summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
* s4:dsdb: define DSDB_EXTENDED_SEC_DESC_PROPAGATION_OIDStefan Metzmacher2012-11-302-0/+13
* s4:dsdb/descriptor: handle DSDB_CONTROL_SEC_DESC_PROPAGATION_OIDStefan Metzmacher2012-11-301-5/+67
* s4:dsdb/schema_data: allow DSDB_CONTROL_SEC_DESC_PROPAGATION_OID on modifyStefan Metzmacher2012-11-301-0/+16
* s4:dsdb/repl_meta_data: allow DSDB_CONTROL_SEC_DESC_PROPAGATION_OID on modifyStefan Metzmacher2012-11-301-0/+16
* s4:dsdb/objectclass_attrs: allow DSDB_CONTROL_SEC_DESC_PROPAGATION_OID on modifyStefan Metzmacher2012-11-301-0/+18
* s4:dsdb: define DSDB_CONTROL_SEC_DESC_PROPAGATION_OIDStefan Metzmacher2012-11-302-0/+8
* s4:dsdb/subtree_delete: delete from the leafs to the root (bug #7711)Stefan Metzmacher2012-11-301-0/+19
* s4:dsdb/subtree_delete: do the recursive delete AS_SYSTEM/TRUSTED (bug #7711)Stefan Metzmacher2012-11-301-3/+11
* s4:dsdb/subtree_delete: do an early return and avoid some nestingStefan Metzmacher2012-11-301-24/+28
* s4:dsdb/objectclass: do not pass the callers controls on helper searchesStefan Metzmacher2012-11-301-1/+1
* s4:dsdb/acl: require SEC_ADS_DELETE_TREE if the TREE_DELETE control is given ...Stefan Metzmacher2012-11-301-0/+12
* s4:dsdb/dirsync: remove unused 'deletedattr' variableStefan Metzmacher2012-11-301-2/+0
* s4:provision: add pekList and msDS-ExecuteScriptPassword to @KLUDGEACLStefan Metzmacher2012-11-301-0/+2
* s4:dsdb/common: add pekList and msDS-ExecuteScriptPassword to DSDB_SECRET_ATT...Stefan Metzmacher2012-11-301-0/+2
* s4:dsdb/acl: also add DSDB_SECRET_ATTRIBUTES into the password attributesStefan Metzmacher2012-11-301-5/+36
* s4:dsdb/descriptor: the old nTSecurityDescriptor is always expected there on ...Stefan Metzmacher2012-11-301-0/+3
* s4:dsdb/descriptor: make explicit that we don't support MOD_DELETE on nTSecur...Stefan Metzmacher2012-11-301-0/+11
* s4:dsdb/descriptor: remove some nesting from descriptor_modifyStefan Metzmacher2012-11-301-10/+10
* s4:dsdb/descriptor: remove some unnecessary nestingStefan Metzmacher2012-11-301-10/+8
* s4:dsdb/descriptor: add some error checks to descriptor_{add,modify}Stefan Metzmacher2012-11-301-0/+12
* s4:dsdb/descriptor: remove support for unused LDB_CONTROL_RECALCULATE_SD_OIDStefan Metzmacher2012-11-301-26/+1
* s4:dsdb/descriptor: move special dn check to the start of descriptor_{add,mod...Stefan Metzmacher2012-11-301-19/+21
* s4:samba_upgradeprovision: use the sd_flags:1:15 control with an empty sdStefan Metzmacher2012-11-301-7/+14
* s4:provision: add get_empty_descriptor()Stefan Metzmacher2012-11-302-0/+6
* s4:dsdb/descriptor: if the caller specifies no DACL/SACL the objects gets a d...Stefan Metzmacher2012-11-301-1/+28
* s4:dsdb/descriptor: give SYSTEM the correct default owner (group) sidStefan Metzmacher2012-11-301-0/+6
* s4:dsdb/acl_read: enable acl checking on search by default (bug #8620)Stefan Metzmacher2012-11-302-2/+2
* s4:dsdb/acl_read: specify the correct access_mask for nTSecurityDescriptorStefan Metzmacher2012-11-301-1/+19
* s4:dsdb/acl_read: do search for instanceType AS_SYSTEM and with SHOW_RECYCLEDStefan Metzmacher2012-11-301-1/+3
* s4:dsdb/acl: calculate the correct access_mask when modifying nTSecurityDescr...Stefan Metzmacher2012-11-301-1/+14
* s4:dsdb/acl: don't protect confidential attributes when "acl:search = yes" is...Stefan Metzmacher2012-11-301-0/+11
* s4:dsdb/acl: remove unused "acl:perform" optionStefan Metzmacher2012-11-301-3/+0
* s4:dsdb/acl: do helper searches AS_SYSTEM and with SHOW_RECYCLEDStefan Metzmacher2012-11-301-5/+15
* s4:dsdb/descriptor: make it clear that the SD Flags are ignored on addStefan Metzmacher2012-11-301-1/+7
* s4:dsdb/descriptor: make use of dsdb_request_sd_flags()Stefan Metzmacher2012-11-301-47/+15
* s4:dsdb/descriptor: always use descriptor_search_callback if we return nTSecu...Stefan Metzmacher2012-11-301-1/+12
* s4:dsdb/descriptor: do searches for nTSecurityDescriptor AS_SYSTEM and with S...Stefan Metzmacher2012-11-301-11/+12
* s4:dsdb/acl_util: add dsdb_request_sd_flags() helper functionStefan Metzmacher2012-11-301-0/+37
* s4:dsdb/acl_util: do helper searches AS_SYSTEMStefan Metzmacher2012-11-301-0/+1
* s4:dsdb/extended_dn_store: do helper searches AS_SYSTEMStefan Metzmacher2012-11-301-1/+3
* s4:dsdb/extended_dn_in: do helper searches AS_SYSTEM and with SHOW_RECYCLEDStefan Metzmacher2012-11-301-12/+13
* s4:dsdb/objectclass: do helper searches AS_SYSTEM and with SHOW_RECYCLEDStefan Metzmacher2012-11-301-3/+31
* s4:dsdb/rootdse: do helper searches AS_SYSTEMStefan Metzmacher2012-11-301-7/+29
* s4:dsdb/rootdse: remove unused variableStefan Metzmacher2012-11-301-1/+0
* s4:tests/samba_tool/gpo.py: fix accidential line breakMichael Adam2012-11-301-2/+1
* s4:tests/samba_tool/gpo.py: add test_show_as_admin()Stefan Metzmacher2012-11-301-0/+5
* s4:netcmd/gpo.py: let get_gpo_info explicitly ask for the full ntSecurityDesc...Stefan Metzmacher2012-11-301-2/+4
* s4:netcmd/gpo.py: only ask for OWNER/GROUP/DACL when validating the nTSecurit...Stefan Metzmacher2012-11-301-5/+6
* s4:netcmd/gpo.py: the nTSecurityDescriptor may not be visible for the current...Stefan Metzmacher2012-11-301-3/+7
* s4:netcmd/gpo.py: s/ntSecurityDescriptor/nTSecurityDescriptorStefan Metzmacher2012-11-301-5/+5