summaryrefslogtreecommitdiff
path: root/source3/winbindd/winbindd_proto.h
AgeCommit message (Collapse)AuthorFilesLines
2013-10-15s3-winbindd: Remove undocumented winbindd:socket dir parameterAndrew Bartlett1-1/+0
This uses the documeted "winbindd socket directory" parameter instead. This came about due to the merge of the two smb.conf tables in s3 and s4 for the Samba 4.0 release. The s4 code used a real parameter, which caused this to be documented, whereas no automatic procedure existed to notice the parametric option and the need to document that. The fact that this was not used consistently in both codebases is one of the many areas of technical debt we still need to pay off here. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2013-10-11s3-winbind: Add functions for domain online/offline handling.Andreas Schneider1-0/+10
BUG: https://bugzilla.samba.org/show_bug.cgi?id=10194 Signed-off-by: Andreas Schneider <asn@cryptomilk.org> Reviewed-by: Volker Lendecke <vl@samba.org>
2013-03-09s3-winbindd: Move connection to AD server from idmap_adChristof Schmitt1-9/+1
Having this in a common place allows reuse by other idmap modules. Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2013-03-09s3-winbindd: Use common helper function for connecting to ADSChristof Schmitt1-0/+7
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2013-03-09s3-winbindd: Move code for verifying ADS connection to common helper functionChristof Schmitt1-0/+6
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2013-01-29s3:winbindd: factor add_wbint_Principal_to_dict() out of wb_group_members_done()Michael Adam1-0/+5
for later reuse Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2013-01-18winbind: Use standard tevent_context_initVolker Lendecke1-0/+1
This makes winbind use epoll instead of poll Reviewed by: Jeremy Allison <jra@samba.org>
2012-12-03s3:winbindd: remove now unused wb_sid2uid and wb_sid2gid modulesMichael Adam1-10/+0
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-12-03s3:winbindd: make idmap_find_domain() static.Michael Adam1-1/+0
idmap_find_domain_with_sid() should be used instead Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-12-03s3:winbindd: add idmap_find_domain_with_sid()Michael Adam1-0/+2
This will return the passdb domain if the given sid is in our sam or builtin or is the domain sid of those domains. Otherwise it returns the idmap domain that results from the idmap configuration. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-12-03s3:winbindd: factor winbindd_sids_to_xids into external and internal partMichael Adam1-0/+6
- external part takes winbindd request/reponse structs (with sid strings) - internal part takes sid lists The new internal part implements functions wb_sids2xids_* that are moved into the new module wb_sids2xids.c. The purpose of this change is to use wb_sids2xids in winbindd_sid_to_uid and winbindd_sid_to_gid instead of the currently used wb_sid2uid and wb_sid2gid. We should just have one code path into id mapping and not several that behave differently. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-11-30s3-winbindd: add cm_connect_lsat().Günther Deschner1-0/+4
Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2012-10-19s3: Make winbindd_register_handlers staticVolker Lendecke1-1/+0
2012-09-20winbind: Extend wbcAuthenticateUserEx to provide PACChristof Schmitt1-0/+8
With this new interface, external applications that have authenticated to an ADS can pass the PAC from the Kerberos ticket to wbcAuthenticateUserEx. winbindd decodes and extracts the info3 information for the external application. If winbindd can verify the PAC signature, the info3 from the PACis also added to the netsamlogon_cache. The info3 data can be used by the external application to get the uid and primary gid. The data in netsamlogon_cache allows to retrieve the complete group list through the NSS function getgrouplist. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-21Fix bug #9098 - winbind does not refresh kerberos tickets.Jeremy Allison1-0/+1
Based on work from Ian Gordon <ian.gordon@strath.ac.uk>. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Aug 21 22:01:15 CEST 2012 on sn-devel-104
2012-03-04s3-winbindd: Add stdin handler for winbindAndrew Bartlett1-1/+2
This will help avoid runaway processes in the test env, particularly when the whole selftest.pl is killed. Andrew Bartlett
2011-09-06s3: Make winbindd_lookup_names staticVolker Lendecke1-7/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Sep 6 20:03:56 CEST 2011 on sn-devel-104
2011-06-21s3: Convert WINBINDD_WINS_BYNAME to the async APIVolker Lendecke1-0/+6
2011-06-05s3:winbind: Convert WINBINDD_WINS_BYIP to the async APIVolker Lendecke1-1/+6
2011-05-04Remove unused function parse_add_domuser().Jeremy Allison1-1/+0
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed May 4 20:05:42 CEST 2011 on sn-devel-104
2011-04-29s3: Make winbindd_reinit_after_fork return NTSTATUSVolker Lendecke1-2/+2
2011-04-29s3: In winbind, close parent/child socketsVolker Lendecke1-1/+2
This should further reduce fd load in winbind children
2011-04-13s3: Export WINBINDD_SIDS_TO_XIDS via the winbind pipeVolker Lendecke1-0/+8
Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-13s3: Make idmap_find_domain publicVolker Lendecke1-0/+1
Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-13s3: Add is_domain_onlineVolker Lendecke1-0/+1
Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-13s3: Add winbindd_lookupsidsVolker Lendecke1-0/+7
Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-13s3: Add wb_lookupsidsVolker Lendecke1-0/+8
Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-13s3: Add wbint_LookupSidsVolker Lendecke1-0/+5
This will be called from wb_lookupsids to query remote DCs via lsa Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-13s3: Make parse_sidlist publicVolker Lendecke1-0/+2
Signed-off-by: Jeremy Allison <jra@samba.org>
2011-04-12s3: add some forward declarations.Günther Deschner1-1/+1
Guenther
2011-03-06s3: Remove unused args from nss_get_info_cachedVolker Lendecke1-1/+0
2011-02-23s3-proto: remove some prototypes of non-existing functions.Günther Deschner1-2/+0
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Feb 23 15:42:35 CET 2011 on sn-devel-104
2011-01-21s3:winbind: Fork multiple children per domainVolker Lendecke1-0/+3
This makes us scale better with many simultaneous winbind requests, some of which might be slow. This implementation breaks offline logons, as the cached credentials are maintained in a child (this needs fixing). So, if the offline logons are active, only allow one DC connection. Probably the offline logon and the scalable file server cases are separate enough so that this patch is useful even with the restriction.
2011-01-19s3: Add wbinfo --dc-infoVolker Lendecke1-0/+4
wbinfo --dc-info prints the current DC name and IP address. This helps diagnosing problems that might happen when a later wbinfo --ping-dc fails. This patch started out by using the SAF and NBT cache entires, but those are relatively short-lived. So I decided to invent a new gencache entry with a very long timeout. We need to go via the gencache because when for some reason a winbind child process is stuck, we can't query it for the current DC it's connected to. This must eventually go away again when we have a fully async winbind. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Jan 19 08:40:28 CET 2011 on sn-devel-104
2010-12-19s3: wcache_invalidate_samlogon only needs the SIDVolker Lendecke1-1/+1
2010-11-19s3: Remove some unused codeVolker Lendecke1-1/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Nov 19 11:21:00 CET 2010 on sn-devel-104
2010-11-17s3: Move parse_sidlist to the only calling fileVolker Lendecke1-5/+0
2010-11-17s3: Remove some unused codeVolker Lendecke1-2/+0
2010-11-08s3:winbind add wcache_tdc_fetch_domainbysidChristian Ambach1-0/+1
add a function to lookup a domain in the winbind cache by domain SID
2010-11-05s3: Remove some duplicate prototypesVolker Lendecke1-16/+0
2010-10-14s3-auth Use security_token_debug() from common codeAndrew Bartlett1-1/+0
This prints the security token including the privileges as strings instead of just a bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-30s3: Add "smbcontrol winbindd ip-dropped <local-ip>"Volker Lendecke1-0/+10
This is supposed to improve the winbind reconnect time after an ip address has been moved away from a box. Any kind of HA scenario will benefit from this, because winbindd does not have to wait for the TCP timeout to kick in when a local IP address has been dropped and DC replies are not received anymore.
2010-09-21s3-winbindd: another attempt to fix the non-ldap build.Günther Deschner1-0/+2
Guenther
2010-09-19s3/winbind: remove unused winbindd_check_cache_sizeBjörn Jacke1-1/+0
2010-09-11s3:auth Remove NT_USER_TOKENAndrew Bartlett1-4/+4
The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-auth Change struct nt_user_token -> struct security_tokenAndrew Bartlett1-2/+2
This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-auth Change type of num_sids to uint32_tAndrew Bartlett1-2/+2
size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-09s3: Remove "mem_ctx" from a few functionsVolker Lendecke1-3/+0
2010-09-09s3: Remove "mem_ctx" from wcache_save_creds()Volker Lendecke1-1/+0
2010-09-09s3: Remove "mem_ctx" from lookup_cached_name()Volker Lendecke1-2/+1
generated by cgit (git 2.34.1) at 2024-06-11 05:26:22 +0000