Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-29 | s3: range-check idmap script output | Volker Lendecke | 1 | -0/+13 | |
Not doing so results in the id mapping succeeding once unchecked and later on being refused, because when reading from the tdb we do the checks. | |||||
2010-04-29 | s3: Fix an uninitialized variable in idmap_tdb2_sid_to_id() | Volker Lendecke | 1 | -0/+1 | |
When we find an invalid record in the database, there's no point in checking the non-existing value against the range limits. | |||||
2010-04-29 | s3: Fix some nonempty blank lines | Volker Lendecke | 1 | -14/+14 | |
2010-04-25 | s3: async_domain_request is no longer used | Volker Lendecke | 2 | -67/+0 | |
2010-04-25 | s3: Convert add_trusted_domains() to wb_domain_request_send() | Volker Lendecke | 1 | -22/+19 | |
2010-04-25 | s3: Simplify trustdom_state | Volker Lendecke | 1 | -10/+5 | |
Don't store information explicitly as boolean flags that can be easily retrieved from the domain when it's actually needed. | |||||
2010-04-25 | s3: Make "struct trustdom_state" its own talloc context | Volker Lendecke | 1 | -14/+9 | |
2010-04-24 | s3: sendto_domain() is lo longer used | Volker Lendecke | 2 | -30/+0 | |
2010-04-23 | s3: Allow pdb password change using WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP | Volker Lendecke | 1 | -0/+15 | |
2010-04-23 | s3: init_dc_connection() can't init for internal domains | Volker Lendecke | 1 | -0/+4 | |
This fixes a crash in winbindd_dual_pam_chng_pswd_auth_crap when given global_sam_name() in the domain field | |||||
2010-04-23 | s3: replace some data_blob_talloc by data_blob_const | Volker Lendecke | 1 | -8/+4 | |
2010-04-23 | s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async API | Volker Lendecke | 4 | -47/+132 | |
2010-04-23 | s3-winbind: fix setup_domain_child() callers. | Günther Deschner | 1 | -2/+2 | |
Volker, please check. Guenther | |||||
2010-04-23 | s3: Fix a winbind crash when scanning trusts | Volker Lendecke | 1 | -0/+6 | |
add_trusted_domain() for a new domain always needs to be followed by a setup_domain_child(). This was not always done, in particular not when walking to the forest root for additional trusts. This is a minimal patch, we need to fix add_trusted_domain(). | |||||
2010-04-19 | s3: Move the in-memory ccache to the parent | Volker Lendecke | 7 | -95/+90 | |
None of this blocks, so there is no reason to keep this in a winbind child process | |||||
2010-04-19 | s3-winbind: Allow changing the password for pdb | Volker Lendecke | 1 | -0/+47 | |
2010-04-19 | s3: Convert WINBINDD_PAM_LOGOFF to the new async API | Volker Lendecke | 4 | -68/+148 | |
2010-04-19 | s3: Convert WINBINDD_PAM_CHAUTHTOK to the new async API | Volker Lendecke | 4 | -59/+131 | |
2010-04-19 | s3: Convert WINBINDD_PAM_AUTH_CRAP to the new async API | Volker Lendecke | 4 | -73/+132 | |
2010-04-19 | s3: Convert WINBINDD_PAM_AUTH to the new async API | Volker Lendecke | 4 | -66/+134 | |
2010-04-19 | winbindd: Fill in num_entries where available | Volker Lendecke | 3 | -0/+6 | |
The server implementation of WINBINDD_LIST_USERS, WINBINDD_LIST_GROUPS and WINBINDD_LIST_TRUSTDOM knows the number of entries returned. Bump up the version number so that a newer lib does not rely on something an older winbind does not do. | |||||
2010-04-19 | s3: Add some debug to GETSIDALIASES | Volker Lendecke | 1 | -0/+9 | |
2010-04-18 | s3: Fix indentation in remove_ccache | Volker Lendecke | 1 | -1/+1 | |
2010-04-18 | s3: Fix a typo in winbindd_ccache_save | Volker Lendecke | 1 | -1/+1 | |
2010-04-13 | s3-winbind: Authenticate SAM users | Volker Lendecke | 1 | -5/+71 | |
2010-04-13 | s3-winbindd: Fix typo in comment. | Karolin Seeger | 1 | -1/+1 | |
Karolin | |||||
2010-04-11 | s3: Use sizeof(chal) instead of a constant | Volker Lendecke | 1 | -1/+1 | |
2010-04-11 | s3: Cosmetics -- I could not spot where "chal" was initialized | Volker Lendecke | 1 | -1/+1 | |
2010-04-10 | s3: Remove domain selection from dual_pam_auth | Volker Lendecke | 1 | -53/+13 | |
We're in a child, the parent already has chosen the domain by picking the right child to connect to. Metze, you've done work on winbind lately, so it goes to you: Please check :-) | |||||
2010-04-10 | s3: Check 0 termination in GETALIASES | Volker Lendecke | 1 | -7/+13 | |
2010-04-08 | s3: Remove the separate "child" argument from setup_domain_child() | Volker Lendecke | 3 | -15/+8 | |
2010-04-08 | s3:winbindd: make "smbcontrol winbindd validate-cache" reliable again | Stefan Metzmacher | 1 | -0/+3 | |
commit 73577205cf81644e7fe853eaf3e6459f7f443096 (s3:winbindd: fix problems with SIGCHLD handling (bug #7317)) broke this. metze | |||||
2010-04-05 | s3: Fix a cut&paste error in winbindd_list_groups_done | Volker Lendecke | 1 | -1/+1 | |
2010-04-01 | s3:winbindd: remove unused variables | Stefan Metzmacher | 1 | -2/+0 | |
metze | |||||
2010-04-01 | s3:winbindd: fix problems with SIGCHLD handling (bug #7317) | Stefan Metzmacher | 3 | -17/+6 | |
The main problem is that we call CatchChild() within the parent winbindd, which overwrites the signal handler that was registered by winbindd_setup_sig_chld_handler(). That means winbindd_sig_chld_handler() and winbind_child_died() are never triggered when a winbindd domain child dies. As a result will get "broken pipe" for all requests to that domain. To reduce the risk of similar bugs in future we call CatchChild() in winbindd_reinit_after_fork() now. We also use a full winbindd_reinit_after_fork() in the cache validation child now instead instead of just resetting the SIGCHLD handler by hand. This will also fix possible tdb problems on systems without pread/pwrite and disabled mmap as we now correctly reopen the tdb handle for the child. metze | |||||
2010-04-01 | s3: Ensure NULL termination before printing in winbindd_pam_logoff | Volker Lendecke | 1 | -3/+3 | |
2010-04-01 | s3: Fix a typo in winbindd_pam_logoff | Volker Lendecke | 1 | -1/+1 | |
2010-04-01 | s3:winbindd: correctly invalidate the cached connection | Stefan Metzmacher | 1 | -6/+11 | |
There're maybe additional TCP connection for ncacn_ip_tcp. metze | |||||
2010-04-01 | s3:winbindd: only set child_domain in the child | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2010-04-01 | s3:winbindd: make sure we don't try rpc requests against unaccessable domains | Stefan Metzmacher | 1 | -5/+28 | |
This makes sure we don't crash while trying to dereference domain->conn.cli->foo while trying to establish a rpc connection to the server. metze | |||||
2010-04-01 | s3: fix a typo in winbind_client_response_written | Volker Lendecke | 1 | -2/+2 | |
2010-03-31 | s3: Fix an error message in winbindd_pam_chauthtok() | Volker Lendecke | 1 | -1/+1 | |
2010-03-31 | s3: Ensure null termination in winbindd_pam_chauthtok() | Volker Lendecke | 1 | -0/+4 | |
2010-03-31 | s3: Make check_info3_in_group static | Volker Lendecke | 2 | -4/+2 | |
2010-03-31 | s3-winbind: Make append_auth_data() static | Volker Lendecke | 2 | -8/+4 | |
2010-03-29 | s3:winbindd: correctly retry if the netlogon pipe gets disconnected during a ↵ | Stefan Metzmacher | 1 | -2/+2 | |
logon call This fixes hopefully the last part of bug #7295. metze | |||||
2010-03-29 | s3:winbindd_reconnect: don't only reconnect on NT_STATUS_UNSUCCESSFUL | Stefan Metzmacher | 1 | -14/+59 | |
metze | |||||
2010-03-29 | s3:winbindd_cm: invalidate connection if cm_connect_netlogon() fails | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2010-03-29 | s3:winbindd: consistently use TALLOC_FREE(conn->foo_pipe) is we create a new ↵ | Stefan Metzmacher | 1 | -0/+5 | |
connection metze | |||||
2010-03-29 | s3:winbindd_cm: use rpccli_is_connected() helper function | Stefan Metzmacher | 1 | -4/+4 | |
metze |