1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

1740 Commits

Author SHA1 Message Date
Jeremy Allison
58a9621904 r25406: Make the Linux nss client code thread-safe.
Fix originally inspired from code from boyang <yyyeer.bo@gmail.com>.
Jeremy.
(This used to be commit cc19c0ace4)
2007-10-10 12:31:03 -05:00
Stefan Metzmacher
1edf050ad8 r25241: remove sequence_number out of WINBINDD_DOMAIN_INFO call
as this is always answered by the winbindd parent and will
most times return old sequence number values.

metze
(This used to be commit 9caf54c868)
2007-10-10 12:30:53 -05:00
Stefan Metzmacher
6e4bf4c188 r25177: if configured using --enable-socket-wrapper
allow overwritting the location of the WINBINDD_SOCKET_DIR
via an environment variable

metze
(This used to be commit 93bdd2724c)
2007-10-10 12:30:48 -05:00
Stefan Metzmacher
28aa4bff8d r25154: move winbindd code into winbindd/
metze
(This used to be commit 3ac7566ae1)
2007-10-10 12:30:46 -05:00
Stefan Metzmacher
38b140fe70 r25152: fix headers used in wbinfo.c
metze
(This used to be commit 2a794db3c5)
2007-10-10 12:30:46 -05:00
Günther Deschner
6005c4e657 r25148: Adapt to coding conventions.
Guenther
(This used to be commit c3b423c52a)
2007-10-10 12:30:45 -05:00
Stefan Metzmacher
b8c5d16258 r25146: rename winbindd_nss.h => winbind_struct_protocol.h
as this header has nothing todo with winbindd nor nss
and it contains the definitions for the struct based
protocol

metze
(This used to be commit e9e03aac22)
2007-10-10 12:30:45 -05:00
Stefan Metzmacher
28d076d20f r25143: rename public functions from winbind_client.h
init_request	=> winbindd_init_request
free_response	=> winbindd_free_response
read_reply	=> winbindd_read_reply

write_sock	=> winbind_write_sock
read_sock	=> winbind_read_sock
close_sock	=> winbind_close_sock(void)

metze
(This used to be commit 8a95d7a7ed)
2007-10-10 12:30:45 -05:00
Stefan Metzmacher
52936b1c86 r25130: make use only of base types which are provided by libreplace
in winbind client and nss/pam stuff

metze
(This used to be commit 2e13e05fa9)
2007-10-10 12:30:43 -05:00
Stefan Metzmacher
85d1b13fbe r25128: _XOPEN_SOURCE_EXTENDED and socklen_t are always provided by libreplace
metze
(This used to be commit b3ee9adf28)
2007-10-10 12:30:42 -05:00
Simo Sorce
c49699d15b r25107: Fix const warning caused by the way I reformatted this
(This used to be commit 6ce01bf413)
2007-10-10 12:30:40 -05:00
Gerald Carter
d65ba539a4 r25099: Commit fix for CVE-2007-4138 from 3.0.26 release.
(This used to be commit aa768a4a20)
2007-10-10 12:30:39 -05:00
Michael Adam
3395099fa8 r25087: Reformatting: Get rid of an abundance of leading tabs...
(This used to be commit d8676f30d5)
2007-10-10 12:30:39 -05:00
Michael Adam
a3dc218f48 r25086: Fix interdomain trusts (this povides the fix expected in r22709):
Fix winbindd on a Samba DC talking to a trusted domain DC by
making it use the trusted domain password...

Michael

I hope this does not brake any other setup.
(This used to be commit 2322fe5cd7)
2007-10-10 12:30:38 -05:00
Stefan Metzmacher
35a616e82c r25074: as all requests in the winbindd child are sync, we can use talloc_tos()
metze
(This used to be commit 6e238fe5b4)
2007-10-10 12:30:38 -05:00
Günther Deschner
2569a25433 r25068: Older samba3 DCs will return DCERPC_FAULT_OP_RNG_ERROR for every opcode on the
LSARPC_DS pipe, continue with no_lsarpc_ds mode here as well to get
domain->initialized set to True. This avoids permanent scanning of Samba3 DCs
in winbindd. Thanks Michael, for pointing this out.

Guenther
(This used to be commit 9b85f7ca43)
2007-10-10 12:30:38 -05:00
Simo Sorce
bd45eab008 r25064: We use BOOL/True/False not bool/true/false
(This used to be commit f624a269bf)
2007-10-10 12:30:38 -05:00
Simo Sorce
ac1642508f r25063: Fix segfault in smbldp_set_creds when we want to use anonymous, the
code was not passing in the "anon" flag correctly and was passing
NULL pointers.
(This used to be commit 6316a9c14d)
2007-10-10 12:30:38 -05:00
Simo Sorce
bb9fbe6221 r25062: Reformat, remove trailing spaces and fit lines into 80 columns
(This used to be commit 1850d1c10f)
2007-10-10 12:30:37 -05:00
Simo Sorce
d19d3e7126 r25060: Fix formatting, remove trailing spaces and cut lines longer than 80 chars
(This used to be commit 7a4d465890)
2007-10-10 12:30:37 -05:00
Simo Sorce
3f8e1f9ad2 r25059: Apply to 3.2 as well
(This used to be commit 17a7d33b3b)
2007-10-10 12:30:37 -05:00
Lars Müller
a747e8bdcf r25032: Contact an off site DC if non is available on site.
(This used to be commit 50879e6de5)
2007-10-10 12:30:36 -05:00
Jeremy Allison
2400758fbe r25022: Fix coverity #395. Resource leak on error.
Jeremy.
(This used to be commit 6a237600b8)
2007-10-10 12:30:35 -05:00
Jeremy Allison
5d49b172e0 r25020: Fix coverity #374, possible null deref.
Jeremy.
(This used to be commit 82b3656b4b)
2007-10-10 12:30:34 -05:00
Stefan Metzmacher
abe7e04244 r24978: move domain_init_recv() near the functions that uses it
metze
(This used to be commit 18e830a935)
2007-10-10 12:30:31 -05:00
Rafal Szczesniak
663b922852 r24977: Ensure negative caching for name2sid, sid2name and rids2names
mappings.

rafal
(This used to be commit 3a9b5eabf9)
2007-10-10 12:30:31 -05:00
Günther Deschner
99cc296968 r24954: Fix the build without krb5.
Guenther
(This used to be commit 9df961914c)
2007-10-10 12:30:30 -05:00
Günther Deschner
be3fdd8b62 r24952: Set the kdc locator env vars. This makes the krb5 locator plugin fully
operational (from within winbindd and outside).

Guenther
(This used to be commit 800645d538)
2007-10-10 12:30:30 -05:00
Günther Deschner
46928878f6 r24920: Reformatting.
Guenther
(This used to be commit 62426a0555)
2007-10-10 12:30:29 -05:00
Michael Adam
f9a177772d r24879: Activate the winbindd cache-validation message handler.
Now the winbindd cache can be checked at runtime by
calling "smbcontrol winbindd validate-cache".

For the execution of the validation code, I fork a child
and in the child restore the default SIGCHLD handler in
order for the fork/waitpid mechanism of tdb_validate to work.

Michael
(This used to be commit f379a5c47d)
2007-10-10 12:30:28 -05:00
Michael Adam
57ac659fb6 r24848: Make tdb_validate() take an open tdb handle instead of a file name.
A new wrapper tdb_validate_open() takes a filename an opens and closes
the tdb before and after calling tdb_validate() respectively.

winbindd_validata_cache_nobackup() now dynamically calls one of
the above functions depending on whether the cache tdb has already
been opened or not.

Michael
(This used to be commit dc0b08e659)
2007-10-10 12:30:27 -05:00
Michael Adam
ac3f2e784f r24843: Add a "validate-cache" control message to winbindd.
So there is a new subcommand "smbcontrol winbindd validate-cache" now.

This change provides the infrastructure:
The function currently returns "true" unconditionally.
The call of a real cache validation function will be incorporated
in subsequent changes.

Michael
(This used to be commit ef92d505c0)
2007-10-10 12:30:27 -05:00
Günther Deschner
55b59eb80b r24833: Move locator to nsswitch (does not belong to libads anymore).
Guenther
(This used to be commit af90c6949c)
2007-10-10 12:30:26 -05:00
Michael Adam
a4c92698c6 r24830: Add a winbindd cache validation function that does not do
backup and corrupt file handling. (To be used in subsequent
changes.)
(This used to be commit b3dcadbed0)
2007-10-10 12:30:26 -05:00
Michael Adam
e5533200ce r24829: Make use of a variable, that is available... :-)
(This used to be commit 9062665208)
2007-10-10 12:30:26 -05:00
Volker Lendecke
8843550c28 r24826: Fix two memleaks in idmap_cache.c, bug 4917
Thanks again to Patrick Rynhart for persisting :-)

Simo, please check!
(This used to be commit 0a9171f9ef)
2007-10-10 12:30:25 -05:00
Volker Lendecke
929e1d9920 r24809: Consolidate the use of temporary talloc contexts.
This adds the two functions talloc_stackframe() and talloc_tos().

 * When a new talloc stackframe is allocated with talloc_stackframe(), then
 * the TALLOC_CTX returned with talloc_tos() is reset to that new
 * frame. Whenever that stack frame is TALLOC_FREE()'ed, then the reverse
 * happens: The previous talloc_tos() is restored.
 *
 * This API is designed to be robust in the sense that if someone forgets to
 * TALLOC_FREE() a stackframe, then the next outer one correctly cleans up and
 * resets the talloc_tos().

The original motivation for this patch was to get rid of the
sid_string_static & friends buffers. Explicitly passing talloc context
everywhere clutters code too much for my taste, so an implicit
talloc_tos() is introduced here. Many of these static buffers are
replaced by a single static pointer.

The intended use would thus be that low-level functions can rather
freely push stuff to talloc_tos, the upper layers clean up by freeing
the stackframe. The more of these stackframes are used and correctly
freed the more exact the memory cleanup happens.

This patch removes the main_loop_talloc_ctx, tmp_talloc_ctx and
lp_talloc_ctx (did I forget any?)

So, never do a

tmp_ctx = talloc_init("foo");

anymore, instead, use

tmp_ctx = talloc_stackframe()

:-)

Volker
(This used to be commit 6585ea2cb7)
2007-10-10 12:30:24 -05:00
Günther Deschner
020e0aba0a r24807: Add WINBINDD_LOCATOR_KDC_ADDRESS env which will be used for the case when the
locator gets called from within winbindd.

Guenther
(This used to be commit 46dbd6034e)
2007-10-10 12:30:23 -05:00
Günther Deschner
410cc0e9c7 r24801: When told to ignore the winbind cache also do so while trying to store entries.
Thanks Michael for pointing this out.

Guenther
(This used to be commit c704760444)
2007-10-10 12:30:22 -05:00
Günther Deschner
7650d3bb18 r24799: Prefer IP address to dns name when replying in winbindd dsgetdcname.
Guenther
(This used to be commit e5cc09c72f)
2007-10-10 12:30:22 -05:00
Günther Deschner
8499943338 r24786: Fix another build warning.
Guenther
(This used to be commit 29a56dcc78)
2007-10-10 12:30:21 -05:00
Günther Deschner
46fad0ca27 r24785: Put checks in parentheses.
Guenther
(This used to be commit d8197aca5a)
2007-10-10 12:30:21 -05:00
Günther Deschner
53d41f3b1b r24778: Make sure krb5 locator requests go to a separate locator winbind child.
Guenther
(This used to be commit fb9228b8d1)
2007-10-10 12:30:20 -05:00
Günther Deschner
21dd4aa82d r24747: Add WINBINDD_DSGETDCNAME call.
Guenther
(This used to be commit 429496a4cc)
2007-10-10 12:30:17 -05:00
Günther Deschner
a090092cd2 r24746: As the winbindd pipe is officially broken since a while: split out request
specfic and generic flags in a winbindd_request.

It turns out that the WBFLAG_RECURSE flag is the only non-PAM specific flag we
put into the "flags" field of a winbind request anyway. Now each request
command can use the entire space of the "flags" field.

Guenther
(This used to be commit 18b29763d1)
2007-10-10 12:30:17 -05:00
Günther Deschner
c087807ee4 r24740: Fix the build.
Guenther
(This used to be commit a30549bbf4)
2007-10-10 12:30:16 -05:00
Günther Deschner
1c72c4c360 r24737: Remove older TODO: Convert internal_resolve_name() and friends to NTSTATUS.
Guenther
(This used to be commit 8300aac494)
2007-10-10 12:30:16 -05:00
Günther Deschner
c790f6437f r24734: Move nss_err_str() to a more public place.
Guenther
(This used to be commit f62292c5a1)
2007-10-10 12:30:16 -05:00
Gerald Carter
40102ad546 r24722: Squashed commit of the following:
commit fb52f971986dd298abbcd9745ddf702820ce0184
Author: Gerald Carter <coffeedude@plainjoe.org>
Date:   Mon Aug 27 13:50:26 2007 -0500

    Check correct return type for pam_winbind_request_log() wnibind_upn_to_username

    which is an int and not NSS_STATUS.

commit 7382edf6fc0fe555df89d5b2a94d12b35049b279
Author: Gerald Carter <coffeedude@plainjoe.org>
Date:   Mon Aug 27 13:30:26 2007 -0500

    Allow wbinfo -n to convert a UPN to a SID

commit 8266c0fe1ccf2141e5a983f3213356419e626dda
Author: Gerald Carter <coffeedude@plainjoe.org>
Date:   Fri Aug 3 09:53:16 2007 -0500

    Merge some of Guenther UPN work for pam_winbind.c (check the winbind separator

    and better pam logging when converting a upn to a username).

commit 15156c17bc81dbcadf32757015c4e5158823bf3f
Author: Gerald Carter <coffeedude@plainjoe.org>
Date:   Fri Aug 3 08:52:50 2007 -0500

    Include Universal groups from the cached PAC/SamLogon info when

    generating the list of domain group SIDs for a user's token.

commit 979053c0307b051954261d539445102c55f309c7
Author: Gerald Carter <coffeedude@plainjoe.org>
Date:   Thu Aug 2 17:35:41 2007 -0500

    merge upnlogon patch from my tree
(This used to be commit 98fb5bcd57)
2007-10-10 12:30:15 -05:00
Günther Deschner
a375d368df r24714: Fix confusing indent.
Guenther
(This used to be commit 6a9af88a2d)
2007-10-10 12:30:15 -05:00