Age | Commit message (Collapse) | Author | Files | Lines |
|
For the winbind cached ADS LDAP connection handling
(ads_cached_connection()) we were (incorrectly) assuming that the
service ticket lifetime equaled the tgt lifetime. For setups where the
service ticket just lives 10 minutes, we were leaving hundreds of LDAP
connections in CLOSE_WAIT state, until we fail to service entirely with
"Too many open files".
Also sequence_number() in winbindd_ads.c needs to delete the cached LDAP
connection after the ads_do_search_retry() has failed to submit the
search request (although the bind succeeded (returning an expired
service ticket that we cannot delete from the memory cred cache - this
will get fixed later)).
Guenther
(This used to be commit 7e1a84b7226fb8dcd5d34c64a3478a6d886a9a91)
|
|
string
server_len is usually 256 (fstring).
Correctly terminate saving the lenght
(This used to be commit e7e44554bf7c61020e2c5c652e3f8f37a296d3aa)
|
|
Guenther
(This used to be commit 4df582fa1049afe96bbee7e8cab93cfa82208ba3)
|
|
Guenther
(This used to be commit 8700829c1f6b8851035c6b6d3da7aea720320db7)
|
|
(This used to be commit 509ae5ffa17be340c41fecaaace75816c18316c6)
|
|
Jeremy.
(This used to be commit 6723f9d85ccb4883f15658aceb021b4c4a752edf)
|
|
dleonard@vintela.com for this fix !
Jeremy.
(This used to be commit 70b5db7d8c6aa324ad98436fe3fafe715c04c5a8)
|
|
is 8 byte aligned.
Jeremy.
(This used to be commit 7645044fcf77644839bb0d74163d93d03284bd67)
|
|
This is actually an interesting case as it exposed bad code in our DFS redirect
module (that was where the bug was introduced).
Caused by our turning on dfsroot be default.
Jeremy.
(This used to be commit 5fe25588f57ee59d70a66c755dfe70312e7afd08)
|
|
one typo, one to make sure that time initialization
is done before modules that depend on it (printer
initialization).
Jeremy.
(This used to be commit 6df32b4a6a9abd40e963c188b4c8769f15a0ab9b)
|
|
(needed by /sbin keyctl utils to finish the upcall)
(This used to be commit 738d29dbcc6eae44ea91bdcf59a38c423dad1e29)
|
|
Based on work from Joe Meadows <jameadows@webopolis.com>.
One for the Vista patchset.
Jeremy.
(This used to be commit 470a4dc30874b00c599806cb6dbc06fe2775144c)
|
|
subsystems. See the comment in the diff.
Volker
(This used to be commit 92fdb1193de8e7c857603e4fcd4a92b9a0a0f3bd)
|
|
(This used to be commit 5b25ce30022b5968717691223d065a8e0770c6e3)
|
|
in_addr. Okay, it's a SuSE 7.0, but if the fix is so simple I think we should
not drop that :-)
Volker
(This used to be commit a5d0d1c1e63c63388540a24854bde380cd4b06bf)
|
|
Jeremy.
(This used to be commit 5fa720f04f5d3b736145f9323aa8f4e623c14a41)
|
|
Jeremy.
(This used to be commit 36afae2d48a3c3e97d1c2c35275f99d51ba2b64a)
|
|
(This used to be commit 739a608eadd9448791366f26b42b06d38d77e037)
|
|
(This used to be commit 1dc2ba09c7afc516d894fddfed613990ccf1f1ee)
|
|
solaris 9 box I could solve that with an increased wait time.
Volker
(This used to be commit 4ea654857af48640d86377418f7a91a91c830ced)
|
|
Move more error code returns to NTSTATUS.
Client test code to follow... See if this
passes the build-farm before I add it into
3.0.25.
Jeremy.
(This used to be commit 83dbbdff345fa9e427c9579183f4380004bf3dd7)
|
|
the 3.0.25 branch
(This used to be commit b10f4cdfc0767dbd88f29f42fa5a8d9a9c1959a2)
|
|
(This used to be commit 22c9511314d563e1f4480099d2990cb5fbb8546a)
|
|
from both idmap_ldap_{alloc,db}_init()
* Fix the backwards compat support in idmap_ldap.c
* Fix a spelling error in the idmap_fetch_secret() function name
(This used to be commit 615a10435618abb89852910a0d36c1d9ff35647f)
|
|
RAW-NOTIFY test
in the build farm.
Volker
(This used to be commit 3dd1bf667f42bd03a7b7159b9c2ad9ccbd269130)
|
|
(This used to be commit 01af19cc9d8e282ffd6ff6b52699ed2d0369ff69)
|
|
(This used to be commit 04f6f01dfeda2fa076209a94cdf8e59f6ce47008)
|
|
filesystem.
Jeremy.
(This used to be commit 1e25501e8e6c568ab8892e05e0a60197e267d2b5)
|
|
NT_STATUS_IO_TIMEOUT with it.
Samba4 disables inotify as well. Does anybody know why Samba4 does it? Maybe
the same justification holds for 3 as well.
Volker
(This used to be commit de216a574c49f97e86a90c96627de4b5a3ea4b1c)
|
|
on Vista.
Jeremy.
(This used to be commit b16707a8615e1d00839d31e7a3061fb111336691)
|
|
the PAM_SUCCESS block.
Guenther
(This used to be commit f4a704745cb0bd2c5dc2a9b16619d8ee30fd7ba1)
|
|
* Consolidate all pam_winbind password expiry warnings in the one
_pam_send_password_expiry_message() call.
* Also convert some more NTSTATUS codes to error messages.
* Add paranoia check to only do all the post-processing after PAM_SUCCESS.
Guenther
(This used to be commit 02713f314b65a14e659e801f7eebea453756ac44)
|
|
Set info3 strings, krb5ccname and returned username after we changed a
password and sucessfully re-authenticated afterwards. In that case we
ended up without this information.
Guenther
(This used to be commit 034d42ba7236e67303a8221b7a613799d1a61b83)
|
|
pam_winbind.
Guenther
(This used to be commit 1feb961577475dceb97948cd2fdb987005890498)
|
|
metze
(This used to be commit 04feb8e39c3f8a3fecd5cac63e64c38cfc313c95)
|
|
Guenther
(This used to be commit 86b34cd5d6675c8f0a0becdcded36de4a815c898)
|
|
Guenther
(This used to be commit 97a0b1b79499af10930500ce857c93ffbacfdb6e)
|
|
calling application.
Guenther
(This used to be commit ebfae9a671d2c960178228ba7fdcd07cb2f49a05)
|
|
(This used to be commit 1d46b2ae3447b3521987b2ab1064a6ea314cfa07)
|
|
(This used to be commit 39809d7391723d3c310fc11705b1de20074c4bbf)
|
|
lookup when we actually are. Although the Linux nss winbind backend
protects against num_mem != 0 && buf == NULL.
Guenther
(This used to be commit a9ac4630b46242f88bd7a4e92511b55cc82e9940)
|
|
Guenther
(This used to be commit cdef1d00b89abd632281d428f1e1a6b322559af4)
|
|
Guenther
(This used to be commit 1b82c5fa0e363942947453a8e1b74aa2b95d8733)
|
|
received NT_STATUS_PASSWORD_RESTRICTION.
Guenther
(This used to be commit 2ac9cb3bbd1980df54f1b6cc2cfb823be43f3230)
|
|
requests in pam_winbind (Bug #4094).
Inspired by fix from Lars Heete.
Guenther
(This used to be commit 88e2185d2913e835e074dc3cc4ab1c631c3296a5)
|
|
\\server\share\path
DFS referrals. This doesn't appear to break anything in the non-DFS case,
but I don't have an environment to test DFS referrals. Need confirmation
from OP that this solves the problem.
(This used to be commit e479a9c094fa42354aad7aa76a712bf67d3d4d45)
|
|
- Should fix bug 4115 (but needs confirmation from OP). If the kerberos use
flag is set in the context, then also pass it to smbc_attr_server for use by
cli_full_connection()
- Should fix bug 4309 (but needs confirmation from OP). We no longer send a
keepalive packet unconditionally. Instead, we assume (yes, possibly
incorrectly, but it's the best guess we can make) that if the connection is
on port 139, it's netbios and otherwise, it isn't. If netbios is in use, we
send a keepalive packet. Otherwise, we check that the connection is alive
using getpeername().
(This used to be commit 2f9be59c10ef991a51cc858ab594187b5ca61382)
|
|
(This used to be commit b9300e1d5acba4e2537fcc6631d1ee4d53685f64)
|
|
(This used to be commit 5c36d67d272a52f58532daa3c3c09b8f8b6a34e0)
|
|
the hand marshalled container size is a multiple
of 4 bytes for RPC alignment.
Jeremy.
(This used to be commit 0e9ad2b29f1c05dc3f5d5e9659fe0557fa077d2e)
|