summaryrefslogtreecommitdiff
path: root/source3/winbindd/winbindd.c
AgeCommit message (Collapse)AuthorFilesLines
2010-04-08s3:winbindd: make "smbcontrol winbindd validate-cache" reliable againStefan Metzmacher1-0/+3
commit 73577205cf81644e7fe853eaf3e6459f7f443096 (s3:winbindd: fix problems with SIGCHLD handling (bug #7317)) broke this. metze
2010-04-01s3:winbindd: remove unused variablesStefan Metzmacher1-2/+0
metze
2010-04-01s3:winbindd: fix problems with SIGCHLD handling (bug #7317)Stefan Metzmacher1-11/+3
The main problem is that we call CatchChild() within the parent winbindd, which overwrites the signal handler that was registered by winbindd_setup_sig_chld_handler(). That means winbindd_sig_chld_handler() and winbind_child_died() are never triggered when a winbindd domain child dies. As a result will get "broken pipe" for all requests to that domain. To reduce the risk of similar bugs in future we call CatchChild() in winbindd_reinit_after_fork() now. We also use a full winbindd_reinit_after_fork() in the cache validation child now instead instead of just resetting the SIGCHLD handler by hand. This will also fix possible tdb problems on systems without pread/pwrite and disabled mmap as we now correctly reopen the tdb handle for the child. metze
2010-04-01s3: fix a typo in winbind_client_response_writtenVolker Lendecke1-2/+2
2010-03-26s3-smbd: Don't close stdout if we want to log to stdout.Andreas Schneider1-1/+1
2010-03-22s3: Fix a bad memleak in winbindVolker Lendecke1-1/+2
2010-03-10s3: Fix a long-standing problem with recycled PIDsVolker Lendecke1-1/+6
When a samba server process dies hard, it has no chance to clean up its entries in locking.tdb, brlock.tdb, connections.tdb and sessionid.tdb. For locking.tdb and brlock.tdb Samba is robust by checking every time we read an entry from the database if the corresponding process still exists. If it does not exist anymore, the entry is deleted. This is not 100% failsafe though: On systems with a limited PID space there is a non-zero chance that between the smbd's death and the fresh access, the PID is recycled by another long-running process. This renders all files that had been locked by the killed smbd potentially unusable until the new process also dies. This patch is supposed to fix the problem the following way: Every process ID in every database is augmented by a random 64-bit number that is stored in a serverid.tdb. Whenever we need to check if a process still exists we know its PID and the 64-bit number. We look up the PID in serverid.tdb and compare the 64-bit number. If it's the same, the process still is a valid smbd holding the lock. If it is different, a new smbd has taken over. I believe this is safe against an smbd that has died hard and the PID has been taken over by a non-samba process. This process would not have registered itself with a fresh 64-bit number in serverid.tdb, so the old one still exists in serverid.tdb. We protect against this case by the parent smbd taking care of deregistering PIDs from serverid.tdb and the fact that serverid.tdb is CLEAR_IF_FIRST. CLEAR_IF_FIRST does not work in a cluster, so the automatic cleanup does not work when all smbds are restarted. For this, "net serverid wipe" has to be run before smbd starts up. As a convenience, "net serverid wipedbs" also cleans up sessionid.tdb and connections.tdb. While there, this also cleans up overloading connections.tdb with all the process entries just for messaging_send_all(). Volker
2010-03-05s3:winbindd: add DEBUG(10,...) for the end of each top levelStefan Metzmacher1-6/+24
That will hopefully make debugging a bit easier (at least for me). metze
2010-02-23s3: Consolidate server_id_self into the equivalent procid_self()Volker Lendecke1-1/+1
2010-02-09s3: Don't invalidate cache for uninitialized domains.Bo Yang1-1/+24
Signed-off-by: Bo Yang <boyang@samba.org>
2010-01-24s3: Add wbinfo --ccache-saveVolker Lendecke1-0/+1
With this command you can give winbind your password for later use by the automatic ntlm_auth
2009-12-26s3:winbind Make the normal client exit message a bit more understandableVolker Lendecke1-2/+7
2009-12-26s3: winbindd_cli_state->getgrent_state is no longer usedVolker Lendecke1-4/+0
2009-12-26s3: getgrent_state has been replaced by grent_stateVolker Lendecke1-1/+1
2009-12-21s3:winbind: Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dcVolker Lendecke1-0/+2
This just does a NULL RPC call through an existing NETLOGON connection. If someone knows an operation that "just works" and does not return NOT_SUPPORTED, please tell me :-)
2009-10-13s3-winbindd: add wbint_ChangeMachineAccount implementation.Günther Deschner1-0/+2
Guenther
2009-09-21s3:winbindd: avoid writing to a closed connection and generate SIGPIPEStefan Metzmacher1-12/+13
metze
2009-09-07s3:winbind: Convert WINBINDD_SET_HWM to the new APIVolker Lendecke1-4/+2
2009-09-07s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new APIVolker Lendecke1-1/+2
2009-09-07s3:winbind: Convert WINBINDD_SET_MAPPING to the new APIVolker Lendecke1-1/+2
2009-09-07s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new APIVolker Lendecke1-1/+2
2009-08-30w3:winbind: Convert WINBINDD_ALLOCATE_GID to the new APIVolker Lendecke1-1/+2
2009-08-30w3:winbind: Convert WINBINDD_ALLOCATE_UID to the new APIVolker Lendecke1-1/+16
2009-08-29s3:winbind: Convert WINBINDD_LIST_GROUPS to the new APIVolker Lendecke1-1/+2
2009-08-29s3:winbind: Convert WINBINDD_LIST_USERS to the new APIVolker Lendecke1-1/+2
2009-08-29s3:winbind: Convert the getgrent functions to the new APIVolker Lendecke1-7/+6
2009-08-29w3:winbind: Convert WINBINDD_LOOKUPRIDS to the new APIVolker Lendecke1-4/+2
2009-08-29s3:winbind: Convert the GETDCNAME routines to the new APIVolker Lendecke1-1/+2
2009-08-29s3:winbind: Convert winbindd_dsgetdcname to the new APIVolker Lendecke1-1/+2
2009-08-29s3:winbind: Convert the GETPWENT routines to the new APIVolker Lendecke1-8/+7
2009-08-27s3:winbind: Convert WINBINDD_GETUSERSIDS to the new APIVolker Lendecke1-2/+2
2009-08-16s3:winbind: The get[gr|pw]end functions need access to the client stateVolker Lendecke1-1/+2
2009-08-16s3:winbind: Convert WINBINDD_GETGRNAM to the new APIVolker Lendecke1-1/+2
2009-08-16s3:winbind: Convert WINBINDD_GETGRGID to the new APIVolker Lendecke1-1/+2
2009-08-16s3:winbind: Convert winbindd_show_sequence to the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_GETGROUPS to the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_GETUSERDOMGROUPS to the new APIVolker Lendecke1-2/+2
2009-08-05s3:winbind: Convert WINBINDD_GETSIDALIASES to the new APIVolker Lendecke1-2/+2
2009-08-05s3:winbind: Convert WINBINDD_GETPWUID to the new APIVolker Lendecke1-2/+2
2009-08-05s3:winbind: Convert WINBINDD_GETPWNAM to the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_GETPWSID to the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_GID_TO_SID the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_UID_TO_SID the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_SID_TO_GID the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_SID_TO_UID to the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Convert WINBINDD_LOOKUPNAME to the new APIVolker Lendecke1-1/+2
2009-08-05s3:winbind: Remove old version of WINBINDD_PINGVolker Lendecke1-1/+0
2009-08-05s3:winbind: Convert WINBINDD_LOOKUPSID to the new APIVolker Lendecke1-1/+2
2009-07-31Slightly restructure the async winbind request calling conventionVolker Lendecke1-7/+12
The main loop now allocates the response, this has to be done everywhere
2009-07-27Fix a valgrind error in winbindVolker Lendecke1-1/+2
When looking for idle clients, we dereferenced state->response. As this is dynamically allocated now, the proper test is whether state->response exists at all. This is the case when an async operation is in process at that moment.
generated by cgit (git 2.34.1) at 2024-11-06 06:03:09 +0000