Stefan Metzmacher 8dfdbe095a winbindd: don't set mapped_state in winbindd_dual_auth_passdb() ...

mapped_state is a special hack for authenticate_ldap_simple_bind_send()
in order to avoid some additional work in authsam_check_password_internals()

This doesn't apply here. We should also handle wbinfo -a
authentication UPN names, e.g. administrator@DOMAIN,
even if the account belongs to the local sam.

With this change the behavior is consistent also locally on DCs and
also an RODC can handle these requests locally for cached accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13879
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15003

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2022-03-10 03:16:35 +00:00

..

idmap_hash

s3:idmap_hash: reliable return ID_TYPE_BOTH

2021-01-22 11:32:46 +00:00

idmap_ad_nss.c

winbindd/idmap: apply const to struct nss_info_methods pointers

2020-10-23 03:25:35 +00:00

idmap_ad.c

winbind: Remove an unused include

2021-08-24 17:32:29 +00:00

idmap_autorid_tdb.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

idmap_autorid.c

s3:winbindd: Add a sanity check for the range

2022-02-16 16:08:32 +00:00

idmap_ldap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

idmap_nss.c

CVE-2020-25727: idmap_nss: verify that the name of the sid belongs to the configured domain

2021-11-15 18:10:28 +00:00

idmap_passdb.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_proto.h

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_rfc2307.c

idmap_rfc2307: Do not return SID from unixids_to_sids on type mismatch

2021-03-11 07:28:37 +00:00

idmap_rid.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_rw.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_rw.h

…

idmap_script.c

idmap_script: Save a few lines with str_list_add_printf()

2021-10-08 19:28:31 +00:00

idmap_tdb2.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_tdb_common.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

idmap_tdb_common.h

…

idmap_tdb.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

idmap_util.c

idmap_rfc2307: Don't stop after 30 entries

2017-05-08 21:08:23 +02:00

idmap.c

winbindd/idmap: apply const to struct idmap_methods pointers

2020-10-23 03:25:35 +00:00

nss_info_template.c

lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)

2017-04-22 01:17:00 +02:00

nss_info.c

winbindd/idmap: apply const to struct nss_info_methods pointers

2020-10-23 03:25:35 +00:00

wb_dsgetdcname.c

winbind: Fix an error path memleak

2019-02-27 01:35:18 +01:00

wb_getgrsid.c

winbindd: remove 'winbind trusted domains only' handling

2018-01-10 01:01:23 +01:00

wb_getpwsid.c

source3: move lib/substitute.c functions out of proto.h

2021-11-11 13:49:32 +00:00

wb_gettoken.c

Re-enable token groups fallback

2017-03-06 19:18:31 +01:00

wb_group_members.c

winbind: Remove the use of "talloc_dict"

2017-09-30 08:01:24 +02:00

wb_lookupname.c

winbind: Pass upn unmodified to lookup names

2018-05-11 09:07:36 +02:00

wb_lookupsid.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

wb_lookupsids.c

winbind: Use dom_sid_str_buf

2018-11-27 07:13:14 +01:00

wb_lookupuseraliases.c

…

wb_lookupusergroups.c

winbindd: Use dom_sid_str_buf

2018-11-02 21:21:15 +01:00

wb_next_grent.c

winbind: Remove the use of "talloc_dict"

2017-09-30 08:01:24 +02:00

wb_next_pwent.c

winbind: Go throught wb_getpwsid for listing users

2017-01-02 18:04:14 +01:00

wb_query_group_list.c

…

wb_query_user_list.c

winbind: Fix "wbint_Principals" definition

2018-11-27 07:13:14 +01:00

wb_queryuser.c

winbindd: call wb_parent_idmap_setup_send() in wb_queryuser_send()

2021-09-02 14:29:35 +00:00

wb_seqnum.c

…

wb_seqnums.c

winbindd: Use talloc_zero_array for consistency with other winbindd_domain allocators

2018-03-24 07:21:37 +01:00

wb_sids2xids.c

wb_sids2xids: defer/skip wb_lookupsids* unless we get ID_TYPE_WB_REQUIRE_TYPE

2020-10-23 04:47:26 +00:00

wb_xids2sids.c

wb_xids2sids: make use of the new wb_parent_idmap_setup_send/recv() helpers

2020-10-23 03:25:36 +00:00

winbindd_ads.c

s3:winbindd: Do not set ADS_AUTH_ALLOW_NTLMSSP in FIPS mode

2022-01-21 23:33:36 +00:00

winbindd_ads.h

winbindd: Give winbindd_ads.c its own header

2017-05-17 01:47:17 +02:00

winbindd_allocate_gid.c

winbindd: Fix a startup race with allocate_gid

2021-03-24 20:31:30 +00:00

winbindd_allocate_uid.c

winbind: ensure wb_parent_idmap_setup_send() gets called in winbindd_allocate_uid_send()

2021-09-02 15:20:06 +00:00

winbindd_async.c

…

winbindd_cache.c

s3:winbind: Reduce the level and improve a couple of debug messages

2022-02-09 20:20:36 +00:00

winbindd_ccache_access.c

Fix spelling mistakes

2018-11-30 03:35:13 +01:00

winbindd_change_machine_acct.c

…

winbindd_check_machine_acct.c

…

winbindd_cm.c

s3:rpc_server: Activate samba-dcerpcd

2021-12-10 14:02:30 +00:00

winbindd_cred_cache.c

s3:winbind: Use the canonical principal name to renew the credentials

2022-02-23 16:17:29 +00:00

winbindd_creds.c

Fix gcc11 compiler issue "-Werror=stringop-overflow="

2021-05-07 06:23:32 +00:00

winbindd_domain_info.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_domain.c

s3:winbind: Convert ListTrustedDomains parent/child call to NDR

2022-03-06 23:05:40 +00:00

winbindd_dsgetdcname.c

winbind: Align integer types

2020-11-30 22:24:37 +00:00

winbindd_dual_ndr.c

rpc_server3: Inline pipes_struct into dcerpc_ncacn_conn

2022-01-05 00:11:38 +00:00

winbindd_dual_srv.c

s3:winbind: Convert ListTrustedDomains parent/child call to NDR

2022-03-06 23:05:40 +00:00

winbindd_dual.c

s3:winbindd: Fix winbindd child logfile name handling

2021-10-12 08:40:34 +00:00

winbindd_endgrent.c

…

winbindd_endpwent.c

…

winbindd_getdcname.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_getgrent.c

s3:winbind: Log client process name

2018-11-12 09:50:25 +01:00

winbindd_getgrgid.c

winbindd: handling missing idmap in getgrgid()

2020-02-05 17:56:58 +00:00

winbindd_getgrnam.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_getgroups.c

winbindd: allow idmap backends to mark entries with ID_[TYPE_WB_]REQUIRE_TYPE

2020-10-23 03:25:37 +00:00

winbindd_getpwent.c

s3:winbind: Log client process name

2018-11-12 09:50:25 +01:00

winbindd_getpwnam.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_getpwsid.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_getpwuid.c

winbindd: Use dom_sid_str_buf

2018-12-20 23:40:25 +01:00

winbindd_getsidaliases.c

winbind: Simplify winbindd_getsidaliases_recv()

2021-10-08 19:28:31 +00:00

winbindd_getuserdomgroups.c

winbindd: Use dom_sid_str_buf

2018-12-07 23:29:01 +01:00

winbindd_getusersids.c

winbind: Simplify winbindd_getusersids_recv()

2021-10-08 19:28:31 +00:00

winbindd_gpupdate.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_group.c

s3-winbindd: use fill_domain_username_talloc() in winbind.

2018-05-17 17:30:08 +02:00

winbindd_idmap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_irpc.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

winbindd_list_groups.c

winbind: honor WBFLAG_FROM_NSS along with winbind enum users/groups

2018-12-22 03:11:14 +01:00

winbindd_list_users.c

winbind: honor WBFLAG_FROM_NSS along with winbind enum users/groups

2018-12-22 03:11:14 +01:00

winbindd_locator.c

winbind: add locator_child_handle() and use it instead of child->binding_handle

2018-02-23 04:09:18 +01:00

winbindd_lookupname.c

winbind: Use dom_sid_str_buf

2018-12-20 23:40:24 +01:00

winbindd_lookuprids.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_lookupsid.c

s3: safe_string: do not include string_wrappers.h

2020-08-28 00:56:34 +00:00

winbindd_lookupsids.c

CVE-2020-14323 winbind: Fix invalid lookupsids DoS

2020-10-29 10:25:37 +00:00

winbindd_misc.c

s3:winbind: Move the function to list trusted domains to winbindd_dual_srv.c

2022-03-06 23:05:40 +00:00

winbindd_msrpc.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_ndr.c

s3:winbind: Get rid of the winbind dc-connect child

2021-07-14 21:06:36 +00:00

winbindd_pam_auth_crap.c

CVE-2020-25717: s3:winbindd: make sure we default to r->out.authoritative = true

2021-11-09 19:45:32 +00:00

winbindd_pam_auth.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_chauthtok.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_chng_pswd_auth_crap.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam_logoff.c

lib: give global_contexts.c its own header file

2021-01-08 20:31:33 +00:00

winbindd_pam.c

winbindd: don't set mapped_state in winbindd_dual_auth_passdb()

2022-03-10 03:16:35 +00:00

winbindd_ping_dc.c

winbindd: Fix winbindd_ping_dc_recv

2018-06-16 01:06:36 +02:00

winbindd_proto.h

s3:winbind: Convert ListTrustedDomains parent/child call to NDR

2022-03-06 23:05:40 +00:00

winbindd_reconnect_ads.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_reconnect.c

winbindd: remove obsolete sequence_number from struct winbindd_methods

2021-04-29 15:49:16 +00:00

winbindd_rpc.c

s3:winbindd: Remove unused rpc_sequence_number()

2021-04-29 15:01:29 +00:00

winbindd_rpc.h

s3:winbindd: Remove unused rpc_sequence_number()

2021-04-29 15:01:29 +00:00

winbindd_samr.c

s3:winbind: Fix using normalized name in sam_name_to_sid()

2021-12-15 20:22:47 +00:00

winbindd_setgrent.c

winbind: call lp_winbind_enum_{users,groups}() already in set{pw,gr}ent()

2018-02-23 04:09:18 +01:00

winbindd_setpwent.c

winbind: call lp_winbind_enum_{users,groups}() already in set{pw,gr}ent()

2018-02-23 04:09:18 +01:00

winbindd_show_sequence.c

…

winbindd_sids_to_xids.c

winbind: Simplify winbindd_sids_to_xids_recv()

2021-10-08 19:28:32 +00:00

winbindd_util.c

s3:winbind: Convert ListTrustedDomains parent/child call to NDR

2022-03-06 23:05:40 +00:00

winbindd_wins_byip.c

s3: libsmb: Convert node_status_query() and associated functions and callers to expect a size_t * return.

2020-09-15 10:09:36 +00:00

winbindd_wins_byname.c

s3: libsmb: Convert the WINS and broadcast name functions to return size_t * num addresses.

2020-09-15 10:09:36 +00:00

winbindd_xids_to_sids.c

winbind: Enhance xids2sids debugging

2019-02-08 08:51:19 +01:00

winbindd.c

s3:rpc_server: Activate samba-dcerpcd

2021-12-10 14:02:30 +00:00

winbindd.h

s3:winbind: Store canonical principal and realm in ccache entry

2022-02-23 15:20:32 +00:00

wscript_build

s3:rpc_server: Activate samba-dcerpcd

2021-12-10 14:02:30 +00:00