summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3-privs More clarity in variable namesAndrew Bartlett2010-09-111-4/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Rename mask -> privilege_mask to be more clearAndrew Bartlett2010-09-111-26/+26
| | | | | | | | | After SE_PRIV was removed, it became less clear what these parameters were for. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:auth Remove NT_USER_TOKENAndrew Bartlett2010-09-1132-121/+119
| | | | | | | | | The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Change struct nt_user_token -> struct security_tokenAndrew Bartlett2010-09-1123-87/+84
| | | | | | | | This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Change type of num_sids to uint32_tAndrew Bartlett2010-09-1116-38/+48
| | | | | | | | | | | | | | size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* security.idl Add commentsAndrew Bartlett2010-09-111-1/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* security.idl Update Windows privileges list to Win2008R2Andrew Bartlett2010-09-111-30/+35
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Only store low bits of luid in privileges tableAndrew Bartlett2010-09-112-18/+20
| | | | | | | | Samba only uses the low bits, and this makes the code simpler. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-privs Add a lookup by index of privilagesAndrew Bartlett2010-09-112-3/+14
| | | | | | | | | Now that privileges are no longer given luid values sequentially, we need another way to look them up for enumeration. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* privs Add my CopyrightAndrew Bartlett2010-09-113-0/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* security.idl clarify which privilages are LUID and bitmap valuesAndrew Bartlett2010-09-111-6/+10
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Remove comment already moved to security.idlAndrew Bartlett2010-09-111-41/+0
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Use constants from security.idlAndrew Bartlett2010-09-111-9/+9
| | | | | | | | The values in security.idl have been updated to match these. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-privs Remove link between enum sec_privilege and the privilege bitmapAndrew Bartlett2010-09-112-46/+140
| | | | | | | | | | | This allows us to set the enum sec_privilege constants to the LUID values that are seen from windows, which we need to match, in order to preserve the support for the NT Print Migrator tool after a merge with the source3/ privileges code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Further changes to remove SE_PRIVAndrew Bartlett2010-09-1110-110/+108
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* privs Move privilege bitmasks to security.idlAndrew Bartlett2010-09-112-19/+40
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:privs Change to new host endian neutral privilages tdb formatAndrew Bartlett2010-09-111-3/+16
| | | | | | | | | | | | | These values are stored in account_policy.tdb, and the old format, using a 128 bit bitmap was not endian neutral. The previous endian-dependent format was introduced in 46e5effea948931509283cb84b27007d34b521c8 replacing a 32 bit number which was used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:Change SE_PRIV to uint64_tAndrew Bartlett2010-09-111-20/+20
| | | | | | | | This removes the SE_PRIV typedef Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:privileges Change SE_PRIV to be just a uint64_tAndrew Bartlett2010-09-112-46/+22
| | | | | | | | | | | | We don't need 128 possible privileges here, as we only use 12. This reverts some of 46e5effea948931509283cb84b27007d34b521c8 by Jerry back in 2005, where he introduced the SE_PRIV structure to replace the uint32_t used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* lib/replace:wscript - don't check twice for type "bool"Matthias Dieter Wallnöfer2010-09-111-2/+1
|
* lib/replace:wscript - attempt to fix the features detection on Tru64Matthias Dieter Wallnöfer2010-09-111-2/+2
| | | | | | | Hopefully now we detect the built-in "socklen_t" https://bugs.internet2.edu/jira/browse/SSPCPP-114 http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/V50_HTML/MAN/MAN5/0001____.HTM
* Add check missing from previous patch after talloc_strdup().Jeremy Allison2010-09-101-0/+3
| | | | Jeremy.
* Factor out the recent changes into a function - check_parent_exists().Jeremy Allison2010-09-101-77/+103
| | | | | | | | | | | | | | | | | | | | | | | | | | Fix this to ensure that if "start" is manipulated, then "dirpath" is changed also. Ensures that when the path: /a/long/file/name/path.txt is processed, we first stat: /a/long/file/name/path.txt and if this fails, we try to stat: /a/long/file/name if this path exists (the normal case when creating a new entry in a directory) then we no longer do the individual path name walk, but only do case insensitive lookup on the last component. If the stat fails we do the full pathname walk as normal in 3.5.x and below. Metze, examine this change for your back-port. Jeremy.
* s3: Simplify the logic in generate_krb5_ccacheVolker Lendecke2010-09-111-51/+28
| | | | gd, jra, others, please check!
* s3/winbind: use mono time for startup timeout checkBjörn Jacke2010-09-103-6/+6
|
* libreplace: clock_gettime sets errnoBjörn Jacke2010-09-101-1/+2
|
* s4/pvfs: use monotonic time for this timeoutBjörn Jacke2010-09-102-4/+4
|
* s4/ldap: use time_mono for reconnect timeoutBjörn Jacke2010-09-101-2/+2
|
* s4/torture: use time_mono for timeoutsBjörn Jacke2010-09-101-2/+2
|
* s4/torture: use time_mono for delta timeBjörn Jacke2010-09-101-2/+2
|
* s3-selftest: add print_test_extended (as called from RPC-PRINTER) to ↵Günther Deschner2010-09-101-0/+1
| | | | | | knownfail list. Guenther
* s4:client/client.c - fix wrong return codes in "do_connect"Matthias Dieter Wallnöfer2010-09-101-2/+2
| | | | Detected by the Solaris cc compiler.
* s4:lib/policy/gp_filesys.c - remove dead codeMatthias Dieter Wallnöfer2010-09-101-2/+0
| | | | Found out by Solaris cc
* s4:torture/locktest.c - add a cast in order to quiet a warning on Solaris ccMatthias Dieter Wallnöfer2010-09-101-1/+1
|
* s4:libcli/wrepl/winsrepl.c - add more "char *" casts in order to suppress ↵Matthias Dieter Wallnöfer2010-09-101-1/+1
| | | | Solaris warnings
* s3/s4:libcli/tstream - add more "char *" casts in order to suppress Solaris ↵Matthias Dieter Wallnöfer2010-09-102-14/+14
| | | | warnings
* s4:torture/ntp/ntp_signd.c - add more "char *" casts in order to suppress ↵Matthias Dieter Wallnöfer2010-09-101-2/+2
| | | | Solaris warnings
* s3-printing: fix non-ads build after prototype changes.Günther Deschner2010-09-101-1/+1
| | | | Guenther
* s3: Simplify generate_krb5_ccache slightlyVolker Lendecke2010-09-101-4/+0
| | | | strequal deals with a NULL string input just fine
* Check all SMB_MALLOC returns correctly. Found by Andreas Moroder ↵Jeremy Allison2010-09-102-3/+18
| | | | | | <andreas.moroder@gmx.net>. Jeremy
* s4:torture/rpc/winreg.c - hopefully this attempt fixes Solaris "cc" on the ↵Matthias Dieter Wallnöfer2010-09-101-27/+10
| | | | | | | buildfarm The Solaris "cc" incompatiblity on this codepart seems to be harder to fix than it looks like.
* s4:getncchanges_change_master - also in this call "i" needs to be unsignedMatthias Dieter Wallnöfer2010-09-101-1/+2
|
* s3: auth.krb5ccname and auth.unix_username are both fstringsVolker Lendecke2010-09-101-4/+2
| | | | There's no point in checking for != NULL
* selftest/s3-selftest.sh: knownfailure filtering for non-build-farm make testStefan Metzmacher2010-09-101-2/+1
| | | | metze
* s3:torture: fix printf output, lines can't start with lower case "test"Stefan Metzmacher2010-09-101-31/+30
| | | | metze
* s3:torture: fix run_uid_regression_testStefan Metzmacher2010-09-101-8/+20
| | | | metze
* s3-errormap: map ERRSRV/ERRbaduid to NT_STATUS_USER_SESSION_DELETEDStefan Metzmacher2010-09-101-0/+2
| | | | metze
* s4-errormap: map ERRSRV/ERRbaduid to NT_STATUS_USER_SESSION_DELETEDStefan Metzmacher2010-09-101-0/+1
| | | | metze
* s4:provision: remember the setup directory if it wasn't the defaultStefan Metzmacher2010-09-104-0/+11
| | | | | | This fixes make test without a make install. metze
* s3-spoolss: Fix _spoolss_GetPrinter().Günther Deschner2010-09-101-1/+2
| | | | | | In the error case, we need to TALLOC_FREE(r->out.info), don't ask :-) Guenther