summaryrefslogtreecommitdiff
path: root/source3/winbindd
AgeCommit message (Collapse)AuthorFilesLines
2009-06-14Fix an error message: We get the errno in "err"Volker Lendecke1-1/+1
2009-06-14winbind: replace process_loop() by tevent_loop_once()Volker Lendecke1-68/+5
2009-06-14Make rescan_trusted_domains a timed eventVolker Lendecke3-26/+20
2009-06-14Do not store the listening fdeVolker Lendecke1-15/+11
2009-06-14Avoid scanning the client list when a client exitsVolker Lendecke2-20/+6
2009-06-14Do not use "finished" in winbind childVolker Lendecke1-10/+8
2009-06-14Remove unused init_child_connection()Volker Lendecke2-139/+0
2009-06-14Convert winbindd_domain_info to wb_domain_request_sendVolker Lendecke1-59/+75
2009-06-14Add winbindd_dual_ping to all childrenVolker Lendecke5-0/+20
2009-06-14Convert async_domain_request to wb_domain_request_sendVolker Lendecke1-20/+22
2009-06-14Add async wb_pingVolker Lendecke3-0/+62
2009-06-14Add an async wb request loopVolker Lendecke2-0/+63
2009-06-14Add wb_domain_request_send/recvVolker Lendecke2-0/+190
2009-06-14Remove some unused codeVolker Lendecke4-264/+0
2009-06-14Convert the winbind parent->child communication to wb_reqtransVolker Lendecke6-239/+166
2009-06-14Convert the main winbind client communication to wb_reqtrans.cVolker Lendecke2-125/+65
2009-06-14Make winbindd_cli_state->request a pointer instead of a struct memberVolker Lendecke14-423/+426
In itself, this is pretty pointless. But in the next steps I'll convert the winbind internal communication to wb_reqtrans which allocates the request properly. This minimizes the later diff. Volker
2009-06-08Pass a talloc_ctx to pdb_enum_aliasmemVolker Lendecke1-2/+2
2009-06-08s3-winbindd: workaround alias enumeration in expand_groups().Günther Deschner1-3/+16
alias enumeration in NSS is not done properly done atm and needs to be fixed. Guenther
2009-06-06s3-winbindd: add some debug statements while tracking down a bug.Günther Deschner2-2/+20
Guenther
2009-05-28s3-winbindd: fix remaining callers of sid_binstring().Günther Deschner2-4/+4
Guenther
2009-05-28Make sid_binstring & friends take a talloc contextVolker Lendecke2-12/+10
2009-05-28s3:idmap_ldap: filter out of range mappings in default idmap configMichael Adam1-16/+55
This fixes bug #6417 Michael
2009-05-27s3: Allow child processes to exit gracefully if we are out of fdsMarc VanHeyningen2-4/+6
When we run out of file descriptors for some reason, every new connection forks a child that immediately panics causing smbd to coredump. This seems unnecessarily harsh; with this code change we now catch that error and merely log a message about it and exit without the core dump. Signed-off-by: Tim Prouty <tprouty@samba.org>
2009-05-27s3:idmap: fix a comment typoMichael Adam1-1/+1
Michael
2009-05-27s3:idmap_tdb2: filter out of range mappings in default idmap configMichael Adam1-12/+49
This fixes bug #6416 Michael
2009-05-27s3:idmap_tdb: add an entry debug statment to idmap_tdb_db_init()Michael Adam1-0/+2
Michael
2009-05-27s3:idmap_tdb: filter out of range mappings in default idmap configMichael Adam1-16/+57
This fixes bug #6415 Michael
2009-05-25s3:winbind_util: remove trailing spacesMichael Adam1-56/+56
Michael
2009-05-25s3:winbind:idmap_ldap: warn about duplicate SID->XID mappings (bug #6387)Michael Adam1-2/+11
With the current infrastructure, we should not return error on duplicate mappings but just warn instead (because an error would trigger the attempt to create yet another mapping). Michael
2009-05-25s3:winbind:idmap_ldap: warn about duplicate XID->SID mappings (bug #6387)Michael Adam1-0/+8
With the current infrastructure, we should not return error on duplicate mappings but just warn instead (because an error would trigger the attempt to create yet another mapping). Michael
2009-05-24Fix a race condition in winbind leading to a panicVolker Lendecke1-0/+1
In winbind, we do multiple events in one select round. This needs fixing, but as long as we're still using it, for efficiency reasons we need to do that. What can happen is the following: We have outgoing data pending for a client, thus state->fd_event.flags == EVENT_FD_WRITE Now a new client comes in, we go through the list of clients to find an idle one. The detection for idle clients in remove_idle_client does not take the pending data into account. We close the socket that has pending outgoing data, the accept(2) one syscall later gives us the same socket. In new_connection(), we do a setup_async_read, setting up a read fde. The select from before however had found the socket (that we had already closed!!) to be writable. In rw_callback we only want to see a readable flag, and we panic in the SMB_ASSERT(flags == EVENT_FD_READ). Found using bin/smbtorture //127.0.0.1/tmp -U% -N 500 -o 2 local-wbclient Volker
2009-05-22s3:winbind:idmap_ldap: fix a crash bug in idmap_ldap_unixids_to_sids (#6387)Michael Adam1-1/+1
This fixes a crash bug hit when multiple mappings were found by the ldap search. This crash was caused by an ldap asssertion in ldap_next_entry because was set to NULL in each iteration. The corresponding fix was applied to the idmap_ldap_sids_to_unixids() by Jerry in 2007 (b066668b74768d9ed547f16bf7b6ba6aea5df20a). This fixes the crash part of bug #6387. There is a logic part, too: The problem currently only occurs when multiple mappings are found for one given unixid. Now winbindd does not crash any more but it does not correctly handle this situation. It just returns the last mapping from the ldap search results. This needs fixing. Michael
2009-05-22s3: ignore EPIPE error when winbind finally writes to wb client because ↵Bo Yang1-2/+8
client might have already closed the socket Signed-off-by: Bo Yang <boyang@samba.org>
2009-05-22s3: Fix onlinestatus msg to return status of all domain instead of omitting ↵Bo Yang1-78/+51
trusted domains Signed-off-by: Bo Yang <boyang@samba.org>
2009-05-16Fix a typoVolker Lendecke1-1/+1
2009-05-12Convert response.extra_data.data from malloc to tallocVolker Lendecke8-98/+47
2009-05-11Fix a bunch of compiler warnings about wrong format types.Jeremy Allison5-11/+14
Should make Solaris 10 builds look cleaner. Jeremy.
2009-05-11Fix some nonempty blank linesVolker Lendecke1-37/+37
2009-05-07Fix some type-punned warningsVolker Lendecke3-7/+13
2009-05-07Remove a misleading commentVolker Lendecke1-2/+0
2009-05-07Fix some nonempty blank linesVolker Lendecke1-11/+10
2009-04-24s3-idmap: Fix bug #6286: Call init function for builtin idmap modules before ↵Günther Deschner1-0/+2
probing for them as shared modules. idmap-gurus of the world, please check. Guenther
2009-04-21s3-secdesc: use SEC_FLAG_MAXIMUM_ALLOWED instead of SEC_RIGHTS_MAXIMUM_ALLOWED.Günther Deschner2-12/+12
Guenther
2009-04-20Fix to use modified cli_rpc_pipe_open_schannel_with_key APIAndrew Bartlett1-2/+2
2009-04-20Remove use of talloc_reference in cli_rpc_pipe_open_schannel_with_key()Andrew Bartlett1-1/+1
2009-04-14s3: Fix ntlm_auth and winbindd to use new common libcli/auth APIsAndrew Bartlett1-9/+9
2009-04-14Rework Samba3 to use new libcli/auth code (partial)Andrew Bartlett5-3/+8
This commit is mostly to cope with the removal of SamOemHash (replaced by arcfour_crypt()) and other collisions (such as changed function arguments compared to Samba3). We still provide creds_hash3 until Samba3 uses the credentials code in netlogon server Andrew Bartlett
2009-04-07s3-libads: avoid NULL talloc context with ads_get_dn().Günther Deschner2-2/+2
Guenther
2009-04-06s3:libads Make ads_get_dn() take a talloc contextAndrew Bartlett4-11/+11
Also remove ads_memfree(), which was only ever a wrapper around SAFE_FREE, used only to free the DN from ads_get_ds(). This actually makes libgpo more consistant, as it mixed a talloc and a malloc based string on the same element. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
generated by cgit (git 2.34.1) at 2024-12-23 23:45:52 +0000