Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-01-06 | s3: Fix infinite loop in NCACN_IP_TCP asa there is no timeout. Assume ↵ | Bo Yang | 1 | -1/+2 | |
lsa_pipe_tcp is ok but network is down, then send request is ok, but select() on writeable fds loops forever since there is no response. Signed-off-by: Bo Yang <boyang@samba.org> | |||||
2009-11-26 | s3-rpc: Avoid including every pipe's client and server stubs everywhere in ↵ | Günther Deschner | 1 | -0/+4 | |
samba. Guenther | |||||
2009-11-24 | s3: Always try SamLogonEx | Volker Lendecke | 1 | -2/+6 | |
Required for cluster systems working in a Samba domain. With NT4 this won't work, but real NT4 DCs should not be around in environments that pay big bucks for a cluster... And if they are, they can always install a Samba DC trusting that NT4 domain. | |||||
2009-10-13 | s3: use enum netr_SchannelType all over the place. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2009-10-05 | Revert "s3: Attempt to fix machine password change" | Volker Lendecke | 1 | -2/+0 | |
This reverts commit 20a8ea91e10af167067cc794a251265aaf489e75. Ooops, this should not have been committed. | |||||
2009-10-05 | s3: Attempt to fix machine password change | Volker Lendecke | 1 | -0/+2 | |
2009-09-25 | s3:winbindd_cm: don't invalidate the whole connection when just samr gave ↵ | Stefan Metzmacher | 1 | -1/+12 | |
ACCCESS_DENIED metze | |||||
2009-09-24 | Revert "s3:winbindd: use a tcp connection for lsa in case ↵ | Stefan Metzmacher | 1 | -9/+0 | |
lookup_names/lookup_sids doesn't work over ncacn_np" This reverts commit f23691cffd39e5df81b7b075e61ed1def6cce9f6. This should not have been commited... metze | |||||
2009-09-24 | s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids ↵ | Günther Deschner | 1 | -0/+9 | |
doesn't work over ncacn_np metze | |||||
2009-09-23 | s3:winbind: Fix an uninitialized variable | Volker Lendecke | 1 | -1/+1 | |
2009-09-22 | s3-winbindd: Fix Bug #6711: trusts to windows 2008 (2008 r2) not working. | Günther Deschner | 1 | -0/+2 | |
Winbindd should always try to use LSA via an schannel authenticated ncacn_ip_tcp connection when talking to AD for LSA lookup calls. In Samba <-> W2k8 interdomain trust scenarios, LookupSids3 and LookupNames4 via an schannel ncacn_ip_tcp LSA connection are the *only* options to successfully resolve sids and names. Guenther | |||||
2009-09-22 | s3-winbindd: add cm_connect_lsa_tcp(). | Günther Deschner | 1 | -0/+59 | |
Guenther | |||||
2009-09-15 | s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags. | Günther Deschner | 1 | -5/+5 | |
Guenther | |||||
2009-09-11 | s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel(). | Günther Deschner | 1 | -3/+4 | |
Guenther | |||||
2009-09-11 | s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp ↵ | Günther Deschner | 1 | -1/+2 | |
and cli_rpc_pipe_open_ntlmssp. Guenther | |||||
2009-09-09 | s3-winbindd: Fix Bug #6700: Use dns domain name when needing to guess server ↵ | Günther Deschner | 1 | -1/+1 | |
principal. Patch from Robert LeBlanc <robert@leblancnet.us>. Thanks! Guenther | |||||
2009-08-23 | s3:winbind: For internal domains it is pointless to connect to a DC | Volker Lendecke | 1 | -0/+6 | |
2009-07-28 | Added prefer_ipv4 bool parameter to resolve_name(). | Jeremy Allison | 1 | -2/+2 | |
W2K3 DC's can have IPv6 addresses but won't serve krb5/ldap or cldap on those addresses. Make sure when we're asking for DC's we prefer IPv4. If you have an IPv6-only network this prioritizing code will be a no-op. And if you have a mixed network then you need to prioritize IPv4 due to W2K3 DC's. Jeremy. | |||||
2009-07-27 | Fix a typo | Volker Lendecke | 1 | -1/+1 | |
2009-05-07 | Fix some type-punned warnings | Volker Lendecke | 1 | -2/+5 | |
2009-04-21 | s3-secdesc: use SEC_FLAG_MAXIMUM_ALLOWED instead of SEC_RIGHTS_MAXIMUM_ALLOWED. | Günther Deschner | 1 | -9/+9 | |
Guenther | |||||
2009-04-20 | Fix to use modified cli_rpc_pipe_open_schannel_with_key API | Andrew Bartlett | 1 | -2/+2 | |
2009-04-20 | Remove use of talloc_reference in cli_rpc_pipe_open_schannel_with_key() | Andrew Bartlett | 1 | -1/+1 | |
2009-04-14 | s3: Fix ntlm_auth and winbindd to use new common libcli/auth APIs | Andrew Bartlett | 1 | -9/+9 | |
2009-04-14 | Rework Samba3 to use new libcli/auth code (partial) | Andrew Bartlett | 1 | -0/+1 | |
This commit is mostly to cope with the removal of SamOemHash (replaced by arcfour_crypt()) and other collisions (such as changed function arguments compared to Samba3). We still provide creds_hash3 until Samba3 uses the credentials code in netlogon server Andrew Bartlett | |||||
2009-03-18 | s3: remove POLICY_HND. | Günther Deschner | 1 | -3/+3 | |
Guenther | |||||
2009-03-17 | Fix a valgrind error | Volker Lendecke | 1 | -1/+1 | |
Found in "make test" -- if we can't connect at all, "cli" is uninitialized | |||||
2009-03-13 | Remove pwd_cache.c, it was doing nothing. Make user_name, domain, and | Jeremy Allison | 1 | -14/+25 | |
password talloc'ed strings within the cli_struct. Jeremy. | |||||
2009-03-06 | s3:winbindd_cm: remove useless cli_setup_signing_state(*cli, Undefined) call | Stefan Metzmacher | 1 | -2/+0 | |
cli_setup_signing_state() with Undefined is a noop. metze | |||||
2009-01-30 | Make cli_tcon_andx async | Volker Lendecke | 1 | -7/+2 | |
2009-01-14 | Fix bug in get_dc_name_via_netlogon(), null pointer refrence. | Bo Yang | 1 | -1/+1 | |
2009-01-13 | From boyang - ensure we never "return" from a forked child, always _exit(). | Jeremy Allison | 1 | -3/+3 | |
Jeremy. | |||||
2009-01-06 | Make winbindd_cm.c use winbindd_reinit_after_fork(). | Jeremy Allison | 1 | -14/+10 | |
Jeremy. | |||||
2009-01-05 | s3:events: change event_add_timed() prototype to match samba4 | Stefan Metzmacher | 1 | -4/+2 | |
metze | |||||
2009-01-05 | s3:winbindd: regain tickets for all ccache entries, when we go online | Stefan Metzmacher | 1 | -7/+1 | |
set_event_dispatch_time() is stupid by design and only handles the first event with a given name. metze | |||||
2009-01-05 | s3:winbindd: recreate the per domain check_online_event without relying on ↵ | Stefan Metzmacher | 1 | -19/+20 | |
global state set_event_dispatch_time() is stupid by design and just picks the first event with the given name. metze | |||||
2009-01-05 | Fix broken krb5 refresh chain | Bo Yang | 1 | -0/+2 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2009-01-05 | clean event context after child is forked. | Bo Yang | 1 | -1/+2 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2008-12-19 | Make cli_negprot return NTSTATUS instead of bool | Volker Lendecke | 1 | -3/+4 | |
2008-12-03 | s3: Change sockaddr util function names for consistency | Tim Prouty | 1 | -1/+1 | |
Also eliminates name conflicts with OneFS system libraries | |||||
2008-11-03 | s3: fix a few "shadows a global declaration" warnings | Tim Prouty | 1 | -4/+4 | |
2008-11-01 | Rename dos_errstr() to win_errstr() for consistency with Samba 4. | Jelmer Vernooij | 1 | -1/+1 | |
2008-10-23 | s3: fix simple "incompatible pointer type" build warning | Tim Prouty | 1 | -1/+1 | |
2008-10-23 | Use sockaddr_storage only where we rely on the size, use sockaddr | Jelmer Vernooij | 1 | -1/+1 | |
otherwise (to clarify we can also pass in structs smaller than sockaddr_storage, such as sockaddr_in). | |||||
2008-09-23 | s3: fix NETLOGON_NT_VERSION version flags. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2008-09-04 | Cleanup of DC enumeration in get_dcs() | Steven Danneman | 1 | -24/+74 | |
This is a fix for a few small inefficiencies/bugs in the get_dcs() path. * because the third add_one_dc_unique() loop was outside the ADS check all DCs returned from the non-sitename lookup were being tacked onto the dc_name_ip list twice. * add_one_dc_unique() now checks if the given IP address already exists before adding it to the list, making the returned list actually unique * added more thorough doxygen comment headers (This used to be commit cb2d488e1dbd90953c496c5e25d648977884f7e3) | |||||
2008-08-23 | Fix some nonempty blank lines | Volker Lendecke | 1 | -26/+26 | |
(This used to be commit 541e088656773d2b3b56a5a8bdc8dea6c9edec86) | |||||
2008-08-22 | Don't re-initialize a token when we already have one. This fixes the build ↵ | Jeremy Allison | 1 | -0/+3 | |
farm failures when winbindd connects as guest. This one took a *lot* of tracking down :-). Jeremy. (This used to be commit dca827791276906436452c650062164eb819dfe0) | |||||
2008-08-22 | winbindd: Fix crash in cm_connect_sam() | Gerald (Jerry) Carter | 1 | -2/+7 | |
Fix segv when talking to parent DC (joined to child domain). The root cause was (a) storing the parent domain in the cli_state struct caused the NTLMSSP pipe bind to fail which made us fallover to the schannel code path (b) the dcinfo pointer in cm_get_schannel_dcinfo() was returning NULL even though the function indicated success. (This used to be commit 5ce4a2ae6697970ea37d0078a506615b4b7a9a9c) | |||||
2008-08-20 | Here is a re-working of the winbindd | Jeremy Allison | 1 | -8/+31 | |
reconnect code to cope with rebooting a DC. This replaces the code I asked Volker to revert. The logic is pretty simple. It adds a new parameter, "winbind reconnect delay", set to 30 seconds by default, which determines how long to wait between connection attempts. To avoid overwhelming the box with DC-probe forked children, the code now keeps track of the DC probe child per winbindd_domain struct and only starts a new one if the existing one has died. I also added a little logic to make sure the dc probe child always sends a message whatever the reason for exit so we will always reschedule another connect attempt. Also added documentation. Jeremy. (This used to be commit 8027197635b988b3dcf9d3d00126a024e768fa62) |