samba.git/source3/passdb/passdb.c, branch talloc-2.3.4

source3: move lib/substitute.c functions out of proto.h

2021-11-11T13:49:32+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14897

Signed-off-by: Ralph Boehme 
Reviewed-by: Andreas Schneider

s3:passdb: Check return code of cli_credentials_set_conf()

2021-06-29T02:19:35+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

auth:creds: Add obtained arg to cli_credentials_set_kerberos_state()

2021-04-28T03:43:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

passdb: Add error checks in samu_set_unix_internal()

2021-04-27T13:24:35+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Andreas Schneider

passdb: Fix a typo

2021-01-08T20:31:33+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

auth:creds: Rename CRED_USE_KERBEROS values

2020-11-03T15:25:37+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy

s3: safe_string: do not include string_wrappers.h

2020-08-28T00:56:34+00:00

Rather than have safe_string.h #include string_wrappers.h, make users of
string_wrappers.h include it explicitly.

includes.h now no longer includes string_wrappers.h transitively. Still
allow includes.h to #include safe_string.h for now so that as many
modules as possible get the safety checks in it.

Signed-off-by: Matthew DeVore 
Reviewed-by: David Mulder 
Reviewed-by: Jeremy Allison

s3/passed: clang: Fix 'Value stored during its initialization is never read'

2019-09-26T18:41:27+00:00

Fixes:

source3/passdb/passdb.c:2502:11: warning: Value stored to 'status' during its initialization is never read <--[clang]
        NTSTATUS status = NT_STATUS_INTERNAL_ERROR;
                 ^~~~~~   ~~~~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison

passdb: Use dom_sid_str_buf

2018-12-20T22:40:24+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Gary Lockyer

s3:passdb: use cli_credentials_set_kerberos_state() for trusts in pdb_get_trust_credentials()

2017-02-24T17:40:14+00:00

Trust accounts can only use kerberos when contacting other AD domains,
using NTLMSSP will fail.

At the same time it doesn't make sense to try kerberos for NT4 domains,
still NTLMSSP will fail, but the callers has to deal with that
case and just fallback to an anonymous SMB connection.

In all cases we should be able to use NETLOGON SCHANNEL
over any anonymous smb or tcp transport.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12598

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme