summaryrefslogtreecommitdiffstats
path: root/source3/lib/privileges.c
Commit message (Collapse)AuthorAgeFilesLines
* r4805: Last planned change to the privileges infrastructure:Gerald Carter2007-10-101-120/+309
| | | | | | | | | | | | * rewrote the tdb layout of privilege records in account_pol.tdb (allow for 128 bits instead of 32 bit flags) * migrated to using SE_PRIV structure instead of the PRIVILEGE_SET structure. The latter is now used for parsing routines mainly. Still need to incorporate some client support into 'net' so for setting privileges. And make use of the SeAddUserPrivilege right. (This used to be commit 41dc7f7573c6d637e19a01e7ed0e716ac0f1fb15)
* r4742: add server support for lsa_add/remove_account_rights() and fix some ↵Gerald Carter2007-10-101-12/+65
| | | | | | parsing bugs related to that code (This used to be commit 7bf1312287cc1ec6b97917ba25fc60d6db09f26c)
* r4731: Fix the buildVolker Lendecke2007-10-101-1/+2
| | | | (This used to be commit 340d7f317332f159460d04db8ccc75116c83d234)
* r4724: Add support for Windows privileges in Samba 3.0Gerald Carter2007-10-101-218/+429
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | (based on Simo's code in trunk). Rewritten with the following changes: * privilege set is based on a 32-bit mask instead of strings (plans are to extend this to a 64 or 128-bit mask before the next 3.0.11preX release). * Remove the privilege code from the passdb API (replication to come later) * Only support the minimum amount of privileges that make sense. * Rewrite the domain join checks to use the SeMachineAccountPrivilege instead of the 'is a member of "Domain Admins"?' check that started all this. Still todo: * Utilize the SePrintOperatorPrivilege in addition to the 'printer admin' parameter * Utilize the SeAddUserPrivilege for adding users and groups * Fix some of the hard coded _lsa_*() calls * Start work on enough of SAM replication to get privileges from one Samba DC to another. * Come up with some management tool for manipultaing privileges instead of user manager since it is buggy when run on a 2k client (haven't tried xp). Works ok on NT4. (This used to be commit 77c10ff9aa6414a31eece6dfec00793f190a9d6c)
* r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison2007-10-101-6/+6
| | | | | | | | | | allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy. (This used to be commit 620f2e608f70ba92f032720c031283d295c5c06a)
* don't crash on a NULL priviledge pointer; patch from Jianliang LuGerald Carter2003-12-041-0/+6
| | | | (This used to be commit 2742e813fea2366f91bec62dca407f65ad5c4623)
* Delete unused label to fix compiler warning.Tim Potter2003-10-141-1/+0
| | | | (This used to be commit e34d21af3882a034810737039dbaae4d45e2645c)
* split some security related functions in their own files.Simo Sorce2003-10-061-0/+345
(no need to include all of smbd files to use some basic sec functions) also minor compile fixes (This used to be commit 66074d3b097d8cf2a231bf08c7f4db62da68189d)