1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

461 Commits

Author SHA1 Message Date
Jeremy Allison
842e08e52a Forward port the change to talloc_init() to make all talloc contexts
named. Ensure we can query them.
Jeremy.
0001-01-01 00:00:00 +00:00
Gerald Carter
6b18ca9511 merge of get_dc_name()-like code from APP_HEAD; better support password server = DC1 * 0001-01-01 00:00:00 +00:00
Andrew Bartlett
13b9af53bf Remove extra headers, and ensure that we correctly bail out of winbindd if we
can't create the socket.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
e4be82e4e2 After consultation with tpot, remove the 'winbind_domain' environment
variable hack, the feild on the pipe, and the server-side.

It only controlled some enum operations in any case.

This is to try and have less 'magic' environment variables.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
47f3bfe956 Having waited for *way* too long, this is mimir's namecache and trusted domain
cache code.

This uses gencache, mimir's new caching code that stores at text-based cache
of various data.

Mimir has done a *lot* of work on this patch, and it is finally time to
get it in CVS.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Gerald Carter
c31a17889e [merge from APP_HEAD]
90% fix for CR 1076.  The password server parameter will no take things
like

        password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry
0001-01-01 00:00:00 +00:00
Tim Potter
2beebe252f Bug fix from appliance - we must initialise the winbindd server state
before reading smb.conf parameters, not after.
0001-01-01 00:00:00 +00:00
Gerald Carter
3ac98b5963 enable enumeration of domain local groups using LDAP (and in a native mode domain) 0001-01-01 00:00:00 +00:00
Jeremy Allison
82b8f749a3 Removed global_myworkgroup, global_myname, global_myscope. Added liberal
dashes of const. This is a rather large check-in, some things may break.
It does compile though :-).
Jeremy.
0001-01-01 00:00:00 +00:00
Gerald Carter
d422a51b3a remove accidental debug code.. 0001-01-01 00:00:00 +00:00
Gerald Carter
488e985caa defunct winbindd fix from APP_HEAD 0001-01-01 00:00:00 +00:00
Andrew Bartlett
81633064dd Compleatly remove support for logfile truncation. All logs are opened for
append writes.

(blessed by jra)

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Tim Potter
f0a1177acf Remove lp_security() checks for winbindd as this is how we act as a PDC.
Keep the rest of the cleanups though.
0001-01-01 00:00:00 +00:00
Tim Potter
8a6d377521 Call winbindd_param_init() earlier on in the piece so we don't get stuck in
the holding pattern when started up when security = user or security = ads.

Clean up return value of winbindd_common_init() - what a mess!
0001-01-01 00:00:00 +00:00
Tim Potter
1e054e3db6 Merge of get_dc_list() api change. This was slightly more intrusive
than the version in APPLIANCE so watch out for boogs.
0001-01-01 00:00:00 +00:00
Tim Potter
48ed9dce0d Merge of lp_talloc_free() call in init_domain_list() from APPLIANCE. 0001-01-01 00:00:00 +00:00
Tim Potter
0bb9bc1962 Fix --set-auth-user command to delete entries from the secrets file when an
empty username/password is passed on the command line.  Previously we were
leaving the domain name set and the password set to a NULL character.

Added a --get-auth-user command to display the restrict anonymous username
information.  Can only be run successfully by root.
0001-01-01 00:00:00 +00:00
Tim Potter
846b549494 Some winbindd cleanups I made trying to fix cr1020:
- move winbindd client handling into accessor functions in
   winbindd_util.c

 - move some winbindd socket routines into accessor functions in
   winbindd_utils.c

(The deadlock situation mentioned in the appliance branch is probably
not applicable since we don't clear the connection cache on SIGHUP.
Perhaps we should?)
0001-01-01 00:00:00 +00:00
Tim Potter
7badccda46 Handle the case where the password used in RPC connections (for restrict
anonymous support) is blank.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
425782ba32 Updates to winbind's PAM client and server - make the debug logs
work a bit better for password changing.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Tridgell
31774dce67 much simpler code to choose a DC to contact in winbindd. We now always
choose the server that has the most bits in common in its IP with one
of our interfaces.
0001-01-01 00:00:00 +00:00
Andrew Tridgell
6c7748b001 if trusted domains are disabled then we should not try to connect to
them in winbindd
0001-01-01 00:00:00 +00:00
Herb Lewis
4125c582aa must add one to the extra_data size to transfer the 0 string terminator.
This was causing "wbinfo --sequence" to access past the end of malloced
memory.
0001-01-01 00:00:00 +00:00
Gerald Carter
06eea39abd NULL enum_local_groups for ads winbindd (temporary workaround). 0001-01-01 00:00:00 +00:00
Jeremy Allison
b521abd86b Added new error codes. Fix up connection code to retry in the same way
that app-head does.
Jeremy.
0001-01-01 00:00:00 +00:00
Andrew Tridgell
14489ff30b - we need to rescan the trusted domain list regularly to cope with
transitive trusts, and trusts that are added while winbindd is running

- removed an unnecessary call to time()
0001-01-01 00:00:00 +00:00
Jeremy Allison
94fc0ea9f9 Fix spelling of background_process.
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
042890056d Change to use sys_read/sys_write.
Jeremy.
0001-01-01 00:00:00 +00:00
Gerald Carter
764b58e2c0 merge from APP_HEAD
* s/driverlocation/comment
* detect native mode domain and enumerate local groups

Also

* Added sendfile stats from SAMBA_2_2
0001-01-01 00:00:00 +00:00
Jelmer Vernooij
a0e0f3b293 Don't use usage function, but use popt for usage and help info 0001-01-01 00:00:00 +00:00
Gerald Carter
38a956c79b fix typo 0001-01-01 00:00:00 +00:00
Gerald Carter
dd948a302a merge native_mode flag in winbindd_domain struct from app-head 0001-01-01 00:00:00 +00:00
Gerald Carter
38c9e42998 merge of new client side support the Win2k LSARPC UUID in rpcbind
from APP_HEAD
0001-01-01 00:00:00 +00:00
Jeremy Allison
6929b65954 Doh ! Lookup name before checking negative cache (the way Tim originally
had it...).
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
c4fcbb2948 Fix memory leak in getting DC list. Remember to exclude failed lookups.
Jeremy.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
c864edf4fb Move a number of ADS related functions out into utility libs, so that things
like metze's sam_ads can also use them.

Also add error checking etc to a few more functions.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Gerald Carter
1b55965f12 fix getpass replacement check (i thought I fixed this a few days
ago....)
0001-01-01 00:00:00 +00:00
Jeremy Allison
38c67632ad Moved -ve cache check to correct place.
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
f8a0e6ad8b Reverted my earlier change. It was incorrect. We must be protected by
pidfile before doing secrets_init().
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
ffb7632d05 Only create the pidfile once we're ready to receive requests.
This allows external programs to correctly synchronise with us.
Jeremy.
0001-01-01 00:00:00 +00:00
Andrew Tridgell
0d28d76947 Add clock skew handling to our kerberos code. This allows us to cope with
the DC being out of sync with the local machine.
0001-01-01 00:00:00 +00:00
Jelmer Vernooij
dc3c14fc2b Put unixsocket calls between #ifdef HAVE_UNIXSOCKET's - required for Stratus VOS
(Double checked)
0001-01-01 00:00:00 +00:00
Tim Potter
d87c1f507d Merge undone cleanups. 0001-01-01 00:00:00 +00:00
Tim Potter
26d486aa74 Merge of winbind auth cleanups from appliance. 0001-01-01 00:00:00 +00:00
Tim Potter
f75d61b03a Merge of cut&paste fix from appliance. 0001-01-01 00:00:00 +00:00
Tim Potter
d9fa865e5c Spelling fix. 0001-01-01 00:00:00 +00:00
Tim Potter
e63afabf98 Put pid number in invalid request size debug. 0001-01-01 00:00:00 +00:00
Tim Potter
77bde1fa33 Bugfix merge:
>Initialise user_rid value in WINBIND_USERINFO structure returned by
>the rpc version of query_user().  This fixes a caching bug found by
>Gavrie Philipson from disksite.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
3ec3861445 This is the 'main' inclue for for winbind clients - all clients should include
only this file, and not any others.  It includes the function prototypes.
(Forgot to commit with earlier patch)

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
b440418f13 Don't leak file desciptors in this (impossible?) error case. 0001-01-01 00:00:00 +00:00