1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-23 09:57:40 +03:00

19088 Commits

Author SHA1 Message Date
Gerald Carter
aa2ac5a194 r22706: missed one reference to domain->native_mode in the previous commit 2007-10-10 12:21:48 -05:00
Gerald Carter
4b4148a964 r22705: Implement new set_dc_type_and_flags() called based on the
information return from our DC in the DsEnumerateDomainTrusts()
call.   If the fails, we callback ot the older
connect-to-the-remote-domain method.

Note that this means we can only reliably expect the native_mode
flag to be set for our own domain as this information in not
available outside our primary domain from the trusted information.
This is ok as we only really need the flag when trying to
determine to enumerate domain local groups via RPC.

Use the AD flag rather than the native_mode flag when using
ldap to obtain the seq_num for a domain.
2007-10-10 12:21:47 -05:00
Gerald Carter
9cf6068f1e r22704: Implement three step method for enumerating domain trusts.
(a) Query our primary domain for trusts
(b) Query all tree roots in our forest
(c) Query all forest roots in trusted forests.

This will give us a complete trust topology including
domains via transitive Krb5 trusts.  We also store the
trust type, flags, and attributes so we can determine
one-way trusted domains (outgoing only trust path).
Patch for one-way trusts coming in a later check-in.

"wbinfo -m" now lists all domains in the domain_list() as held
by the main winbindd process.
2007-10-10 12:21:47 -05:00
Gerald Carter
d12b8147d6 r22703: Convert winbindd_getgrgid() and winbindd_getgetpwnam()
to use the same code path after we resolve the name/gid to
a SID.  Use the async lookupname/lookupsid interface.
2007-10-10 12:21:47 -05:00
Gerald Carter
b442644bac r22702: Convert both lookup name and lookup sid to follow the
same heuristic.  First try our DC and then try a DC in the
root of our forest.  Use a temporary state since
winbindd_lookupXXX_async() is called from various winbindd
API entry points.

Note this will break the compile.  That will be fixed in the
next commit.
2007-10-10 12:21:47 -05:00
Gerald Carter
2ab617fbbf r22701: Fix the krb5_nt_status error table and add the "no DCs found" mapping 2007-10-10 12:21:47 -05:00
Gerald Carter
2da62a3d96 r22700: Add a simple wcache TRUSTDOM api for maintaing a complete
list of trusted domains without requiring each winbindd process
to aquire this on its own.  This is needed for various idmap
plugins and for dealing with different trust topoligies.

list_trusted_domain() patches coming next.
2007-10-10 12:21:47 -05:00
Volker Lendecke
cd55ccef6a r22695: Dummy checkin (reformatting) to make the AIX hosts retry. 2007-10-10 12:21:46 -05:00
Volker Lendecke
7460511c4e r22693: Always compile before checkin.... I've now installed dmapi on my laptop :-) 2007-10-10 12:21:46 -05:00
Volker Lendecke
3f956d3451 r22692: Fix compilation of explicit --without-winbind.
Thanks to Tom Bork for reporting this!

Volker
2007-10-10 12:21:46 -05:00
Volker Lendecke
3a2ca1b1b8 r22691: Fix a 64-bit warning and a const const discard warning 2007-10-10 12:21:46 -05:00
Volker Lendecke
8e0e278961 r22688: Change lock_data in struct byte_range_lock from void * to struct lock_struct * 2007-10-10 12:21:46 -05:00
Simo Sorce
e04ca2d7f8 r22677: One line fix to make net idmap restore work again
Jerry, please add this for 3.0.25 final
2007-10-10 12:19:54 -05:00
Jeremy Allison
c73963a60a r22676: Fix zero alloc with create_rpc_blob().
Jeremy.
2007-10-10 12:19:54 -05:00
Jeremy Allison
80d981265c r22675: Simo's patch for 0 size allocation. Still need
to examine parse_misc.c fix.
Jeremy.
2007-10-10 12:19:54 -05:00
Jeremy Allison
9e4c6ab739 r22673: Fix for Jerry's reversion. We still need to check size
before talloc.
Jeremy.
2007-10-10 12:19:54 -05:00
Günther Deschner
0f436eab5b r22666: Expand kerberos_kinit_password_ext() to return NTSTATUS codes and make
winbindd's kerberized pam_auth use that.

Guenther
2007-10-10 12:19:54 -05:00
Günther Deschner
dcd902f24a r22664: When we have krb5_get_init_creds_opt_get_error() then try to get the NTSTATUS
codes directly out of the krb5_error edata.

Guenther
2007-10-10 12:19:53 -05:00
Günther Deschner
997ded4e3f r22663: Restructure kerberos_kinit_password_ext() error path.
Guenther
2007-10-10 12:19:53 -05:00
Stefan Metzmacher
cb785d9bed r22659: merge from SAMBA_4_0:
- add AC_GNU_SOURCE macro for systems which don't have it
  (sles8)
- fix compiler warning on some systems

metze
2007-10-10 12:19:53 -05:00
Günther Deschner
fce2fe9903 r22655: Call correct free-macros in netsamlogon_cache_get() error paths. Forgot those
in the previous commit.

Guenther
2007-10-10 12:19:53 -05:00
Gerald Carter
435a6e5e82 r22654: And this is now Samba 3.0.27pre1-SVN 2007-10-10 12:19:53 -05:00
James Peach
e93d33b463 r22648: Fix comment to match the code. 2007-10-10 12:19:52 -05:00
Günther Deschner
5b149967cc r22647: Avoid leaking a full info3 structure on each winbindd cached login by making
netsamlogon_cache_get() return a talloc'ed structure.

Guenther
2007-10-10 12:19:52 -05:00
Simo Sorce
565d7d0b18 r22646: segfault fix in idmap_ldap.c from 3_0_25 2007-10-10 12:19:52 -05:00
Günther Deschner
65a2701f36 r22644: Fix memleak.
Guenther
2007-10-10 12:19:52 -05:00
Günther Deschner
37f9f466fd r22643: Don't clear cached U/SID and UG/SID entries when we want to logon offline.
Guenther
2007-10-10 12:19:52 -05:00
Jelmer Vernooij
232c5c6557 r22641: Install tdbdump and tdbbackup. 2007-10-10 12:19:51 -05:00
Günther Deschner
bfcd10766b r22636: Fix logic bug.
We certainly don't want to crash winbind on each sucessfull
centry_uint{8,16,32,64} read.

Jeremy, please check :-)

Guenther
2007-10-10 12:19:51 -05:00
James Peach
4c58b6b194 r22633: Fix typo in debug message. 2007-10-10 12:19:51 -05:00
James Peach
bbc102172a r22631: Remove the possibility of sid_check_is_domain and
sid_check_is_in_our_domain getting out of sync.
2007-10-10 12:19:51 -05:00
Gerald Carter
cf11b43149 r22630: Revert svn r22576 (parse change to enum_aliasmem(). Original code was correct 2007-10-10 12:19:50 -05:00
Michael Adam
6999d578ae r22615: fix prototype 2007-10-10 12:19:50 -05:00
James Peach
e3802961c1 r22614: Only enable GNU-isms in the Makefile if we can be sure that the GNU
make we found is what will be run when the user invokes "make".
2007-10-10 12:19:50 -05:00
Volker Lendecke
d4c5d5ffb3 r22613: Fix an uninitialized variable warning 2007-10-10 12:19:50 -05:00
Jeremy Allison
10649540ac r22611: Fix from Jens Nissen <jens.nissen@gmx.net>. Fix bad
memory leak I introduced into acl code, also remove
redundent extra check for global_sid_System :

global_sid_System == S-1-5-18 which is already
included in the check for a domain of
global_sid_NT_Authority == S-1-5

Jeremy.
2007-10-10 12:19:50 -05:00
Jeremy Allison
aef3c262b7 r22593: Finish doing the same for raw TALLOC.
Jeremy.
2007-10-10 12:19:50 -05:00
Jeremy Allison
8044a6482c r22592: Fix TALLOC_SIZE to be consistent.
Jeremy.
2007-10-10 12:19:49 -05:00
Jeremy Allison
603233a98b r22590: Make TALLOC_ARRAY consistent across all uses.
That should be it....
Jeremy.
2007-10-10 12:19:49 -05:00
Jeremy Allison
8968808c3b r22589: Make TALLOC_ARRAY consistent across all uses.
Jeremy.
2007-10-10 12:19:49 -05:00
Jeremy Allison
8ad13718af r22588: Make all uses of TALLOC_MEMDUP consistent.
Jeremy.
2007-10-10 12:19:48 -05:00
Jeremy Allison
c3df5d08dd r22587: Ensure TALLOC_ZERO_ARRAY is consistent.
Jeremy.
2007-10-10 12:19:47 -05:00
Jeremy Allison
18f47f999d r22586: Add a modified version of Simo's patch.
Jeremy.
2007-10-10 12:19:47 -05:00
Jeremy Allison
c622fb8536 r22585: Get us into a consistent state with TALLOC_ZERO_ARRAY also.
Jeremy.
2007-10-10 12:19:47 -05:00
Jelmer Vernooij
1d3f35941b r22584: Don't hardcode specific Python version.
Patch by the Samba packaging team for Debian.
2007-10-10 12:19:47 -05:00
Jelmer Vernooij
1aa64eb02c r22583: Support non-Linux GNU systems (such as Debians' GNU with FreeBSD kernel and
Hurd systems).

Patch by the Samba packaging team for Debian.
2007-10-10 12:19:46 -05:00
Jelmer Vernooij
f46492a4db r22578: Remove python build directory and generated smbadduser.
Patch originally by the Debian packaging team for Samba.
2007-10-10 12:19:46 -05:00
Jeremy Allison
3df99006f8 r22577: Change all of parse/*.c to use standard form. Fix some
marshalling bugs.
Jeremy.
2007-10-10 12:19:46 -05:00
Jeremy Allison
415c476f72 r22576: Fix marshalling bug in aliasmem.
Jeremy.
2007-10-10 12:19:45 -05:00
Jeremy Allison
f95bf093f9 r22574: Fix reply when we have no dfs shares.
Jeremy.
2007-10-10 12:19:45 -05:00