summaryrefslogtreecommitdiff
path: root/source3/winbindd
AgeCommit message (Collapse)AuthorFilesLines
2009-02-02s3 build: Fix "assignment discards qualifiers from pointer target type" warningsTim Prouty2-13/+6
2009-02-01Add two new parameters to control how we verify kerberos tickets. Removes ↵Dan Sledz1-1/+1
lp_use_kerberos_keytab parameter. The first is "kerberos method" and replaces the "use kerberos keytab" with an enum. Valid options are: secrets only - use only the secrets for ticket verification (default) system keytab - use only the system keytab for ticket verification dedicated keytab - use a dedicated keytab for ticket verification. secrets and keytab - use the secrets.tdb first, then the system keytab For existing installs: "use kerberos keytab = yes" corresponds to secrets and keytab "use kerberos keytab = no" corresponds to secrets only The major difference between "system keytab" and "dedicated keytab" is that the latter method relies on kerberos to find the correct keytab entry instead of filtering based on expected principals. The second parameter is "dedicated keytab file", which is the keytab to use when in "dedicated keytab" mode. This keytab is only used in ads_verify_ticket.
2009-02-02s3:winbind_group: fix "getent group" to allocate new gids.Michael Adam1-2/+8
"getent group" used to fill the idmap cache with negative cache entries for unmapped group sids. Don't pass domain name unconditionally to idmap_sid_to_gid(). idmap_sid_to_gid() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_gid() functions here, in the main winbindd. The correct fix would be to send a sid_to_gid request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael
2009-02-02s3:winbind_user: fix "getent passwd" to allocate new uids.Michael Adam1-2/+7
"getent passwd" used to fill the idmap cache with negative cache entries for unmapped user sids. Don't pass domain name unconditionally to idmap_sid_to_[ug]id(). idmap_sid_to_[ug]id() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_[ug]id() functions here, in the main winbindd. The correct fix would be to send a sid_to_[ug]id request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael
2009-02-02s3:winbind_user: move initialization of domain up in winbindd_fill_pwent()Michael Adam1-11/+9
and streamline logic some Michael
2009-01-30Make cli_tcon_andx asyncVolker Lendecke1-7/+2
2009-01-30s3:idmap: move IDMAP_VERSION to the idmap tdb backend, where it belogns.Michael Adam1-0/+5
Michael
2009-01-28s3:winbind: remove prototype for non-existent function from winbind_proto.hMichael Adam1-1/+0
Michael
2009-01-28s3: separate tdb validation code out into its own source fileMichael Adam1-0/+1
So this gets now linked only into its single user: winbindd (needed by winbindd_cache.c) Michael
2009-01-27s3: Fix shadowed declarationTim Prouty1-1/+1
2009-01-27s3:winbindd: handle SIG_TERM, SIGHUP, SIGCHLD and SIGUSR2 via teventStefan Metzmacher3-77/+165
metze
2009-01-22s3:winbindd: we don't need to call message_dispatch() anymore it's event ↵Stefan Metzmacher2-10/+0
triggered now metze
2009-01-22s3: always call run_events() before and after sys_select()Stefan Metzmacher2-9/+26
And always setup the fd events. metze
2009-01-21Memory leaks and other fixes found by Coveritytodd stecher4-6/+32
2009-01-19s3:idmap_tdb: convert to the dbwrap apiStefan Metzmacher1-244/+223
metze
2009-01-19Fix the same bug as 8b618d0 fixes, this time in winbindd_passdb.cVolker Lendecke1-2/+4
2009-01-16s3:winbindd: put winbindd_cache.tdb into cache_dir, not lock_dir.Michael Adam1-6/+6
Michael
2009-01-15s3: make better use of ccache by not including version.h in every C-file.Michael Adam2-2/+2
version.h changes rather frequently. Since it is included via includes.h, this means each C file will be a cache miss. This applies to the following situations: * When building a new package with a new Samba version * building in a git branch after calling mkversion.sh after a new commit (i.e. virtually always) This patch improves the situation in the following way: * remove inlude "version.h" from includes.h * Use samba_version_string() instead of SAMBA_VERSION_STRING in files that use no other macro from version.h instead of SAMBA_VERSION_STRING. * explicitly include "version.h" in those files that use more macros from "version.h" than just SAMBA_VERSION_STRING. Michael
2009-01-14Fix bug in get_dc_name_via_netlogon(), null pointer refrence.Bo Yang1-1/+1
2009-01-14Clean up comments a little.Jeremy Allison1-11/+13
Jeremy.
2009-01-14Don't send message to any other child in child process.Bo Yang1-0/+30
Signed-off-by: Bo Yang <boyang@novell.com>
2009-01-13From boyang - ensure we never "return" from a forked child, always _exit().Jeremy Allison2-5/+5
Jeremy.
2009-01-10Don't set child->requests to NULL in parent after forkBo Yang1-1/+0
2009-01-07refresh sequence number as soon as possible when domain->sequence_number == ↵boyang1-3/+8
-1 or domain->last_status is not ok.
2009-01-07Remove unused struct CLI_POLICY_HNDVolker Lendecke1-7/+0
2009-01-06Make winbindd_cm.c use winbindd_reinit_after_fork().Jeremy Allison4-31/+37
Jeremy.
2009-01-06Add winbindd_reinit_after_fork(), cleaning out all possible eventsJeremy Allison1-52/+76
in a forked child. Jeremy.
2009-01-06Factor out lots of common code into a function.Jeremy Allison1-37/+27
Jeremy.
2009-01-06s3-samr: avoid all init_samr_Domain* functions.Günther Deschner1-18/+12
Guenther
2009-01-05set entry->refresh_time to make ccache_regain_all_now() work correctly.Bo Yang1-2/+11
2009-01-05s3:winbindd: also handle fd events from the winbind_event_context()Stefan Metzmacher1-0/+9
metze
2009-01-05s3:events: change event_add_timed() prototype to match samba4Stefan Metzmacher3-27/+8
metze
2009-01-05s3:winbindd: regain tickets for all ccache entries, when we go onlineStefan Metzmacher3-7/+52
set_event_dispatch_time() is stupid by design and only handles the first event with a given name. metze
2009-01-05s3:winbindd: cancel all ccache entry events and not just oneStefan Metzmacher3-6/+19
cancel_named_event() is stupid by design and also only cancels one single event. metze
2009-01-05s3:winbindd: recreate the per domain check_online_event without relying on ↵Stefan Metzmacher1-19/+20
global state set_event_dispatch_time() is stupid by design and just picks the first event with the given name. metze
2009-01-05s3:winbindd: rename fd_event => winbindd_fd_eventStefan Metzmacher3-26/+22
It's really confusing to have two versions of 'fd_event' metze
2009-01-05s3:winbindd: move WINBINDD_CCACHE_ENTRY and WINBINDD_MEMORY_CREDS to winbindd.hStefan Metzmacher1-1/+28
metze
2009-01-05Fix broken krb5 refresh chainBo Yang3-39/+236
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-01-05clean event context after child is forked.Bo Yang3-18/+28
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-01-04Remove wb_trans_send/recvVolker Lendecke1-9/+0
2009-01-04Move winbindd/winbindd_reqtrans.c to lib/wb_reqtrans.cVolker Lendecke1-685/+0
2009-01-03struct async_req doesn't really need to carry an event_contextVolker Lendecke1-5/+5
2009-01-02Alternative fix for 45db33e73 and 0d443ae7931Volker Lendecke1-1/+2
Simo is right, we need to ask passdb first. At least this fixes a nasty to find NT_STATUS_ACCESS_DENIED problem in the build farm for the test run I just did on host "opi". Michael, can you re-check if this also fixes the error you found, leading to the two fixes? Thanks, Volker
2009-01-02Revert "s:Fix uid_to_sid mapping when the idmap cache is empty."Volker Lendecke1-7/+8
This reverts commit 9a9b64dbdfce4414ada22d4f882c8c757b5813e1.
2009-01-02Revert "s3:idmap: Remove passd check from idmap_backends_unixid_to_sid()."Volker Lendecke1-0/+9
This reverts commit 45db33e73262d8e195a46fb96405dfb3dc43d6bc.
2008-12-31Fix more asprintf and "ignoring return code" warnings from gcc 4.3.Jeremy Allison2-2/+7
Jeremy.
2008-12-31s3:winbindd: we don't need to call messaging_reinit() twiceStefan Metzmacher1-7/+0
reinit_after_fork() already calls messaging_reinit() metze
2008-12-25s3:idmap: Remove passd check from idmap_backends_unixid_to_sid().Michael Adam1-9/+0
As noted by Metzy, it makes no sense here to check id->sid. What is worse, this might even be passed in uninitialized. This still fixes the bug for me (of course), but we might need to check, if another special handling of passdb is needed (possibly changing from constant return code NT_STATUS_OK...) Michael Signed-off-by: Michael Adam <obnox@samba.org>
2008-12-25s:Fix uid_to_sid mapping when the idmap cache is empty.Michael Adam1-8/+7
This failed for backends other than passed, since idmap_backends_unixid_to_sid() always asked passdb first, which returned Success no matter whether a mapping was found or not. One effect wast that getpwuid failed after "net cache flush". Only after filling the cache with a getpwnam call it succeeded. This fix makes the behaviour of idmap_backends_unixid_to_sid() exactly the same as that of idmap_backends_sid_to_unixid() Michael Signed-off-by: Michael Adam <obnox@samba.org>
2008-12-22Fix "allow trusted domain" so it disables trusted domains.Gerald (Jerry) Carter1-2/+11
generated by cgit (git 2.34.1) at 2024-11-02 00:01:00 +0000