Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-25 | s3: Make "struct trustdom_state" its own talloc context | Volker Lendecke | 1 | -14/+9 | |
2010-04-24 | s3: sendto_domain() is lo longer used | Volker Lendecke | 2 | -30/+0 | |
2010-04-23 | s3: Allow pdb password change using WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP | Volker Lendecke | 1 | -0/+15 | |
2010-04-23 | s3: init_dc_connection() can't init for internal domains | Volker Lendecke | 1 | -0/+4 | |
This fixes a crash in winbindd_dual_pam_chng_pswd_auth_crap when given global_sam_name() in the domain field | |||||
2010-04-23 | s3: replace some data_blob_talloc by data_blob_const | Volker Lendecke | 1 | -8/+4 | |
2010-04-23 | s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async API | Volker Lendecke | 4 | -47/+132 | |
2010-04-23 | s3-winbind: fix setup_domain_child() callers. | Günther Deschner | 1 | -2/+2 | |
Volker, please check. Guenther | |||||
2010-04-23 | s3: Fix a winbind crash when scanning trusts | Volker Lendecke | 1 | -0/+6 | |
add_trusted_domain() for a new domain always needs to be followed by a setup_domain_child(). This was not always done, in particular not when walking to the forest root for additional trusts. This is a minimal patch, we need to fix add_trusted_domain(). | |||||
2010-04-19 | s3: Move the in-memory ccache to the parent | Volker Lendecke | 7 | -95/+90 | |
None of this blocks, so there is no reason to keep this in a winbind child process | |||||
2010-04-19 | s3-winbind: Allow changing the password for pdb | Volker Lendecke | 1 | -0/+47 | |
2010-04-19 | s3: Convert WINBINDD_PAM_LOGOFF to the new async API | Volker Lendecke | 4 | -68/+148 | |
2010-04-19 | s3: Convert WINBINDD_PAM_CHAUTHTOK to the new async API | Volker Lendecke | 4 | -59/+131 | |
2010-04-19 | s3: Convert WINBINDD_PAM_AUTH_CRAP to the new async API | Volker Lendecke | 4 | -73/+132 | |
2010-04-19 | s3: Convert WINBINDD_PAM_AUTH to the new async API | Volker Lendecke | 4 | -66/+134 | |
2010-04-19 | winbindd: Fill in num_entries where available | Volker Lendecke | 3 | -0/+6 | |
The server implementation of WINBINDD_LIST_USERS, WINBINDD_LIST_GROUPS and WINBINDD_LIST_TRUSTDOM knows the number of entries returned. Bump up the version number so that a newer lib does not rely on something an older winbind does not do. | |||||
2010-04-19 | s3: Add some debug to GETSIDALIASES | Volker Lendecke | 1 | -0/+9 | |
2010-04-18 | s3: Fix indentation in remove_ccache | Volker Lendecke | 1 | -1/+1 | |
2010-04-18 | s3: Fix a typo in winbindd_ccache_save | Volker Lendecke | 1 | -1/+1 | |
2010-04-13 | s3-winbind: Authenticate SAM users | Volker Lendecke | 1 | -5/+71 | |
2010-04-13 | s3-winbindd: Fix typo in comment. | Karolin Seeger | 1 | -1/+1 | |
Karolin | |||||
2010-04-11 | s3: Use sizeof(chal) instead of a constant | Volker Lendecke | 1 | -1/+1 | |
2010-04-11 | s3: Cosmetics -- I could not spot where "chal" was initialized | Volker Lendecke | 1 | -1/+1 | |
2010-04-10 | s3: Remove domain selection from dual_pam_auth | Volker Lendecke | 1 | -53/+13 | |
We're in a child, the parent already has chosen the domain by picking the right child to connect to. Metze, you've done work on winbind lately, so it goes to you: Please check :-) | |||||
2010-04-10 | s3: Check 0 termination in GETALIASES | Volker Lendecke | 1 | -7/+13 | |
2010-04-08 | s3: Remove the separate "child" argument from setup_domain_child() | Volker Lendecke | 3 | -15/+8 | |
2010-04-08 | s3:winbindd: make "smbcontrol winbindd validate-cache" reliable again | Stefan Metzmacher | 1 | -0/+3 | |
commit 73577205cf81644e7fe853eaf3e6459f7f443096 (s3:winbindd: fix problems with SIGCHLD handling (bug #7317)) broke this. metze | |||||
2010-04-05 | s3: Fix a cut&paste error in winbindd_list_groups_done | Volker Lendecke | 1 | -1/+1 | |
2010-04-01 | s3:winbindd: remove unused variables | Stefan Metzmacher | 1 | -2/+0 | |
metze | |||||
2010-04-01 | s3:winbindd: fix problems with SIGCHLD handling (bug #7317) | Stefan Metzmacher | 3 | -17/+6 | |
The main problem is that we call CatchChild() within the parent winbindd, which overwrites the signal handler that was registered by winbindd_setup_sig_chld_handler(). That means winbindd_sig_chld_handler() and winbind_child_died() are never triggered when a winbindd domain child dies. As a result will get "broken pipe" for all requests to that domain. To reduce the risk of similar bugs in future we call CatchChild() in winbindd_reinit_after_fork() now. We also use a full winbindd_reinit_after_fork() in the cache validation child now instead instead of just resetting the SIGCHLD handler by hand. This will also fix possible tdb problems on systems without pread/pwrite and disabled mmap as we now correctly reopen the tdb handle for the child. metze | |||||
2010-04-01 | s3: Ensure NULL termination before printing in winbindd_pam_logoff | Volker Lendecke | 1 | -3/+3 | |
2010-04-01 | s3: Fix a typo in winbindd_pam_logoff | Volker Lendecke | 1 | -1/+1 | |
2010-04-01 | s3:winbindd: correctly invalidate the cached connection | Stefan Metzmacher | 1 | -6/+11 | |
There're maybe additional TCP connection for ncacn_ip_tcp. metze | |||||
2010-04-01 | s3:winbindd: only set child_domain in the child | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2010-04-01 | s3:winbindd: make sure we don't try rpc requests against unaccessable domains | Stefan Metzmacher | 1 | -5/+28 | |
This makes sure we don't crash while trying to dereference domain->conn.cli->foo while trying to establish a rpc connection to the server. metze | |||||
2010-04-01 | s3: fix a typo in winbind_client_response_written | Volker Lendecke | 1 | -2/+2 | |
2010-03-31 | s3: Fix an error message in winbindd_pam_chauthtok() | Volker Lendecke | 1 | -1/+1 | |
2010-03-31 | s3: Ensure null termination in winbindd_pam_chauthtok() | Volker Lendecke | 1 | -0/+4 | |
2010-03-31 | s3: Make check_info3_in_group static | Volker Lendecke | 2 | -4/+2 | |
2010-03-31 | s3-winbind: Make append_auth_data() static | Volker Lendecke | 2 | -8/+4 | |
2010-03-29 | s3:winbindd: correctly retry if the netlogon pipe gets disconnected during a ↵ | Stefan Metzmacher | 1 | -2/+2 | |
logon call This fixes hopefully the last part of bug #7295. metze | |||||
2010-03-29 | s3:winbindd_reconnect: don't only reconnect on NT_STATUS_UNSUCCESSFUL | Stefan Metzmacher | 1 | -14/+59 | |
metze | |||||
2010-03-29 | s3:winbindd_cm: invalidate connection if cm_connect_netlogon() fails | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2010-03-29 | s3:winbindd: consistently use TALLOC_FREE(conn->foo_pipe) is we create a new ↵ | Stefan Metzmacher | 1 | -0/+5 | |
connection metze | |||||
2010-03-29 | s3:winbindd_cm: use rpccli_is_connected() helper function | Stefan Metzmacher | 1 | -4/+4 | |
metze | |||||
2010-03-29 | s3:winbindd_cm: use cli_state_is_connected() helper function | Stefan Metzmacher | 1 | -14/+4 | |
metze | |||||
2010-03-29 | s3: Fix bug 7212, "getent group does not return group members" | Volker Lendecke | 1 | -0/+1 | |
2010-03-26 | s3-smbd: Don't close stdout if we want to log to stdout. | Andreas Schneider | 1 | -1/+1 | |
2010-03-24 | s3:ntlmssp: pass names and use_ntlmv2 to ntlmssp_client_start() and store them | Stefan Metzmacher | 1 | -1/+5 | |
Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-03-22 | s3: Fix a bad memleak in winbind | Volker Lendecke | 1 | -1/+2 | |
2010-03-10 | s3: Fix a long-standing problem with recycled PIDs | Volker Lendecke | 2 | -9/+6 | |
When a samba server process dies hard, it has no chance to clean up its entries in locking.tdb, brlock.tdb, connections.tdb and sessionid.tdb. For locking.tdb and brlock.tdb Samba is robust by checking every time we read an entry from the database if the corresponding process still exists. If it does not exist anymore, the entry is deleted. This is not 100% failsafe though: On systems with a limited PID space there is a non-zero chance that between the smbd's death and the fresh access, the PID is recycled by another long-running process. This renders all files that had been locked by the killed smbd potentially unusable until the new process also dies. This patch is supposed to fix the problem the following way: Every process ID in every database is augmented by a random 64-bit number that is stored in a serverid.tdb. Whenever we need to check if a process still exists we know its PID and the 64-bit number. We look up the PID in serverid.tdb and compare the 64-bit number. If it's the same, the process still is a valid smbd holding the lock. If it is different, a new smbd has taken over. I believe this is safe against an smbd that has died hard and the PID has been taken over by a non-samba process. This process would not have registered itself with a fresh 64-bit number in serverid.tdb, so the old one still exists in serverid.tdb. We protect against this case by the parent smbd taking care of deregistering PIDs from serverid.tdb and the fact that serverid.tdb is CLEAR_IF_FIRST. CLEAR_IF_FIRST does not work in a cluster, so the automatic cleanup does not work when all smbds are restarted. For this, "net serverid wipe" has to be run before smbd starts up. As a convenience, "net serverid wipedbs" also cleans up sessionid.tdb and connections.tdb. While there, this also cleans up overloading connections.tdb with all the process entries just for messaging_send_all(). Volker |