summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* libcli/auth Merge source4/libcli/security and util_sid.c into the common codeAndrew Bartlett2010-10-1421-740/+615
| | | | | | | | | This should ensure we only have one copy of these core functions in the tree. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Define traditional constants in terms of IDL macrosAndrew Bartlett2010-10-142-65/+64
| | | | | | | | | | | The source3/ code uses these constants in a lot of places, and it will take time and care to rename them, if that is desired. Linking the macros here will at least allow common code to use the IDL based macros, and preserve a documentary link between the constants (other than just their value) Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Move source3/lib/util_seaccess.c into the common codeAndrew Bartlett2010-10-145-15/+62
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-acl Merge sec_access_check() with se_access_check() from source3/Andrew Bartlett2010-10-143-4/+18
| | | | | | Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-acl Use uint32_t for counting the ACEsAndrew Bartlett2010-10-141-1/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-acl Merge source4-supported privileges into se_access_checkAndrew Bartlett2010-10-141-5/+9
| | | | | | | | This will shortly be the common se_access_check function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-util_nttoken.c Also copy the rights_mask when copying a security_tokenAndrew Bartlett2010-10-141-0/+4
| | | | | | | | | These are unused in source3/ code at the moment, but it would be unfortunate if that were to change, and this function not be updated. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Use security_token_debug() from common codeAndrew Bartlett2010-10-149-36/+8
| | | | | | | | | This prints the security token including the privileges as strings instead of just a bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth use security_token_has_sid() from the common codeAndrew Bartlett2010-10-141-9/+2
| | | | | | | | | The wrapper call is left here to avoid changing semantics for the NULL parameter case. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3 Replace is_sid_in_token() with security_token_has_sid() from common codeAndrew Bartlett2010-10-146-21/+10
| | | | | | | | The two routines are identical, so there is no need to keep both. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4: show samba version in bin/samba -bAndrew Tridgell2010-10-141-0/+1
| | | | | Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 14 02:24:47 UTC 2010 on sn-devel-104
* s4:samldb LDB module - cosmetic fixupsMatthias Dieter Wallnöfer2010-10-131-9/+9
| | | | | | | | - Update the module description - Fix indentation Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 13 20:55:18 UTC 2010 on sn-devel-104
* heimdal: Add soname for com_err.Jelmer Vernooij2010-10-131-0/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 20:00:40 UTC 2010 on sn-devel-104
* heimdal: Add sonames.Jelmer Vernooij2010-10-131-2/+9
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 18:15:04 UTC 2010 on sn-devel-104
* samdb: Set soname.Jelmer Vernooij2010-10-131-1/+2
|
* s4:sam.py - tests for "userAccountControl" attributeMatthias Dieter Wallnöfer2010-10-131-3/+448
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 13 17:31:29 UTC 2010 on sn-devel-104
* s4:samldb LDB module - deny creation of temporary duplicate accountsMatthias Dieter Wallnöfer2010-10-131-0/+12
|
* s4:samldb LDB module - proof the account type also on LDB modify operationsMatthias Dieter Wallnöfer2010-10-131-0/+8
|
* ldb: Only build LIBLDB_MAIN when building ldb itself.Jelmer Vernooij2010-10-131-8/+8
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 15:41:29 UTC 2010 on sn-devel-104
* s4:sam.py - add a test for the group type changing behaviourMatthias Dieter Wallnöfer2010-10-131-0/+595
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 13 14:17:31 UTC 2010 on sn-devel-104
* s4:samldb LDB module - support the group type changing properlyMatthias Dieter Wallnöfer2010-10-131-1/+53
| | | | | | This is exactly that what Windows allows. It was proven by a blackbox test. And we also need to deny add operations of builtin groups.
* s4:ldap.py - test the "isCriticalSystemObject" behaviourMatthias Dieter Wallnöfer2010-10-131-0/+39
|
* s4:setup/provision_self_join.ldif - let the samldb LDB module fill in ↵Matthias Dieter Wallnöfer2010-10-131-1/+1
| | | | | | "isCriticalSystemObject" It recognizes it now automatically.
* s4:samldb LDB module - deny also the direct modification of ↵Matthias Dieter Wallnöfer2010-10-131-3/+14
| | | | "isCriticalSystemObject" on modify operations
* s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" ↵Matthias Dieter Wallnöfer2010-10-131-0/+9
| | | | | | entries They're only allowed to be created with the RELAX control specified.
* s4:samldb LDB module - first implementation of the samldb primary group triggerMatthias Dieter Wallnöfer2010-10-131-48/+61
| | | | | | This was done according to MS-SAMR 3.1.1.8.2 But do use it only for add operations at the moment.
* s4:samldb LDB module - use the new "objectclass_trigger" for add operationsMatthias Dieter Wallnöfer2010-10-131-142/+33
| | | | | Additionally clean up "samldb_fill_object" which is now much easier to comprehend.
* s4:samldb LDB module - first implementation of the samldb objectclass triggerMatthias Dieter Wallnöfer2010-10-131-0/+176
| | | | | | | This was done according to MS-SAMR 3.1.1.8.1 I need to perform some RELAX checks since otherwise the provision wouldn't work anymore.
* ldb:ldb_match.c - fix a counter typeMatthias Dieter Wallnöfer2010-10-131-1/+1
|
* s3:gpfs: Add support for the gpfs_ftruncate callChristian Ambach2010-10-133-2/+28
| | | | | | | | ported from the v3-4-ctdb branch to master This used to be commit 1f138cc9f4a Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Oct 13 13:34:25 UTC 2010 on sn-devel-104
* s3:vfs:gpfs convert sharemodes/leases parameterChristian Ambach2010-10-132-20/+64
| | | | | convert gpfs:sharemodes and gpfs:leases parameters from a global setting to a per share setting
* s3:vfs:syncops add option to disable module per shareChristian Ambach2010-10-131-6/+35
| | | | | | add an option to disable the syncops module completely for a share with syncops:disable = true
* s3:vfs:syncops make it possible to specify syncops:onclose per shareChristian Ambach2010-10-131-7/+43
| | | | | | | | convert the onclose option of the vfs_syncops module from a global option to a service-specific one as preparation for further flags, use a struct to store in the VFS handle instead of just the onclose flag
* wafsamba/developer: Forbid shared objects with unresolved symbols, ifJelmer Vernooij2010-10-131-1/+1
| | | | | | | the linker supports such a flag. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 12:52:22 UTC 2010 on sn-devel-104
* wafsamba: Don't allow circular dependencies involving libraries byJelmer Vernooij2010-10-131-7/+17
| | | | default.
* dsdb/schema_data: Build as shared object.Jelmer Vernooij2010-10-131-1/+1
|
* dsdb/schema_load: Build as shared object.Jelmer Vernooij2010-10-131-1/+1
|
* samdb: Build as library.Jelmer Vernooij2010-10-131-1/+1
|
* ldb: raise minor version number for new ldb_msg_match_error() functionAndrew Tridgell2010-10-132-1/+227
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Oct 13 11:42:18 UTC 2010 on sn-devel-104
* s4-ldb: take advantage of ldb_match_msg_error() in more placesAndrew Tridgell2010-10-134-8/+32
| | | | this gives better error checking
* s4-schema: don't name variables after standard libc functionsAndrew Tridgell2010-10-131-3/+3
|
* s4-ldb: use operator_fn syntax function in ldb_match codeAndrew Tridgell2010-10-131-92/+212
| | | | | | | | this also fixes error handling in case of bad syntax, memory error etc, which was previously conidered as a mismatch, but should return an error Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: implement an operator_fn for the ldb-samba syntaxesAndrew Tridgell2010-10-131-14/+94
| | | | | | | this allows us to properly handle the LDB_OP_PRESENT operator on deleted linked attributes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: added an optional operator_fn in the schema syntaxAndrew Tridgell2010-10-133-5/+25
| | | | | | | | | | | | | this function takes the operator being invoked, which will allow schema functions to provide more fine grained control over comparisons. The key bug this was introduced to fix is the incorrect handling of the LDB_OP_PRESENT test for deleted linked attributes. The backends are unaware of the deleted state of these links, so they cannot do a LDB_OP_PRESENT test on their own. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-torture: zero all of trans before the test startsAndrew Tridgell2010-10-131-1/+1
|
* s4-torture: fixed uninitialised variable errorAndrew Tridgell2010-10-131-1/+1
| | | | ret is uninitialised if the directory is empty
* s4: don't rebuild all of heimdal when dynconfig options changeAndrew Tridgell2010-10-132-7/+18
| | | | only 2 files in heimdal depend on dynconfig variables
* autobuild: do make install after make testAndrew Tridgell2010-10-131-2/+2
| | | | | | | this ensures that commits that break uninstalled testing get caught by autobuild in future Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
* s4-dynconfig: use the build modules when running from build directoryAndrew Tridgell2010-10-131-3/+7
| | | | | | | we need to use the newly built modules when running from the build directory to ensure we don't run tests against a stale install Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
* ldb: when running from build directory, use the build modulesAndrew Tridgell2010-10-131-27/+35
| | | | | | | we need to use the build modules, not the installed modules, so tests run from the source directory are valid Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>