Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-03-10 | s3: Fix a long-standing problem with recycled PIDs | Volker Lendecke | 1 | -8/+0 | |
When a samba server process dies hard, it has no chance to clean up its entries in locking.tdb, brlock.tdb, connections.tdb and sessionid.tdb. For locking.tdb and brlock.tdb Samba is robust by checking every time we read an entry from the database if the corresponding process still exists. If it does not exist anymore, the entry is deleted. This is not 100% failsafe though: On systems with a limited PID space there is a non-zero chance that between the smbd's death and the fresh access, the PID is recycled by another long-running process. This renders all files that had been locked by the killed smbd potentially unusable until the new process also dies. This patch is supposed to fix the problem the following way: Every process ID in every database is augmented by a random 64-bit number that is stored in a serverid.tdb. Whenever we need to check if a process still exists we know its PID and the 64-bit number. We look up the PID in serverid.tdb and compare the 64-bit number. If it's the same, the process still is a valid smbd holding the lock. If it is different, a new smbd has taken over. I believe this is safe against an smbd that has died hard and the PID has been taken over by a non-samba process. This process would not have registered itself with a fresh 64-bit number in serverid.tdb, so the old one still exists in serverid.tdb. We protect against this case by the parent smbd taking care of deregistering PIDs from serverid.tdb and the fact that serverid.tdb is CLEAR_IF_FIRST. CLEAR_IF_FIRST does not work in a cluster, so the automatic cleanup does not work when all smbds are restarted. For this, "net serverid wipe" has to be run before smbd starts up. As a convenience, "net serverid wipedbs" also cleans up sessionid.tdb and connections.tdb. While there, this also cleans up overloading connections.tdb with all the process entries just for messaging_send_all(). Volker | |||||
2010-02-28 | s3: Remove unused count_all_current_connections() | Volker Lendecke | 1 | -1/+0 | |
2010-02-09 | s3: Don't invalidate cache for uninitialized domains. | Bo Yang | 1 | -0/+1 | |
Signed-off-by: Bo Yang <boyang@samba.org> | |||||
2010-01-24 | s3: Add wbinfo --ccache-save | Volker Lendecke | 1 | -0/+3 | |
With this command you can give winbind your password for later use by the automatic ntlm_auth | |||||
2010-01-02 | s3: Make free_domain_list() static | Volker Lendecke | 1 | -1/+0 | |
2010-01-02 | s3: Introduce domain_is_forest_root() helper function | Volker Lendecke | 1 | -0/+1 | |
Hopefully this makes the flag tests a bit more understandable | |||||
2009-12-26 | s3: Replace IS_DOMAIN_OFFLINE by a function | Volker Lendecke | 1 | -0/+1 | |
2009-12-26 | s3: winbindd_cli_state->getgrent_state is no longer used | Volker Lendecke | 1 | -1/+0 | |
2009-12-23 | s3: Remove some unused code | Volker Lendecke | 1 | -17/+0 | |
2009-12-23 | s3: Remove unused sendto_child() | Volker Lendecke | 1 | -2/+0 | |
2009-12-21 | s3:winbind: Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc | Volker Lendecke | 1 | -0/+7 | |
This just does a NULL RPC call through an existing NETLOGON connection. If someone knows an operation that "just works" and does not return NOT_SUPPORTED, please tell me :-) | |||||
2009-12-21 | s3: Shrink winbindd_proto.h a bit | Volker Lendecke | 1 | -71/+0 | |
2009-12-21 | s3: Remove unused get_sam_group_entries | Volker Lendecke | 1 | -1/+0 | |
2009-12-21 | s3: Remove unused winbindd_dual_getsidaliases | Volker Lendecke | 1 | -2/+0 | |
2009-12-21 | s3: Remove unused winbindd_dual_getuserdomgroups | Volker Lendecke | 1 | -2/+0 | |
2009-12-21 | s3: Remove unused winbindd_dual_getdcname | Volker Lendecke | 1 | -2/+0 | |
2009-12-21 | s3: Remove unused winbindd_dual_lookupname | Volker Lendecke | 1 | -2/+0 | |
2009-12-21 | s3: Remove unused winbindd_dual_lookupsid | Volker Lendecke | 1 | -2/+0 | |
2009-12-21 | s3: Remove some unused dual functions | Volker Lendecke | 1 | -8/+0 | |
2009-12-21 | s3: Remove unused do_async | Volker Lendecke | 1 | -6/+0 | |
2009-12-21 | s3: Remove unused winbindd_gid2sid_async | Volker Lendecke | 1 | -3/+0 | |
2009-12-21 | s3: Remove unused winbindd_uid2sid_async | Volker Lendecke | 1 | -3/+0 | |
2009-12-21 | s3: Remove unused winbindd_sid2gid_async | Volker Lendecke | 1 | -3/+0 | |
2009-12-21 | s3: Remove unused winbindd_sid2uid_async | Volker Lendecke | 1 | -3/+0 | |
2009-12-21 | s3: Remove unused query_user_async | Volker Lendecke | 1 | -10/+0 | |
2009-12-21 | s3: Remove unused winbindd_getsidaliases_async | Volker Lendecke | 1 | -8/+0 | |
2009-12-21 | s3: Remove unused winbindd_lookupname_async | Volker Lendecke | 1 | -7/+0 | |
2009-12-21 | s3: Remove unused winbindd_lookupsid_async | Volker Lendecke | 1 | -6/+0 | |
2009-10-17 | s3:winbind: Move fillup_pw_field() as static to wb_fill_pwent.c | Volker Lendecke | 1 | -8/+0 | |
2009-10-13 | s3-winbindd: add wbint_ChangeMachineAccount implementation. | Günther Deschner | 1 | -0/+7 | |
Guenther | |||||
2009-09-28 | s3:winbind: Make check_info3_in_group, sanitize its memory handling | Volker Lendecke | 1 | -0/+2 | |
2009-09-28 | s3:winbind: Make "check_request_flags" publically available | Volker Lendecke | 1 | -0/+1 | |
2009-09-28 | s3:winbind: Sanitize the args for find_auth_domain: It only needs the flags | Volker Lendecke | 1 | -2/+2 | |
2009-09-28 | s3:winbind: Make append_data publically available as append_auth_data | Volker Lendecke | 1 | -0/+4 | |
2009-09-22 | s3-winbindd: add cm_connect_lsa_tcp(). | Günther Deschner | 1 | -0/+3 | |
Guenther | |||||
2009-09-17 | s3-winbindd: add and use winbindd_lookup_names(). | Günther Deschner | 1 | -0/+7 | |
Guenther | |||||
2009-09-17 | s3-winbindd: add and use winbindd_lookup_sids(). | Günther Deschner | 1 | -0/+9 | |
Guenther | |||||
2009-09-07 | s3:winbind: Convert WINBINDD_SET_HWM to the new API | Volker Lendecke | 1 | -0/+7 | |
2009-09-07 | s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new API | Volker Lendecke | 1 | -0/+7 | |
2009-09-07 | s3:winbind: Convert WINBINDD_SET_MAPPING to the new API | Volker Lendecke | 1 | -0/+7 | |
2009-09-07 | s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new API | Volker Lendecke | 1 | -0/+6 | |
2009-09-05 | s3:winbind: Make the pam_auth subfunctions static | Volker Lendecke | 1 | -9/+0 | |
2009-08-30 | w3:winbind: Convert WINBINDD_ALLOCATE_GID to the new API | Volker Lendecke | 1 | -0/+7 | |
2009-08-30 | w3:winbind: Convert WINBINDD_ALLOCATE_UID to the new API | Volker Lendecke | 1 | -0/+7 | |
2009-08-29 | s3:winbind: Convert WINBINDD_LIST_GROUPS to the new API | Volker Lendecke | 1 | -0/+8 | |
2009-08-29 | s3:winbind: Convert WINBINDD_LIST_USERS to the new API | Volker Lendecke | 1 | -0/+7 | |
2009-08-29 | s3:winbind: Convert the getgrent functions to the new API | Volker Lendecke | 1 | -0/+19 | |
2009-08-29 | s3:winbind: Add async wb_next_grent | Volker Lendecke | 1 | -0/+8 | |
2009-08-29 | w3:winbind: Convert WINBINDD_LOOKUPRIDS to the new API | Volker Lendecke | 1 | -2/+7 | |
2009-08-29 | s3:winbind: Convert the GETDCNAME routines to the new API | Volker Lendecke | 1 | -1/+7 | |