1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-19 21:57:57 +03:00

10 Commits

Author SHA1 Message Date
Volker Lendecke
6fa928f96a r16755: Hunting warning has some benefits....
Solaris found this one that needs to go into 3.0.23, actually munlock the
password memory.

Volker
2007-10-10 11:19:10 -05:00
Günther Deschner
206cdbb8e9 r15634: Prevent passwords of winbindd's list of credential caches from beeing
swapped to disc using mlock(). (patch was reviewed by Jeremy).

Guenther
2007-10-10 11:17:04 -05:00
Günther Deschner
4da79bd10c r15541: Only ever store a user's password in a WINBINDD_CCACHE_ENTRY struct when
we have a reason to do so.

Guenther
2007-10-10 11:16:57 -05:00
Jeremy Allison
2e65fcc9de r15539: Use portable wrapper functions instead of seteuid
directly in winbindd.
Jeremy.
2007-10-10 11:16:56 -05:00
Günther Deschner
7420b09507 r15396: Cleanup credential caches from winbind's linked list.
Guenther
2007-10-10 11:16:39 -05:00
Günther Deschner
8b2ba11508 r15240: Correctly disallow unauthorized access when logging on with the
kerberized pam_winbind and workstation restrictions are in effect.

The krb5 AS-REQ needs to add the host netbios-name in the address-list.

We don't get the clear NT_STATUS_INVALID_WORKSTATION code back yet from
the edata of the KRB_ERROR but the login at least fails when the local
machine is not in the workstation list on the DC.

Guenther
2007-10-10 11:16:29 -05:00
Günther Deschner
afc519530f r14585: Tighten argument list of kerberos_kinit_password again,
kerberos_kinit_password_ext provides access to more options.

Guenther
2007-10-10 11:15:38 -05:00
Günther Deschner
7ec2b31a87 r14148: Removing the not very well tested krb5 ticket refresh handling activated
over --with-kcm. No time to look after it for the moment.

Guenther
2007-10-10 11:15:13 -05:00
Gerald Carter
b65be8874a r13571: Replace all calls to talloc_free() with thye TALLOC_FREE()
macro which sets the freed pointer to NULL.
2007-10-10 11:10:14 -05:00
Gerald Carter
17e63ac4ed r13316: Let the carnage begin....
Sync with trunk as off r13315
2007-10-10 11:06:23 -05:00