sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-22 22:04:08 +03:00
Code
samba-mirror/source3/winbindd
History
Stefan Metzmacher 3f71253ae5 s3:winbindd: fix endless forest trust scan 
Commit 0392ebcd1d48e9f472f2148b85316a77d9cc953b effectively
disabled the enumeration of trusts in other forests.

The fixes for https://bugzilla.samba.org/show_bug.cgi?id=11691
changed the way we fill domain->domain_flags for domains
in other forests.

Commit fffefe72fcc62d9688b45f53a5327667dc0b2fe6 readded the
ability to enumerate trusts of other forests again, in order to
fix https://bugzilla.samba.org/show_bug.cgi?id=11830

Now we have the problem that multiple domains
(even outside of our forest) are considert to be
our forest root, as they have the following flags:
NETR_TRUST_FLAG_TREEROOT and NETR_TRUST_FLAG_IN_FOREST.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12605

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Thu Mar  2 17:53:14 CET 2017 on sn-devel-144

(cherry picked from commit f9aaddcdd8f9ea648c9c5ea804f56ee3ff6c4c67)
2017-03-06 12:26:19 +01:00
..
idmap_hash
idmap_hash: only allow the hash module for default idmap config.
2016-04-18 12:58:20 +02:00
idmap_ad.c
s3:winbindd/idmap_*: make function prototypes available via static_decl_idmap;
2015-08-20 16:06:21 +02:00
idmap_autorid_tdb.c
autorid: add high_id to range config and fill it where we also fill range->low_id.
2014-04-25 15:35:09 +02:00
idmap_autorid.c
s3:winbindd/idmap_*: make function prototypes available via static_decl_idmap;
2015-08-20 16:06:21 +02:00
idmap_ldap.c
s3-winbindd: Move idmap_fetch_secret to idmap_utils.c for reuse
2013-03-09 06:30:22 +01:00
idmap_nss.c
idmap: Fix whitespace
2016-01-13 07:48:30 +01:00
idmap_passdb.c
idmap: unify passdb *id_to_sid methods
2014-12-03 04:21:09 +01:00
idmap_proto.h
idmap: Remove "domname" from idmap_gid_to_sid
2015-08-24 16:16:12 +02:00
idmap_rfc2307.c
winbindd/idmap_rfc2307: fix a crash
2016-08-04 11:10:19 +02:00
idmap_rid.c
idmap: Fix whitespace
2016-01-13 07:48:30 +01:00
idmap_rw.c
…
idmap_rw.h
…
idmap_script.c
s3:winbindd/idmap_*: make function prototypes available via static_decl_idmap;
2015-08-20 16:06:21 +02:00
idmap_tdb2.c
s3:winbindd/idmap_*: make function prototypes available via static_decl_idmap;
2015-08-20 16:06:21 +02:00
idmap_tdb_common.c
idmap_tdb_common: remove legacy comment.
2014-04-25 15:35:08 +02:00
idmap_tdb_common.h
s3:winbindd add idmap_tdb_common file to store common code of TDB idmap backends
2012-05-01 09:32:11 +02:00
idmap_tdb.c
Convert the few instances of int32 there were to int32_t.
2015-05-16 03:09:12 +02:00
idmap_util.c
idmap: don't generally forbid id==0 from idmap_unix_id_is_in_range()
2016-09-13 12:27:28 +02:00
idmap.c
winbind: Fix CID 1357100 Unchecked return value
2016-04-18 12:58:20 +02:00
nss_info_template.c
s3-winbind: Don't set the gecos field to NULL.
2014-07-15 16:00:40 +02:00
nss_info.c
s3-winbind: Fix idmap initialization debug message.
2012-07-23 18:19:00 +02:00
wb_dsgetdcname.c
winbindd: Allow the AD-DC to call getdcname
2014-07-04 02:52:35 +02:00
wb_fill_pwent.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
wb_getgrsid.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
wb_getpwsid.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_gettoken.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_gid2sid.c
winbind: Do not look for the domain in wb_gid2sid
2015-08-24 16:16:12 +02:00
wb_group_members.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_lookupname.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_lookupsid.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_lookupsids.c
winbindd: in wb_lookupsids return domain name if we have it
2016-08-04 11:10:19 +02:00
wb_lookupuseraliases.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_lookupusergroups.c
s3-winbind: Fix chached user group lookup of trusted domains.
2015-03-09 19:23:25 +01:00
wb_next_grent.c
s3:winbind:grent: don't stop when querying one domain fails.
2015-03-16 20:26:51 +01:00
wb_next_pwent.c
s3:winbind:pwent: refactor duplication into wb_next_pwent_send_do()
2015-03-16 20:26:51 +01:00
wb_ping.c
…
wb_query_group_list.c
s3:winbind: add wb_query_group_list module - async query group list
2015-03-16 20:26:51 +01:00
wb_query_user_list.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_queryuser.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_seqnum.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_seqnums.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
wb_sids2xids.c
winbind: Properly error check init_lsa_ref_domain_list
2016-01-13 07:48:30 +01:00
wb_uid2sid.c
winbind: Do not look for the domain in wb_uid2sid
2015-08-24 16:16:12 +02:00
winbindd_ads.c
s3:winbindd: fix endless forest trust scan
2017-03-06 12:26:19 +01:00
winbindd_allocate_gid.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_allocate_uid.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_async.c
…
winbindd_cache.c
s3: winbind: Ensure we store name2sid with the correct cache sequence number.
2016-10-24 10:56:11 +02:00
winbindd_ccache_access.c
CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response
2016-03-29 14:45:07 +02:00
winbindd_change_machine_acct.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_check_machine_acct.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_cm.c
s3:winbindd: rely on the kerberos_state from pdb_get_trust_credentials()
2017-02-28 09:38:24 +01:00
winbindd_cred_cache.c
winbind: Don't delete an existing krb5 ticket on cached logon.
2015-09-04 01:35:16 +02:00
winbindd_creds.c
Last lot of convert uint32 to uint32_t in winbindd, I promise.
2015-05-06 07:03:27 +02:00
winbindd_domain.c
…
winbindd_dsgetdcname.c
winbind: Simplify winbindd_dsgetdcname_recv
2015-02-27 01:16:10 +01:00
winbindd_dual_ndr.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_dual_srv.c
idmap: centrally check that unix IDs returned by the idmap backends are in range
2016-09-13 12:27:28 +02:00
winbindd_dual.c
s3: winbind: Remove dump_event_list() calls.
2016-10-24 10:56:11 +02:00
winbindd_endgrent.c
…
winbindd_endpwent.c
…
winbindd_getdcname.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_getgrent.c
…
winbindd_getgrgid.c
Change all uint32/16/8 to 32_t/16_t/8_t in winbindd.
2015-04-29 23:42:20 +02:00
winbindd_getgrnam.c
Last lot of convert uint32 to uint32_t in winbindd, I promise.
2015-05-06 07:03:27 +02:00
winbindd_getgroups.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
winbindd_getpwent.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwnam.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwsid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getpwuid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getsidaliases.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getuserdomgroups.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_getusersids.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_gid_to_sid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_group.c
s3-winbind: DON'T PANIC if we couldn't find the domain.
2012-09-04 18:16:06 +02:00
winbindd_idmap.c
…
winbindd_irpc.c
s3:winbindd: add wb_irpc_GetForestTrustInformation()
2015-07-08 18:38:22 +02:00
winbindd_list_groups.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_list_users.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_locator.c
…
winbindd_lookupname.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_lookuprids.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_lookupsid.c
…
winbindd_lookupsids.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_misc.c
s3:winbindd: don't unclude two '\0' at the end of the domain list
2016-03-15 20:29:33 +01:00
winbindd_msrpc.c
Fix various spelling errors
2015-11-06 13:43:45 +01:00
winbindd_ndr.c
winbindd: Add retry also for ADS method calls
2016-01-13 00:26:16 +01:00
winbindd_pam_auth_crap.c
winbind: Extend wbcAuthenticateUserEx to provide PAC
2012-09-20 19:49:32 -07:00
winbindd_pam_auth.c
…
winbindd_pam_chauthtok.c
…
winbindd_pam_chng_pswd_auth_crap.c
…
winbindd_pam_logoff.c
libreplace: Add getpeereid implementation.
2012-03-24 16:00:36 +01:00
winbindd_pam.c
s3: winbind: Trust name2sid mappings from the PAC.
2016-10-24 10:56:11 +02:00
winbindd_ping_dc.c
s3:winbindd: use find_domain_from_name_noinit() in winbindd_ping_dc_send()
2014-12-19 13:15:12 +01:00
winbindd_proto.h
s3: winbind: Trust name2sid mappings from the PAC.
2016-10-24 10:56:11 +02:00
winbindd_reconnect_ads.c
winbindd: Add retry also for ADS method calls
2016-01-13 00:26:16 +01:00
winbindd_reconnect.c
winbindd: Add retry also for ADS method calls
2016-01-13 00:26:16 +01:00
winbindd_rpc.c
s3-winbind: Do not return NO_MEMORY if we have an empty user list
2016-11-04 15:18:16 +01:00
winbindd_rpc.h
…
winbindd_samr.c
winbind: Fix CID 1035545 Uninitialized scalar variable
2015-05-06 18:24:01 +02:00
winbindd_setgrent.c
…
winbindd_setpwent.c
…
winbindd_show_sequence.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_sid_to_gid.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
winbindd_sid_to_uid.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
winbindd_sids_to_xids.c
winbind: Make wb_sids2xids_recv work on an array
2015-03-07 15:28:59 +01:00
winbindd_uid_to_sid.c
s3: Use tevent_req_ntstatus properly in a few places
2011-05-10 13:11:10 +02:00
winbindd_util.c
s3:winbindd: fix endless forest trust scan
2017-03-06 12:26:19 +01:00
winbindd_wins_byip.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd_wins_byname.c
librpc/idl: Merge wbint.idl with winbind.idl so we can forward IRPC requests to internal winbind calls
2014-06-11 10:18:26 +02:00
winbindd.c
winbindd: Remove reference to procid_self()
2015-10-19 12:09:10 +02:00
winbindd.h
winbind: Remove "have_idmap_config" from winbindd_domain
2015-08-24 19:19:31 +02:00
wscript_build
s3:idmap: we need to allow undefined symbols in idmap_tdb
2015-08-20 16:06:20 +02:00