sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-17 02:05:21 +03:00
Code
56,111 Commits 60 Branches 1,145 Tags
Commit Graph

57 Commits

Author SHA1 Message Date
Volker Lendecke
0cfc2f19ef s3:winbind: Use fstr_sprintf, it is simpler than talloc_asprintf->fstrcpy 2009-09-05 17:14:45 +02:00
Volker Lendecke
c52fa95b95 s3:winbind: Remove pointless <cond> ? true : false; 2009-09-05 17:05:30 +02:00
Volker Lendecke
1abf692312 s3:winbind: Make the pam_auth subfunctions static 2009-09-05 17:00:21 +02:00
Volker Lendecke
97ba4f6efd Make winbindd_cli_state->response a pointer instead of a struct member 
Same comment as in baa6084378e530b: This is just a preparatory checkin.

Volker
 2009-06-14 22:22:10 +02:00
Volker Lendecke
baa6084378 Make winbindd_cli_state->request a pointer instead of a struct member 
In itself, this is pretty pointless. But in the next steps I'll convert the
winbind internal communication to wb_reqtrans which allocates the request
properly. This minimizes the later diff.

Volker
 2009-06-14 11:25:44 +02:00
Volker Lendecke
3fa69438b9 Convert response.extra_data.data from malloc to talloc 2009-05-12 18:02:00 +02:00
Jeremy Allison
b4c9cfb2af Fix a bunch of compiler warnings about wrong format types. 
Should make Solaris 10 builds look cleaner.
Jeremy.
 2009-05-11 21:56:57 -07:00
Andrew Bartlett
f28f113d8e Rework Samba3 to use new libcli/auth code (partial) 
This commit is mostly to cope with the removal of SamOemHash (replaced
by arcfour_crypt()) and other collisions (such as changed function
arguments compared to Samba3).

We still provide creds_hash3 until Samba3 uses the credentials code in
netlogon server

Andrew Bartlett
 2009-04-14 16:23:35 +10:00
Björn Jacke
f4aec7b590 ѕ3/winbind_pam: fix gcc 4.4 compile warning 2009-03-23 13:10:54 +01:00
Günther Deschner
531af136f9 s3: remove POLICY_HND. 
Guenther
 2009-03-18 23:22:29 +01:00
Günther Deschner
6a61580617 s3-winbindd: workaround for samr_ChangePasswordUser3 to User2 fallback for w2k dcs. 
Guenther
 2008-11-13 17:33:18 +01:00
Kai Blin
7d8787c915 ntlm_auth: Put huge NTLMv2 blobs into extra_data on CRAP auth. 
This fixes bug #5865
 2008-11-10 12:50:02 +01:00
Günther Deschner
c48186f507 s3: use samba4 prototype for ndr_push/pull_struct_blob. 
Guenther
 2008-09-23 09:37:23 +02:00
Gerald (Jerry) Carter
544cd1b4b9 winbindd: Update the calls to ws_name_XX() to reflect API changes. 
* Ensures that all points an which a name is received or returned
  to/from a client passes through the name aliases layer (users
  and groups).
 2008-09-16 10:27:59 -07:00
Jeremy Allison
29af730964 Fix the wcache_invalidate_samlogon calls. 
Jeremy.
(This used to be commit 7c820899ed1364fdaeb7b49e8ddd839e67397ec0)
 2008-08-27 17:29:10 -07:00
Günther Deschner
66fa77ba9e winbindd: move set_auth_errors to util functions. 
Guenther
(This used to be commit ae3fa60c4546c7420722d8f422c22bbfd623ff5b)
 2008-08-25 13:18:01 +02:00
Günther Deschner
477e6bb40d winbindd: consistently use false/true. 
Guenther
(This used to be commit e8619121d16d086f1ab186051d0ecdc83c02e5b5)
 2008-08-19 22:01:00 +02:00
Günther Deschner
d9484d4331 winbindd: use set_auth_errors (avoid code duplication). 
Guenther
(This used to be commit ae35a5110ea03d8ff27f320cdc685e5623715a2a)
 2008-08-19 22:00:48 +02:00
Günther Deschner
4289e4b878 winbindd: fill_in_password_policy (to avoid redundant code). 
Guenther
(This used to be commit dbfa7ba14c9f1a4d7a1e7205dd0b3ea2fc2e6131)
 2008-08-19 22:00:36 +02:00
Günther Deschner
9f28b99ba8 winbindd: kill some trailing/leading whitespace. 
Guenther
(This used to be commit b5bb7844952a87b123551b478b60bfe232afc308)
 2008-08-19 15:20:07 +02:00
Zach Loafman
06d0790c07 Fix various build warnings 
This fixes various build warnings on our platform. I'm sure I haven't
caught them all, but it's a start.
(This used to be commit 6b73f259cb67d9dda9127907d706f9244a871fa3)
 2008-07-22 15:00:48 +02:00
Jeremy Allison
06b3a79d1f Allow authentication and memory credential refresh after password change from gdm/xdm. Patch from boyang <boyang@novell.com>. 
Jeremy.
(This used to be commit 8cfc6afc7b4a6af9aea5f5a7cb5af7e3218c2d75)
 2008-07-07 11:26:16 -07:00
Günther Deschner
14d500c0e7 rename rpccli_samr_chgpasswd3 to rpccli_samr_chgpasswd_user3. 
Guenther
(This used to be commit b1209a039b45985e0b28777e04cba5bcc3de061e)
 2008-06-25 23:58:50 +02:00
Günther Deschner
059293cbf4 rename rpccli_samr_chgpasswd_user to rpccli_samr_chgpasswd_user2. 
Guenther
(This used to be commit 5b4650d56c04be0c498413f17afb2cf6d0e7d548)
 2008-06-25 23:58:50 +02:00
Jeremy Allison
cfde5c8d47 Get rid of "shadowed local var" warnings with gcc. 
Jeremy.
(This used to be commit 0bc18967aa7cb6f4debeaa48be81d0e48a7d9503)
 2008-05-22 14:19:14 -07:00
Andrew Bartlett
154f4837b3 Add in a nice big comment explaining why SamLogonEx matters. 
Andrew Bartlett
(This used to be commit 87232351b5e66728f8d602259961909e8c1dfcb6)
 2008-04-21 17:48:31 +02:00
Günther Deschner
bea4541e11 Use sid_array_from_info3 in lookup_usergroups_cached(). 
Guenther
(This used to be commit 65b4cb20ea3fb806cfd50281e08f32bea70fafce)
 2008-04-04 02:53:40 +02:00
Günther Deschner
1b9c4763ee Fix typo. 
Guenther
(This used to be commit fed644372916a5e565e4f5352aab61b39a3a42a0)
 2008-03-27 18:05:02 +01:00
Gerald W. Carter
9c169e9e42 Don't fill password policy structure for any domain other than our own. 
The samr connects will fail.  This is not independent of the CONTACT_TRUSTDOM
flag neede by krb5 logins.
(This used to be commit 4de4949e3bfcfb2169c329f19cb76936d9043d50)
 2008-03-27 11:56:29 -05:00
Günther Deschner
cba8dcf759 Move LOGON_KRB5_FAIL_CLOCK_SKEW to winbindd_pam. 
Guenther
(This used to be commit fa64c76ac8e54f385f277b5b39be70075b2eeee0)
 2008-03-27 13:06:43 +01:00
Volker Lendecke
689cd9e101 Fix a segfault 
When we get a NT_STATUS_WRONG_PASSWORD for example, my_info3 is not initialized
at all. So first check that we have NT_STATUS_IS_OK(status) before we
dereference my_info3.
(This used to be commit 559cd9e5a7fac3ce3769d457132cdcb28569b93d)
 2008-03-25 23:36:06 +01:00
Volker Lendecke
ca63c6e079 Merge dd9e0bea31751 from 3-0-ctdb -- use NetSamLogonEx when possible 
NetSamLogonEx has the advantage that it does not use the credential chain
(This used to be commit cfceb063f559f8549b8f24ce347be213c89303b0)
 2008-03-19 17:00:53 +01:00
Stefan Metzmacher
76de025c72 winbind: use a struct element for WBFLAG_PAM_UNIX_NAME 
To not conflict with WBFLAG_PAM_INFO3_TEXT.

This should fix pam_winbind.

metze
(This used to be commit 1b8ed6c0ffb2548442bb7e9d848117ce9b1c65c0)
 2008-02-28 23:00:42 +01:00
Günther Deschner
c25958a046 Use netr_SamInfo3 everywhere in winbindd. 
Guenther
(This used to be commit d9502eb75395131d5a8130ff2c4ebace106cb974)
 2008-02-17 02:12:00 +01:00
Günther Deschner
c6f82f1cc4 Getting rid of net_io_user_info3() when sending an NDR encoded netr_SamInfo3. 
Guenther
(This used to be commit f22ba8aee2ff90e9e34db066d506fec24c52379f)
 2008-02-17 02:12:00 +01:00
Stefan Metzmacher
3649f728ed winbindd: add rids and other_sids arrays in WBFLAG_PAM_INFO3_TEXT mode 
metze
(This used to be commit c5e6dd1ca9611e2830ff773875998c01bf779a64)
 2008-02-13 13:30:15 +01:00
Günther Deschner
4c42f7999a Use rpccli_samr_QueryUserInfo in net and winbindd. 
Guenther
(This used to be commit a9ff6760901a489ff8877717bdd5a2218154498f)
 2008-02-12 18:16:56 +01:00
Günther Deschner
9c22a27aad Let rpccli_samr_chgpasswd3 use rpccli_samr_ChangePasswordUser3 internally. 
Guenther
(This used to be commit ffbfd19ad7065caf05688c5748178d30115d47f4)
 2008-02-07 10:07:00 +01:00
Günther Deschner
742fd39b7a Use rpccli_samr_QueryDomainInfo() in winbindd. 
Guenther
(This used to be commit dd9fa33e968d4e641460fe1c6beb05dfe12fa918)
 2008-02-06 02:09:44 +01:00
Michael Adam
30dcc73d96 Fix a typo in a debug message. 
Michael
(This used to be commit 3865a7e6a19630f8a90140accf4a6e93d4f70e6c)
 2008-02-04 16:42:08 +01:00
Günther Deschner
37b56c0113 Use rpccli_samr_OpenUser() all over the place. 
Guenther
(This used to be commit da90eb7653554d242da83ed98adae35ced3a2938)
 2008-02-01 12:30:15 +01:00
Günther Deschner
5334b364c2 Remove rpccli_samr_close and use pidl generated function instead. 
Guenther
(This used to be commit 64f0889401855ab76953bfae5db4fe4df19ad8a5)
 2008-01-31 11:09:11 +01:00
Günther Deschner
80b2e330f9 Remove include/rpc_ds.h and all references to it completly. 
Jerry, please have a look if you're fine with that.

Guenther
(This used to be commit beae25c808a3a03d645f247e9befcd05e3ecca2c)
 2008-01-29 17:51:05 +01:00
Stefan Metzmacher
2b9ed4700a winbindd: remove useless strcpy 
metze
(This used to be commit df08708fc1e8fc8e15b36db29faf35ae5ae64b65)
 2008-01-21 13:15:10 +01:00
Günther Deschner
a92eb76688 Finally enable pidl generated SAMR & NETLOGON headers and clients. 
Guenther
(This used to be commit f7100156a7df7ac3ae84e45a47153b38d9375215)
 2008-01-17 16:54:46 +01:00
Michael Adam
f3603d5a5a Convert add_sid_to_array() add_sid_to_array_unique() to return NTSTATUS. 
Michael
(This used to be commit 6b2b9a60ef857ec31da5fea631535205fbdede4a)
 2008-01-09 01:47:10 +01:00
Michael Adam
e3bb148b94 Only retrieve password policies in pam_auth when WBFLAG_PAM_GET_PWD_POLICY is set. 
This essentially re-establishes r14496 (2155bb0535656f294bd054d6a0a7d16a9a71c31b)
which was undone in r17723 (43bd8c00abb38eb23a1497a255d194fb1bbffffb) for
reasons that are unclear to me. Maybe I am being too naive.

Now we do again only retrieve the password policy when called from
the pam_winbind module. This fixes logons delegated to AD trusted
domain controllers: We need to connect to the sam to retrieve the
password policy. But auhtenticated session setup is not possible
when contacting the trusted domain dc and afterwards, SamrConnect
also fails with whatever credentials and method used.

Michael
(This used to be commit 6d765e0de523211a2d0b43a2c4c4117f5f0c662f)
 2007-12-20 02:05:55 +01:00
Volker Lendecke
2e07c2ade8 s/sid_to_string/sid_to_fstring/ 
least surprise for callers
(This used to be commit eb523ba77697346a365589101aac379febecd546)
 2007-12-15 22:47:30 +01:00
Volker Lendecke
900288a2b8 Replace sid_string_static by sid_string_dbg in DEBUGs 
(This used to be commit bb35e794ec129805e874ceba882bcc1e84791a09)
 2007-12-15 22:09:36 +01:00
Jeremy Allison
42cfffae80 Remove next_token - all uses must now be next_token_talloc. 
No more temptations to use static length strings.
Jeremy.
(This used to be commit ec003f39369910dee852b7cafb883ddaa321c2de)
 2007-12-07 17:32:32 -08:00