CVS update: samba/source/nsswitch

abartlet at samba.org abartlet at samba.org
Wed Oct 31 21:46:21 EST 2001


Date:	Wed Oct 31 02:46:21 2001
Author:	abartlet

Update of /data/cvs/samba/source/nsswitch
In directory va:/tmp/cvs-serv2188/nsswitch

Modified Files:
	winbindd_pam.c 
Log Message:
This is a farily large patch (3300 lines) and reworks most of the AuthRewrite
code.

In particular this assists tpot in some of his work, becouse it provides the 
connection between the authenticaion and the vuid generation.

Major Changes:
	- Fully malloc'ed structures.
	  - Massive rework of the code so that all structures are made and destroyed 
	    using malloc and free, rather than hanging around on the stack.
	- SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them
	   to be declared 'invalid' without the chance that people might get ROOT by
	   default.

	- kill off some of the "DOMAIN\user" lookups.  These can be readded at a more 
	  appropriate place (probably domain_client_validate.c) in the future. They 
	  don't belong in session setups.

	- Massive introduction of DATA_BLOB structures, particularly for passwords.

	- Use NTLMSSP flags to tell the backend what its getting, rather than magic 
	  lenghths.

	- Fix winbind back up again, but tpot is redoing this soon anyway.

	- Abstract much of the work in srv_netlog_nt back into auth helper functions.

This is a LARGE change, and any assistance is testing it is appriciated.

Domain logons are still broken (as far as I can tell) but other functionality
seems 
intact.  

Needs testing with a wide variety of MS clients.

Andrew Bartlett
	


Revisions:
winbindd_pam.c		1.21 => 1.22
	http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_pam.c?r1=1.21&r2=1.22




More information about the samba-cvs mailing list