summaryrefslogtreecommitdiff
path: root/source3/winbindd
AgeCommit message (Collapse)AuthorFilesLines
2009-01-06Factor out lots of common code into a function.Jeremy Allison1-37/+27
Jeremy.
2009-01-06s3-samr: avoid all init_samr_Domain* functions.Günther Deschner1-18/+12
Guenther
2009-01-05set entry->refresh_time to make ccache_regain_all_now() work correctly.Bo Yang1-2/+11
2009-01-05s3:winbindd: also handle fd events from the winbind_event_context()Stefan Metzmacher1-0/+9
metze
2009-01-05s3:events: change event_add_timed() prototype to match samba4Stefan Metzmacher3-27/+8
metze
2009-01-05s3:winbindd: regain tickets for all ccache entries, when we go onlineStefan Metzmacher3-7/+52
set_event_dispatch_time() is stupid by design and only handles the first event with a given name. metze
2009-01-05s3:winbindd: cancel all ccache entry events and not just oneStefan Metzmacher3-6/+19
cancel_named_event() is stupid by design and also only cancels one single event. metze
2009-01-05s3:winbindd: recreate the per domain check_online_event without relying on ↵Stefan Metzmacher1-19/+20
global state set_event_dispatch_time() is stupid by design and just picks the first event with the given name. metze
2009-01-05s3:winbindd: rename fd_event => winbindd_fd_eventStefan Metzmacher3-26/+22
It's really confusing to have two versions of 'fd_event' metze
2009-01-05s3:winbindd: move WINBINDD_CCACHE_ENTRY and WINBINDD_MEMORY_CREDS to winbindd.hStefan Metzmacher1-1/+28
metze
2009-01-05Fix broken krb5 refresh chainBo Yang3-39/+236
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-01-05clean event context after child is forked.Bo Yang3-18/+28
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-01-04Remove wb_trans_send/recvVolker Lendecke1-9/+0
2009-01-04Move winbindd/winbindd_reqtrans.c to lib/wb_reqtrans.cVolker Lendecke1-685/+0
2009-01-03struct async_req doesn't really need to carry an event_contextVolker Lendecke1-5/+5
2009-01-02Alternative fix for 45db33e73 and 0d443ae7931Volker Lendecke1-1/+2
Simo is right, we need to ask passdb first. At least this fixes a nasty to find NT_STATUS_ACCESS_DENIED problem in the build farm for the test run I just did on host "opi". Michael, can you re-check if this also fixes the error you found, leading to the two fixes? Thanks, Volker
2009-01-02Revert "s:Fix uid_to_sid mapping when the idmap cache is empty."Volker Lendecke1-7/+8
This reverts commit 9a9b64dbdfce4414ada22d4f882c8c757b5813e1.
2009-01-02Revert "s3:idmap: Remove passd check from idmap_backends_unixid_to_sid()."Volker Lendecke1-0/+9
This reverts commit 45db33e73262d8e195a46fb96405dfb3dc43d6bc.
2008-12-31Fix more asprintf and "ignoring return code" warnings from gcc 4.3.Jeremy Allison2-2/+7
Jeremy.
2008-12-31s3:winbindd: we don't need to call messaging_reinit() twiceStefan Metzmacher1-7/+0
reinit_after_fork() already calls messaging_reinit() metze
2008-12-25s3:idmap: Remove passd check from idmap_backends_unixid_to_sid().Michael Adam1-9/+0
As noted by Metzy, it makes no sense here to check id->sid. What is worse, this might even be passed in uninitialized. This still fixes the bug for me (of course), but we might need to check, if another special handling of passdb is needed (possibly changing from constant return code NT_STATUS_OK...) Michael Signed-off-by: Michael Adam <obnox@samba.org>
2008-12-25s:Fix uid_to_sid mapping when the idmap cache is empty.Michael Adam1-8/+7
This failed for backends other than passed, since idmap_backends_unixid_to_sid() always asked passdb first, which returned Success no matter whether a mapping was found or not. One effect wast that getpwuid failed after "net cache flush". Only after filling the cache with a getpwnam call it succeeded. This fix makes the behaviour of idmap_backends_unixid_to_sid() exactly the same as that of idmap_backends_sid_to_unixid() Michael Signed-off-by: Michael Adam <obnox@samba.org>
2008-12-22Fix "allow trusted domain" so it disables trusted domains.Gerald (Jerry) Carter1-2/+11
2008-12-19Fix a "ignoring function call result" warningVolker Lendecke1-1/+6
2008-12-19Make cli_negprot return NTSTATUS instead of boolVolker Lendecke1-3/+4
2008-12-12winbindd: vars for signals must be volatile sig_atomic_tSATOH Fumiyasu1-12/+12
2008-12-08Add wb_trans_send/revcVolker Lendecke2-33/+166
2008-12-08Add infrastructure to transfer winbindd_request/response asynchronouslyVolker Lendecke2-0/+582
2008-12-07Fix nonempty blank linesVolker Lendecke2-39/+39
2008-12-04s3:winbindd: fix horrible mis-indentation of toplvl braces in ↵Michael Adam1-2/+2
getgrsid_sid2gid_recv to make code more readble Michael
2008-12-04s3:winbindd: don't open a new dc connection in winbindd_getpwnam (main winbindd)Michael Adam1-1/+1
This is just to find the corresponding domain struct. Actual connection is handled by the domain child. Michael
2008-12-04s3:winbindd: don't open a new dc connection in winbindd_getgrnam (main winbindd)Michael Adam1-1/+1
This is just to find the corresponding domain struct. Actual connection is handled by the domain child. Michael
2008-12-03s3: Change sockaddr util function names for consistencyTim Prouty1-1/+1
Also eliminates name conflicts with OneFS system libraries
2008-12-01s3: Fix 'ctx' might be used unitialized warningsTim Prouty1-2/+2
2008-12-01s3:winbindd/nss_info: remove unused variable from nss_init()Michael Adam1-1/+0
Michael
2008-12-01s3:winbindd/nss_info: make nss_domain_list_add_domain() staticMichael Adam1-2/+2
Michael
2008-12-01s3:winbindd/nss_info: fix default backend handling for ad backends.Michael Adam1-23/+61
This fixes "winbind nss info = rfc2307" (or sfu or sfu20). Originally, only explicitly configured domains (like "rfc2307:domain") worked with the ad module, since the domain name was not passed backe to the module. This is fixed by recording the first backend listed without domain in the "winbind nss info" parameter as the default backend, and creating new nss_domain entries (using this default backend) on the fly as requests for domains which are not explicitly configured are encountered. Michael
2008-12-01s3:winbindd/nss_info: whitespace cleanup.Michael Adam1-35/+33
Remove trailing spaces and fix tab / space mixup. Michael
2008-12-01s3:winbindd_cache: add debugging to get_nss_info_cached()Michael Adam1-0/+7
Michael
2008-12-01s3:winbindd/nss_info: add entry debug message to nss_get_info()Michael Adam1-0/+3
Michael
2008-12-01s3:winbindd/nss_info: add debugging to nss_init()Michael Adam1-0/+7
Michael
2008-12-01s3:winbindd/idmap_ad: add entry debug message to nss_ad_get_info()Michael Adam1-0/+3
Michael
2008-12-01s3:winbindd/idmap_ad: add support for trusted domains to idmap_ad (bug #3661)Michael Adam1-126/+221
This initial fix does at least work for explicitly configured domains. The patch has a few disadvantages: 1. It does work only for explicitly configured domains, not with the default backend (idmap backend = ad), since it relies on the domain name being passed in via the idmap_domain. One workaround for this would be to create clones of the default idmap_domain for domains not explicitly configured. 2. It calls find_domain_from_name_noinit() from idmap_ad_cached_connection. The problem here is that only the NetBIOS domain name (workgroup name) is passed in via the idmap_domain struct, and the module has to establish a connection to the domain based on that information. find_domain_from_name_noinit() has the disadvantage that it uses the state of the domain list at fork time (unless used from the main winbindd). But this should be ok as long as the primary domain was reachable at start time. For nss_info, the situation is similar - This will only work for domains explicitly configured in smb.conf as follows: "winbind nss info = rfc2307:dom1 sfu:dom2 rfc2307:dom3 template:dom4" Setting the default nss info to one of the ad backends (rfc2307, sfu, sfu20) will fail since the domain name is not passed in with the nss_domain_entry. Michael
2008-12-01s3:winbindd/idmap_ad: refactor core of nss_{sfu|sfu20|rfc2307}_init to ↵Michael Adam1-34/+48
common function. Michael
2008-12-01s3:winbindd/idmap_ad: rename ctx to mem_ctx in nss_ad_get_info()Michael Adam1-8/+8
in preparation to using the idmap_ad_context there Michael
2008-12-01s3:winbindd/idmap: add diagnostic entry debug msg to ↵Michael Adam1-0/+3
idmap_backends_sid_to_unixid Michael
2008-12-01s3:winbindd/idmap: add diagnostic entry debug msg to ↵Michael Adam1-0/+4
idmap_backends_unixid_to_sid Michael
2008-12-01s3:winbindd/idmap: add diagnostic entry debug msg to idmap_find_domain().Michael Adam1-0/+3
Michael
2008-12-01s3:winbindd/idmap_util: unify entering debug messages and add ouput of domainMichael Adam1-4/+8
Michael
2008-12-01s3:winbindd/nss_info: change nss_map_{to|from}_alias to take nss_domain_entryMichael Adam5-18/+18
instead of just the domain name Michael