1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-26 04:23:49 +03:00
Commit Graph

29 Commits

Author SHA1 Message Date
Jeremy Allison
e61ad0c158 Split the winbindd_passdb backend into a 'builtin' and a 'sam'
backend. This allows winbindd when running on a Samba PDC to
correctly answer wbinfo -u lists and other queries.
Jeremy.
2008-05-30 23:49:36 -07:00
Jeremy Allison
41e20becf3 Fix winbindd on a PDC by reverting : 83b04c60fac76ccd2d5aecb14f8896a07d488b1f..6e66512d5beb256a44c6703cdb8c7fa7e0fd8537.
We still need to address https://bugzilla.redhat.com/show_bug.cgi?id=429024, but this
will come later.
Jeremy.
2008-05-29 10:37:52 -07:00
Günther Deschner
65b4cb20ea Use sid_array_from_info3 in lookup_usergroups_cached().
Guenther
2008-04-04 02:53:40 +02:00
Steven Danneman
6aac972d79 Forest root trust flags won't overwrite child trust flags
* changed the behavior of winbind_ads.c:trusted_domains() to not overwrite
existing trust information if we're joined to a child domain, and querying the
forest root domain.  Previously if we were joined to a child domain, we'd
request all known trust information from this child domain (our primary domain)
and store it in the tdc.  We'd then request all trust information from our tree
root (to get the forests we transitively trust) and overwrite the existing trust
information we already had from the perspective of the tree root.

* updated several comments and fixed typos
2008-03-31 13:40:58 -05:00
Günther Deschner
d9502eb753 Use netr_SamInfo3 everywhere in winbindd.
Guenther
2008-02-17 02:12:00 +01:00
Simo Sorce
7dbfc7bdc6 Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test 2008-02-01 14:24:31 -05:00
Simo Sorce
9347d34b50 Fix winbindd running on a Samba DC,
This patch make sure we do not try to contact smbd in the main dameon
to avoid deadlocks.
All the operations that require connecting to smbd are performed in
the domain child anyway.
2008-02-01 14:23:43 -05:00
Günther Deschner
beae25c808 Remove include/rpc_ds.h and all references to it completly.
Jerry, please have a look if you're fine with that.

Guenther
2008-01-29 17:51:05 +01:00
Gerald W. Carter
f53658a20d Always trust the domain flags in the wcache trusted domain cache.
Use the flags stored in the tdb when determining if a domain can
be contacted.  The tdb should be considered authoratative anyways unless
you know the flags in the winbindd_domain are correct (such as when
first enumerating trusts).

Original suggestion and patch from Steven Danneman <steven.danneman@isilon.com>.
Manually rewritten by me for 3.2.
2008-01-25 12:29:47 -06:00
Michael Adam
dcd42a1e06 Fix winbindd_can_contact_domain() on a samba DC.
The check for inbound trusts is invalid when samba is a DC
and has a trust with an active directory domain.

This effectively prevented tusts with an AD domain on a
samba DC from working (unless using "winbindd rpc only"),
because an ads_connect() was never performed. Only the
rpc-based winbindd methods were working properly.

Jerry: Please check!

Michael
2008-01-25 16:43:21 +01:00
Michael Adam
ba5373ed7f Add a debug message winbindd_can_contact_domain()
explaining the reason for failure.

Michael
2008-01-25 01:42:22 +01:00
Michael Adam
8bb21b8b38 Fix assignment to request->data.init_conn.is_primary in init_child_connection().
The present assignment
"request->data.init_conn.is_primary = domain->internal ? False : True"
simply feels wrong. This seems to be the thing right to do:
"request->data.init_conn.is_primary = domain->primary ? true : false".

The question is: Does this have any purpose at all?
data.init_conn.is_primary seems to be used nowhere
in the whole code at all.

Is it (still) needed?

Michael
2008-01-25 01:42:22 +01:00
Michael Adam
1f49065d44 Initialize _domain_list to NULL.
Just to be sure the "if (!_domain_list)" in domain_list() test always works.

Michael
2008-01-23 13:52:42 +01:00
Michael Adam
6b2b9a60ef Convert add_sid_to_array() add_sid_to_array_unique() to return NTSTATUS.
Michael
2008-01-09 01:47:10 +01:00
Gerald (Jerry) Carter
e7164a252b Fix the inherited trust flags when spidering the trust heirarchy.
Also *do not* clear the trust list when rescanning or else it is possible
to suffer from a race condition where no trusted domains can be found.
2008-01-04 13:35:41 -06:00
Volker Lendecke
eb523ba776 s/sid_to_string/sid_to_fstring/
least surprise for callers
2007-12-15 22:47:30 +01:00
Volker Lendecke
c221c246b1 Use sid_to_string directly
It seems a bit pointless to do a fstrcpy(dst, sid_string_static(src))
2007-12-15 22:09:36 +01:00
Volker Lendecke
bb35e794ec Replace sid_string_static by sid_string_dbg in DEBUGs 2007-12-15 22:09:36 +01:00
Stefan Metzmacher
075d315e0f winbindd: move domain child specific stuff into its own file
metze
2007-12-14 08:28:35 +01:00
Volker Lendecke
31d0a846db Remove some globals 2007-12-05 14:39:07 +01:00
Jeremy Allison
98e154c312 This is a large patch (sorry). Migrate from struct in_addr
to struct sockaddr_storage in most places that matter (ie.
not the nmbd and NetBIOS lookups). This passes make test
on an IPv4 box, but I'll have to do more work/testing on
IPv6 enabled boxes. This should now give us a framework
for testing and finishing the IPv6 migration. It's at
the state where someone with a working IPv6 setup should
(theorecically) be able to type :
smbclient //ipv6-address/share
and have it work.
Jeremy.
2007-10-24 14:16:54 -07:00
Stefan Metzmacher
5af1b45ed3 r25571: split up child_dispatch_table into domain, idmap and locator tables
metze
(cherry picked from commit abbb36a37c)
2007-10-22 08:46:11 +02:00
Jeremy Allison
f35a266b3c RIP BOOL. Convert BOOL -> bool. I found a few interesting
bugs in various places whilst doing this (places that assumed
BOOL == int). I also need to fix the Samba4 pidl generation
(next checkin).
Jeremy.
2007-10-18 17:40:25 -07:00
Gerald (Jerry) Carter
5c6c8e1fe9 [GLUE] Rsync SAMBA_3_2_0 SVN r25598 in order to create the v3-2-test branch. 2007-10-10 15:34:30 -05:00
Stefan Metzmacher
abbb36a37c r25571: split up child_dispatch_table into domain, idmap and locator tables
metze
2007-10-10 12:31:15 -05:00
Stefan Metzmacher
b8d67b78aa r25260: add trusted domains always to the end of the list.
Now BUILTIN is always the first domain followed
by the domain of our own SAM DB and the primary
domain (in member server mode).

metze
2007-10-10 12:30:56 -05:00
Stefan Metzmacher
9caf54c868 r25241: remove sequence_number out of WINBINDD_DOMAIN_INFO call
as this is always answered by the winbindd parent and will
most times return old sequence number values.

metze
2007-10-10 12:30:53 -05:00
Stefan Metzmacher
5566cf01e8 r25236: make it possible to alter WINBINDD_SOCKET_DIR via
"winbindd:socket dir=/path/to/dir" for usage in make test

metze
2007-10-10 12:30:52 -05:00
Stefan Metzmacher
3ac7566ae1 r25154: move winbindd code into winbindd/
metze
2007-10-10 12:30:46 -05:00