sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00
Code
samba-mirror/source3/winbindd
History
Stefan Metzmacher afd97e7209 winbindd: disable support for CROSS_ORGANIZATION domains 
We don't support selective authentication yet,
so we shouldn't silently allow domain wide authentication
for such a trust.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13299

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
2018-02-28 14:33:19 +01:00
..
idmap_hash
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
idmap_ad_nss.c
winbindd: Give winbindd_ads.c its own header
2017-05-17 01:47:17 +02:00
idmap_ad.c
winbind: make sure we don't contact trusted domains via LDAP as AD DC
2018-02-23 12:47:25 +01:00
idmap_autorid_tdb.c
idmap_autorid: Simplify idmap_autorid_loadconfig
2016-12-16 21:30:28 +01:00
idmap_autorid.c
s3:winbindd:idmap_autorid remove a stray comment
2017-05-03 03:35:34 +02:00
idmap_ldap.c
winbind: Replace winbind_event_context with server_event_context
2017-11-18 00:09:16 +01:00
idmap_nss.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
idmap_passdb.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
idmap_proto.h
winbindd: pass domain SID to wbint_UnixIDs2Sids
2017-10-10 15:51:27 +02:00
idmap_rfc2307.c
winbind: Replace winbind_event_context with server_event_context
2017-11-18 00:09:16 +01:00
idmap_rid.c
winbindd: idmap_rid: error code for failing id-to-sid mapping request
2017-10-10 19:57:37 +02:00
idmap_rw.c
…
idmap_rw.h
…
idmap_script.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
idmap_tdb2.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
idmap_tdb_common.c
idmap_tdb: Avoid a few casts
2017-03-22 07:11:10 +01:00
idmap_tdb_common.h
s3:winbindd add idmap_tdb_common file to store common code of TDB idmap backends
2012-05-01 09:32:11 +02:00
idmap_tdb.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
idmap_util.c
idmap_rfc2307: Don't stop after 30 entries
2017-05-08 21:08:23 +02:00
idmap.c
winbindd: pass domain SID to wbint_UnixIDs2Sids
2017-10-10 15:51:27 +02:00
nss_info_template.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
nss_info.c
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)
2017-04-22 01:17:00 +02:00
wb_dsgetdcname.c
winbind: add locator_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
wb_getgrsid.c
winbindd: remove 'winbind trusted domains only' handling
2018-01-10 01:01:23 +01:00
wb_getpwsid.c
winbindd: let normalize_name_map() call find_domain_from_name_noinit()
2017-11-29 16:59:15 +01:00
wb_gettoken.c
Re-enable token groups fallback
2017-03-06 19:18:31 +01:00
wb_group_members.c
winbind: Remove the use of "talloc_dict"
2017-09-30 08:01:24 +02:00
wb_lookupname.c
winbindd: remove bogus fallback to the forest root in wb_lookupname*()
2017-03-11 21:05:09 +01:00
wb_lookupsid.c
winbindd: remove bogus fallback to the forest root in wb_lookupsid*()
2017-03-11 21:05:09 +01:00
wb_lookupsids.c
winbindd: make use of talloc_zero_array() in wb_lookupsids*()
2018-02-21 14:19:17 +01:00
wb_lookupuseraliases.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_lookupusergroups.c
winbindd: find the domain based on the sid within wb_lookupusergroups_send()
2017-03-06 15:09:18 +01:00
wb_next_grent.c
winbind: Remove the use of "talloc_dict"
2017-09-30 08:01:24 +02:00
wb_next_pwent.c
winbind: Go throught wb_getpwsid for listing users
2017-01-02 18:04:14 +01:00
wb_ping.c
…
wb_query_group_list.c
s3:winbind: add wb_query_group_list module - async query group list
2015-03-16 20:26:51 +01:00
wb_query_user_list.c
winbind: Make wb_query_user_list just return names
2017-01-04 12:22:12 +01:00
wb_queryuser.c
winbindd: remove 'winbind trusted domains only' handling
2018-01-10 01:01:23 +01:00
wb_seqnum.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_seqnums.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_sids2xids.c
winbind: add idmap_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
wb_xids2sids.c
winbindd: pass domain SID to wbint_UnixIDs2Sids
2017-10-10 15:51:27 +02:00
winbindd_ads.c
winbind: make sure we don't contact trusted domains via LDAP as AD DC
2018-02-23 12:47:25 +01:00
winbindd_ads.h
winbindd: Give winbindd_ads.c its own header
2017-05-17 01:47:17 +02:00
winbindd_allocate_gid.c
winbind: add idmap_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
winbindd_allocate_uid.c
winbind: add idmap_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
winbindd_async.c
…
winbindd_cache.c
winbindd: Name<->SID cache is not sequence number based anymore
2017-11-29 20:57:25 +01:00
winbindd_ccache_access.c
CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response
2016-04-12 19:25:22 +02:00
winbindd_change_machine_acct.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_check_machine_acct.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_cm.c
winbind: don't try to do an authenticated SMB connection as AD DC
2018-02-23 17:58:23 +01:00
winbindd_cred_cache.c
winbind: Replace winbind_event_context with server_event_context
2017-11-18 00:09:16 +01:00
winbindd_creds.c
lib: Add samlogon_cache.h
2016-12-02 09:36:08 +01:00
winbindd_domain.c
…
winbindd_dsgetdcname.c
winbind: add locator_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
winbindd_dual_ndr.c
winbind: Maintain a binding handle per domain and always go via wb_domain_request_send()
2018-02-23 04:09:18 +01:00
winbindd_dual_srv.c
winbindd: allow validation level 6 in winbind_SamLogon
2018-02-10 08:35:17 +01:00
winbindd_dual.c
winbindd: Remove "DUMP_EVENT_LIST" message
2018-02-26 22:30:14 +01:00
winbindd_endgrent.c
…
winbindd_endpwent.c
…
winbindd_getdcname.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_getgrent.c
winbind: cleanup winbindd_cli_state->grent_state if winbindd_getgrent_recv() returns an error
2018-02-23 04:09:18 +01:00
winbindd_getgrgid.c
winbind: Remove the use of "talloc_dict"
2017-09-30 08:01:24 +02:00
winbindd_getgrnam.c
winbind: Remove the use of "talloc_dict"
2017-09-30 08:01:24 +02:00
winbindd_getgroups.c
winbind: Add "expand_local_aliases" to wb_gettoken
2017-01-04 12:22:12 +01:00
winbindd_getpwent.c
winbind: cleanup winbindd_cli_state->pwent_state if winbindd_getpwent_recv() returns an error
2018-02-23 04:09:18 +01:00
winbindd_getpwnam.c
winbindd: remove 'winbind trusted domains only' handling
2018-01-10 01:01:23 +01:00
winbindd_getpwsid.c
…
winbindd_getpwuid.c
winbind: Use xids2sids in getpwuid
2016-02-22 20:29:15 +01:00
winbindd_getsidaliases.c
…
winbindd_getuserdomgroups.c
winbind: Use wb_gettoken in getuserdomgroups
2017-01-04 12:22:12 +01:00
winbindd_getusersids.c
winbind: Add "expand_local_aliases" to wb_gettoken
2017-01-04 12:22:12 +01:00
winbindd_gpupdate.c
gpo: Add the winbind call to gpupdate
2018-01-13 22:38:05 +01:00
winbindd_group.c
winbindd: let normalize_name_map() call find_domain_from_name_noinit()
2017-11-29 16:59:15 +01:00
winbindd_idmap.c
winbind: add idmap_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
winbindd_irpc.c
winbindd: implement wb_irpc_lsa_{LookupNames4,LookupSids3}()
2018-02-21 14:19:19 +01:00
winbindd_list_groups.c
winbindd: Initialize the domain groups member
2018-02-13 00:25:27 +01:00
winbindd_list_users.c
s3:winbind: work around coverity false positive.
2017-02-23 23:54:48 +01:00
winbindd_locator.c
winbind: add locator_child_handle() and use it instead of child->binding_handle
2018-02-23 04:09:18 +01:00
winbindd_lookupname.c
…
winbindd_lookuprids.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_lookupsid.c
…
winbindd_lookupsids.c
…
winbindd_misc.c
winbindd: add more trust types to get_trust_type_string
2018-01-13 12:55:08 +01:00
winbindd_msrpc.c
winbindd: don't force using LSA_LOOKUP_NAMES_ALL for non workstation trusts.
2018-02-10 08:35:16 +01:00
winbindd_ndr.c
winbindd: Remove now unused cache_methods
2016-10-11 23:59:17 +02:00
winbindd_pam_auth_crap.c
winbindd: WBFLAG_PAM_AUTH_PAC should call add_trusted_domain_from_auth() is the result is trusted
2018-02-10 13:08:50 +01:00
winbindd_pam_auth.c
winbindd: use add_trusted_domain_from_auth
2018-01-13 12:55:08 +01:00
winbindd_pam_chauthtok.c
winbind: Replace winbind_event_context with server_event_context
2017-11-18 00:09:16 +01:00
winbindd_pam_chng_pswd_auth_crap.c
winbind: Replace winbind_event_context with server_event_context
2017-11-18 00:09:16 +01:00
winbindd_pam_logoff.c
winbind: Replace winbind_event_context with server_event_context
2017-11-18 00:09:16 +01:00
winbindd_pam.c
winbindd: rename winbindd_pam_auth_pac_send and let it return validation
2018-02-10 08:35:18 +01:00
winbindd_ping_dc.c
winbindd: use find_trust_from_name_noinit when we require a direct trust
2018-01-13 12:55:07 +01:00
winbindd_proto.h
winbind: make choose_domain_child() static
2018-02-23 04:09:18 +01:00
winbindd_reconnect_ads.c
Revert "winbind: Remove "lookup_usergroups" winbind method"
2017-03-06 15:09:17 +01:00
winbindd_reconnect.c
Revert "winbind: Remove "lookup_usergroups" winbind method"
2017-03-06 15:09:17 +01:00
winbindd_rpc.c
winbindd: let normalize_name_map() call find_domain_from_name_noinit()
2017-11-29 16:59:15 +01:00
winbindd_rpc.h
Revert "winbind: Remove rpc_lookup_usergroups"
2017-03-06 15:09:17 +01:00
winbindd_samr.c
Revert "winbind: Remove "lookup_usergroups" winbind method"
2017-03-06 15:09:17 +01:00
winbindd_setgrent.c
winbind: call lp_winbind_enum_{users,groups}() already in set{pw,gr}ent()
2018-02-23 04:09:18 +01:00
winbindd_setpwent.c
winbind: call lp_winbind_enum_{users,groups}() already in set{pw,gr}ent()
2018-02-23 04:09:18 +01:00
winbindd_show_sequence.c
…
winbindd_sids_to_xids.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
winbindd_util.c
winbindd: disable support for CROSS_ORGANIZATION domains
2018-02-28 14:33:19 +01:00
winbindd_wins_byip.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_wins_byname.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_xids_to_sids.c
winbind: Expose WINBINDD_XIDS_TO_SIDS externally
2016-02-22 20:29:15 +01:00
winbindd.c
winbindd: Remove "DUMP_EVENT_LIST" message
2018-02-26 22:30:14 +01:00
winbindd.h
winbind: Use one queue for all domain children
2018-02-23 09:04:23 +01:00
wscript_build
gpo: Add the winbind call to gpupdate
2018-01-13 22:38:05 +01:00