sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
Code
10,126 Commits 60 Branches 1,144 Tags 452 MiB
81633064dd
Commit Graph

450 Commits

Author SHA1 Message Date
Andrew Bartlett
81633064dd Compleatly remove support for logfile truncation. All logs are opened for 
append writes.

(blessed by jra)

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Tim Potter
f0a1177acf Remove lp_security() checks for winbindd as this is how we act as a PDC. 
Keep the rest of the cleanups though.
 0001-01-01 00:00:00 +00:00
Tim Potter
8a6d377521 Call winbindd_param_init() earlier on in the piece so we don't get stuck in 
the holding pattern when started up when security = user or security = ads.

Clean up return value of winbindd_common_init() - what a mess!
 0001-01-01 00:00:00 +00:00
Tim Potter
1e054e3db6 Merge of get_dc_list() api change. This was slightly more intrusive 
than the version in APPLIANCE so watch out for boogs.
 0001-01-01 00:00:00 +00:00
Tim Potter
48ed9dce0d Merge of lp_talloc_free() call in init_domain_list() from APPLIANCE. 0001-01-01 00:00:00 +00:00
Tim Potter
0bb9bc1962 Fix --set-auth-user command to delete entries from the secrets file when an 
empty username/password is passed on the command line.  Previously we were
leaving the domain name set and the password set to a NULL character.

Added a --get-auth-user command to display the restrict anonymous username
information.  Can only be run successfully by root.
 0001-01-01 00:00:00 +00:00
Tim Potter
846b549494 Some winbindd cleanups I made trying to fix cr1020: 
- move winbindd client handling into accessor functions in
   winbindd_util.c

 - move some winbindd socket routines into accessor functions in
   winbindd_utils.c

(The deadlock situation mentioned in the appliance branch is probably
not applicable since we don't clear the connection cache on SIGHUP.
Perhaps we should?)
 0001-01-01 00:00:00 +00:00
Tim Potter
7badccda46 Handle the case where the password used in RPC connections (for restrict 
anonymous support) is blank.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
425782ba32 Updates to winbind's PAM client and server - make the debug logs 
work a bit better for password changing.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
31774dce67 much simpler code to choose a DC to contact in winbindd. We now always 
choose the server that has the most bits in common in its IP with one
of our interfaces.
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
6c7748b001 if trusted domains are disabled then we should not try to connect to 
them in winbindd
 0001-01-01 00:00:00 +00:00
Herb Lewis
4125c582aa must add one to the extra_data size to transfer the 0 string terminator. 
This was causing "wbinfo --sequence" to access past the end of malloced
memory.
 0001-01-01 00:00:00 +00:00
Gerald Carter
06eea39abd NULL enum_local_groups for ads winbindd (temporary workaround). 0001-01-01 00:00:00 +00:00
Jeremy Allison
b521abd86b Added new error codes. Fix up connection code to retry in the same way 
that app-head does.
Jeremy.
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
14489ff30b - we need to rescan the trusted domain list regularly to cope with 
transitive trusts, and trusts that are added while winbindd is running

- removed an unnecessary call to time()
 0001-01-01 00:00:00 +00:00
Jeremy Allison
94fc0ea9f9 Fix spelling of background_process. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
042890056d Change to use sys_read/sys_write. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Gerald Carter
764b58e2c0 merge from APP_HEAD 
* s/driverlocation/comment
* detect native mode domain and enumerate local groups

Also

* Added sendfile stats from SAMBA_2_2
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
a0e0f3b293 Don't use usage function, but use popt for usage and help info 0001-01-01 00:00:00 +00:00
Gerald Carter
38a956c79b fix typo 0001-01-01 00:00:00 +00:00
Gerald Carter
dd948a302a merge native_mode flag in winbindd_domain struct from app-head 0001-01-01 00:00:00 +00:00
Gerald Carter
38c9e42998 merge of new client side support the Win2k LSARPC UUID in rpcbind 
from APP_HEAD
 0001-01-01 00:00:00 +00:00
Jeremy Allison
6929b65954 Doh ! Lookup name before checking negative cache (the way Tim originally 
had it...).
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
c4fcbb2948 Fix memory leak in getting DC list. Remember to exclude failed lookups. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
c864edf4fb Move a number of ADS related functions out into utility libs, so that things 
like metze's sam_ads can also use them.

Also add error checking etc to a few more functions.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Gerald Carter
1b55965f12 fix getpass replacement check (i thought I fixed this a few days 
ago....)
 0001-01-01 00:00:00 +00:00
Jeremy Allison
38c67632ad Moved -ve cache check to correct place. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
f8a0e6ad8b Reverted my earlier change. It was incorrect. We must be protected by 
pidfile before doing secrets_init().
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
ffb7632d05 Only create the pidfile once we're ready to receive requests. 
This allows external programs to correctly synchronise with us.
Jeremy.
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
0d28d76947 Add clock skew handling to our kerberos code. This allows us to cope with 
the DC being out of sync with the local machine.
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
dc3c14fc2b Put unixsocket calls between #ifdef HAVE_UNIXSOCKET's - required for Stratus VOS 
(Double checked)
 0001-01-01 00:00:00 +00:00
Tim Potter
d87c1f507d Merge undone cleanups. 0001-01-01 00:00:00 +00:00
Tim Potter
26d486aa74 Merge of winbind auth cleanups from appliance. 0001-01-01 00:00:00 +00:00
Tim Potter
f75d61b03a Merge of cut&paste fix from appliance. 0001-01-01 00:00:00 +00:00
Tim Potter
d9fa865e5c Spelling fix. 0001-01-01 00:00:00 +00:00
Tim Potter
e63afabf98 Put pid number in invalid request size debug. 0001-01-01 00:00:00 +00:00
Tim Potter
77bde1fa33 Bugfix merge: 
>Initialise user_rid value in WINBIND_USERINFO structure returned by
>the rpc version of query_user().  This fixes a caching bug found by
>Gavrie Philipson from disksite.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
3ec3861445 This is the 'main' inclue for for winbind clients - all clients should include 
only this file, and not any others.  It includes the function prototypes.
(Forgot to commit with earlier patch)

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
b440418f13 Don't leak file desciptors in this (impossible?) error case. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
442eb39657 Winbind client-side cleanups. 
The global winbind file descriptor can cause havoc in some situations -
particulary when it becomes 0, 1 or 2.  This patch (based on some very nice
work by Hannes Schmidt <mail@schmidt-net.via.t-online.de>) starts to recitfy
the problem by ensuring that the close-on-exec flag is set, and that we move
above 3 in the file descriptor table.

I've also decided that the PAM module can close it's pipe handle on every
request - this isn't performance-critical code.

The next step is to do the same for nss_winbind.  (But things like getent()
might get in our way there).

This also cleans up some function prototypes, puts them in just one place.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
5b9a7ab901 Patch from "Stefan (metze) Metzmacher" <metze@metzemix.de> 
to extend the ADS_STATUS system to include NTSTATUS, and to provide a better
general infrustructure for his sam_ads work.

I've also added some extra failure mode DEBUG()s to parts of the code.

NOTE:  The ADS_ERR_OK() macro is rather sensitive to braketing issues - without
the final set of brakets, the test is essentially inverted - causing some
intersting 'error = success' messages...

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Tim Potter
ea26b3e8ef Quietened some debugs. 0001-01-01 00:00:00 +00:00
Jean-François Micouleau
4d38caca40 added cli_net_auth_3 client code. 
changed cli_nt_setup_creds() to call cli_net_auth_2 or cli_net_auth_3 based on a switch.
pass also the negociation flags all the way.
all the places calling cli_nt_setup_creds() are still using cli_net_aut2(), it's just for future use and for rpcclient.

in the future we will be able to call auth_2 or auth_3 as we want.

	J.F.
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
f757223ebe fix connecting to a BDC when the PDC is down but in WINS and no bcast 
can be used to find a BDC

2nd try ....
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
e95d8e2c9e fix connecting to a BDC when the PDC is down but in WINS and no bcast 
can be used to find a BDC
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
073106ad25 Use popt for --help 0001-01-01 00:00:00 +00:00
Tim Potter
86433a3492 Fix typo in debug. 0001-01-01 00:00:00 +00:00
Tim Potter
b8dba26978 Moved calculation of secure channel type into a new function. 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
addf29e676 Patch from Paul Green <Paul.Green@stratus.com> to be more POSIX-compatible 0001-01-01 00:00:00 +00:00
Andrew Tridgell
8d40f34e2f be a bit more paranoid about not getting duplicate domain names (can 
happen when the LDAP call to get the flatname for the primary domain
fails)
 0001-01-01 00:00:00 +00:00