samba.git/source3/winbindd, branch talloc-2.3.1

source3/winbindd/winbindd_util.c: typo fixes

2019-10-31T00:43:37+00:00

Signed-off-by: Bjoern Jacke 
Reviewed-by: Martin Schwenke

s3:winbind: Don't abort when receiving a NULL SID

2019-10-16T16:39:42+00:00

Source code in winbind_rpc.c states that if the trusted domain
has no SID, winbindd just aborts the session. This happens with
MIT Kerberos realm added as trust to AD and winbindd just returns
without processing further as there is no SID returned for the
Linux system having kerberos support.

This fix makes winbindd to skip the domain having NULL SID instead
of aborting the request completely.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13913

Signed-off-by: Amit Kumar 
Reviewed-by: Andreas Schneider 
Reviewed-by: Guenther Deschner 
Reviewed-by: Ralph Boehme

s3:libnet: Require sealed LDAP SASL connections for joining

2019-10-09T07:06:35+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy

winbind: provide passwd struct for group sid with ID_TYPE_BOTH mapping (again)

2019-09-27T17:25:29+00:00

https://git.samba.org/?p=samba.git;a=commitdiff;h=394622ef8c916cf361f8596dba4664dc8d6bfc9e
originally introduced the above feature.

This functionality was undone as part of "winbind: Restructure get_pwsid"
https://git.samba.org/?p=samba.git;a=commitdiff;h=bce19a6efe11980933531f0349c8f5212419366a
I think that this semantic change was accidential.

This patch undoes the semantic change and re-establishes the
functionality.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14141

Signed-off-by: Michael Adam 
Reviewed-by: Christof Schmitt 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Christof Schmitt 
Autobuild-Date(master): Fri Sep 27 17:25:29 UTC 2019 on sn-devel-184

s3:winbindd: implement the "winbind use krb5 enterprise principals" logic

2019-09-24T18:30:37+00:00

We can use enterprise principals (e.g. upnfromB@B.EXAMPLE.COM@PRIMARY.A.EXAMPLE.COM)
and delegate the routing decisions to the KDCs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Guenther Deschner

s3:libads: let kerberos_kinit_password_ext() return the canonicalized principal/realm

2019-09-24T18:30:37+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Guenther Deschner

s3-winbindd: fix forest trusts with additional trust attributes.

2019-09-20T01:14:42+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14130

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

messaging4: Pass fds to messaging handlers

2019-09-18T20:10:24+00:00

Boiler-plate replacement moving the (num_fds!=0) check down

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

Spelling fixes s/didnt'/didn't/

2019-09-01T22:21:27+00:00

Signed-off-by: Mathieu Parent 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

winbind: Fix the clang build

2019-08-06T21:49:28+00:00

clang complains that lm_resp and nt_resp is used uninitialized. This
is true for the "goto done;" in line 2644. This directly calls
log_authentication without having initialized those two blobs.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison