sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
Code
cf0f28819e
samba-mirror/source3/winbindd
History
Jeremy Allison cf0f28819e s3: winbind: Make WBC_AUTH_USER_LEVEL_PAC prime the name2sid cache. 
In addition to priming the netsamlogon cache.

This prevents a winbind AD-DC lookup for something
the PAC already told us.

Note we only do this in the case where the PAC successfully
passed signature verification.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11259

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
2016-09-28 19:02:26 +02:00
..
idmap_hash idmap_hash: only allow the hash module for default idmap config. 2016-03-17 01:08:32 +01:00
idmap_ad_nss.c idmap_ad: Separate out the nss functions 2016-04-15 15:32:11 +02:00
idmap_ad.c winbind: Base idmap_ad on tldap 2016-04-15 19:13:39 +02:00
idmap_autorid_tdb.c s3:winbindd/idmap_autorid_tdb fix a compiler warning 2016-02-12 12:07:07 +01:00
idmap_autorid.c idmap_autorid: Protect against corrupt databases 2016-03-07 22:16:20 +01:00
idmap_ldap.c s3-winbindd: Move idmap_fetch_secret to idmap_utils.c for reuse 2013-03-09 06:30:22 +01:00
idmap_nss.c idmap: Fix whitespace 2016-01-13 07:48:30 +01:00
idmap_passdb.c idmap: unify passdb *id_to_sid methods 2014-12-03 04:21:09 +01:00
idmap_proto.h idmap_ad: Separate out the nss functions 2016-04-15 15:32:11 +02:00
idmap_rfc2307.c winbindd/idmap_rfc2307: fix a crash 2016-06-28 07:27:18 +02:00
idmap_rid.c idmap: Fix whitespace 2016-01-13 07:48:30 +01:00
idmap_rw.c
idmap_rw.h
idmap_script.c idmap_script: add missing "IDTOSID" argument to the script command line. 2016-09-06 19:32:57 +02:00
idmap_tdb2.c wibindd: Fix format-nonliteral warning 2016-08-24 01:33:51 +02:00
idmap_tdb_common.c idmap_tdb_common: remove legacy comment. 2014-04-25 15:35:08 +02:00
idmap_tdb_common.h
idmap_tdb.c Convert the few instances of int32 there were to int32_t. 2015-05-16 03:09:12 +02:00
idmap_util.c idmap: don't generally forbid id==0 from idmap_unix_id_is_in_range() 2016-08-16 21:27:22 +02:00
idmap.c winbind: Remove unused idmap_backends_unixid_to_sid 2016-03-30 17:58:48 +02:00
nss_info_template.c s3-winbind: Don't set the gecos field to NULL. 2014-07-15 16:00:40 +02:00
nss_info.c s3-winbind: Fix idmap initialization debug message. 2012-07-23 18:19:00 +02:00
wb_dsgetdcname.c winbindd: check if dcinfo from genache is expired 2016-04-28 20:48:14 +02:00
wb_fill_pwent.c winbind: Add some const 2016-02-16 10:50:10 +01:00
wb_getgrsid.c winbind: Make wb_sids2xids_recv work on an array 2015-03-07 15:28:59 +01:00
wb_getpwsid.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_gettoken.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_group_members.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_lookupname.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_lookupsid.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_lookupsids.c winbindd: in wb_lookupsids return domain name if we have it 2016-06-28 07:27:18 +02:00
wb_lookupuseraliases.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_lookupusergroups.c s3-winbind: Fix chached user group lookup of trusted domains. 2015-03-09 19:23:25 +01:00
wb_next_grent.c s3:winbind:grent: don't stop when querying one domain fails. 2015-03-16 20:26:51 +01:00
wb_next_pwent.c s3:winbind:pwent: refactor duplication into wb_next_pwent_send_do() 2015-03-16 20:26:51 +01:00
wb_ping.c
wb_query_group_list.c s3:winbind: add wb_query_group_list module - async query group list 2015-03-16 20:26:51 +01:00
wb_query_user_list.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_queryuser.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_seqnum.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_seqnums.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
wb_sids2xids.c winbind: handle DC_NOT_FOUND in wb_sids2xids 2016-04-15 15:32:11 +02:00
wb_xids2sids.c winbind: handle DC_NOT_FOUND in wb_xids2sids 2016-04-15 15:32:11 +02:00
winbindd_ads.c winbindd: prevent log spam when enumerating users 2016-06-02 09:04:13 +02:00
winbindd_allocate_gid.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_allocate_uid.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_async.c
winbindd_cache.c winbindd: Introduce helper function for winbindd_cache.tdb directory 2016-08-19 13:30:22 +02:00
winbindd_ccache_access.c CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response 2016-04-12 19:25:22 +02:00
winbindd_change_machine_acct.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_check_machine_acct.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_cm.c winbind: honor 'socket options' in winbind 2016-06-17 04:13:13 +02:00
winbindd_cred_cache.c s3/winbindd: use == -1 instead of < 0 for error checking uid_t 2016-07-01 05:22:36 +02:00
winbindd_creds.c Last lot of convert uint32 to uint32_t in winbindd, I promise. 2015-05-06 07:03:27 +02:00
winbindd_domain.c
winbindd_dsgetdcname.c winbind: Simplify winbindd_dsgetdcname_recv 2015-02-27 01:16:10 +01:00
winbindd_dual_ndr.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_dual_srv.c werror: replace WERR_NOMEM with WERR_NOT_ENOUGH_MEMORY in source3/winbindd/ 2016-09-28 00:04:19 +02:00
winbindd_dual.c s3: winbind: Remove dump_event_list() calls. 2016-09-24 19:52:08 +02:00
winbindd_endgrent.c
winbindd_endpwent.c
winbindd_getdcname.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_getgrent.c
winbindd_getgrgid.c winbind: Use xids2sids in getgrgid 2016-02-22 20:29:15 +01:00
winbindd_getgrnam.c Last lot of convert uint32 to uint32_t in winbindd, I promise. 2015-05-06 07:03:27 +02:00
winbindd_getgroups.c winbind: Make wb_sids2xids_recv work on an array 2015-03-07 15:28:59 +01:00
winbindd_getpwent.c
winbindd_getpwnam.c
winbindd_getpwsid.c
winbindd_getpwuid.c winbind: Use xids2sids in getpwuid 2016-02-22 20:29:15 +01:00
winbindd_getsidaliases.c
winbindd_getuserdomgroups.c
winbindd_getusersids.c
winbindd_group.c s3-winbind: DON'T PANIC if we couldn't find the domain. 2012-09-04 18:16:06 +02:00
winbindd_idmap.c
winbindd_irpc.c werror: replace WERR_NOMEM with WERR_NOT_ENOUGH_MEMORY in source3/winbindd/ 2016-09-28 00:04:19 +02:00
winbindd_list_groups.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_list_users.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_locator.c
winbindd_lookupname.c
winbindd_lookuprids.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_lookupsid.c
winbindd_lookupsids.c
winbindd_misc.c s3:winbindd: don't unclude two '\0' at the end of the domain list 2016-03-13 20:10:33 +01:00
winbindd_msrpc.c Fix various spelling errors 2015-11-06 13:43:45 +01:00
winbindd_ndr.c winbindd: Add retry also for ADS method calls 2016-01-13 00:26:16 +01:00
winbindd_pam_auth_crap.c winbind: Extend wbcAuthenticateUserEx to provide PAC 2012-09-20 19:49:32 -07:00
winbindd_pam_auth.c
winbindd_pam_chauthtok.c
winbindd_pam_chng_pswd_auth_crap.c
winbindd_pam_logoff.c
winbindd_pam.c s3: winbind: Make WBC_AUTH_USER_LEVEL_PAC prime the name2sid cache. 2016-09-28 19:02:26 +02:00
winbindd_ping_dc.c s3:winbindd: use find_domain_from_name_noinit() in winbindd_ping_dc_send() 2014-12-19 13:15:12 +01:00
winbindd_proto.h winbindd: Remove unused prototypes for winbindd_group.c 2016-04-30 01:01:42 +02:00
winbindd_reconnect_ads.c winbindd: Add retry also for ADS method calls 2016-01-13 00:26:16 +01:00
winbindd_reconnect.c winbindd: Add retry also for ADS method calls 2016-01-13 00:26:16 +01:00
winbindd_rpc.c s3:winbindd: initialize dst->primary_gid with (gid_t)-1 2015-07-17 19:06:08 +02:00
winbindd_rpc.h
winbindd_samr.c winbind: Fix CID 1035545 Uninitialized scalar variable 2015-05-06 18:24:01 +02:00
winbindd_setgrent.c
winbindd_setpwent.c
winbindd_show_sequence.c
winbindd_sids_to_xids.c winbind: Make wb_sids2xids_recv work on an array 2015-03-07 15:28:59 +01:00
winbindd_util.c winbindd: log domain name of failures to get trustdoms 2016-06-02 05:33:14 +02:00
winbindd_wins_byip.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_wins_byname.c librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls 2014-06-11 10:18:26 +02:00
winbindd_xids_to_sids.c winbind: Expose WINBINDD_XIDS_TO_SIDS externally 2016-02-22 20:29:15 +01:00
winbindd.c s4: messaging: Remove bool auto_remove parameter from imessaging_init(). 2016-07-23 06:04:11 +02:00
winbindd.h winbindd: Remove unused enum ent_type 2016-09-10 18:41:25 +02:00
wscript_build winbind: Base idmap_ad on tldap 2016-04-15 19:13:39 +02:00