Stefan Metzmacher 8fa656cdee winbindd: don't set mapped_state in winbindd_dual_auth_passdb() ...

mapped_state is a special hack for authenticate_ldap_simple_bind_send()
in order to avoid some additional work in authsam_check_password_internals()

This doesn't apply here. We should also handle wbinfo -a
authentication UPN names, e.g. administrator@DOMAIN,
even if the account belongs to the local sam.

With this change the behavior is consistent also locally on DCs and
also an RODC can handle these requests locally for cached accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13879
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15003

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit 8dfdbe095a4c8a7bedd29341656a7c3164517713)

2022-03-16 14:27:12 +00:00

..

idmap_hash

s3:idmap_hash: reliable return ID_TYPE_BOTH

2021-01-27 17:06:50 +00:00

idmap_ad_nss.c

winbindd/idmap: apply const to struct nss_info_methods pointers

2020-10-23 03:25:35 +00:00

idmap_ad.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_autorid_tdb.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

idmap_autorid.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_ldap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

idmap_nss.c

CVE-2020-25727: idmap_nss: verify that the name of the sid belongs to the configured domain

2021-11-18 06:40:13 +00:00

idmap_passdb.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_proto.h

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_rfc2307.c

idmap_rfc2307: Do not return SID from unixids_to_sids on type mismatch

2021-03-31 10:13:54 +00:00

idmap_rid.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_rw.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_rw.h

…

idmap_script.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_tdb2.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_tdb_common.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_tdb_common.h

…

idmap_tdb.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_util.c

idmap_rfc2307: Don't stop after 30 entries

2017-05-08 21:08:23 +02:00

idmap.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

nss_info_template.c

lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)

2017-04-22 01:17:00 +02:00

nss_info.c

winbindd/idmap: apply const to struct nss_info_methods pointers

2020-10-23 03:25:35 +00:00

wb_dsgetdcname.c

winbind: Fix an error path memleak

2019-02-27 01:35:18 +01:00

wb_getgrsid.c

winbindd: remove 'winbind trusted domains only' handling

2018-01-10 01:01:23 +01:00

wb_getpwsid.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

wb_gettoken.c

Re-enable token groups fallback

2017-03-06 19:18:31 +01:00

wb_group_members.c

winbind: Remove the use of "talloc_dict"

2017-09-30 08:01:24 +02:00

wb_lookupname.c

winbind: Pass upn unmodified to lookup names

2018-05-11 09:07:36 +02:00

wb_lookupsid.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

wb_lookupsids.c

winbind: Use dom_sid_str_buf

2018-11-27 07:13:14 +01:00

wb_lookupuseraliases.c

…

wb_lookupusergroups.c

winbindd: Use dom_sid_str_buf

2018-11-02 21:21:15 +01:00

wb_next_grent.c

winbind: Remove the use of "talloc_dict"

2017-09-30 08:01:24 +02:00

wb_next_pwent.c

winbind: Go throught wb_getpwsid for listing users

2017-01-02 18:04:14 +01:00

wb_query_group_list.c

…

wb_query_user_list.c

winbind: Fix "wbint_Principals" definition

2018-11-27 07:13:14 +01:00

wb_queryuser.c

winbindd: call wb_parent_idmap_setup_send() in wb_queryuser_send()

2021-09-07 09:40:17 +00:00

wb_seqnum.c

…

wb_seqnums.c

winbindd: Use talloc_zero_array for consistency with other winbindd_domain allocators

2018-03-24 07:21:37 +01:00

wb_sids2xids.c

wb_sids2xids: defer/skip wb_lookupsids* unless we get ID_TYPE_WB_REQUIRE_TYPE

2020-10-23 04:47:26 +00:00

wb_xids2sids.c

wb_xids2sids: make use of the new wb_parent_idmap_setup_send/recv() helpers

2020-10-23 03:25:36 +00:00

winbindd_ads.c

winbind: Fix a memleak

2020-09-14 13:33:13 +00:00

winbindd_ads.h

winbindd: Give winbindd_ads.c its own header

2017-05-17 01:47:17 +02:00

winbindd_allocate_gid.c

winbind: add idmap_child_handle() and use it instead of child->binding_handle

2018-02-23 04:09:18 +01:00

winbindd_allocate_uid.c

winbind: ensure wb_parent_idmap_setup_send() gets called in winbindd_allocate_uid_send()

2021-09-07 09:40:17 +00:00

winbindd_async.c

…

winbindd_cache.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_ccache_access.c

Fix spelling mistakes

2018-11-30 03:35:13 +01:00

winbindd_change_machine_acct.c

…

winbindd_check_machine_acct.c

…

winbindd_cm.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_cred_cache.c

s3:winbind: Use the canonical principal name to renew the credentials

2022-02-25 10:31:13 +00:00

winbindd_creds.c

Fix gcc11 compiler issue "-Werror=stringop-overflow="

2021-05-12 08:16:09 +00:00

winbindd_domain_info.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_domain.c

…

winbindd_dsgetdcname.c

winbind: Align integer types

2020-11-30 22:24:37 +00:00

winbindd_dual_ndr.c

librpc/dcesrv_core: move two rpcint_dispatch() copies into dcesrv_call_dispatch_local()

2020-10-23 16:02:37 +00:00

winbindd_dual_srv.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-08 10:46:43 +01:00

winbindd_dual.c

winbind: handle MSG_SMB_CONF_UPDATED in the winbinds children

2021-01-27 16:00:06 +00:00

winbindd_endgrent.c

…

winbindd_endpwent.c

…

winbindd_getdcname.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_getgrent.c

s3:winbind: Log client process name

2018-11-12 09:50:25 +01:00

winbindd_getgrgid.c

winbindd: handling missing idmap in getgrgid()

2020-02-05 17:56:58 +00:00

winbindd_getgrnam.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_getgroups.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

winbindd_getpwent.c

s3:winbind: Log client process name

2018-11-12 09:50:25 +01:00

winbindd_getpwnam.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_getpwsid.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_getpwuid.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_getsidaliases.c

winbindd: Use dom_sid_str_buf

2018-12-07 23:29:01 +01:00

winbindd_getuserdomgroups.c

winbindd: Use dom_sid_str_buf

2018-12-07 23:29:01 +01:00

winbindd_getusersids.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_gpupdate.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_group.c

s3-winbindd: use fill_domain_username_talloc() in winbind.

2018-05-17 17:30:08 +02:00

winbindd_idmap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_irpc.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-08 10:46:43 +01:00

winbindd_list_groups.c

winbind: honor WBFLAG_FROM_NSS along with winbind enum users/groups

2018-12-22 03:11:14 +01:00

winbindd_list_users.c

winbind: honor WBFLAG_FROM_NSS along with winbind enum users/groups

2018-12-22 03:11:14 +01:00

winbindd_locator.c

winbind: add locator_child_handle() and use it instead of child->binding_handle

2018-02-23 04:09:18 +01:00

winbindd_lookupname.c

winbind: Use dom_sid_str_buf

2018-12-20 23:40:24 +01:00

winbindd_lookuprids.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_lookupsid.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_lookupsids.c

CVE-2020-14323 winbind: Fix invalid lookupsids DoS

2020-10-29 10:25:37 +00:00

winbindd_misc.c

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-08 10:46:43 +01:00

winbindd_msrpc.c

winbind: Return queried domain name from name_to_sid

2019-04-18 17:21:18 +00:00

winbindd_ndr.c

winbind: Remove the "winbindd_children" global

2018-03-01 09:53:46 +01:00

winbindd_pam_auth_crap.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-08 10:46:43 +01:00

winbindd_pam_auth.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_chauthtok.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_chng_pswd_auth_crap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_logoff.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam.c

winbindd: don't set mapped_state in winbindd_dual_auth_passdb()

2022-03-16 14:27:12 +00:00

winbindd_ping_dc.c

winbindd: Fix winbindd_ping_dc_recv

2018-06-16 01:06:36 +02:00

winbindd_proto.h

s3:winbind: Store canonical principal and realm in ccache entry

2022-02-25 10:31:13 +00:00

winbindd_reconnect_ads.c

winbind: Return queried domain name from name_to_sid

2019-04-18 17:21:18 +00:00

winbindd_reconnect.c

winbind: Return queried domain name from name_to_sid

2019-04-18 17:21:18 +00:00

winbindd_rpc.c

s3:winbind: Don't abort when receiving a NULL SID

2019-10-16 16:39:42 +00:00

winbindd_rpc.h

winbind: Return queried domain name from name_to_sid

2019-04-18 17:21:18 +00:00

winbindd_samr.c

winbind: directly use dcerpc_binding_handle_is_connected() in reset_connection_on_error() SAMR code

2020-08-08 10:59:38 +00:00

winbindd_setgrent.c

winbind: call lp_winbind_enum_{users,groups}() already in set{pw,gr}ent()

2018-02-23 04:09:18 +01:00

winbindd_setpwent.c

winbind: call lp_winbind_enum_{users,groups}() already in set{pw,gr}ent()

2018-02-23 04:09:18 +01:00

winbindd_show_sequence.c

…

winbindd_sids_to_xids.c

…

winbindd_util.c

s3:winbindd: fix "allow trusted domains = no" regression

2021-11-10 23:45:06 +00:00

winbindd_wins_byip.c

s3: libsmb: Convert node_status_query() and associated functions and callers to expect a size_t * return.

2020-09-15 10:09:36 +00:00

winbindd_wins_byname.c

s3: libsmb: Convert the WINS and broadcast name functions to return size_t * num addresses.

2020-09-15 10:09:36 +00:00

winbindd_xids_to_sids.c

winbind: Enhance xids2sids debugging

2019-02-08 08:51:19 +01:00

winbindd.c

s3:winbind: For 'security = ADS' require realm/workgroup to be set

2021-05-03 07:17:09 +00:00

winbindd.h

s3:winbind: Store canonical principal and realm in ccache entry

2022-02-25 10:31:13 +00:00

wscript_build

s3:rpc_server: Do not generate and build s3 RPC server code

2020-03-20 15:36:36 +00:00