logging to stderrAndrew Bartlett1-1/+5
This change improves the setup_logging() API so that callers which wish to set up logging to stderr can simply ask for it, rather than directly modify the dbf global variable. Andrew Bartlett
2010-10-18s3-winbind: Fixed init order.Andreas Schneider1-3/+3
We need the system server info in the rpc services. Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Mon Oct 18 12:43:16 UTC 2010 on sn-devel-104
2010-10-08Move talloc_enable_null_tracking() to the s3 daemonsVolker Lendecke1-1/+7
2010-09-30s3: Add "smbcontrol winbindd ip-dropped <local-ip>"Volker Lendecke1-0/+4
This is supposed to improve the winbind reconnect time after an ip address has been moved away from a box. Any kind of HA scenario will benefit from this, because winbindd does not have to wait for the TCP timeout to kick in when a local IP address has been dropped and DC replies are not received anymore.
2010-09-14Allows changing the maximum number of simultaneous clients in winbindd ↵Pierre Carrier1-5/+3
through an smb.conf option. Signed-off-by: Jeremy Allison <jra@samba.org>
2010-08-26winbindd: Add the client status in the clients list outputPierre Carrier1-4/+12
Hello list, Considered relevant by a customer. As I suppose one doesn't send SIGUSR2 very often, I didn't bother adding another DEBUGLEVEL. -- Pierre
2010-08-26winbindd: useless functionPierre Carrier1-8/+1
Hello list, Seems simple enough for my first patch :) -- Pierre
2010-08-26s3-idmap: only include idmap headers where needed.Günther Deschner1-0/+1
Guenther
2010-08-26s3-build: only include nsswitch header where needed.Günther Deschner1-0/+1
Guenther
2010-08-14s3:winbind: remove the method REMOVE_MAPPING from winbind's APIMichael Adam1-2/+0
Michael
2010-08-14s3:winbind: remove the method SET_MAPPING from winbind's APIMichael Adam1-2/+0
Michael
2010-08-14s3:winbind: remove SET_HWM from winbind's API.Michael Adam1-2/+0
2010-08-05s3-popt: Only include popt-common.h when needed.Andreas Schneider1-0/+1
2010-08-05s3-secrets: only include secrets.h when needed.Günther Deschner1-0/+1
Guenther
2010-07-19s3-rpc_server: Added callbacks for init and shutdown of a rpc service.Andreas Schneider1-2/+2
This adds two callback function for each rpc service. One is for initialisation and the other for shutdown. rpc_<service>_unregister() needs to be called to execute the shutdown function.
2010-07-08s3-rpc: when using rpc_pipe_open_internal, make sure to go through NDR.Günther Deschner1-0/+5
Otherwise a lot of information that is usually generated in the ndr_push remains in an uninitialized state. Guenther
2010-07-05s3-winbind: Initialize the server_info on winbindd start.Andreas Schneider1-0/+5
2010-07-04s3: Pass the new server_id through reinit_after_forkVolker Lendecke1-3/+5
2010-07-04s3: Remove serverid_[de]register_selfVolker Lendecke1-2/+3
This removes some deep references to procid_self()
2010-06-10s3:winbindd use common server context functionsSimo Sorce1-14/+0
2010-05-31s3:winbindd move reinit_after_fork() back out of winbindd_register_handlersAndrew Bartlett1-12/+12
This particular init function needs to be done in a native Samba3 build, but it turns out to be difficult for s3compat, which has other code listening on the sockets. Andrew Bartlett
2010-05-31s3:winbind Make state->mem_ctx a talloc child of stateAndrew Bartlett1-1/+1
This way everything is destoryed at the conclusion of the connection correctly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-05-31s3:winbind tidy up connecting the winbind sockets.Andrew Bartlett1-2/+18
By putting this code inline in winbindd_setup_listeners() we remove 2 static variables and simplify the code. By putting the get_winbind_priv_pipe_dir() in the same file, we allow it to be reimplemented in s3compat. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-05-31Revert "s3:winbindd Split helper functions to allow s3compat to call them"Andrew Bartlett1-29/+22
I'm experimenting with a different entry point This reverts commit f5c0f90da5f5372ca6b7a72daa8d073a2444a068.
2010-05-13s3:winbindd Provide a winbindd_register_handlers() helper function for s3compatAndrew Bartlett1-95/+101
This function provides a useful entry point for s3compat to set things up in winbindd. Andrew Bartlett
2010-05-13s3:winbindd Split helper functions to allow s3compat to call themAndrew Bartlett1-22/+29
This provides a more useful entry point for s3compat. Andrew Bartlett
2010-05-13s3:Winbindd Move winbindd_event_context to a different fileAndrew Bartlett1-10/+0
This allows this function to be easily replaced in s3compat Andrew Bartlett
2010-05-13s3:winbindd Remove call to namecache_enable().Andrew Bartlett1-4/+0
This call only prints a DEBUG() Andrew Bartlett
2010-05-06s3: only include gen_ndr headers where needed.Günther Deschner1-0/+1
This shrinks include/includes.h.gch by the size of 7 MB and reduces build time as follows: ccache build w/o patch real 4m21.529s ccache build with patch real 3m6.402s pch build w/o patch real 4m26.318s pch build with patch real 3m6.932s Guenther
2010-04-23s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async APIVolker Lendecke1-4/+3
2010-04-19s3: Convert WINBINDD_PAM_LOGOFF to the new async APIVolker Lendecke1-1/+2
2010-04-19s3: Convert WINBINDD_PAM_CHAUTHTOK to the new async APIVolker Lendecke1-1/+2
2010-04-19s3: Convert WINBINDD_PAM_AUTH_CRAP to the new async APIVolker Lendecke1-1/+2
2010-04-19s3: Convert WINBINDD_PAM_AUTH to the new async APIVolker Lendecke1-1/+2
2010-04-08s3:winbindd: make "smbcontrol winbindd validate-cache" reliable againStefan Metzmacher1-0/+3
commit 73577205cf81644e7fe853eaf3e6459f7f443096 (s3:winbindd: fix problems with SIGCHLD handling (bug #7317)) broke this. metze
2010-04-01s3:winbindd: remove unused variablesStefan Metzmacher1-2/+0
metze
2010-04-01s3:winbindd: fix problems with SIGCHLD handling (bug #7317)Stefan Metzmacher1-11/+3
The main problem is that we call CatchChild() within the parent winbindd, which overwrites the signal handler that was registered by winbindd_setup_sig_chld_handler(). That means winbindd_sig_chld_handler() and winbind_child_died() are never triggered when a winbindd domain child dies. As a result will get "broken pipe" for all requests to that domain. To reduce the risk of similar bugs in future we call CatchChild() in winbindd_reinit_after_fork() now. We also use a full winbindd_reinit_after_fork() in the cache validation child now instead instead of just resetting the SIGCHLD handler by hand. This will also fix possible tdb problems on systems without pread/pwrite and disabled mmap as we now correctly reopen the tdb handle for the child. metze
2010-04-01s3: fix a typo in winbind_client_response_writtenVolker Lendecke1-2/+2
2010-03-26s3-smbd: Don't close stdout if we want to log to stdout.Andreas Schneider1-1/+1
2010-03-22s3: Fix a bad memleak in winbindVolker Lendecke1-1/+2
2010-03-10s3: Fix a long-standing problem with recycled PIDsVolker Lendecke1-1/+6
When a samba server process dies hard, it has no chance to clean up its entries in locking.tdb, brlock.tdb, connections.tdb and sessionid.tdb. For locking.tdb and brlock.tdb Samba is robust by checking every time we read an entry from the database if the corresponding process still exists. If it does not exist anymore, the entry is deleted. This is not 100% failsafe though: On systems with a limited PID space there is a non-zero chance that between the smbd's death and the fresh access, the PID is recycled by another long-running process. This renders all files that had been locked by the killed smbd potentially unusable until the new process also dies. This patch is supposed to fix the problem the following way: Every process ID in every database is augmented by a random 64-bit number that is stored in a serverid.tdb. Whenever we need to check if a process still exists we know its PID and the 64-bit number. We look up the PID in serverid.tdb and compare the 64-bit number. If it's the same, the process still is a valid smbd holding the lock. If it is different, a new smbd has taken over. I believe this is safe against an smbd that has died hard and the PID has been taken over by a non-samba process. This process would not have registered itself with a fresh 64-bit number in serverid.tdb, so the old one still exists in serverid.tdb. We protect against this case by the parent smbd taking care of deregistering PIDs from serverid.tdb and the fact that serverid.tdb is CLEAR_IF_FIRST. CLEAR_IF_FIRST does not work in a cluster, so the automatic cleanup does not work when all smbds are restarted. For this, "net serverid wipe" has to be run before smbd starts up. As a convenience, "net serverid wipedbs" also cleans up sessionid.tdb and connections.tdb. While there, this also cleans up overloading connections.tdb with all the process entries just for messaging_send_all(). Volker
2010-03-05s3:winbindd: add DEBUG(10,...) for the end of each top levelStefan Metzmacher1-6/+24
That will hopefully make debugging a bit easier (at least for me). metze
2010-02-23s3: Consolidate server_id_self into the equivalent procid_self()Volker Lendecke1-1/+1
2010-02-09s3: Don't invalidate cache for uninitialized domains.Bo Yang1-1/+24
Signed-off-by: Bo Yang <boyang@samba.org>
2010-01-24s3: Add wbinfo --ccache-saveVolker Lendecke1-0/+1
With this command you can give winbind your password for later use by the automatic ntlm_auth
2009-12-26s3:winbind Make the normal client exit message a bit more understandableVolker Lendecke1-2/+7
2009-12-26s3: winbindd_cli_state->getgrent_state is no longer usedVolker Lendecke1-4/+0
2009-12-26s3: getgrent_state has been replaced by grent_stateVolker Lendecke1-1/+1
2009-12-21s3:winbind: Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dcVolker Lendecke1-0/+2
This just does a NULL RPC call through an existing NETLOGON connection. If someone knows an operation that "just works" and does not return NOT_SUPPORTED, please tell me :-)
generated by cgit (git 2.34.1) at 2024-11-10 08:44:04 +0000