1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-27 07:42:04 +03:00
Commit Graph

23 Commits

Author SHA1 Message Date
9019a84361 r5207: patches from Jay Fenlason @ RedHat (scooped from their Fedora packages) 2007-10-10 10:55:33 -05:00
52dea588fd r3911: typo.
Guenther
2007-10-10 10:53:24 -05:00
83dadcd089 r2779: Some fixes to pam_winbind.c.:
Allow 'require_membership_of' and 'require-membership-of'.

Really use a different struct for the SID->Name lookup.

Andrew Bartlett
2007-10-10 10:52:52 -05:00
4bf0b94011 r2762: Remove silly conversion to and from UTF8 on the winbind pipe. Fix the
naming of the require_membership_of parameter in pam_winbind and fix
the error code for 'you didn't specify a domain' in ntlm_auth.

Andrew Bartlett
2007-10-10 10:52:51 -05:00
a278dca1b2 r2482: Fix from Arthur van Dongen <avdongen@xs4all.nl> to fix acces -> access typos.
Jeremy.
2007-10-10 10:52:45 -05:00
74287178d2 r1971: move counter.
Guenther
2007-10-10 10:52:26 -05:00
a0b80033c9 r1942: Add missing semicolon. 2007-10-10 10:52:24 -05:00
7494569655 r1888: Bring the same level of "required_membership"-functionality that
ntlm_auth uses, to pam_winbindd as well.

This allows to make successfull authentication via PAM dependent on
SID-membership. At the moment, both ntlm_auth and pam_winbindd.so accept
user/group-names or sid-strings - as discussed, recursive membership
(e.g. local aliases) will be added later.

Guenther
2007-10-10 10:52:23 -05:00
0fb724b321 *lots of small merges form HEAD
*sync up configure.in
*don't build torture tools in make all
*make sure to remove torture tools as part of make clean
-
9fa1863d8e Try to catch up on the code I've put into HEAD that should be in 3.0:
- vorlan's hosts allow with DNS names patch
 - use x_fileno() in debug.c, not the struct directly.
 - check for server timeout on password change (was reporting success)
 - better error/status loggin in both the pam_winbind client and winbindd_pam
server code.
 - (pdb_ldap) don't set the ldap version twice - we do it on every bind anyway.
-
65e7b5273b sync'ing up for 3.0alpha20 release -
3928578b52 sync 3.0 branch with head -
03ac082dcb updated the 3.0 branch from the head branch - ready for alpha18 -
51fe3324dd More winbind for HPUX updates from Don Mccall. I think JRA has already
applied these to 2.2.

Andrew Bartlett
-
8e705dd921 Various winbind updates:
- pam_winbind updates from vance, fixing a typo and making some the options
  work properly.

- Extra parinoia in the winbind connection loop

- Allow pam_winbind to compile on HP-UX (Don Mcall, more work to do).

- Fix up configure.in to use the same method for building the test .so
  as the Makefile uses.

Andrew Bartlett
-
54e69ed20a Fix typo in copyright -
33dd07d1fc Removed bogus calles to D() debugging function. Perhaps these should
be replaced by DEBUG() calls?
-
dc1a72f896 Drastic impromvents to pam_winbind.
This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error
conversions, and uses them to make the error handling in pam_winbind sane.

In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...'
stuff, and logs the NTSTATUS error that winbind now sends over the pipe.

Added code to wbinfo to display these - makes a big difference in debugging
winbindd.

The main change here is the code to allow pam_winbind password changing to
correctly stack - This code ripped from pam_unix, and the copyright attached.
(Same as for all pam modules, including pam_winbind)

Andrew Bartlett
-
b5540bee7b Removed silly fprintf(stderr, ...) debug.
Part of Samuel Ziegler's patch to get winbind password changing working
again in HEAD.
-
caff5dc1d6 Don't log the password in pam_sm_authenticate() unless DEBUG_PASSWORD is
defined.  This is done with --enable-developer mode.
-
1e7b1c71b9 Merge from TNG branch. -
80f85b5359 in head as well ...
renamed ntdom to winbind
I think that using winbind in /etc/nsswitch.conf is better than ntdom
-
3fb862531a brought the winbindd code into head
this does not yet compile, but I'm working on that.
-