1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

494 Commits

Author SHA1 Message Date
Volker Lendecke
c821be415b nsswitch: Make some functions static 2010-01-23 19:14:50 +01:00
Volker Lendecke
6ada1f250b libwbclient: Remove a pointless check
We have dereferenced "blobs" before
2010-01-03 11:38:22 +01:00
Volker Lendecke
9b6b01aab6 s3:winbind: Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc
This just does a NULL RPC call through an existing NETLOGON connection. If
someone knows an operation that "just works" and does not return NOT_SUPPORTED,
please tell me :-)
2009-12-21 23:23:52 +01:00
Bo Yang
c7e3a2dc31 s3: check for PAM_RADIO_TYPE.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-12-10 19:29:24 +08:00
Bo Yang
b386c3311d s3: Fix build on non-linux platform.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-12-10 17:22:25 +08:00
Bo Yang
f7723293a0 s3: Give the user a chance to change password when password will expire soon.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-12-10 14:38:28 +08:00
Günther Deschner
5b3a32be97 s3-kerberos: next step to resolve Bug #6929: build with recent heimdal.
Based on patch from Allan <allan@archlinux.org>.

Also should fix the FreeBSD build on the buildfarm.

Guenther
2009-11-26 10:15:45 +01:00
Günther Deschner
51864219cc nsswitch: fix compile of winbind_krb5_locator with recent Heimdal versions.
Guenther
2009-11-25 17:58:52 +01:00
Björn Jacke
5377d5f894 pam_winbind: fix a printf type mismatch warning 2009-11-14 01:54:53 +01:00
Bo Yang
b9a3f1dd85 s3: Fix crash in pam_winbind, another reference to freed memory.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-10-24 09:36:23 +08:00
Günther Deschner
10bd521849 wbinfo: use wbcLookupDomainControllerEx for wbinfo --dsgetdcname.
Guenther
2009-10-19 18:44:51 +02:00
Günther Deschner
110a40d4bc libwbclient: fix wbcLookupDomainController().
Found by WINBIND-WBCLIENT torture test.

Guenther
2009-10-19 18:44:51 +02:00
Günther Deschner
71cfbf958c s4-smbtorture: test wbcLookupDomainController{Ex} in WINBIND-WBCLIENT.
Guenther
2009-10-19 18:44:51 +02:00
Bo Yang
31f1a36901 s3: Don't fail authentication when one or some group of require-membership-of is invalid.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-10-20 02:05:58 +08:00
Günther Deschner
20c07674f6 nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials().
Guenther
2009-10-16 16:08:55 +02:00
Günther Deschner
c2966a0766 s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well.
Guenther
2009-10-16 14:54:57 +02:00
Günther Deschner
246597cb0d s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT.
Guenther
2009-10-16 14:54:57 +02:00
Günther Deschner
612deb2699 s4-smbtorture: add very basic libwbclient testsuite.
Guenther
2009-10-16 02:04:29 +02:00
Jeremy Allison
1c1a883bd0 Fix the build, missing ->.
Jeremy.
2009-10-14 12:36:02 -07:00
Bo Yang
8e91c40574 s3: Fix reference to freed memory in pam_winbind.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-10-15 04:31:26 +08:00
Günther Deschner
0a468fbe36 nsswitch: add wbinfo -c (change trust account passwords).
Guenther
2009-10-13 12:42:44 +02:00
Günther Deschner
74948c979a libwbclient: add wbcChangeTrustCredentials.
Guenther
2009-10-13 12:42:44 +02:00
Matthias Dieter Wallnöfer
926a935a61 s4:wbclient.h - add compatibility constants
This is the result of a discussion on samba-technical on how to deal best with
existing programs which don't support my changes in the interface yet. Metze
pointed out this "defines" as a possibility and simo and I agreed.
2009-10-12 16:28:34 +02:00
Volker Lendecke
5aeb954ba9 s3: Fix a memleak reported by dmarkey 2009-10-09 23:00:08 +02:00
Simo Sorce
99cdbe3571 Fix builds with external talloc
Make sure we do not reference our internal talloc directly.
Let configure define what talloc.h file to use so that builds that use an
extrenal talloc do not include 2 different versions of the talloc header.
2009-10-09 13:14:08 -04:00
Matthias Dieter Wallnöfer
1e2f455b4a winbind: adapt the new reject constants also there
Please note: in the past the value "0" was misinterpreted as other error. This
isn't true. "0" means no error.
Therefore a solution for this one has to found.
2009-10-08 11:01:22 +02:00
Günther Deschner
7b3501200c wbinfo: allow to check trusts via "wbinfo -t --domain DOMAINNAME".
Guenther
2009-10-07 11:18:11 +02:00
Günther Deschner
2df47b0a54 libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
Guenther
2009-10-07 11:18:03 +02:00
Bo Yang
89ed2af69d s3: Don't overwrite password in pam_winbind, subsequent pam modules
might use the old password and new password.

Signed-off-by: Bo Yang <boyang@samba.org>
2009-09-16 22:03:57 +08:00
Björn Jacke
54831cc1a5 nss_winbind: remove unused variable 2009-09-15 03:42:30 +02:00
Matthieu Patou
344fb71cb8 s4: Pass WINBINDD_SOCKET_DIR var in order to overide the location of the Winbind socket 2009-09-11 07:29:57 +10:00
Günther Deschner
b35c627b92 wbinfo: fix various valgrind warnings and an invalid free.
Kai, please check.

Guenther
2009-09-04 00:04:49 +02:00
Günther Deschner
9264f48914 wbclient: Fix Bug #6680: always activate handling of large (> 256 byte) ntlmv2
blobs in wbcAuthenticateUserEx().

Guenther
2009-09-01 16:13:57 +02:00
Volker Lendecke
bb1f56a814 s3:libwbclient: Fix bug 6349, initialize domain info struct 2009-08-30 11:40:59 +02:00
Kai Blin
fd2feab8f0 wbinfo: Reduce test noise in the wbinfo blackbox test
With the switch to libwbclient the previously stubbed out
--trusted-domains and --all-domains calls now fail. Set them to knownfail.

The previously knownfail -D test is now stubbed out, test it now.

This does not fix the issues with wbinfo -a and wbinfo -K not working on the
build farm. I have no idea whatsoever what is causing this, as those are broken
on my local machine even without my changes.
2009-08-18 21:42:37 +02:00
Kai Blin
bc0e0a4c69 wbinfo: Use one codebase for Samba3 and Samba4.
There can be only one....wbinfo that is.
2009-08-18 20:26:05 +02:00
Kai Blin
19855ca2bb s3 wbinfo: Only call afs_settoken_str if compiled with WITH_FAKE_KASERVER 2009-08-18 19:53:41 +02:00
Kai Blin
182c667b17 s3 wbinfo: use wbcSidTypeString instead of sid_type_lookup 2009-08-18 19:53:41 +02:00
Kai Blin
a7128709d2 libwbclient: Add wbcSidTypeString function. 2009-08-18 19:53:41 +02:00
Kai Blin
afb8f8eaa5 s3 wbinfo: Remove unused functions, use C99-types 2009-08-18 19:53:40 +02:00
Kai Blin
ab818cdf8b s3 wbinfo: Explicitly include popt header, remove unused common options. 2009-08-18 19:53:40 +02:00
Kai Blin
6d4fd3e0a2 s3 wbinfo: Use talloc_strdup instead of SMB_STRDUP 2009-08-18 19:53:40 +02:00
Kai Blin
0dae6f541f s3 wbinfo: Don't use global_myname() 2009-08-18 19:53:39 +02:00
Kai Blin
b6ea2ece09 s3 wbinfo: Avoid ADD_TO_ARRAY macro. 2009-08-18 19:53:39 +02:00
Kai Blin
90b6e41b83 s3 wbinfo: Use uint32_t instead of uint32 2009-08-18 19:53:39 +02:00
Kai Blin
fa7d7a49b8 s3 wbinfo: remove --get-auth-user and --set-auth-user functionality
Point to the corresponding commands in "net" instead.
2009-08-18 19:53:38 +02:00
Kai Blin
004494b84c s3 wbinfo: Get rid of lp_ functions
This commit also fixes a lot of line lengths to make the file more readable.
2009-08-18 19:53:38 +02:00
Volker Lendecke
5ae122ed7a s3:winbind: Fix a potential segfault in libwbclient 2009-08-16 10:38:24 +02:00
Volker Lendecke
e8088e16f8 Make wbinfo also print the members when querying a group 2009-08-08 13:44:31 +02:00
Volker Lendecke
6cf3db9149 s3:winbind: Add NDR-based parent-child communication to winbind 2009-08-05 03:21:19 -04:00
Andrew Tridgell
fd43e0ee09 added a uid_wrapper library
This library intercepts seteuid and related calls, and simulates them
in a manner similar to the nss_wrapper and socket_wrapper
libraries. This allows us to enable the vfs_unixuid NTVFS module in
the build farm, which means we are more likely to catch errors in the
token manipulation.

The simulation is not complete, but it is enough for Samba4 for
now. The major areas of incompleteness are:

 - no emulation of setreuid, setresuid or saved uids. These would be
   needed for use in Samba3

 - no emulation of ruid changing. That would also be needed for Samba3

 - no attempt to emulate file ownership changing, so code that (for
   example) tests whether st.st_uid matches geteuid() needs special
   handling
2009-08-05 10:51:00 +10:00
Bo Yang
f394fa7766 s3: add failure check.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-07-18 14:12:26 +08:00
Bo Yang
b180fe34a7 s3: compile warning and upn handling
Signed-off-by: Bo Yang <boyang@samba.org>
2009-07-18 10:47:45 +08:00
Günther Deschner
5d40677a9b s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
Based on patch from Blindauer Emmanuel <samba@mooby.net>.

Guenther
2009-06-19 01:59:17 +02:00
Günther Deschner
e7e98ba480 libwbclient: fix returned LogonInfo in wbc_LogonUser().
That function could return emtpy blobs for username and ccache for e.g. cached
logins.

Guenther
2009-06-18 16:37:45 +02:00
Günther Deschner
6037c200a1 wbinfo: use wbcLogonUser for wbinfo -K.
Guenther
2009-06-18 16:37:16 +02:00
Kai Blin
a88bbaf670 libwbclient: Add debugging hooks. 2009-06-13 09:39:01 +02:00
Volker Lendecke
38780d659b Fix wb_req_more(): Return 0 when done, read_pkt_send needs that 2009-06-12 17:30:12 +02:00
Günther Deschner
4c39297d1d nsswitch: try to fix segfault in nss_winbind on NetBSD found by torture test.
Guenther
2009-06-08 23:32:34 +02:00
Stefan Metzmacher
faabc97c9a async_sock: try fix the source4 build on FreeBSD, Solaris, SLES8
metze
2009-06-08 09:40:06 +02:00
Kai Blin
5e67aa92f6 libwbclient: Attempt to fix build on AIX 2009-06-04 22:32:50 +02:00
Kai Blin
9f94c40885 nsstest: Relicense header file to LGPLv3+ 2009-06-04 20:15:31 +02:00
Volker Lendecke
e9d1197b4e talloc_strdup "dir" in wb_context_init 2009-05-30 09:54:37 +02:00
Kai Blin
bb9103d9c4 libwbclient: Store the winbind socket dir to use in the wb_context 2009-05-30 09:17:37 +02:00
Kai Blin
29ee4f6a34 libwbclient: Silence a compiler warning 2009-05-30 09:17:37 +02:00
Kai Blin
57ea909b32 libwbclient: Add async call framework. 2009-05-30 09:17:37 +02:00
Slava Semushin
95dbd7d6dc nsswitch/winbind_nss_aix.c(fill_grent): fixed memory leak.
Found by cppcheck:
[./nsswitch/winbind_nss_aix.c:241]: (error) Memory leak: result
2009-05-25 16:14:16 +02:00
Bo Yang
e65aa34078 s3: Fix request flags in wbinfo when perform krb5 authentication
Signed-off-by: Bo Yang <boyang@samba.org>
2009-05-22 01:39:03 +08:00
Jeremy Allison
b4c9cfb2af Fix a bunch of compiler warnings about wrong format types.
Should make Solaris 10 builds look cleaner.
Jeremy.
2009-05-11 21:56:57 -07:00
Günther Deschner
290449aeae s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
Patch from Blindauer Emmanuel <samba@mooby.net>.

Guenther
2009-05-05 12:54:21 +02:00
Volker Lendecke
0accf2cf0f Fix Coverity ID 626: DEADCODE 2009-04-23 11:08:59 +02:00
Andrew Bartlett
4678d1c6f4 Merge branch 'master' of ssh://git.samba.org/data/git/samba into libcli-auth-merge-without-netlogond 2009-04-15 14:36:13 +10:00
Günther Deschner
48f14949b1 libwbclient: Fix undocumented arguments doxygen warnings.
Guenther
(cherry picked from commit f2b3fbf0c0)
2009-04-14 20:05:21 +02:00
Andrew Bartlett
f28f113d8e Rework Samba3 to use new libcli/auth code (partial)
This commit is mostly to cope with the removal of SamOemHash (replaced
by arcfour_crypt()) and other collisions (such as changed function
arguments compared to Samba3).

We still provide creds_hash3 until Samba3 uses the credentials code in
netlogon server

Andrew Bartlett
2009-04-14 16:23:35 +10:00
Günther Deschner
43372b2740 s3-nsswitch: Fix Bug #6238 2nd part. zero blob pointer in wbcLogoffUserParams.
Patch from Rashid N. Achilov <citycat4@ngs.ru>.

Guenther
2009-04-03 12:53:35 +02:00
Günther Deschner
09265bcff5 s3-nsswitch: Fix Bug #6238. Make sure logoff is bla bla.
Fix inspired by patch from Rashid N. Achilov <citycat4@ngs.ru>.

Guenther
2009-04-03 09:57:53 +02:00
Stefan Metzmacher
d0b9cc62f9 nsswitch: only define TALLOC_ZERO if needed
metze
2009-03-16 11:14:52 +01:00
Dan Sledz
3b8a57e064 s3: Implement wbcGetSidAliases
* Adds wbcGetSidAliases that calls the lookup_useraliases function.
* Updates wbinfo and winbind_util.c to call the new function.
* Also added winbind_get_groups helper function.
2009-02-11 19:39:18 -08:00
Dan Sledz
aed8e9aa0a s3: Implement wbcGetpwsid
* Adds the plumbing required to lookup users by sid into winbind, wbinfo
  and smbd helper lib (winbind_util.c).
* Removes some double declarations of winbind_util.c functions.
* Bumps the winbind protocol version to 21 and the minor version of
  wbclient to 3.
2009-02-11 19:39:15 -08:00
Stefan Metzmacher
8b408f7819 s4:selftest: avoid hardcoded pathes in blackbox tests
metze
2009-02-03 16:31:04 +01:00
Tim Prouty
d629ba480b talloc: Change the two other definitions of TALLOC_FREE to match the primary version
Eventually these two other definitions should be removed and all of
the TALLOC macros should live in the same header.  Until then, this
patch eliminates some build warnings.
2009-01-23 17:29:21 -08:00
Andreas Schneider
aa79f76b0c Avoid flooding of syslog with failing pam_putenv messages.
Signed-off-by: Andreas Schneider <anschneider@suse.de>
Signed-off-by: Günther Deschner <gd@samba.org>
2009-01-19 16:49:35 +01:00
Kai Blin
a0abb933d2 s4-winbind: Add support for the WINBINDD_LIST_GROUPS command. 2009-01-15 10:35:00 +01:00
Kai Blin
ec93fd6b0c s4 torture: Add another wbinfo test and fix a typo in another one 2009-01-15 10:35:00 +01:00
Kai Blin
9874c9eff7 s4 torture: Fix the wbinfo blackbox tests 2009-01-14 08:25:52 +01:00
Stefan Metzmacher
2428ec46d8 s3:winbindd: move WINBINDD_CCACHE_ENTRY and WINBINDD_MEMORY_CREDS to winbindd.h
metze
2009-01-05 15:07:32 +01:00
Kai Blin
6958fac28d wbinfo4: Add --gid-info option 2008-12-29 12:52:27 +01:00
Kai Blin
d3a0a6f2b3 wbinfo: Add --gid-info option. 2008-12-29 12:52:27 +01:00
Lars Müller
6b6977aaf2 Tweak with pam defines of older Linux versions
PAM_AUTHTOK_RECOVERY_ERR is not defined by older Linux versions (SUSE
Linux Enterprise 9 and RedHat Enterprise 4).

Patch suggested by Philipp Thomas <pth at suse dot de>.
2008-12-17 16:54:10 +01:00
Stefan Metzmacher
99f7f73735 nsswitch: fix compiler warnings in winbind_nss_linux.c
metze
2008-12-17 00:31:36 +01:00
SATOH Fumiyasu
9cf2c45aa7 nss_winbind: Solaris 64-bit fix and...
PATCH 1:
Fix gmem->numgids and gmem->maxgids breakage on Solaris 64-bit
because sizeof(int) != sizeof(long int).

PATCH 2:
This patch fixes a compile-time warning
"warning: implicit function declaration: _nss_winbind_initgroups_dyn".
(cherry picked from commit cb036772d0)
2008-12-16 17:04:02 +01:00
Kai Blin
91a7c8b01b nsswitch: Fix paths for Samba4 blackbox wbinfo test 2008-12-16 15:46:03 +01:00
Kai Blin
5ee0392a55 nsswitch: Move nsswitch files from source4 to top level nsswitch dir 2008-12-16 13:03:05 +01:00
Kai Blin
6821d898d7 nsswitch: Move source3 files to top level dir.
Don't move source4 files yet to not confuse git's rename tracking too much.
2008-12-16 13:02:45 +01:00