Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-02-09 | Revert "s3:winbindd_user: create domain connection in winbindd_fill_pwent if ↵ | Michael Adam | 1 | -1/+1 | |
necessary." This reverts commit 487f5e7b4768cfe9e511b0ba56f16c411e21f702. I was confused about the real meaning of find_domain_from_name_noinit() vs. find_domain_from_name(). We don't need the connection established here, just the domain struct which gets initialized by rescan_trusted_domains(). Sorry for the noise. Michael | |||||
2009-02-09 | s3:winbindd_user: create domain connection in winbindd_fill_pwent if necessary. | Michael Adam | 1 | -1/+1 | |
Calling find_domain_from_name_noinit() might not be enough here. This makes winbindd_getpwent() behave the same as winbindd_getgrent(). Michael | |||||
2009-02-09 | s3:winbindd_user: fix a debug message. | Michael Adam | 1 | -2/+2 | |
find_domain_from_name_noinit() is no longer called only for name alias support. Michael | |||||
2009-02-09 | async_sock: Use unix errnos instead of NTSTATUS | Kai Blin | 1 | -21/+0 | |
This also switches wb_reqtrans to use wbcErr instead of NTSTATUS as it would be pointless to convert to errno first and to wbcErr later. | |||||
2009-02-07 | Fix coverity ID 876 (FORWARD_NULL) | Volker Lendecke | 1 | -0/+1 | |
Michael, please check! | |||||
2009-02-06 | s3:idmap_tdb2: untangle assignment and check in idmap_tdb2_alloc_load() | Michael Adam | 1 | -6/+4 | |
Michael | |||||
2009-02-06 | s3:idmap_tdb2: factor lodaing of ranges out into idmap_tdb2_load_ranges() | Michael Adam | 1 | -25/+41 | |
Michael | |||||
2009-02-06 | s3:idmap_tdb2: move together code that belongs together in idmap_tdb2_alloc_load | Michael Adam | 1 | -7/+8 | |
Michael | |||||
2009-02-06 | s3:idmap_tdb2: streamline idmap_tdb2_sid_to_id, | Michael Adam | 1 | -6/+7 | |
adding tmp talloc ctx and removing a variable Michael | |||||
2009-02-06 | s3:idmap_tdb: simplify talloc usage with temp context from talloc_stackframe | Michael Adam | 1 | -6/+2 | |
Michael | |||||
2009-02-06 | s3:idmap_tdb: refactor out new function idmap_tdb_load_ranges() | Michael Adam | 1 | -22/+30 | |
Michael | |||||
2009-02-06 | s3:idmap_tdb: use transactions in idmap_tdb_allocate_id() | Michael Adam | 1 | -1/+18 | |
Michael | |||||
2009-02-06 | s3:idmap_tdb: add tmp talloc ctx to idmap_tdb_sid_to_id and remove an fstring | Michael Adam | 1 | -7/+5 | |
Michael | |||||
2009-02-02 | s3 build: Fix "assignment discards qualifiers from pointer target type" warnings | Tim Prouty | 2 | -13/+6 | |
2009-02-01 | Add two new parameters to control how we verify kerberos tickets. Removes ↵ | Dan Sledz | 1 | -1/+1 | |
lp_use_kerberos_keytab parameter. The first is "kerberos method" and replaces the "use kerberos keytab" with an enum. Valid options are: secrets only - use only the secrets for ticket verification (default) system keytab - use only the system keytab for ticket verification dedicated keytab - use a dedicated keytab for ticket verification. secrets and keytab - use the secrets.tdb first, then the system keytab For existing installs: "use kerberos keytab = yes" corresponds to secrets and keytab "use kerberos keytab = no" corresponds to secrets only The major difference between "system keytab" and "dedicated keytab" is that the latter method relies on kerberos to find the correct keytab entry instead of filtering based on expected principals. The second parameter is "dedicated keytab file", which is the keytab to use when in "dedicated keytab" mode. This keytab is only used in ads_verify_ticket. | |||||
2009-02-02 | s3:winbind_group: fix "getent group" to allocate new gids. | Michael Adam | 1 | -2/+8 | |
"getent group" used to fill the idmap cache with negative cache entries for unmapped group sids. Don't pass domain name unconditionally to idmap_sid_to_gid(). idmap_sid_to_gid() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_gid() functions here, in the main winbindd. The correct fix would be to send a sid_to_gid request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael | |||||
2009-02-02 | s3:winbind_user: fix "getent passwd" to allocate new uids. | Michael Adam | 1 | -2/+7 | |
"getent passwd" used to fill the idmap cache with negative cache entries for unmapped user sids. Don't pass domain name unconditionally to idmap_sid_to_[ug]id(). idmap_sid_to_[ug]id() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_[ug]id() functions here, in the main winbindd. The correct fix would be to send a sid_to_[ug]id request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael | |||||
2009-02-02 | s3:winbind_user: move initialization of domain up in winbindd_fill_pwent() | Michael Adam | 1 | -11/+9 | |
and streamline logic some Michael | |||||
2009-01-30 | Make cli_tcon_andx async | Volker Lendecke | 1 | -7/+2 | |
2009-01-30 | s3:idmap: move IDMAP_VERSION to the idmap tdb backend, where it belogns. | Michael Adam | 1 | -0/+5 | |
Michael | |||||
2009-01-28 | s3:winbind: remove prototype for non-existent function from winbind_proto.h | Michael Adam | 1 | -1/+0 | |
Michael | |||||
2009-01-28 | s3: separate tdb validation code out into its own source file | Michael Adam | 1 | -0/+1 | |
So this gets now linked only into its single user: winbindd (needed by winbindd_cache.c) Michael | |||||
2009-01-27 | s3: Fix shadowed declaration | Tim Prouty | 1 | -1/+1 | |
2009-01-27 | s3:winbindd: handle SIG_TERM, SIGHUP, SIGCHLD and SIGUSR2 via tevent | Stefan Metzmacher | 3 | -77/+165 | |
metze | |||||
2009-01-22 | s3:winbindd: we don't need to call message_dispatch() anymore it's event ↵ | Stefan Metzmacher | 2 | -10/+0 | |
triggered now metze | |||||
2009-01-22 | s3: always call run_events() before and after sys_select() | Stefan Metzmacher | 2 | -9/+26 | |
And always setup the fd events. metze | |||||
2009-01-21 | Memory leaks and other fixes found by Coverity | todd stecher | 4 | -6/+32 | |
2009-01-19 | s3:idmap_tdb: convert to the dbwrap api | Stefan Metzmacher | 1 | -244/+223 | |
metze | |||||
2009-01-19 | Fix the same bug as 8b618d0 fixes, this time in winbindd_passdb.c | Volker Lendecke | 1 | -2/+4 | |
2009-01-16 | s3:winbindd: put winbindd_cache.tdb into cache_dir, not lock_dir. | Michael Adam | 1 | -6/+6 | |
Michael | |||||
2009-01-15 | s3: make better use of ccache by not including version.h in every C-file. | Michael Adam | 2 | -2/+2 | |
version.h changes rather frequently. Since it is included via includes.h, this means each C file will be a cache miss. This applies to the following situations: * When building a new package with a new Samba version * building in a git branch after calling mkversion.sh after a new commit (i.e. virtually always) This patch improves the situation in the following way: * remove inlude "version.h" from includes.h * Use samba_version_string() instead of SAMBA_VERSION_STRING in files that use no other macro from version.h instead of SAMBA_VERSION_STRING. * explicitly include "version.h" in those files that use more macros from "version.h" than just SAMBA_VERSION_STRING. Michael | |||||
2009-01-14 | Fix bug in get_dc_name_via_netlogon(), null pointer refrence. | Bo Yang | 1 | -1/+1 | |
2009-01-14 | Clean up comments a little. | Jeremy Allison | 1 | -11/+13 | |
Jeremy. | |||||
2009-01-14 | Don't send message to any other child in child process. | Bo Yang | 1 | -0/+30 | |
Signed-off-by: Bo Yang <boyang@novell.com> | |||||
2009-01-13 | From boyang - ensure we never "return" from a forked child, always _exit(). | Jeremy Allison | 2 | -5/+5 | |
Jeremy. | |||||
2009-01-10 | Don't set child->requests to NULL in parent after fork | Bo Yang | 1 | -1/+0 | |
2009-01-07 | refresh sequence number as soon as possible when domain->sequence_number == ↵ | boyang | 1 | -3/+8 | |
-1 or domain->last_status is not ok. | |||||
2009-01-07 | Remove unused struct CLI_POLICY_HND | Volker Lendecke | 1 | -7/+0 | |
2009-01-06 | Make winbindd_cm.c use winbindd_reinit_after_fork(). | Jeremy Allison | 4 | -31/+37 | |
Jeremy. | |||||
2009-01-06 | Add winbindd_reinit_after_fork(), cleaning out all possible events | Jeremy Allison | 1 | -52/+76 | |
in a forked child. Jeremy. | |||||
2009-01-06 | Factor out lots of common code into a function. | Jeremy Allison | 1 | -37/+27 | |
Jeremy. | |||||
2009-01-06 | s3-samr: avoid all init_samr_Domain* functions. | Günther Deschner | 1 | -18/+12 | |
Guenther | |||||
2009-01-05 | set entry->refresh_time to make ccache_regain_all_now() work correctly. | Bo Yang | 1 | -2/+11 | |
2009-01-05 | s3:winbindd: also handle fd events from the winbind_event_context() | Stefan Metzmacher | 1 | -0/+9 | |
metze | |||||
2009-01-05 | s3:events: change event_add_timed() prototype to match samba4 | Stefan Metzmacher | 3 | -27/+8 | |
metze | |||||
2009-01-05 | s3:winbindd: regain tickets for all ccache entries, when we go online | Stefan Metzmacher | 3 | -7/+52 | |
set_event_dispatch_time() is stupid by design and only handles the first event with a given name. metze | |||||
2009-01-05 | s3:winbindd: cancel all ccache entry events and not just one | Stefan Metzmacher | 3 | -6/+19 | |
cancel_named_event() is stupid by design and also only cancels one single event. metze | |||||
2009-01-05 | s3:winbindd: recreate the per domain check_online_event without relying on ↵ | Stefan Metzmacher | 1 | -19/+20 | |
global state set_event_dispatch_time() is stupid by design and just picks the first event with the given name. metze | |||||
2009-01-05 | s3:winbindd: rename fd_event => winbindd_fd_event | Stefan Metzmacher | 3 | -26/+22 | |
It's really confusing to have two versions of 'fd_event' metze | |||||
2009-01-05 | s3:winbindd: move WINBINDD_CCACHE_ENTRY and WINBINDD_MEMORY_CREDS to winbindd.h | Stefan Metzmacher | 1 | -1/+28 | |
metze |