summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* s3-privs Remove a pointer indirection from revoke_privilege()Andrew Bartlett2010-09-114-7/+7
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Don't export privs[] as a global variableAndrew Bartlett2010-09-114-50/+31
| | | | | | | | | | | | Instead, provide access functions for the LSA and net sam callers for the information they need. They still only enumerate the first 8 privileges that have traditionally been exposed. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-lsa Use sec_privilege_id() to lookup name to LUIDAndrew Bartlett2010-09-111-9/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Merge privilege lists from source3 and source4Andrew Bartlett2010-09-111-169/+126
| | | | | | | | | The LSA enumeration in source3 will not show the new privileges, but otherwise, they are now in common, and can be set by name. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Return number of entries in the old source3 listAndrew Bartlett2010-09-112-4/+5
| | | | | | | | | This ensures there isn't a behaviour change when the source3 list is combined with the longer source4 list. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/privileges Simplify get_privilege_luid() to return just the enumAndrew Bartlett2010-09-113-13/+6
| | | | | | | | | As Samba only deals with the lower 32 bits of the LUID, just return those and let the LSA layer deal with the upper 0 bits. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Don't memcpy a uint64_t value, just assign it.Andrew Bartlett2010-09-111-1/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use ARRAY_SIZE() consistantly.Andrew Bartlett2010-09-111-15/+16
| | | | | | | | | This avoids the use of SE_END, and has all callers walking the array using the same termination condition. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Fix and clarify privilege manipulation function commentsAndrew Bartlett2010-09-111-9/+9
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Make the two privileges tables share a common struct definitionAndrew Bartlett2010-09-112-27/+22
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Move source4/ privileges code into the common libcli/securityAndrew Bartlett2010-09-116-314/+333
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Move manual prototypes to common privileges.hAndrew Bartlett2010-09-112-20/+88
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Inline dump_se_priv into callers now that it's just a uint64_tAndrew Bartlett2010-09-114-24/+9
| | | | | | | | The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use talloc_realloc() not TALLOC_REALLOC_ARRAY()Andrew Bartlett2010-09-111-1/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use C99 typesAndrew Bartlett2010-09-111-3/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use true and false, not True and FalseAndrew Bartlett2010-09-111-22/+22
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Move source3/ privileges implmentation into commonAndrew Bartlett2010-09-114-7/+6
| | | | | | Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Rename structure elements for greater clarityAndrew Bartlett2010-09-113-12/+12
| | | | | | | | | It is important to make clear which is the LUID and which is the Samba-only bitmap mask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs More clarity in variable namesAndrew Bartlett2010-09-111-4/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Rename mask -> privilege_mask to be more clearAndrew Bartlett2010-09-111-26/+26
| | | | | | | | | After SE_PRIV was removed, it became less clear what these parameters were for. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:auth Remove NT_USER_TOKENAndrew Bartlett2010-09-1132-121/+119
| | | | | | | | | The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Change struct nt_user_token -> struct security_tokenAndrew Bartlett2010-09-1123-87/+84
| | | | | | | | This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Change type of num_sids to uint32_tAndrew Bartlett2010-09-1116-38/+48
| | | | | | | | | | | | | | size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* security.idl Add commentsAndrew Bartlett2010-09-111-1/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* security.idl Update Windows privileges list to Win2008R2Andrew Bartlett2010-09-111-30/+35
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Only store low bits of luid in privileges tableAndrew Bartlett2010-09-112-18/+20
| | | | | | | | Samba only uses the low bits, and this makes the code simpler. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-privs Add a lookup by index of privilagesAndrew Bartlett2010-09-112-3/+14
| | | | | | | | | Now that privileges are no longer given luid values sequentially, we need another way to look them up for enumeration. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* privs Add my CopyrightAndrew Bartlett2010-09-113-0/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* security.idl clarify which privilages are LUID and bitmap valuesAndrew Bartlett2010-09-111-6/+10
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Remove comment already moved to security.idlAndrew Bartlett2010-09-111-41/+0
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Use constants from security.idlAndrew Bartlett2010-09-111-9/+9
| | | | | | | | The values in security.idl have been updated to match these. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-privs Remove link between enum sec_privilege and the privilege bitmapAndrew Bartlett2010-09-112-46/+140
| | | | | | | | | | | This allows us to set the enum sec_privilege constants to the LUID values that are seen from windows, which we need to match, in order to preserve the support for the NT Print Migrator tool after a merge with the source3/ privileges code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Further changes to remove SE_PRIVAndrew Bartlett2010-09-1110-110/+108
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* privs Move privilege bitmasks to security.idlAndrew Bartlett2010-09-112-19/+40
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:privs Change to new host endian neutral privilages tdb formatAndrew Bartlett2010-09-111-3/+16
| | | | | | | | | | | | | These values are stored in account_policy.tdb, and the old format, using a 128 bit bitmap was not endian neutral. The previous endian-dependent format was introduced in 46e5effea948931509283cb84b27007d34b521c8 replacing a 32 bit number which was used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:Change SE_PRIV to uint64_tAndrew Bartlett2010-09-111-20/+20
| | | | | | | | This removes the SE_PRIV typedef Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:privileges Change SE_PRIV to be just a uint64_tAndrew Bartlett2010-09-112-46/+22
| | | | | | | | | | | | We don't need 128 possible privileges here, as we only use 12. This reverts some of 46e5effea948931509283cb84b27007d34b521c8 by Jerry back in 2005, where he introduced the SE_PRIV structure to replace the uint32_t used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* lib/replace:wscript - don't check twice for type "bool"Matthias Dieter Wallnöfer2010-09-111-2/+1
|
* lib/replace:wscript - attempt to fix the features detection on Tru64Matthias Dieter Wallnöfer2010-09-111-2/+2
| | | | | | | Hopefully now we detect the built-in "socklen_t" https://bugs.internet2.edu/jira/browse/SSPCPP-114 http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/V50_HTML/MAN/MAN5/0001____.HTM
* Add check missing from previous patch after talloc_strdup().Jeremy Allison2010-09-101-0/+3
| | | | Jeremy.
* Factor out the recent changes into a function - check_parent_exists().Jeremy Allison2010-09-101-77/+103
| | | | | | | | | | | | | | | | | | | | | | | | | | Fix this to ensure that if "start" is manipulated, then "dirpath" is changed also. Ensures that when the path: /a/long/file/name/path.txt is processed, we first stat: /a/long/file/name/path.txt and if this fails, we try to stat: /a/long/file/name if this path exists (the normal case when creating a new entry in a directory) then we no longer do the individual path name walk, but only do case insensitive lookup on the last component. If the stat fails we do the full pathname walk as normal in 3.5.x and below. Metze, examine this change for your back-port. Jeremy.
* s3: Simplify the logic in generate_krb5_ccacheVolker Lendecke2010-09-111-51/+28
| | | | gd, jra, others, please check!
* s3/winbind: use mono time for startup timeout checkBjörn Jacke2010-09-103-6/+6
|
* libreplace: clock_gettime sets errnoBjörn Jacke2010-09-101-1/+2
|
* s4/pvfs: use monotonic time for this timeoutBjörn Jacke2010-09-102-4/+4
|
* s4/ldap: use time_mono for reconnect timeoutBjörn Jacke2010-09-101-2/+2
|
* s4/torture: use time_mono for timeoutsBjörn Jacke2010-09-101-2/+2
|
* s4/torture: use time_mono for delta timeBjörn Jacke2010-09-101-2/+2
|
* s3-selftest: add print_test_extended (as called from RPC-PRINTER) to ↵Günther Deschner2010-09-101-0/+1
| | | | | | knownfail list. Guenther
* s4:client/client.c - fix wrong return codes in "do_connect"Matthias Dieter Wallnöfer2010-09-101-2/+2
| | | | Detected by the Solaris cc compiler.
generated by cgit (git 2.34.1) at 2025-09-25 20:29:52 +0000