samba.git/source3/include/ads.h, branch master

s3:libads: add ads_set_reconnect_fn() and only reconnect if we can get creds

2024-05-14T10:18:31+00:00

This reconnect is only useful for long running connections (e.g. in winbindd)
and there we'll make use of it...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16T20:38:32+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Jeremy Allison

s3:libads: Remove no longer used is_mine flag from ADS_STRUCT

2022-06-27T15:50:30+00:00

Signed-off-by: Samuel Cabrero 
Reviewed-by: Jeremy Allison

libads: Decide to have no fallback option

2017-05-30T06:06:06+00:00

Before this change, it would always possibly choose another server at
random despite later using the original principal when it got back to
the connection initialization in the the winbind connection manager.
This caused bizarre authentication failures.

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett

libads: abstract out SASL wrapping code

2017-05-17T21:02:09+00:00

Prepare for rebasing libads on top of libsmbldap.

To make libads using 'struct smbldap_state' instead of direct LDAP
structure, we need to abstract out libads logic from connection
handling. SASL wrapping does not really depend on availability of LDAP
handle and does not need direct access to ADS_STRUCT. As result, we'll
be able to move SASL wrapping code under smbldap once the latter is able
to pass settings that libads passes to the SASL wrapping.

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Jeremy Allison

libads: Remove "foreign" from ads_struct

2015-12-18T04:24:25+00:00

AFAICS this was never actually used

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

Convert all uses of uint8/16/32 to uint8/16/32_t in the libads code.

2015-04-22T04:22:29+00:00

Signed-off-by: Richard Sharpe 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Wed Apr 22 06:22:29 CEST 2015 on sn-devel-104

Avoid overriding default ccache for ads operations.

2012-09-12T19:18:09+00:00

Avoid overriding default ccache for ads operations.

Nowadays various samba components may need to use GSSAPI and a default cred
cache to perform their tasks.
This code was completely overriding the whole process default ccache name, thus
altering the current credentials and sometimes hijacking them (or getting
preemptively hijaked).

By using gss_krb5_import_cred we can instead use a private ccache (necessary
sometimes to use a different set of credentials fromt he default
cifs/fqdn@realm one, for example when contacting foreign DCs using trust
credentials) that does not affect the rest of the process.

For the kerberos versions which don't have gss_krb5_import_cred
we fallback to temp override of KRB5CCNAME and gss_acquire_cred.

Signed-off-by: Alexander Bokovoy 
Signed-off-by: Günther Deschner 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104

lib/param: Move all enum declarations to lib/param

2012-07-24T09:01:17+00:00

This is in preperation for the parameter table being made common.

Andrew Bartlett

Pair-Programmed-With: Andrew Tridgell

s3-libads: Use a reducing page size to try and cope with a slow LDAP server

2012-05-26T00:03:08+00:00

If we cannot get 1000 users downloaded in 15seconds, try with 500, 250
and then 125 users at a time.

Andrew Bartlett

Signed-off-by: Jeremy Allison