1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-07 00:58:40 +03:00

1723 Commits

Author SHA1 Message Date
Gerald Carter
da158ad6a2 r22447: Patch from Ying Li <ying.li2@hp.com> to default tdb idmap
plugin when neither idmap domains nor idmap backend have
been defined.
(This used to be commit 2fa12753da22551c9d5e6ca1bea95884e02ef7b2)
2007-10-10 12:19:34 -05:00
Gerald Carter
026852b47a r22444: * Validate a SID before trying to convert it to a uid/gid via the public
winbindd interface

* Add nss_info/*so files to the RHEL/Fedora packaging
(This used to be commit 1787fcb8c1199215fcec74472c727b8c8fbf5473)
2007-10-10 12:19:34 -05:00
Gerald Carter
d27d6e822e r22430: Add SID validate to sid2uid() and sid2gid() public entry points in winbindd
(This used to be commit 0890cb941ed5d87a919edb5a896f331e900af007)
2007-10-10 12:19:34 -05:00
James Peach
44f5211c17 r22418: Support running under launchd. We abstract the method of obtaining
sockets to listen on a little, because in the launchd case these
are provided for us. We also add an idle timeout so that a daemon
can exit after a period of inactivity.
(This used to be commit fc8589a3371d396197fae508e563f814899c2beb)
2007-10-10 12:19:33 -05:00
James Peach
8a22b1f0ea r22417: Refactor the various daemon run-mode options to make the semantics
of the various flags explicit.
(This used to be commit 19c929c6330a50f278ac322ac5fcb83d03734ea2)
2007-10-10 12:19:33 -05:00
Günther Deschner
04a70aaf1c r22402: Fix build warning.
Guenther
(This used to be commit bf9131fed30b3d6f80c41734c04450a1e6bcba5b)
2007-10-10 12:19:32 -05:00
Simo Sorce
2d8fbef151 r22393: fix cut&paste error
(This used to be commit 70878d698532aa8b0e151e7772894e251290186e)
2007-10-10 12:19:31 -05:00
Simo Sorce
39888067e3 r22392: Remove leftover potentially segfaulty code.
Check we are online before actually trying to connect anywhere
(This used to be commit ff5e0b2986d43de1e88c85783b451fcb9828d6a8)
2007-10-10 12:19:30 -05:00
Gerald Carter
36da6cb584 r22390: Patchset sent to samba-technical to address the winbind
loop when allocating a new id for a SID:

auth_util.patch		Revert create_local_token() to
			the 3.0.24 codebase

idmap_type.patch	Have the caller fillin the
			id_map.xid.type field when
			resolving a SID so that if we allocate
			a new id, we know what type to use

winbindd_api.patch	Remove the WINBINDD_SIDS_TO_XIDS calls
			from the public winbindd interface
			for the 3.0.25 release

idmap_rid.patch		Cleanup the idmap_rid backend to not
			call back into winbindd to resolve
			the SID in order to verify it's type.
(This used to be commit 3b24dae9e73b244540a68b631b428a4d0f57440b)
2007-10-10 12:19:30 -05:00
Simo Sorce
20086f66cc r22388: clearer message, thanks David
(This used to be commit 7961476784713267efc19d305aa66c68275ccaa1)
2007-10-10 12:19:29 -05:00
Simo Sorce
d7c8710a1d r22348: 3_0 as well
(This used to be commit ad57434faf806a6ad27beb0f75b73d5389a35382)
2007-10-10 12:19:28 -05:00
Simo Sorce
01be4914b3 r22343: Commit to 3_0 as well after adapting the patch.
(tdb_delete_bystring instead of tdb_delete is used here)
(This used to be commit ee40cead097ed2c005f5f80b24c9f681e054849a)
2007-10-10 12:19:27 -05:00
Gerald Carter
b066668b74 r22340: Fix another segfault in idmap_ldap.c caused by setting the iterator
LDAPMessage * to NULL on each loop rotation.
(This used to be commit 356dd0dd3a36a8f6061ba60f556e889de7c28140)
2007-10-10 12:19:27 -05:00
Stefan Metzmacher
f718428845 r22313: as discussed with simo:
remove the only usage of backup_tdb() in samba3.
As backup_tdb() will go completely soon.

metze
(This used to be commit 363d1d676c568e10bbcbe2b95e422067a4740161)
2007-10-10 12:19:25 -05:00
Stefan Metzmacher
a8c6250274 r22298: move ZERO_*, ARRAY_SIZE and PTR_DIFF macros into libreplace
metze
(This used to be commit 8a7d2e633b98aa9c73cf1f7d1369015b294cf2e1)
2007-10-10 12:19:24 -05:00
Gerald Carter
615f025654 r22283: Remove very old bug where we assigned the online mode of
the domain to queried to our own domain.
(This used to be commit 2abeec576805b5e921b3606ab09ce9c1fd809566)
2007-10-10 12:19:24 -05:00
Simo Sorce
0dd0aab2bc r22230: Let's just cast here, the 2 calls have different allocation mechanisms.
We just let domname and name hang on the mem ctx until the call returns,
and the context will be destroyed.

Simo.
(This used to be commit c38d8396c513d4c418f64b27a9f7c25757388674)
2007-10-10 12:19:21 -05:00
Volker Lendecke
3e819bd22c r22214: Fix incompatible pointer type warnings. Simo, please check and merge to 3_0_25
if appropriate.

Volker
(This used to be commit 6a4f6c5177b4837fe7a238f067abbc5739ab0812)
2007-10-10 12:19:20 -05:00
Jeremy Allison
731df24607 r22211: Don't return a value from void functions !
Jeremy.
(This used to be commit 1dd8d3a723ac2262a45fcd717daef79bffbf30d5)
2007-10-10 12:19:20 -05:00
Jeremy Allison
91be3a9ed6 r22210: Fix typo in testing for non-centry entries.
Jeremy.
(This used to be commit b89ecbcac651034d818a41d8a1d0c5e7313f37b8)
2007-10-10 12:19:20 -05:00
Jeremy Allison
c7d136dcac r22209: Fix the storage of time_t -> make it 64 bits (use the
same load/store function as NTTIME). Add a version number
string to the winbindd cache so we can tell if it needs
upgrading. THIS WILL DELETE ANY EXISTING winbindd_cache.tdb
on first startup regardless of offline auth status. Once
this is done we're in good shape though.
Jeremy.
(This used to be commit c52c7f91af80d5fbb2574b5acf10e6afef3b0c7e)
2007-10-10 12:19:19 -05:00
Jeremy Allison
a2bab163be r22207: Fill in the validation functions. Now to test...
Jeremy.
(This used to be commit fc2b9e860ef9512eb074622e0ad134ff3f30bfe7)
2007-10-10 12:19:19 -05:00
Jeremy Allison
127cc73034 r22206: Added boilerplate to be filled in for other validation functions.
Jeremy.
(This used to be commit 9be463eb0cb4d65c40e35c504059289696419486)
2007-10-10 12:19:19 -05:00
Jeremy Allison
23e575c4b7 r22205: Add some flesh to the bones of the cache validation code.
Jeremy
(This used to be commit b773ea2c8a107344fc524b41a2c81ecc723bd9ec)
2007-10-10 12:19:19 -05:00
Simo Sorce
59523f55a9 r22204: Workaround to quickly close bug #4508
This hack makes thing work, but we will need to try again to
make the getpw* calls fully async, that's the real fix.
(This used to be commit 2552859b3d9e28d5f25b339f5d24a8d2dc36b46b)
2007-10-10 12:19:19 -05:00
Jeremy Allison
9f41ff47d0 r22202: Volker is clever :-). Use TDB_NOMMAP to prevent any wild pointer
problems when validating the winbindd cache. Wish I'd have
thought of that.
Jeremy.
(This used to be commit 6b0a8cbbb883b7041ed4b1f6c1ae90233921d154)
2007-10-10 12:19:19 -05:00
Gerald Carter
d1491cc500 r22173: BUG 4491, 4501: Additional fixes for protecting against
crashes in allocate_id().

BUG 4501: Fix segv in idmap_ad caused by resetting the
entry iterator when parsing search results.
(This used to be commit bd6ebbfb9fb9d95bdf41eab1fd134170fcf6b6bf)
2007-10-10 12:19:18 -05:00
Gerald Carter
330985ebb5 r22159: BUG 4501 (second half of fix): Just disable the
uid/gid allocation if no idmap alloca backend has been
defined and we are not using a 3.0.24 idmap backend
compatible configuration.
(This used to be commit 0b700456f45d2bdfe8538bcfd0fce8ec2b9c3adb)
2007-10-10 12:19:18 -05:00
Gerald Carter
43401cf93b r22158: BUG 4501 (partial): Fix a crash caused by not using the
nss_info_{rfc2307,sfu} plugin with idmap_ad.
(This used to be commit f640f056bfbf1013d6b3df89632109011fc42361)
2007-10-10 12:19:17 -05:00
Gerald Carter
ccb99cafa7 r22110: don't cache the S-1-22-{1,2} domain SID/uig/gid lookups in idmap_cache
(This used to be commit adfc2d31656f642c76a3d8eeddf5a67804a4917d)
2007-10-10 12:19:13 -05:00
Simo Sorce
ca70c3cde7 r22109: Readonly is automatically set in the generic init code, let's just log the fact there
and remove the specific, but redundant, code in idmap_ad.c
(This used to be commit f127803734f9ae16e400b8a91e1e1910fd49b7f3)
2007-10-10 12:19:13 -05:00
Gerald Carter
06ec19e2fb r22069: BUG 4447: Fix compile failure on AIX 5.2 (patch from William Jojo <jojowil@hvcc.edu>)
(This used to be commit c1cb6d059b2a8539bc8a05ea4467d136bbb2ff38)
2007-10-10 12:19:09 -05:00
Gerald Carter
3bdd0e3650 r22066: Ensure that winbind can resolve SIDs in the S-1-22-{1,2}
domain to a uid.gid using the idmap_passdb backend.
(This used to be commit fc1aeee52d8cb6c8d5d306dbbec18127bd2674bc)
2007-10-10 12:19:09 -05:00
Gerald Carter
01c8809f76 r22061: Fix the krb5 user ticket refresh event timeout in winbindd
(This used to be commit 4a99b89618948f5518b9c685d1cdcfaad69bfc80)
2007-10-10 12:19:07 -05:00
Jeremy Allison
ce3c830f15 r22015: Fix for memory leak from Steven Danneman <steven.danneman@isilon.com>
Jeremy.
(This used to be commit 61a1574f50d35435a55de62fa6f1d281eed90a25)
2007-10-10 12:19:02 -05:00
Stefan Metzmacher
bc2b6436d0 r22009: change TDB_DATA from char * to unsigned char *
and fix all compiler warnings in the users

metze
(This used to be commit 3a28443079c141a6ce8182c65b56ca210e34f37f)
2007-10-10 12:19:00 -05:00
Stefan Metzmacher
56ba447668 r22001: change prototype of dump_data(), so that it takes unsigned char * now,
which matches what samba4 has.

also fix all the callers to prevent compiler warnings

metze
(This used to be commit fa322f0cc9c26a9537ba3f0a7d4e4a25941317e7)
2007-10-10 12:18:59 -05:00
Stefan Metzmacher
4b0c9a0084 r21986: make use of tdb_*_bystring() and string_term_tdb_data()
to avoid creating the TDB_DATA struct from strings "by hand"

metze
(This used to be commit 08d23a1c4f136427ee6f72fc02fb030a13056495)
2007-10-10 12:18:56 -05:00
Stefan Metzmacher
5060393272 r21985: make use of string_tdb_data()
to avoid creating the TDB_DATA struct from strings "by hand"

metze
(This used to be commit a8bc20d67f481a790524cad24e253436227af721)
2007-10-10 12:18:56 -05:00
Stefan Metzmacher
ef0a0f9b2b r21984: make use of tdb_*_bystring() and string_term_tdb_data()
to avoid creating the TDB_DATA struct from strings "by hand"

metze
(This used to be commit 91301f73476f17cc582c12e1fc201eb571d007af)
2007-10-10 12:18:56 -05:00
Herb Lewis
dfc4a8b2b2 r21957: minor formatting fix
(This used to be commit 99b9570ebe5aa9f57db65a04cfc5835b382cb4dd)
2007-10-10 12:18:52 -05:00
Volker Lendecke
8a2b73a58a r21941: Attempt to fix bug 4460
(This used to be commit d1b8f00c122414e532cdb3da78f84d55698cbc10)
2007-10-10 12:18:51 -05:00
Gerald Carter
5b105eaf7c r21940: Sorry Volker, I have to revert your revert in r21935.
We can talk about this later if you still feel that strongly
but I need to fix the build for now.
(This used to be commit c7df0cad8257333c6a8dfd98818269a783ba7a26)
2007-10-10 12:18:50 -05:00
Volker Lendecke
719f4657e8 r21935: Revert obviously not sufficiently tested code -- sorry for the pain. I am afraid I was basically off the net for the day
(This used to be commit 08c29abc03267b0dfb41cec3734653a536027a10)
2007-10-10 12:18:50 -05:00
Gerald Carter
e68ea1283d r21933: Change the write_sock() call in pam_winbind_request()
to not request a privileged pipe operation for everything
as this cannot be done from a process running under the
context of a user (e.g. screensaver).

Thanks to Danilo Almeida <dalmeida@centeris.com> for the help
in pointing out the change to write_sock().
(This used to be commit 80790f935abc8905542338b08f54d61ebacf2ff1)
2007-10-10 12:18:50 -05:00
Jeremy Allison
820184bdcc r21927: Removed unused variable.
Jeremy.
(This used to be commit 2d951c91a5ac9779dcb124190e3e7f86cee9efdf)
2007-10-10 12:18:49 -05:00
Simo Sorce
a38b34aa3b r21919: now that the local passdb abd BUILTIN have been blacklisted and they always
point to the passdb module, remove this comment and move the explanation in
the dimap_ad man page.

Simo.
(This used to be commit 58d2ec00d241f0ea8f9e165518b29bd35d2dc199)
2007-10-10 12:18:49 -05:00
Gerald Carter
b44d53e307 r21918: Reverting this change as it is now causing aborts() in
find_builtin_domain().    This all needs more testing
before anyone starts changing these lookup routines again.
(This used to be commit add225e1c8fef1d3ddb7fd43c1744858df45ecfd)
2007-10-10 12:18:48 -05:00
Gerald Carter
3f85405be0 r21913: fix one bug in build 717: correctly check the return from sid_peek_check_rid() when trying to find a matching domain
(This used to be commit c63bc300376e5be10585366013449a359b0778c1)
2007-10-10 12:18:48 -05:00
Gerald Carter
f8c2960d45 r21905: Rename
idmap expire time 	-> idmap cache time
  idmap negative time	-> idmap negative cache time
(This used to be commit aac2d0af5e870190e99317e8e88b22a9562485b4)
2007-10-10 12:18:48 -05:00