sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code
fa37bbd9d0
samba-mirror/source3/winbindd
History
Michael Adam 8f8e843267 s3:winbind: add a warning DEBUG message when skipping a sid from the mapped GID list 
This presents a potential security problem when ACLs contain DENY ACEs.

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Michael Adam <obnox@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Mon Jul 29 14:42:27 CEST 2013 on sn-devel-104
2013-07-29 14:42:27 +02:00
..
idmap_hash s3: Fix idmap_hash 2012-09-20 05:03:54 +02:00
idmap_ad.c winbind/idmap_ad: be verbose about the user that we fail to map 2013-05-14 19:53:29 +02:00
idmap_autorid.c s3:idmap_autorid: Add a NULL check in idmap_autorid_preallocate_wellknown 2013-07-08 06:00:42 +02:00
idmap_ldap.c s3-winbindd: Move idmap_fetch_secret to idmap_utils.c for reuse 2013-03-09 06:30:22 +01:00
idmap_nss.c s3-includes: only include system/passwd.h when needed. 2011-03-30 01:13:07 +02:00
idmap_passdb.c s3-passdb: Change pdb_sid_to_id() to return struct unixid 2012-05-02 12:45:29 +02:00
idmap_proto.h s3-winbindd: Move idmap_fetch_secret to idmap_utils.c for reuse 2013-03-09 06:30:22 +01:00
idmap_rfc2307.c s3-winbindd: Add new module idmap_rfc2307 2013-03-09 06:30:22 +01:00
idmap_rid.c s3:idmap_rid: force mapping type to ID_TYPE_BOTH for sid->unixid mapping 2012-12-03 08:48:27 +01:00
idmap_rw.c
idmap_rw.h
idmap_tdb2.c s3:idmap_tdb: fix miss in rename of dbwrap_trans_store_uint32() to dbwrap_trans_store_uint32_bystring() 2012-06-18 11:44:50 +02:00
idmap_tdb_common.c s3:winbind:idmap_tdb_common: improve readability of assignment by adding an "if" 2012-09-20 05:20:38 +02:00
idmap_tdb_common.h s3:winbindd add idmap_tdb_common file to store common code of TDB idmap backends 2012-05-01 09:32:11 +02:00
idmap_tdb.c dbwrap: remove get_flags(). 2012-06-22 07:35:17 +02:00
idmap_util.c idmap: Store negative cache entries if the backend fails 2013-05-03 14:48:35 +02:00
idmap.c s3:idmap: fix a debug message and lower its level 2013-03-08 03:16:54 +01:00
nss_info_template.c
nss_info.c s3-winbind: Fix idmap initialization debug message. 2012-07-23 18:19:00 +02:00
wb_dsgetdcname.c
wb_fill_pwent.c s3:winbindd: fix a cut'n'paste comment typo in wb_fill_pwent 2013-01-29 21:45:59 +01:00
wb_getgrsid.c winbind: Fix an incompatible pointer type warning 2013-02-08 15:27:50 +01:00
wb_getpwsid.c s3:winbindd: change getpwsid() to return a passwd struct for a group sid id-mapped with ID_TYPE_BOTH 2013-01-29 23:46:19 +01:00
wb_gettoken.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_gid2sid.c
wb_group_members.c s3:winbindd: factor add_wbint_Principal_to_dict() out of wb_group_members_done() 2013-01-29 21:48:01 +01:00
wb_lookupname.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_lookupsid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
wb_lookupsids.c s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam() 2012-07-12 18:36:02 +02:00
wb_lookupuseraliases.c More simple const fixups. 2011-05-05 23:56:08 +02:00
wb_lookupusergroups.c
wb_next_grent.c s3: rename sid_check_is_domain() to sid_check_is_our_sam() 2012-07-12 16:43:51 +02:00
wb_next_pwent.c s3: rename sid_check_is_domain() to sid_check_is_our_sam() 2012-07-12 16:43:51 +02:00
wb_ping.c
wb_query_user_list.c
wb_queryuser.c
wb_seqnum.c
wb_seqnums.c
wb_sids2xids.c s3:winbindd: use struct unixid instead of uint64 in Sids2Xids parent<->child 2012-12-03 08:48:22 +01:00
wb_uid2sid.c
winbindd_ads.c s3-winbindd: Move connection to AD server from idmap_ad 2013-03-09 06:30:22 +01:00
winbindd_allocate_gid.c
winbindd_allocate_uid.c
winbindd_async.c
winbindd_cache.c winbind: Fix bug 9854 -- NULL pointer dereference 2013-05-07 14:49:07 +02:00
winbindd_ccache_access.c s3-winbind: Allow sec_initial_uid() to store creds. 2013-07-02 23:26:24 +02:00
winbindd_change_machine_acct.c
winbindd_check_machine_acct.c
winbindd_cm.c winbind: Correctly use names in the domain struct. 2013-03-05 23:29:29 +01:00
winbindd_cred_cache.c s3:winbindd: s/event_add_timed/tevent_add_timer 2013-02-19 23:48:02 +01:00
winbindd_creds.c Revert "s3-winbindd: make sure we obey the -n switch also for samlogon cache access." 2012-11-09 16:41:05 +01:00
winbindd_domain.c
winbindd_dsgetdcname.c
winbindd_dual_ndr.c s3:winbindd: let wbint handles return NT_STATUS_CONNECTION_DISCONNECTED 2011-09-14 18:03:18 +02:00
winbindd_dual_srv.c winbind: Print error code on connection error in ping_dc 2013-05-25 23:11:23 +02:00
winbindd_dual.c winbindd: Avoid a fd leak when we can not fork 2013-04-09 20:27:27 +02:00
winbindd_endgrent.c
winbindd_endpwent.c
winbindd_getdcname.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getgrent.c
winbindd_getgrgid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getgrnam.c s3:winbindd:getgrnam: also produce a group struct for a user with ID_TYPE_BOTH 2013-01-29 21:56:58 +01:00
winbindd_getgroups.c s3:winbind: add a warning DEBUG message when skipping a sid from the mapped GID list 2013-07-29 14:42:27 +02:00
winbindd_getpwent.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwnam.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwsid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getpwuid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getsidaliases.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getuserdomgroups.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_getusersids.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_gid_to_sid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_group.c s3-winbind: DON'T PANIC if we couldn't find the domain. 2012-09-04 18:16:06 +02:00
winbindd_idmap.c
winbindd_list_groups.c
winbindd_list_users.c
winbindd_locator.c
winbindd_lookupname.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_lookuprids.c s3: explicitly pass domain_sid to wbint_LookupRids() (bug #7841) 2011-06-27 18:21:30 +02:00
winbindd_lookupsid.c
winbindd_lookupsids.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_misc.c winbind: Fix samba3.winbind.struct test. 2013-03-05 23:29:40 +01:00
winbindd_msrpc.c s3-winbindd: rework reconnect logic in winbindd_lookup_names(). 2012-11-30 11:49:53 +01:00
winbindd_ndr.c s3:winbindd_nrd: include ../librpc/ndr/libndr.h instead of librpc/ndr/util.h 2011-05-31 12:54:22 +02:00
winbindd_pam_auth_crap.c winbind: Extend wbcAuthenticateUserEx to provide PAC 2012-09-20 19:49:32 -07:00
winbindd_pam_auth.c
winbindd_pam_chauthtok.c
winbindd_pam_chng_pswd_auth_crap.c
winbindd_pam_logoff.c libreplace: Add getpeereid implementation. 2012-03-24 16:00:36 +01:00
winbindd_pam.c s3-winbindd: support the DIR pragma for raw kerberos user pam authentication. 2013-07-23 15:39:29 -07:00
winbindd_ping_dc.c s3-winbind: Return the DC name from DC_PING 2012-08-15 11:44:42 +10:00
winbindd_proto.h s3-winbindd: Move connection to AD server from idmap_ad 2013-03-09 06:30:22 +01:00
winbindd_reconnect.c s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it. 2011-03-30 01:13:08 +02:00
winbindd_rpc.c s3:winbindd: check the correct variable for talloc success in rpc_query_user() 2013-01-29 21:57:18 +01:00
winbindd_rpc.h s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it. 2011-03-30 01:13:08 +02:00
winbindd_samr.c s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam() 2012-07-12 18:36:02 +02:00
winbindd_setgrent.c
winbindd_setpwent.c
winbindd_show_sequence.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_sid_to_gid.c s3:winbindd: use wb_sids2xids instead of wb_sid2gid in winbindd_sid_to_gid 2012-12-03 08:48:22 +01:00
winbindd_sid_to_uid.c s3:winbindd: use wb_sids2xids instead of wb_sid2uid in winbindd_sid_to_uid 2012-12-03 08:48:21 +01:00
winbindd_sids_to_xids.c s3:winbindd: factor winbindd_sids_to_xids into external and internal part 2012-12-03 08:48:21 +01:00
winbindd_uid_to_sid.c s3: Use tevent_req_ntstatus properly in a few places 2011-05-10 13:11:10 +02:00
winbindd_util.c winbind: Correctly use names in the domain struct. 2013-03-05 23:29:29 +01:00
winbindd_wins_byip.c s3:winbind: Convert WINBINDD_WINS_BYIP to the async API 2011-06-05 12:10:15 +02:00
winbindd_wins_byname.c s3: Fix winbindd_wins_byname 2011-06-25 15:40:15 +02:00
winbindd.c winbindd and nmbd don't set their umask to zero on startup like smbd does. 2013-06-27 02:02:24 +02:00
winbindd.h winbind: Use talloc for allocating domain, dns, forest and dc name. 2013-03-05 23:29:11 +01:00
wscript_build s3-winbindd: Add new module idmap_rfc2307 2013-03-09 06:30:22 +01:00