sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code
0a000f1ca7
samba-mirror/source3/winbindd
History
Matthieu Patou 56d5cb9386 s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind 
This could cause that we authenticate a user with a bogus domain to
winbind's domain if the password supplied for the PAM_AUTH match.

The problem was reported by Jeff Venable (jvenable@juniper.net).
Patch from Andrew Bartlett (abartlett@samba.org).

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Mon Jan 30 18:58:12 CET 2012 on sn-devel-104
2012-01-30 18:58:12 +01:00
..
idmap_adex Revert making public of the samba-module library. 2011-12-03 08:36:30 +01:00
idmap_hash Revert making public of the samba-module library. 2011-12-03 08:36:30 +01:00
idmap_ad.c Revert making public of the samba-module library. 2011-12-03 08:36:30 +01:00
idmap_autorid.c s3: Add a "lock_order" argument to db_open 2012-01-18 14:48:04 +01:00
idmap_ldap.c s3-smbldap: extend smbldap_init() with binddn/bindsecret arguments. 2011-11-16 12:26:26 +01:00
idmap_nss.c s3-includes: only include system/passwd.h when needed. 2011-03-30 01:13:07 +02:00
idmap_passdb.c pdb-interface: Do not use unid_t here 2011-10-18 20:57:16 +02:00
idmap_proto.h s3:winbindd/idmap_proto.h: add _WINBINDD_IDMAP_PROTO_H_ guard 2011-05-31 01:44:27 +02:00
idmap_rid.c Revert making public of the samba-module library. 2011-12-03 08:36:30 +01:00
idmap_rw.c s3:idmap: add abstract idmap_rw new_mapping mechanism without registering backends 2010-08-14 02:10:56 +02:00
idmap_rw.h s3:idmap: add abstract idmap_rw new_mapping mechanism without registering backends 2010-08-14 02:10:56 +02:00
idmap_tdb2.c s3: Add a "lock_order" argument to db_open 2012-01-18 14:48:04 +01:00
idmap_tdb.c s3: Add a "lock_order" argument to db_open 2012-01-18 14:48:04 +01:00
idmap_util.c s3-winbind: Make sure the map is clean. 2011-11-15 14:22:00 +01:00
idmap.c s3-talloc Change TALLOC_ARRAY() to talloc_array() 2011-06-09 12:40:08 +02:00
nss_info_template.c s3: Remove unused args from get_nss_info 2011-03-06 12:51:01 +01:00
nss_info.c s3-talloc Change TALLOC_ZERO_P() to talloc_zero() 2011-06-09 12:40:08 +02:00
wb_dsgetdcname.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
wb_fill_pwent.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_getgrsid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_getpwsid.c s3: Use tevent_req_simple_recv_ntstatus 2011-11-28 17:14:27 +01:00
wb_gettoken.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_gid2sid.c s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h 2011-01-11 15:40:21 +01:00
wb_group_members.c s3: Fix getent group if trusted domains are not reachable 2011-08-29 19:29:37 +02:00
wb_lookupname.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_lookupsid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_lookupsids.c Replace calls to sid_equal with calls to dom_sid_equal 2011-08-17 12:30:08 +02:00
wb_lookupuseraliases.c More simple const fixups. 2011-05-05 23:56:08 +02:00
wb_lookupusergroups.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
wb_next_grent.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_next_pwent.c s3: Remove some redundant code 2012-01-05 17:16:45 +01:00
wb_ping.c
wb_query_user_list.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
wb_queryuser.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
wb_seqnum.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
wb_seqnums.c s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h 2011-01-11 15:40:21 +01:00
wb_sid2gid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_sid2uid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_uid2sid.c s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h 2011-01-11 15:40:21 +01:00
winbindd_ads.c s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array() 2011-06-09 12:40:08 +02:00
winbindd_allocate_gid.c s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h 2011-01-11 15:40:21 +01:00
winbindd_allocate_uid.c s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h 2011-01-11 15:40:21 +01:00
winbindd_async.c s3: Move parse_sidlist to the only calling file 2010-11-17 12:17:21 +01:00
winbindd_cache.c s3: Fix some False/NULL hickups 2011-12-20 13:13:17 +01:00
winbindd_ccache_access.c s3-winbindd: convert cached credentials to use auth_generic/gensec for NTLMSSP 2012-01-06 13:05:44 +01:00
winbindd_change_machine_acct.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
winbindd_check_machine_acct.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
winbindd_cm.c s3-librpc: pass struct ndr_interface_table down to cli_pipe_open_generic/spnego() 2012-01-18 16:23:24 +01:00
winbindd_cred_cache.c s3-talloc Change TALLOC_ZERO_P() to talloc_zero() 2011-06-09 12:40:08 +02:00
winbindd_creds.c s3-winbindd: make sure we obey the -n switch also for samlogon cache access. 2011-06-08 14:44:31 +02:00
winbindd_domain.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
winbindd_dsgetdcname.c s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h 2011-01-11 15:40:21 +01:00
winbindd_dual_ndr.c s3:winbindd: let wbint handles return NT_STATUS_CONNECTION_DISCONNECTED 2011-09-14 18:03:18 +02:00
winbindd_dual_srv.c Fix bug #8203 - winbindd needs to reset the DC connection if an RPC times out. 2011-09-08 21:29:53 +02:00
winbindd_dual.c s3: Remove a bunch of calls to procid_self() 2011-12-12 21:50:25 +01:00
winbindd_endgrent.c
winbindd_endpwent.c
winbindd_getdcname.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getgrent.c s3: Fix a getgrent crash with many groups 2010-11-03 12:58:49 +00:00
winbindd_getgrgid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getgrnam.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getgroups.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwent.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwnam.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwsid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwuid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getsidaliases.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getuserdomgroups.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getusersids.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_gid_to_sid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_group.c s3:winbindd fix a return code check 2011-08-24 18:09:11 +02:00
winbindd_idmap.c
winbindd_list_groups.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
winbindd_list_users.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
winbindd_locator.c
winbindd_lookupname.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_lookuprids.c s3: explicitly pass domain_sid to wbint_LookupRids() (bug #7841) 2011-06-27 18:21:30 +02:00
winbindd_lookupsid.c s3: state->ev is not needed in winbindd_lookupsid 2011-03-07 20:52:53 +01:00
winbindd_lookupsids.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_misc.c s3: Next step to fix MIT trusts 2011-08-17 13:59:05 +02:00
winbindd_msrpc.c s3-smbldap: move ldap_open_with_timeout out of smb_ldap.h to ads where it lives. 2011-11-17 03:47:53 +01:00
winbindd_ndr.c s3:winbindd_nrd: include ../librpc/ndr/libndr.h instead of librpc/ndr/util.h 2011-05-31 12:54:22 +02:00
winbindd_pam_auth_crap.c s3-param Remove special case for global_myname(), rename to lp_netbios_name() 2011-06-09 12:40:09 +02:00
winbindd_pam_auth.c Fix bug #7589 - ntlm_auth fails to use cached credentials. 2010-07-29 12:44:00 -07:00
winbindd_pam_chauthtok.c s3: Move the in-memory ccache to the parent 2010-04-19 14:27:24 +02:00
winbindd_pam_chng_pswd_auth_crap.c s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async API 2010-04-23 23:41:04 +02:00
winbindd_pam_logoff.c s3: Move the in-memory ccache to the parent 2010-04-19 14:27:24 +02:00
winbindd_pam.c s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind 2012-01-30 18:58:12 +01:00
winbindd_ping_dc.c s3:winbind: Fork multiple children per domain 2011-01-21 13:51:27 +01:00
winbindd_proto.h s3: Make winbindd_lookup_names static 2011-09-06 20:03:56 +02:00
winbindd_reconnect.c s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it. 2011-03-30 01:13:08 +02:00
winbindd_rpc.c s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array() 2011-06-09 12:40:08 +02:00
winbindd_rpc.h s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it. 2011-03-30 01:13:08 +02:00
winbindd_samr.c s3: Fix two int/enum mixups 2011-08-26 16:36:17 +02:00
winbindd_setgrent.c
winbindd_setpwent.c
winbindd_show_sequence.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_sid_to_gid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_sid_to_uid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_sids_to_xids.c s3-winbindd: add support for idmap type WBC_ID_TYPE_BOTH 2011-09-23 01:47:54 +02:00
winbindd_uid_to_sid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_util.c s3-talloc Change TALLOC_ZERO_P() to talloc_zero() 2011-06-09 12:40:08 +02:00
winbindd_wins_byip.c s3:winbind: Convert WINBINDD_WINS_BYIP to the async API 2011-06-05 12:10:15 +02:00
winbindd_wins_byname.c s3: Fix winbindd_wins_byname 2011-06-25 15:40:15 +02:00
winbindd.c s3: Remove a bunch of calls to procid_self() 2011-12-12 21:50:25 +01:00
winbindd.h s3-winbindd: no need to globally include ldap headers in winbindd. 2011-11-17 02:11:46 +01:00
wscript_build s3-waf: create a smbldap.so library. 2011-11-16 14:03:05 +01:00