6 Commits

Author	SHA1	Message	Date
Jeremy Allison	9421a0a9cd	r19207: Properly canonicalize incoming names to the ... NSS protocols auth, chauthtok, logoff, ccache_ntlm_auth. That way we ensure winbindd only deals with fully qualified names internally. The NSS protocols auth_crap and chng_pswd_auth_crap should be fixed to do the same thing. Jeremy. (This used to be commit dbd2454d33)	2007-10-10 12:15:21 -05:00
Jeremy Allison	8e0a4e7e6f	r17897: Store the uid in the memory creds. Don't request the ... krb5 refresh creds when doing cached NTLM auth, request the memory creds instead. Jeremy. (This used to be commit 310ac0b226)	2007-10-10 11:38:57 -05:00
Jeremy Allison	e627362622	r17837: Split out the storing of memory cached credentials ... from the krb5 ticket renewal code. This allows cached credentials to be stored for single sign-on via ntlm_auth for machines in a domain still using NTLM. Also (hopefully) fixes the reference counting problem with pam_logon/logoff so multiple logons/logoffs won't lose cached credentials. This compiles, but I'm intending to test it over the weekend so don't complain too much :-). I also want it in the tree so Coverity can scan it for errors. Guenther, check this over please - I ran through the architecture with Jerry and he's ok with it, but this is modifying your code a lot. Jeremy. (This used to be commit 679eeeb911)	2007-10-10 11:38:53 -05:00
Jeremy Allison	0ff4706582	r17630: Looks like getpeerid() is a system function on ... FreeBSD. Change to sys_getpeerid(). Thanks to vl for pointing this out. Jeremy. (This used to be commit dd0069cfca)	2007-10-10 11:38:44 -05:00
Jeremy Allison	b2d5dd7281	r17616: Add the lm and nt hashes to the cached credentials ... stored - only store the password if we're going to be doing a krb5 refresh. GD please review this change ! Now to add code to reference count the cached creds (to allow multiple pam_logon/pam_logoffs to keep the creds around), ensure that the cred cache is called on all successful pam_logons (if we have winbindd cache pam credentials = true, set this by default) and finally ensure the creds cache is changed on successful password change. GD - you *really* need to review this :-). Jeremy. (This used to be commit 017e7e1495)	2007-10-10 11:38:43 -05:00
Jeremy Allison	b41e14abfd	r17610: Added the ability for firefox to drive the winbindd ... ntlm_auth module to allow it to use winbindd cached credentials.The credentials are currently only stored in a krb5 MIT environment - we need to add an option to winbindd to allow passwords to be stored even in an NTLM-only environment. Patch from Robert O'Callahan, modified with some fixes by me. Jeremy. (This used to be commit ae7cc298a1)	2007-10-10 11:38:43 -05:00