summaryrefslogtreecommitdiff
path: root/source3/winbindd
AgeCommit message (Collapse)AuthorFilesLines
2010-08-14s3:idmap: add idmap_unix_id_is_in_range() for checking an id against an ↵Michael Adam1-0/+19
idmap range
2010-08-14s3:idmap: don't check range for passdb idmap domainMichael Adam1-21/+30
2010-08-14s3:idmap: parse ranges and "read only" in idmap_init_domain().Michael Adam1-0/+78
2010-08-14s3:idmap: remove idmap_alloc_context from idmap.cMichael Adam1-14/+0
The registering of alloc backends is being removed. The idmap backends are responsible for initializing their alloc code on their own if necessary. No list of alloc backends is maintained any more in the top level.
2010-08-14s3:idmap: remove the alloc methods list from idmap.cMichael Adam1-12/+0
The registering of alloc backends is being removed. The idmap backends are responsible for initializing their alloc code on their own if necessary. No list of alloc backends is maintained any more in the top level.
2010-08-14s3:idmap: remove unused get_alloc_methods().Michael Adam1-13/+0
2010-08-14s3:idmap: remove unused smb_register_idmap_alloc().Michael Adam1-49/+0
The registering of alloc backends is being removed. The idmap backends are responsible for initializing their alloc code on their own if necessary.
2010-08-14s3:idmap_ldap: remove unused idmap_ldap_alloc_methods.Michael Adam1-7/+0
2010-08-14s3:idmap_ldap: remoce unused idmap_alloc_ldap_initMichael Adam1-6/+0
2010-08-14s3:idmap_ldap: don't call idmap_alloc_ldap_init in idmap_ldap_initMichael Adam1-8/+0
The registering of alloc backends is being removed. The idmap backends are responsible for initializing their alloc code on their own if necessary.
2010-08-14s3:idmap_tdb: remove unused idmap_alloc_methodsMichael Adam1-7/+0
2010-08-14s3:idmap_tdb: remove unused idmap_alloc_tdb_init()Michael Adam1-5/+0
2010-08-14s3:idmap_tdb: don't call idmap_alloc_tdb_init in idmap_tdb_initMichael Adam1-7/+0
The registering of alloc backends is being removed. The idmap backends are responsible for initializing their alloc code on their own if necessary.
2010-08-14s3:idmap_tdb2: remove unused idmap_tdb2_alloc_init().Michael Adam1-12/+0
2010-08-14s3:idmap_tdb2: remove unused idmap_tdb2_alloc_close().Michael Adam1-9/+0
2010-08-14s3:idmap_tdb2: remove unused idmap_alloc_methods.Michael Adam1-6/+0
2010-08-14s3:idmap_tdb2: don't call smb_register_idmap_alloc() in idmap_tdb2_initMichael Adam1-9/+0
The registering of alloc backends is being removed. The idmap backends are responsible for initializing their alloc code on their own if necessary.
2010-08-14s3:idmap_tdb: make idmap_alloc_tdb_init() static.Michael Adam1-1/+1
2010-08-14s3:idmap: remove unused idmap_alloc_init().Michael Adam1-79/+0
2010-08-14s3:idmap: use allocate_id() from the idmap_methods in idmap_allocate_unixid()Michael Adam1-4/+12
The idmap alloc methods are being removed.
2010-08-14s3:idmap: factor out common code of idmap_allocate_uid|gid()Michael Adam1-10/+9
into new idmap_allocate_unixid().
2010-08-14s3:idmap: remove the set_mapping method from the idmap APIMichael Adam4-16/+0
2010-08-14s3:idmap: remove idmap_new_mapping() - now implemented in the backendsMichael Adam1-68/+0
2010-08-14s3:idmap: add a debug message to idmap_sid_to_gidMichael Adam1-0/+1
2010-08-14s3:idmap: add a debug message to idmap_sid_to_uidMichael Adam1-0/+1
2010-08-14s3:idmap: don't call idmap_new_mapping idmap_sid_to_gidMichael Adam1-25/+16
The setting of a new mapping is moved into the backend code to achieve atomicity and greater flexibility. Michael
2010-08-14s3:idmap: don't call idmap_new_mapping idmap_sid_to_unixid.Michael Adam1-25/+15
The setting of a new mapping is moved into the backend code to achieve atomicity and greater flexibility. Michael
2010-08-14s3:idmap: remove unused method set_id_hwm from idmap APIMichael Adam3-176/+0
Michael
2010-08-14s3:idmap: remove unused alloc method get_id_hwm from idmap APIMichael Adam3-193/+0
Michael
2010-08-14s3:idmap: remove unused method dump_data() from the idmap APIMichael Adam4-116/+0
Michael
2010-08-14s3:idmap: remove the remove_mapping method from API and backendsMichael Adam3-146/+0
Michael
2010-08-14s3:idmap: remove unused idmap_remove_mapping().Michael Adam1-17/+0
Michael
2010-08-14s3:winbind: remove the method REMOVE_MAPPING from winbind's APIMichael Adam4-138/+0
Michael
2010-08-14s3:idmap: remove unused idmap_set_mapping().Michael Adam1-17/+0
Michael
2010-08-14s3:winbind: remove the method SET_MAPPING from winbind's APIMichael Adam4-137/+0
Michael
2010-08-14s3:idmap: remove unused idmap_set_gid_hwm()Michael Adam1-13/+0
Michael
2010-08-14s3:idmap: remove unused idmap_set_uid_hwm()Michael Adam1-13/+0
Michael
2010-08-14s3:winbind: remove SET_HWM from winbind's API.Michael Adam4-127/+0
2010-08-14s3:idmap_tdb2: fix a debug messageMichael Adam1-1/+1
2010-08-12s3:winbindd: add wbint dcerpc_binding_handle backendStefan Metzmacher1-0/+262
metze
2010-08-09s3-winbind: Fix Bug #7568: Make sure cm_connect_lsa_tcp does not reset the ↵Günther Deschner1-7/+13
secure channel. This is an important fix as the following could and is happening: * winbind authenticates a user via schannel secured netlogon samlogonex call, current secure channel cred state is stored in winbind state, winbind sucessfully decrypts session key from the info3 * winbind sets up a new schannel ncacn_ip_tcp lsa pipe (and thereby resets the secure channel on the dc) * subsequent samlogonex calls use the new secure channel creds on the dc to encrypt info3 session key, while winbind tries to use old schannel creds for decryption Guenther
2010-08-08s3: Lift the smbd_messaging_context from rpc_pipe_open_internalVolker Lendecke1-0/+2
2010-08-06s3-krb5: include krb5pac.h where needed.Günther Deschner1-0/+1
Guenther
2010-08-05s3-popt: Only include popt-common.h when needed.Andreas Schneider1-0/+1
2010-08-05s3-secrets: only include secrets.h when needed.Günther Deschner9-0/+9
Guenther
2010-08-05s3: avoid global include of ads.h.Günther Deschner16-1/+17
Guenther
2010-07-29We should be using the winbindd separator in this case, not hardcoding a \\ ↵Jeremy Allison1-1/+3
value. Jeremy.
2010-07-29Fix bug #7589 - ntlm_auth fails to use cached credentials.Jeremy Allison1-7/+5
In handling the WINBINDD_PAM_AUTH message winbindd canonicalizes a *copy* of the mapped username, but fails to canonicalize the actual username sent to the backend domain process. When "winbind default domain" is set this can lead to credentials being cached with an index of user: user, not DOMAIN\user. All other code paths that use canonicalize_username() (WINBINDD_PAM_CHAUTHTOK, WINBINDD_PAM_LOGOFF) correctly canonicalize the data sent to the backend. All calls the can cause credentials to be looked up (PAM_CHAUTHTOK etc.) correctly call canonicalize_username() to create the credential lookup key. Jeremy.
2010-07-28s3-winbind: Use struct pipes_struct.Andreas Schneider2-25/+28
2010-07-27Second part of fix for bug 7578 - 'net idmap restore' fails to set HWM, ↵Jeremy Allison1-1/+1
causing duplicates. Jeremy.