Volker Lendecke
c821be415b
nsswitch: Make some functions static
2010-01-23 19:14:50 +01:00
Volker Lendecke
6ada1f250b
libwbclient: Remove a pointless check
...
We have dereferenced "blobs" before
2010-01-03 11:38:22 +01:00
Volker Lendecke
9b6b01aab6
s3:winbind: Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc
...
This just does a NULL RPC call through an existing NETLOGON connection. If
someone knows an operation that "just works" and does not return NOT_SUPPORTED,
please tell me :-)
2009-12-21 23:23:52 +01:00
Bo Yang
c7e3a2dc31
s3: check for PAM_RADIO_TYPE.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-12-10 19:29:24 +08:00
Bo Yang
b386c3311d
s3: Fix build on non-linux platform.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-12-10 17:22:25 +08:00
Bo Yang
f7723293a0
s3: Give the user a chance to change password when password will expire soon.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-12-10 14:38:28 +08:00
Günther Deschner
5b3a32be97
s3-kerberos: next step to resolve Bug #6929 : build with recent heimdal.
...
Based on patch from Allan <allan@archlinux.org>.
Also should fix the FreeBSD build on the buildfarm.
Guenther
2009-11-26 10:15:45 +01:00
Günther Deschner
51864219cc
nsswitch: fix compile of winbind_krb5_locator with recent Heimdal versions.
...
Guenther
2009-11-25 17:58:52 +01:00
Björn Jacke
5377d5f894
pam_winbind: fix a printf type mismatch warning
2009-11-14 01:54:53 +01:00
Bo Yang
b9a3f1dd85
s3: Fix crash in pam_winbind, another reference to freed memory.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-10-24 09:36:23 +08:00
Günther Deschner
10bd521849
wbinfo: use wbcLookupDomainControllerEx for wbinfo --dsgetdcname.
...
Guenther
2009-10-19 18:44:51 +02:00
Günther Deschner
110a40d4bc
libwbclient: fix wbcLookupDomainController().
...
Found by WINBIND-WBCLIENT torture test.
Guenther
2009-10-19 18:44:51 +02:00
Günther Deschner
71cfbf958c
s4-smbtorture: test wbcLookupDomainController{Ex} in WINBIND-WBCLIENT.
...
Guenther
2009-10-19 18:44:51 +02:00
Bo Yang
31f1a36901
s3: Don't fail authentication when one or some group of require-membership-of is invalid.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-10-20 02:05:58 +08:00
Günther Deschner
20c07674f6
nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials().
...
Guenther
2009-10-16 16:08:55 +02:00
Günther Deschner
c2966a0766
s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well.
...
Guenther
2009-10-16 14:54:57 +02:00
Günther Deschner
246597cb0d
s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT.
...
Guenther
2009-10-16 14:54:57 +02:00
Günther Deschner
612deb2699
s4-smbtorture: add very basic libwbclient testsuite.
...
Guenther
2009-10-16 02:04:29 +02:00
Jeremy Allison
1c1a883bd0
Fix the build, missing ->.
...
Jeremy.
2009-10-14 12:36:02 -07:00
Bo Yang
8e91c40574
s3: Fix reference to freed memory in pam_winbind.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-10-15 04:31:26 +08:00
Günther Deschner
0a468fbe36
nsswitch: add wbinfo -c (change trust account passwords).
...
Guenther
2009-10-13 12:42:44 +02:00
Günther Deschner
74948c979a
libwbclient: add wbcChangeTrustCredentials.
...
Guenther
2009-10-13 12:42:44 +02:00
Matthias Dieter Wallnöfer
926a935a61
s4:wbclient.h - add compatibility constants
...
This is the result of a discussion on samba-technical on how to deal best with
existing programs which don't support my changes in the interface yet. Metze
pointed out this "defines" as a possibility and simo and I agreed.
2009-10-12 16:28:34 +02:00
Volker Lendecke
5aeb954ba9
s3: Fix a memleak reported by dmarkey
2009-10-09 23:00:08 +02:00
Simo Sorce
99cdbe3571
Fix builds with external talloc
...
Make sure we do not reference our internal talloc directly.
Let configure define what talloc.h file to use so that builds that use an
extrenal talloc do not include 2 different versions of the talloc header.
2009-10-09 13:14:08 -04:00
Matthias Dieter Wallnöfer
1e2f455b4a
winbind: adapt the new reject constants also there
...
Please note: in the past the value "0" was misinterpreted as other error. This
isn't true. "0" means no error.
Therefore a solution for this one has to found.
2009-10-08 11:01:22 +02:00
Günther Deschner
7b3501200c
wbinfo: allow to check trusts via "wbinfo -t --domain DOMAINNAME".
...
Guenther
2009-10-07 11:18:11 +02:00
Günther Deschner
2df47b0a54
libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
...
Guenther
2009-10-07 11:18:03 +02:00
Bo Yang
89ed2af69d
s3: Don't overwrite password in pam_winbind, subsequent pam modules
...
might use the old password and new password.
Signed-off-by: Bo Yang <boyang@samba.org>
2009-09-16 22:03:57 +08:00
Björn Jacke
54831cc1a5
nss_winbind: remove unused variable
2009-09-15 03:42:30 +02:00
Matthieu Patou
344fb71cb8
s4: Pass WINBINDD_SOCKET_DIR var in order to overide the location of the Winbind socket
2009-09-11 07:29:57 +10:00
Günther Deschner
b35c627b92
wbinfo: fix various valgrind warnings and an invalid free.
...
Kai, please check.
Guenther
2009-09-04 00:04:49 +02:00
Günther Deschner
9264f48914
wbclient: Fix Bug #6680 : always activate handling of large (> 256 byte) ntlmv2
...
blobs in wbcAuthenticateUserEx().
Guenther
2009-09-01 16:13:57 +02:00
Volker Lendecke
bb1f56a814
s3:libwbclient: Fix bug 6349, initialize domain info struct
2009-08-30 11:40:59 +02:00
Kai Blin
fd2feab8f0
wbinfo: Reduce test noise in the wbinfo blackbox test
...
With the switch to libwbclient the previously stubbed out
--trusted-domains and --all-domains calls now fail. Set them to knownfail.
The previously knownfail -D test is now stubbed out, test it now.
This does not fix the issues with wbinfo -a and wbinfo -K not working on the
build farm. I have no idea whatsoever what is causing this, as those are broken
on my local machine even without my changes.
2009-08-18 21:42:37 +02:00
Kai Blin
bc0e0a4c69
wbinfo: Use one codebase for Samba3 and Samba4.
...
There can be only one....wbinfo that is.
2009-08-18 20:26:05 +02:00
Kai Blin
19855ca2bb
s3 wbinfo: Only call afs_settoken_str if compiled with WITH_FAKE_KASERVER
2009-08-18 19:53:41 +02:00
Kai Blin
182c667b17
s3 wbinfo: use wbcSidTypeString instead of sid_type_lookup
2009-08-18 19:53:41 +02:00
Kai Blin
a7128709d2
libwbclient: Add wbcSidTypeString function.
2009-08-18 19:53:41 +02:00
Kai Blin
afb8f8eaa5
s3 wbinfo: Remove unused functions, use C99-types
2009-08-18 19:53:40 +02:00
Kai Blin
ab818cdf8b
s3 wbinfo: Explicitly include popt header, remove unused common options.
2009-08-18 19:53:40 +02:00
Kai Blin
6d4fd3e0a2
s3 wbinfo: Use talloc_strdup instead of SMB_STRDUP
2009-08-18 19:53:40 +02:00
Kai Blin
0dae6f541f
s3 wbinfo: Don't use global_myname()
2009-08-18 19:53:39 +02:00
Kai Blin
b6ea2ece09
s3 wbinfo: Avoid ADD_TO_ARRAY macro.
2009-08-18 19:53:39 +02:00
Kai Blin
90b6e41b83
s3 wbinfo: Use uint32_t instead of uint32
2009-08-18 19:53:39 +02:00
Kai Blin
fa7d7a49b8
s3 wbinfo: remove --get-auth-user and --set-auth-user functionality
...
Point to the corresponding commands in "net" instead.
2009-08-18 19:53:38 +02:00
Kai Blin
004494b84c
s3 wbinfo: Get rid of lp_ functions
...
This commit also fixes a lot of line lengths to make the file more readable.
2009-08-18 19:53:38 +02:00
Volker Lendecke
5ae122ed7a
s3:winbind: Fix a potential segfault in libwbclient
2009-08-16 10:38:24 +02:00
Volker Lendecke
e8088e16f8
Make wbinfo also print the members when querying a group
2009-08-08 13:44:31 +02:00
Volker Lendecke
6cf3db9149
s3:winbind: Add NDR-based parent-child communication to winbind
2009-08-05 03:21:19 -04:00
Andrew Tridgell
fd43e0ee09
added a uid_wrapper library
...
This library intercepts seteuid and related calls, and simulates them
in a manner similar to the nss_wrapper and socket_wrapper
libraries. This allows us to enable the vfs_unixuid NTVFS module in
the build farm, which means we are more likely to catch errors in the
token manipulation.
The simulation is not complete, but it is enough for Samba4 for
now. The major areas of incompleteness are:
- no emulation of setreuid, setresuid or saved uids. These would be
needed for use in Samba3
- no emulation of ruid changing. That would also be needed for Samba3
- no attempt to emulate file ownership changing, so code that (for
example) tests whether st.st_uid matches geteuid() needs special
handling
2009-08-05 10:51:00 +10:00
Bo Yang
f394fa7766
s3: add failure check.
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-07-18 14:12:26 +08:00
Bo Yang
b180fe34a7
s3: compile warning and upn handling
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-07-18 10:47:45 +08:00
Günther Deschner
5d40677a9b
s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
...
Based on patch from Blindauer Emmanuel <samba@mooby.net>.
Guenther
2009-06-19 01:59:17 +02:00
Günther Deschner
e7e98ba480
libwbclient: fix returned LogonInfo in wbc_LogonUser().
...
That function could return emtpy blobs for username and ccache for e.g. cached
logins.
Guenther
2009-06-18 16:37:45 +02:00
Günther Deschner
6037c200a1
wbinfo: use wbcLogonUser for wbinfo -K.
...
Guenther
2009-06-18 16:37:16 +02:00
Kai Blin
a88bbaf670
libwbclient: Add debugging hooks.
2009-06-13 09:39:01 +02:00
Volker Lendecke
38780d659b
Fix wb_req_more(): Return 0 when done, read_pkt_send needs that
2009-06-12 17:30:12 +02:00
Günther Deschner
4c39297d1d
nsswitch: try to fix segfault in nss_winbind on NetBSD found by torture test.
...
Guenther
2009-06-08 23:32:34 +02:00
Stefan Metzmacher
faabc97c9a
async_sock: try fix the source4 build on FreeBSD, Solaris, SLES8
...
metze
2009-06-08 09:40:06 +02:00
Kai Blin
5e67aa92f6
libwbclient: Attempt to fix build on AIX
2009-06-04 22:32:50 +02:00
Kai Blin
9f94c40885
nsstest: Relicense header file to LGPLv3+
2009-06-04 20:15:31 +02:00
Volker Lendecke
e9d1197b4e
talloc_strdup "dir" in wb_context_init
2009-05-30 09:54:37 +02:00
Kai Blin
bb9103d9c4
libwbclient: Store the winbind socket dir to use in the wb_context
2009-05-30 09:17:37 +02:00
Kai Blin
29ee4f6a34
libwbclient: Silence a compiler warning
2009-05-30 09:17:37 +02:00
Kai Blin
57ea909b32
libwbclient: Add async call framework.
2009-05-30 09:17:37 +02:00
Slava Semushin
95dbd7d6dc
nsswitch/winbind_nss_aix.c(fill_grent): fixed memory leak.
...
Found by cppcheck:
[./nsswitch/winbind_nss_aix.c:241]: (error) Memory leak: result
2009-05-25 16:14:16 +02:00
Bo Yang
e65aa34078
s3: Fix request flags in wbinfo when perform krb5 authentication
...
Signed-off-by: Bo Yang <boyang@samba.org>
2009-05-22 01:39:03 +08:00
Jeremy Allison
b4c9cfb2af
Fix a bunch of compiler warnings about wrong format types.
...
Should make Solaris 10 builds look cleaner.
Jeremy.
2009-05-11 21:56:57 -07:00
Günther Deschner
290449aeae
s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
...
Patch from Blindauer Emmanuel <samba@mooby.net>.
Guenther
2009-05-05 12:54:21 +02:00
Volker Lendecke
0accf2cf0f
Fix Coverity ID 626: DEADCODE
2009-04-23 11:08:59 +02:00
Andrew Bartlett
4678d1c6f4
Merge branch 'master' of ssh://git.samba.org/data/git/samba into libcli-auth-merge-without-netlogond
2009-04-15 14:36:13 +10:00
Günther Deschner
48f14949b1
libwbclient: Fix undocumented arguments doxygen warnings.
...
Guenther
(cherry picked from commit f2b3fbf0c0
)
2009-04-14 20:05:21 +02:00
Andrew Bartlett
f28f113d8e
Rework Samba3 to use new libcli/auth code (partial)
...
This commit is mostly to cope with the removal of SamOemHash (replaced
by arcfour_crypt()) and other collisions (such as changed function
arguments compared to Samba3).
We still provide creds_hash3 until Samba3 uses the credentials code in
netlogon server
Andrew Bartlett
2009-04-14 16:23:35 +10:00
Günther Deschner
43372b2740
s3-nsswitch: Fix Bug #6238 2nd part. zero blob pointer in wbcLogoffUserParams.
...
Patch from Rashid N. Achilov <citycat4@ngs.ru>.
Guenther
2009-04-03 12:53:35 +02:00
Günther Deschner
09265bcff5
s3-nsswitch: Fix Bug #6238 . Make sure logoff is bla bla.
...
Fix inspired by patch from Rashid N. Achilov <citycat4@ngs.ru>.
Guenther
2009-04-03 09:57:53 +02:00
Stefan Metzmacher
d0b9cc62f9
nsswitch: only define TALLOC_ZERO if needed
...
metze
2009-03-16 11:14:52 +01:00
Dan Sledz
3b8a57e064
s3: Implement wbcGetSidAliases
...
* Adds wbcGetSidAliases that calls the lookup_useraliases function.
* Updates wbinfo and winbind_util.c to call the new function.
* Also added winbind_get_groups helper function.
2009-02-11 19:39:18 -08:00
Dan Sledz
aed8e9aa0a
s3: Implement wbcGetpwsid
...
* Adds the plumbing required to lookup users by sid into winbind, wbinfo
and smbd helper lib (winbind_util.c).
* Removes some double declarations of winbind_util.c functions.
* Bumps the winbind protocol version to 21 and the minor version of
wbclient to 3.
2009-02-11 19:39:15 -08:00
Stefan Metzmacher
8b408f7819
s4:selftest: avoid hardcoded pathes in blackbox tests
...
metze
2009-02-03 16:31:04 +01:00
Tim Prouty
d629ba480b
talloc: Change the two other definitions of TALLOC_FREE to match the primary version
...
Eventually these two other definitions should be removed and all of
the TALLOC macros should live in the same header. Until then, this
patch eliminates some build warnings.
2009-01-23 17:29:21 -08:00
Andreas Schneider
aa79f76b0c
Avoid flooding of syslog with failing pam_putenv messages.
...
Signed-off-by: Andreas Schneider <anschneider@suse.de>
Signed-off-by: Günther Deschner <gd@samba.org>
2009-01-19 16:49:35 +01:00
Kai Blin
a0abb933d2
s4-winbind: Add support for the WINBINDD_LIST_GROUPS command.
2009-01-15 10:35:00 +01:00
Kai Blin
ec93fd6b0c
s4 torture: Add another wbinfo test and fix a typo in another one
2009-01-15 10:35:00 +01:00
Kai Blin
9874c9eff7
s4 torture: Fix the wbinfo blackbox tests
2009-01-14 08:25:52 +01:00
Stefan Metzmacher
2428ec46d8
s3:winbindd: move WINBINDD_CCACHE_ENTRY and WINBINDD_MEMORY_CREDS to winbindd.h
...
metze
2009-01-05 15:07:32 +01:00
Kai Blin
6958fac28d
wbinfo4: Add --gid-info option
2008-12-29 12:52:27 +01:00
Kai Blin
d3a0a6f2b3
wbinfo: Add --gid-info option.
2008-12-29 12:52:27 +01:00
Lars Müller
6b6977aaf2
Tweak with pam defines of older Linux versions
...
PAM_AUTHTOK_RECOVERY_ERR is not defined by older Linux versions (SUSE
Linux Enterprise 9 and RedHat Enterprise 4).
Patch suggested by Philipp Thomas <pth at suse dot de>.
2008-12-17 16:54:10 +01:00
Stefan Metzmacher
99f7f73735
nsswitch: fix compiler warnings in winbind_nss_linux.c
...
metze
2008-12-17 00:31:36 +01:00
SATOH Fumiyasu
9cf2c45aa7
nss_winbind: Solaris 64-bit fix and...
...
PATCH 1:
Fix gmem->numgids and gmem->maxgids breakage on Solaris 64-bit
because sizeof(int) != sizeof(long int).
PATCH 2:
This patch fixes a compile-time warning
"warning: implicit function declaration: _nss_winbind_initgroups_dyn".
(cherry picked from commit cb036772d0
)
2008-12-16 17:04:02 +01:00
Kai Blin
91a7c8b01b
nsswitch: Fix paths for Samba4 blackbox wbinfo test
2008-12-16 15:46:03 +01:00
Kai Blin
5ee0392a55
nsswitch: Move nsswitch files from source4 to top level nsswitch dir
2008-12-16 13:03:05 +01:00
Kai Blin
6821d898d7
nsswitch: Move source3 files to top level dir.
...
Don't move source4 files yet to not confuse git's rename tracking too much.
2008-12-16 13:02:45 +01:00