1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-24 02:04:21 +03:00

13 Commits

Author SHA1 Message Date
Günther Deschner
ca09263d00 r14940: Remove pam_winbind's ability to create home directories on it's own.
Guenther
(This used to be commit 87293802f3e0666c9a50eb3ca63bb1a7dccc50dc)
2007-10-10 11:15:54 -05:00
Günther Deschner
69f3c630fa r14841: Fix IRIX build --with-pam.
Guenther
(This used to be commit 99158406b47dc07961c4f6536181da868cf276ca)
2007-10-10 11:15:50 -05:00
Gerald Carter
0af1500fc0 r13316: Let the carnage begin....
Sync with trunk as off r13315
(This used to be commit 17e63ac4ed8325c0d44fe62b2442449f3298559f)
2007-10-10 11:06:23 -05:00
Günther Deschner
29ba5c17cd r12900: Merge from trunk:
Correctly handle the case where users logon with an expired password.

In that case pam_sm_authenticate has to return PAM_SUCESS instead of
PAM_NEW_AUTHTOK_REQD or PAM_AUTHTOK_EXPIRED and pam_sm_acct_mgmt has to
take care of requesting an immediate password change. (see the Linux PAM
documentation).

Fixes Bugzilla #1524, #3205. Tested with login, sshd, kdm and gdm on
Linux.

Thanks to Scott Barker <Scott_Barker@mtechIT.com>.

Guenther
(This used to be commit 4cb662ffd76dbe30003c618c94ccf6ebd4afb48c)
2007-10-10 11:06:06 -05:00
Günther Deschner
33b2bc4930 r1888: Bring the same level of "required_membership"-functionality that
ntlm_auth uses, to pam_winbindd as well.

This allows to make successfull authentication via PAM dependent on
SID-membership. At the moment, both ntlm_auth and pam_winbindd.so accept
user/group-names or sid-strings - as discussed, recursive membership
(e.g. local aliases) will be added later.

Guenther
(This used to be commit 7494569655f8d112a0c883a2748a1012bb64ad3a)
2007-10-10 10:52:23 -05:00
Tim Potter
d5bd98dd9a More FreeBSD PAM compile fixes. Don't redefine PAM_AUTHTOK_RECOVER_ERR
if it already exists.  FreeBSD 4.8 doesn't need the redefinition, 5.0 does.
(This used to be commit 4a3727b03b0488fa82687014cb476b1971a78be8)
2003-09-04 03:28:40 +00:00
Tim Potter
ea7b4b6c32 Fix for bug 261. Create a configure #define for FreeBSD and a check in
nsswitch/pam_winbind.h so we can compile properly on this platform.
(This used to be commit 75411005fcab7ecf31940c5f7b87fd407166f98a)
2003-09-02 00:09:31 +00:00
Gerald Carter
a834a73e34 sync'ing up for 3.0alpha20 release
(This used to be commit 65e7b5273bb58802bf0c389b77f7fcae0a1f6139)
2002-09-25 15:19:00 +00:00
Andrew Bartlett
657a24f476 Various winbind updates:
- pam_winbind updates from vance, fixing a typo and making some the options
  work properly.

- Extra parinoia in the winbind connection loop

- Allow pam_winbind to compile on HP-UX (Don Mcall, more work to do).

- Fix up configure.in to use the same method for building the test .so
  as the Makefile uses.

Andrew Bartlett
(This used to be commit 8e705dd9215b1cb3f44d6348094679d7dc6a7fbd)
2002-03-23 08:28:19 +00:00
Andrew Bartlett
ed389ee8dc Drastic impromvents to pam_winbind.
This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error
conversions, and uses them to make the error handling in pam_winbind sane.

In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...'
stuff, and logs the NTSTATUS error that winbind now sends over the pipe.

Added code to wbinfo to display these - makes a big difference in debugging
winbindd.

The main change here is the code to allow pam_winbind password changing to
correctly stack - This code ripped from pam_unix, and the copyright attached.
(Same as for all pam modules, including pam_winbind)

Andrew Bartlett
(This used to be commit dc1a72f896b83bc1ad3c7bf6c12c36ace3967280)
2002-02-05 09:40:36 +00:00
Simo Sorce
b50d10c2a3 move to SAFE_FREE()
(This used to be commit 03dc67788f68c9e01b5a82fdf43f837cb19f4608)
2001-09-17 04:52:45 +00:00
Jeremy Allison
d222a3f28d Try to fix build by adding autoconf tests for pam headers.
Jeremy.
(This used to be commit d52bc4d219bd07e656986e7754ea6e238c626d77)
2001-05-22 21:47:11 +00:00
Tim Potter
ebb900cf3e iAdditional files for winbind merge.
(This used to be commit 38ab3b31b5dc39fb59f224b399bb9c2269f1c933)
2001-05-07 05:03:40 +00:00