sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00
Code
samba-mirror/source3/winbindd
History
Matthieu Patou 56d5cb9386 s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind 
This could cause that we authenticate a user with a bogus domain to
winbind's domain if the password supplied for the PAM_AUTH match.

The problem was reported by Jeff Venable (jvenable@juniper.net).
Patch from Andrew Bartlett (abartlett@samba.org).

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Mon Jan 30 18:58:12 CET 2012 on sn-devel-104
2012-01-30 18:58:12 +01:00
..
idmap_adex
Revert making public of the samba-module library.
2011-12-03 08:36:30 +01:00
idmap_hash
Revert making public of the samba-module library.
2011-12-03 08:36:30 +01:00
idmap_ad.c
Revert making public of the samba-module library.
2011-12-03 08:36:30 +01:00
idmap_autorid.c
s3: Add a "lock_order" argument to db_open
2012-01-18 14:48:04 +01:00
idmap_ldap.c
s3-smbldap: extend smbldap_init() with binddn/bindsecret arguments.
2011-11-16 12:26:26 +01:00
idmap_nss.c
s3-includes: only include system/passwd.h when needed.
2011-03-30 01:13:07 +02:00
idmap_passdb.c
pdb-interface: Do not use unid_t here
2011-10-18 20:57:16 +02:00
idmap_proto.h
s3:winbindd/idmap_proto.h: add _WINBINDD_IDMAP_PROTO_H_ guard
2011-05-31 01:44:27 +02:00
idmap_rid.c
Revert making public of the samba-module library.
2011-12-03 08:36:30 +01:00
idmap_rw.c
s3:idmap: add abstract idmap_rw new_mapping mechanism without registering backends
2010-08-14 02:10:56 +02:00
idmap_rw.h
s3:idmap: add abstract idmap_rw new_mapping mechanism without registering backends
2010-08-14 02:10:56 +02:00
idmap_tdb2.c
s3: Add a "lock_order" argument to db_open
2012-01-18 14:48:04 +01:00
idmap_tdb.c
s3: Add a "lock_order" argument to db_open
2012-01-18 14:48:04 +01:00
idmap_util.c
s3-winbind: Make sure the map is clean.
2011-11-15 14:22:00 +01:00
idmap.c
s3-talloc Change TALLOC_ARRAY() to talloc_array()
2011-06-09 12:40:08 +02:00
nss_info_template.c
s3: Remove unused args from get_nss_info
2011-03-06 12:51:01 +01:00
nss_info.c
s3-talloc Change TALLOC_ZERO_P() to talloc_zero()
2011-06-09 12:40:08 +02:00
wb_dsgetdcname.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
wb_fill_pwent.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_getgrsid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_getpwsid.c
s3: Use tevent_req_simple_recv_ntstatus
2011-11-28 17:14:27 +01:00
wb_gettoken.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_gid2sid.c
s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
2011-01-11 15:40:21 +01:00
wb_group_members.c
s3: Fix getent group if trusted domains are not reachable
2011-08-29 19:29:37 +02:00
wb_lookupname.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_lookupsid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_lookupsids.c
Replace calls to sid_equal with calls to dom_sid_equal
2011-08-17 12:30:08 +02:00
wb_lookupuseraliases.c
More simple const fixups.
2011-05-05 23:56:08 +02:00
wb_lookupusergroups.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
wb_next_grent.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_next_pwent.c
s3: Remove some redundant code
2012-01-05 17:16:45 +01:00
wb_ping.c
s3:winbind: The get[gr|pw]end functions need access to the client state
2009-08-16 13:28:14 +02:00
wb_query_user_list.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
wb_queryuser.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
wb_seqnum.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
wb_seqnums.c
s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
2011-01-11 15:40:21 +01:00
wb_sid2gid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_sid2uid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
wb_uid2sid.c
s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
2011-01-11 15:40:21 +01:00
winbindd_ads.c
s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array()
2011-06-09 12:40:08 +02:00
winbindd_allocate_gid.c
s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
2011-01-11 15:40:21 +01:00
winbindd_allocate_uid.c
s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
2011-01-11 15:40:21 +01:00
winbindd_async.c
s3: Move parse_sidlist to the only calling file
2010-11-17 12:17:21 +01:00
winbindd_cache.c
s3: Fix some False/NULL hickups
2011-12-20 13:13:17 +01:00
winbindd_ccache_access.c
s3-winbindd: convert cached credentials to use auth_generic/gensec for NTLMSSP
2012-01-06 13:05:44 +01:00
winbindd_change_machine_acct.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
winbindd_check_machine_acct.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
winbindd_cm.c
s3-librpc: pass struct ndr_interface_table down to cli_pipe_open_generic/spnego()
2012-01-18 16:23:24 +01:00
winbindd_cred_cache.c
s3-talloc Change TALLOC_ZERO_P() to talloc_zero()
2011-06-09 12:40:08 +02:00
winbindd_creds.c
s3-winbindd: make sure we obey the -n switch also for samlogon cache access.
2011-06-08 14:44:31 +02:00
winbindd_domain.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
winbindd_dsgetdcname.c
s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
2011-01-11 15:40:21 +01:00
winbindd_dual_ndr.c
s3:winbindd: let wbint handles return NT_STATUS_CONNECTION_DISCONNECTED
2011-09-14 18:03:18 +02:00
winbindd_dual_srv.c
Fix bug #8203 - winbindd needs to reset the DC connection if an RPC times out.
2011-09-08 21:29:53 +02:00
winbindd_dual.c
s3: Remove a bunch of calls to procid_self()
2011-12-12 21:50:25 +01:00
winbindd_endgrent.c
s3:winbind: Convert the getgrent functions to the new API
2009-08-29 19:42:27 +02:00
winbindd_endpwent.c
s3:winbind: Convert the GETPWENT routines to the new API
2009-08-29 19:42:26 +02:00
winbindd_getdcname.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getgrent.c
s3: Fix a getgrent crash with many groups
2010-11-03 12:58:49 +00:00
winbindd_getgrgid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getgrnam.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getgroups.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwent.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwnam.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwsid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwuid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getsidaliases.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getuserdomgroups.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getusersids.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_gid_to_sid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_group.c
s3:winbindd fix a return code check
2011-08-24 18:09:11 +02:00
winbindd_idmap.c
s3: Remove some unused dual functions
2009-12-21 16:27:19 +01:00
winbindd_list_groups.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
winbindd_list_users.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
winbindd_locator.c
s3:winbind: Fix bug 5626
2009-08-30 11:13:18 +02:00
winbindd_lookupname.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_lookuprids.c
s3: explicitly pass domain_sid to wbint_LookupRids() (bug #7841)
2011-06-27 18:21:30 +02:00
winbindd_lookupsid.c
s3: state->ev is not needed in winbindd_lookupsid
2011-03-07 20:52:53 +01:00
winbindd_lookupsids.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_misc.c
s3: Next step to fix MIT trusts
2011-08-17 13:59:05 +02:00
winbindd_msrpc.c
s3-smbldap: move ldap_open_with_timeout out of smb_ldap.h to ads where it lives.
2011-11-17 03:47:53 +01:00
winbindd_ndr.c
s3:winbindd_nrd: include ../librpc/ndr/libndr.h instead of librpc/ndr/util.h
2011-05-31 12:54:22 +02:00
winbindd_pam_auth_crap.c
s3-param Remove special case for global_myname(), rename to lp_netbios_name()
2011-06-09 12:40:09 +02:00
winbindd_pam_auth.c
Fix bug #7589 - ntlm_auth fails to use cached credentials.
2010-07-29 12:44:00 -07:00
winbindd_pam_chauthtok.c
s3: Move the in-memory ccache to the parent
2010-04-19 14:27:24 +02:00
winbindd_pam_chng_pswd_auth_crap.c
s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async API
2010-04-23 23:41:04 +02:00
winbindd_pam_logoff.c
s3: Move the in-memory ccache to the parent
2010-04-19 14:27:24 +02:00
winbindd_pam.c
s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind
2012-01-30 18:58:12 +01:00
winbindd_ping_dc.c
s3:winbind: Fork multiple children per domain
2011-01-21 13:51:27 +01:00
winbindd_proto.h
s3: Make winbindd_lookup_names static
2011-09-06 20:03:56 +02:00
winbindd_reconnect.c
s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it.
2011-03-30 01:13:08 +02:00
winbindd_rpc.c
s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array()
2011-06-09 12:40:08 +02:00
winbindd_rpc.h
s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it.
2011-03-30 01:13:08 +02:00
winbindd_samr.c
s3: Fix two int/enum mixups
2011-08-26 16:36:17 +02:00
winbindd_setgrent.c
s3:winbind: Convert the getgrent functions to the new API
2009-08-29 19:42:27 +02:00
winbindd_setpwent.c
s3:winbind: Convert the GETPWENT routines to the new API
2009-08-29 19:42:26 +02:00
winbindd_show_sequence.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_sid_to_gid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_sid_to_uid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_sids_to_xids.c
s3-winbindd: add support for idmap type WBC_ID_TYPE_BOTH
2011-09-23 01:47:54 +02:00
winbindd_uid_to_sid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_util.c
s3-talloc Change TALLOC_ZERO_P() to talloc_zero()
2011-06-09 12:40:08 +02:00
winbindd_wins_byip.c
s3:winbind: Convert WINBINDD_WINS_BYIP to the async API
2011-06-05 12:10:15 +02:00
winbindd_wins_byname.c
s3: Fix winbindd_wins_byname
2011-06-25 15:40:15 +02:00
winbindd.c
s3: Remove a bunch of calls to procid_self()
2011-12-12 21:50:25 +01:00
winbindd.h
s3-winbindd: no need to globally include ldap headers in winbindd.
2011-11-17 02:11:46 +01:00
wscript_build
s3-waf: create a smbldap.so library.
2011-11-16 14:03:05 +01:00