1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-12 20:58:37 +03:00

376 Commits

Author SHA1 Message Date
Andrew Tridgell
caeaa0acb0 This commit finally gives us multiple wins server groups. We now
accept an extended syntax for 'wins server' like this:

  wins server = group1:192.168.2.10 group2:192.168.3.99 group1:192.168.0.1

The tags before the IPs don't mean anything, they are just a way of
grouping IPs together. If you use the old syntax (ie. no ':') then
an implicit group name of '*' is used. In general I'd recommend people
use interface names for the group names, but it doesn't matter much.

When we register in nmbd we try to register all our IPs with each group
of WINS servers. We keep trying until all of them are registered with
every group, falling back to the failover WINS servers for each group
as we go.

When we do a WINS lookup we try each of the WINS servers for each group.
If a WINS server for a group gives a negative answer then we give up
on that group and move to the next group. If it times out then
we move to the next failover wins server in the group.

In either case, if a WINS server doesn't respond then we mark it dead
for 10 minutes, to prevent lengthy waits for dead servers.
(This used to be commit e125f06058b6b51382cf046b1dbb30728b8aeda5)
2002-06-26 12:17:11 +00:00
Andrew Bartlett
0746576113 Update cli_full_connection() to take a 'flags' paramater, and try to get a
few more places to use it.

Andrew Bartlett
(This used to be commit 23689b0746d5ab030d8693abf71dd2e80ec1d7c7)
2002-06-25 08:57:24 +00:00
Andrew Bartlett
dd1bd8d0c8 Add a couple more DEBUG()s to winbindd.
Andrew Bartlett
(This used to be commit 3b2464ffdad5e64a05e227b50116cb59f6d34204)
2002-06-25 01:40:44 +00:00
Jeremy Allison
086d8a98e3 Fix from Andrew Esh for not checking return code.
Jeremy.
(This used to be commit 629cea2ff4f640cd60d9ecfa72acf2707b3f1ff4)
2002-06-20 19:08:05 +00:00
Simo Sorce
a60e37096d more debug classess activated
(This used to be commit 897e64d2e0c1d04ab93441ccaffe369bf43be46e)
2002-06-18 09:20:13 +00:00
Andrew Bartlett
bad738e653 Latest patch from metze <metze@metzemix.de> to move most of samba across
to using SIDs instead of RIDs.

The new funciton sid_peek_check_rid() takes an 'expected domain sid' argument.

The idea here is to prevent mistakes where the SID is implict, but isn't
the same one that we have in the struct.

Andrew Bartlett
(This used to be commit 04f9a8ff4c7982f6597c0f6748f85d66d4784901)
2002-06-13 14:06:08 +00:00
Tim Potter
9404025a02 Ignore winbindd_proto.h
(This used to be commit 8e51081333ae0b81a2aa2c609aa7a3ff8bf7f4ec)
2002-06-12 05:27:13 +00:00
Andrew Bartlett
959ff024da Remove "sids.h" as it really wasn't being used anywhere, and was exporting
the (now static) global_sam_sid.

The only place it was being used was to return global_sid_NULL to some
uid->sid functions - and I'm not convinced this is correct in any case.

Andrew Bartlett
(This used to be commit e2a76a7fc94dd59c09bba3cda91446fad9f8c0e0)
2002-06-10 12:27:05 +00:00
Andrew Bartlett
97a8dd6d9a With this file being automaticly regenerated, and cleaned up with 'make clean'
I think it should be removed from CVS.  This matches the other proto files.

Andrew Bartlett
(This used to be commit 5a8d573f1784b037fd848d85a96dabfebfad63fd)
2002-06-10 09:40:58 +00:00
Jeremy Allison
29744f4f4c Merge pidfile fix.
Jeremy.
(This used to be commit 2c1e78702423ba17993975eb7f158058cc7f229f)
2002-06-07 17:49:12 +00:00
Tim Potter
97b94ce7e0 Store cache entry keys that have RID values in decimal to be
consistent with other keys.
(This used to be commit 1e5bdf974fb1e64b5f5b82e0e24eb97aeb229584)
2002-06-05 04:23:37 +00:00
Jeremy Allison
08f0cbb33f Fix for Linux kernel bug where signal mask set within a signal handler
is being ignored on sighandler exit. This means we have to have a small
array of fd's, not a single one.
Jeremy.
(This used to be commit b06862e2de8d3bafbc10a9807501ef5bf148a61c)
2002-06-05 00:05:05 +00:00
Tim Potter
984806f959 Store the key for a name to sid cache entry in upper case rather than
whatever case the request was made in.  This gets rid of duplicate
cache entries.

Also when doing a sid to name, prime the cache with the name to sid
mapping result.  We can't do the reverse as we don't know the correct
case of the name to store in the cache.
(This used to be commit f268b0d5fb811b364578b11a66ca69973717eea8)
2002-06-04 03:44:04 +00:00
Tim Potter
57bfec68d5 Fixed some formatting.
(This used to be commit 25554b46ded273e8f4070f14661b691ccc9ddd17)
2002-06-04 01:45:59 +00:00
Andrew Tridgell
9401cdbb51 fixed some debug messages
(This used to be commit 8b5ac00ac60135f83145c65425d7b33a751a15b4)
2002-06-03 03:04:35 +00:00
Tim Potter
3940a2fec8 The last element of the definitions of enums can't have a trailing
comma.  Only initialisers can have this in ANSI C.
(This used to be commit b6119f583552425c2be30662e9325270a5dbf096)
2002-06-02 23:23:16 +00:00
Gerald Carter
5bbabf0ad2 merge from 2.2
(This used to be commit 612584f7d5383db28960e1ae9aaeaa9b8b47486c)
2002-05-29 02:08:46 +00:00
Andrew Bartlett
e066e5e614 Updates to better report some NTSTATUS errors into PAM, and update to PAM
to correctly allow password changes on expired passwords.  (No security
implications, as its just a 'will I let you talk to the server' check).

pam_winbind checks the password prior to changing it, so that users don't
have to make up and type their new password when they havn't even got the
old one right.  This also helps with stacking etc.

Andrew Bartlett
(This used to be commit 2b78d493002a3ba13533429c6a14f5c0a92f43d1)
2002-05-28 14:35:11 +00:00
Tim Potter
f5adb79093 Fixed incorrect comment.
(This used to be commit 2f74fb6e9893d306598ebedd54658f2dd56e988e)
2002-05-24 05:50:31 +00:00
Andrew Bartlett
9c3d5d6fd0 Remove the password length paramater from cli_full_connection - it really
didn't make any sense, and its was always just strlen(password) anyway.

This fixes it to be strlen(password)+1

Andrew Bartlett
(This used to be commit c205b18bd6b9b69200ff3db55f2c641631d4ab40)
2002-05-24 05:14:16 +00:00
Simo Sorce
e00dbecb88 debug classized
(This used to be commit ae5d24873ad0fb3df970cc9912e18e6a5067ae2d)
2002-05-21 07:53:28 +00:00
Richard Sharpe
4f8b957f40 A small change to print out the error message only if we could not check the
secrets ...
(This used to be commit 56eea2623a8a8f2a5a0311cda6d0282d0037a3cc)
2002-05-19 07:08:32 +00:00
Andrew Bartlett
3346a76674 As per rsharpe's request, require only a Masters in Astrophysics to
correctly configure winbind.

(Next job:  Fill in the 'error_msg' field with somthing useful)
(This used to be commit 49ee2a25c131641887cbc438a6336652f042cfb0)
2002-05-18 06:42:50 +00:00
Andrew Bartlett
3fe27b7f9d A few more trusted domains updates from mimir.
I think we may still need to look at our server enumeration code, but
other than that, its much better in the tree than out.

Andrew Bartlett
(This used to be commit d57a1b4629d12a0374cc6d74dfc6f5d4793fcef8)
2002-05-17 13:49:01 +00:00
Richard Sharpe
6ee4366093 Changes to allow head to translate NMB flags ...
(This used to be commit c986a19cde0dfa96b512eb24d873203981e68c48)
2002-05-17 03:37:37 +00:00
Tim Potter
0c9e6bb88f Don't store domain with username in secrets.tdb
(This used to be commit 5c58b4290dbc364f3b2d6593fd0425fd50160993)
2002-05-13 23:28:11 +00:00
Tim Potter
b35c18072a Merge of --set-auth-user updates from 2.2
(This used to be commit 0420ae846cc93d4598b16dd21a4b8f61ae270fa2)
2002-05-13 00:44:46 +00:00
Tim Potter
52a832b3fa Merge of secrets_init() paranoia fix from 2.2
(This used to be commit 1c3c0d7cb64caa6be7ee6d786fe400a1d6944a72)
2002-05-13 00:23:06 +00:00
Tim Potter
fc26f277ca Fix for Solaris nscd issue pointed out by Mike Gerdts
<Michael.Gerdts@alcatel.com>.  The struct passwd in Solaris contains some
extra fields which must be initialised otherwise nscd crashes.
(This used to be commit a67323d07177ebc8e46dc14476efaf7e95944504)
2002-05-10 03:02:22 +00:00
Gerald Carter
f1554f0847 merge freom SAMBA_2_2
(This used to be commit 833fea47106444a4bcc0547c8bbb7d6d148fa1e7)
2002-05-09 14:20:05 +00:00
Gerald Carter
12ad4d8580 HP-UX 10.20 compiles fixes from SAMBA_2_2
(This used to be commit ddc0f556305fc12fc27ce89e01e00f98feb7d6c8)
2002-05-09 04:11:18 +00:00
Jeremy Allison
6337369a90 Merge in Jerry's called name fix.
Jeremy.
(This used to be commit 6d957924579d64407bdd94d7e78088fb1ea5c9ce)
2002-05-08 23:15:42 +00:00
Jeremy Allison
dec3433303 Merge Herb's idmap endian fix.
Jeremy.
(This used to be commit 7ddad4061a1b7ed25e4d6471c7a1f8f97a98ed37)
2002-04-27 18:56:47 +00:00
Jeremy Allison
1d79e6b90e Another attempt at fixing the endian problem when upgrading from 2.2.3a.
Herb please check.
Jeremy.
(This used to be commit a312b5b2de117797ddfdc79316378aac93034718)
2002-04-27 01:18:31 +00:00
Jeremy Allison
9199721eba Attempt to fix big-endian upgrade problem (Herb, Jerry, please check).
Jeremy.
(This used to be commit 54261460b35cc531e033a99596d5596e94bebe24)
2002-04-26 23:11:26 +00:00
Jeremy Allison
52c7c149c5 Fix from Herb for upgrading from big-endian earlier databases.
Jeremy.
(This used to be commit e65563fc9eb454988c11c12e3e979dd07e3032a3)
2002-04-25 00:56:43 +00:00
Andrew Tridgell
a87a63a958 damn! I forgot to commit winbindd_dual.c
(This used to be commit f3764ab2c602d6af9dce15f0d525a9f11c1723f1)
2002-04-24 09:59:48 +00:00
Andrew Tridgell
6e1c478082 main() needs to be indented to make sure it doesn't generate a
prototype
(This used to be commit fdfde9b84cf825d84316344fea5af43a9b8ebcc9)
2002-04-24 09:51:14 +00:00
Andrew Tridgell
a67b5ac62f a new "dual daemon" operating mode for winbindd
this mode improves the response time of winbindd by having a
background process update the cache while the forground process
responds to queries from cache.

You can enable this mode using the -B command line option. It is quite
experimental, which is why it is not the default.
(This used to be commit c0feff97eefdf5a70e5973e247b395dbdf5d2ef2)
2002-04-24 04:11:27 +00:00
Andrew Tridgell
fc78c773f8 fixed trust relationships in ADS winbindd after breaking them with my BDC changes ...
(This used to be commit 8096032663690eafb6bb8b4f405d6231389d4f80)
2002-04-19 03:00:29 +00:00
Andrew Tridgell
c0a9919430 fixed the fallback to a BDC for ADS connections
(This used to be commit 3e58a1ee83ea0b4347ce24e566445cc6cb67bb3a)
2002-04-18 06:56:44 +00:00
Tim Potter
d0386372b2 The cli_lsa_lookup_{names,sids} functions were returning useless
information when one or more of the names/sids being queried were not
resolvable.  We now return a list the same length as the parameters passed
instead of an array of just the resolvable names/sids.
(This used to be commit 245468dbabb7c849ce423cc3cb586fa913d0adfe)
2002-04-14 11:21:25 +00:00
Andrew Tridgell
a83a0ac9c5 pull_username() is a local function
(This used to be commit fbf154bcfb68b90eb43ada9de317c93f43711608)
2002-04-14 05:51:13 +00:00
Andrew Tridgell
58c7f38368 hanle the case where the win2000 username is completely different from
the pre-win2000 username
(This used to be commit aa139ba507e4b898377fdfc9b27f7febf029d5a4)
2002-04-14 05:46:23 +00:00
Andrew Tridgell
35bc06d35c modified the ADS backend to accept either the long or short versions
of long usernames (win2000 usernames can be longer than 20 characters)
(This used to be commit 0719e756f60950b9ec04450fda5cc3776752e9a9)
2002-04-14 05:14:50 +00:00
Jeremy Allison
5c2dfd959c Tidy up winbindd debug. Added Bill Moran's hide unreadable fix.
Jeremy.
(This used to be commit a9895fcb30cdcb572cd254b0d370d79f95c7214d)
2002-04-13 02:24:07 +00:00
Andrew Tridgell
560a51f46b possibly fix the 15000 user problem
I think its caused by a rpc operation failing and us giving invalid
data back to the cache layer. Using talloc_zero() should solve this.
(This used to be commit dfa990170bb9a665ba48443258e2a87f50baa75c)
2002-04-11 14:30:31 +00:00
Tim Potter
9195f34e4a Moved definition of winbind username/password secrets into secrets.h
(This used to be commit b618b5943d53f33e6f03d8d47cf87efc5e1ad3e5)
2002-04-10 00:35:00 +00:00
Tim Potter
b10b3be01c Spelling.
(This used to be commit 423985ed569ac9692f3cb5872a15c74f983121b6)
2002-04-07 23:41:55 +00:00
Tim Potter
f98b2faf99 Spelling.
(This used to be commit b43256df5367fd16a0f6dcdf94fdbe8932cb77c9)
2002-04-04 06:47:20 +00:00