summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
...
* added printer admin optionAndrew Tridgell2000-08-091-0/+3
| | | | any user in that list can do anything to a printer
* Changed the sec desc access checks to match the spec. Needs testing.Jeremy Allison2000-08-081-3/+0
| | | | Jeremy.
* make protoGerald Carter2000-08-081-2/+14
|
* All changes related to rpcclient...Gerald Carter2000-08-082-1/+23
| | | | | | | | | | | | | - cleaned up some code - Fixed a few memory leaks of my own making - Add AddPrinterDriver(); I'm missing some of the semantics here as the call is done correctly, but I'm not getting all the information right in the DRIVER_INFO_3 struct I think. Will work on it tomorrow some more... --jerry
* make protoGerald Carter2000-08-041-1/+1
|
* make protoGerald Carter2000-08-041-3/+10
|
* After talking with Jeremy and JF (and staring at packet traces betweenGerald Carter2000-08-041-1/+3
| | | | | | | | | | NT <-> NT), I've come to realize that UNISTR2 strings should be NULL terminated. jerry
* Fixed up the user/group contexts when using authenticated pipes.Jeremy Allison2000-08-041-0/+2
| | | | | | | | Added a become_root()/unbecome_root() (push/pop security context) around the initgroups() call to ensure it would succeed. Hmmm - I wonder if this call being done as non-root might explain any "group access" bugs we've had in the past.... Jeremy.
* Added an NT_USER_TOKEN structure that is copied/passed around associatedJeremy Allison2000-08-033-3/+62
| | | | | | | with the current user. This will allow se_access_check() to quickly do a SD check without having to translate uid/gid's to SIDs. Still needs work on pipe calls. Jeremy.
* Started to canonicalize our handling of uid -> sid code in order toJeremy Allison2000-08-022-15/+25
| | | | | | | | | | | | | | | | | | | | | | | | | get ready and fix se_access_check(). Added cannonical lookup_name(), lookup_sid(), uid_to_sid(), gid_to_sid() functions that look via winbind first the fall back on local lookup. All Samba should use these rather than trying to call winbindd code directly. Added NT_USER_TOKEN struct in user_struct, contains list of NT sids associated with this user. se_access_check() should use this (cached) value rather than attempting to do the same thing itself when given a uid/gid pair. More work needs to be done to preserve these things accross security context changes (especially with the tricky pipe problem) but I'm beginning to see how this will be done..... probably by registering a new vuid for an authenticated RPC pipe and not treating the pipe calls specially. More thoughts needed - but we're almost there... Jeremy.
* Tidyup removing many of the 0xC0000000 | NT_STATUS_XXX stuff (only need ↵Jeremy Allison2000-08-011-5/+0
| | | | | | | | NT_STATUS_XXX). Removed IS_BITS_xxx macros as they were just reproducing "C" syntax in a more obscure way. Jeremy.
* Added print job substitutions for %{printername}, %{sharename} and %{portname}Jeremy Allison2000-08-012-0/+7
| | | | | | from the NT printer tdb. Also added checks for time restrictions before allowing a job to print. Jeremy.
* Added John Reilly's enumports/addprinter/delprinter scripting code plus theJeremy Allison2000-07-312-1/+6
| | | | | | | | | | fix for the Win9x printer drivers. Changed command names to add "command" string on the end for some consistancy with the other scripting commands. Added '%P' option to tdbpack/unpack to store long comment string. Made port name be "Samba Printer Port" if no enum port script given. Fixed prs_uint32_pre code to cope with null args. Jeremy.
* make protoGerald Carter2000-07-311-10/+13
|
* Ok - this is a *BIG* change - but it fixes the problems with static stringsJeremy Allison2000-07-275-20/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | in the RPC code. This change was prompted by trying to save a long (>256) character comment in the printer properties page. The new system associates a TALLOC_CTX with the pipe struct, and frees the pool on return of a complete PDU. A global TALLOC_CTX is used for the odd buffer allocated in the BUFFERxx code, and is freed in the main loop. This code works with insure, and seems to be free of memory leaks and crashes (so far) but there are probably the occasional problem with code that uses UNISTRxx structs on the stack and expects them to contain storage without doing a init_unistrXX(). This means that rpcclient will probably be horribly broken. A TALLOC_CTX also needed associating with the struct cli_state also, to make the prs_xx code there work. The main interface change is the addition of a TALLOC_CTX to the prs_init calls - used for dynamic allocation in the prs_XXX calls. Now this is in place it should make dynamic allocation of all RPC memory on unmarshall *much* easier to fix. Jeremy.
* make protoGerald Carter2000-07-251-0/+5
| | | | --jerry
* Added some error checking and returns to the new 'move' code.Jeremy Allison2000-07-251-2/+2
| | | | Jeremy.
* A rather big change set ! (listed in no particular order)Jean-François Micouleau2000-07-252-7/+10
| | | | | | | | | | | | | | | | | | | | | - changed the default forms flag to 2 - all short architecture name are uppercased - get_short_archi() is now case unsensitive - the drivers TDB is indexed by archi/version/name - implemented code to move drivers from the upload area to the download area. Someone else need to look at that code. - don't return anymore a default driver if it doesn't exist in the TDB. Instead return an error. - cleaned prs_unistr. - #ifdef out jeremy's new SD parsing in printer_info_2 - removed the unused MANGLE_CODE - #ifdef out the security checking in update_printer() as it doesn't work for me. Zap your ntdrivers.tdb, it won't work anymore. J.F.
* Fixed open handle code in printers - 3 functions were always being doneJeremy Allison2000-07-222-21/+22
| | | | | | in order - moved them into open_printer_hnd(). Added saving of comment field. Jeremy.
* make protoGerald Carter2000-07-211-0/+13
|
* make protoGerald Carter2000-07-201-0/+10
|
* Code from John Reilly <jreilly@hp.com> to add tdb lookups into the Win95Jeremy Allison2000-07-191-0/+1
| | | | | printer driver download if looking for the default driver files fail. Jeremy.
* Instead of handing back a string (which might be a DNS name or an IPChristopher R. Hertel2000-07-191-2/+2
| | | | | | | | | | | | | | | | | | string), the wins_srv module now hands back a struct in_addr when it's called. It caches the IP address once it has been looked up. The IP is cleared (and must be looked up again) if the 'wins server' parameter is reread, or if the node is marked 'dead'. A dead node will not be re-tried for 10 minutes (per a #define in wins_srv.c). As it was, the code was reading the WINS server name or IP directly from lp_wins_server. That's okay, except that if the value was expressed as a name, then a DNS lookup would be done every time the client wanted to talk to the server. I still need to work out the implications of failover regarding the 'unicast subnet' list. Chris -)-----
* First cut toward adding WINS server failover.Christopher R. Hertel2000-07-191-10/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | *Note: failover doesn't actually work yet!* It's just that the code I'm adding provides all of the pieces necessary. I do have one big question. Something that I'll have to ask Jeremy, I'm thinkin'. In nmbd/nmbd_subnetdb.c the IP of the WINS server is used to set up the Unicast subnet. ...so what happens if the WINS server changes? My guess is either: a) nothing. b) I'd have to change the unicast subnet entry whenever the WINS server changes. Urq. BTW, the lp_wins_server() function no longer returns the WINS server name or IP. It returns the list of WINS servers entered in smb.conf. To get the currently 'live' WINS server, use the wins_srv() function. Fun, eh? Chris -)-----
* Fixed some more client SPOOLSS functions. The followingGerald Carter2000-07-188-361/+445
| | | | | | | | | | | | | | | | | | | | | | | | | | | functions work now: - spoolenum - spoolopen - spoolgetprinter - spoolgetprinterdriver Items todo: - track down memory bug with spoolenumdata - fix spoolgetprinterdriverdir - fix spoolgetdata - fix display_job_info_ctr in spooljobs All part of the ongoing rpcclient work. Also included a new generic list ADT. Cleaner and simplier than the stuff in util_array.c i think (but then that's why I wrote it). --jerry
* make protoTim Potter2000-07-171-84/+0
|
* make protoTim Potter2000-07-171-339/+338
|
* reverted a some previous additions.Gerald Carter2000-07-151-15/+4
| | | | | | | Removed msrpc_local struct --jerry
* make protoGerald Carter2000-07-143-352/+454
| | | | | | | and a few changes to ntdomain for rpcclient printing functions --jerry
* Typo. It said "DEGUG" in the comments. I dunno how to degug, or gug forChristopher R. Hertel2000-07-121-1/+1
| | | | that matter. crh
* make protoGerald Carter2000-07-101-0/+1
|
* Fixes for various compile warnings on Solaris 8.Tim Potter2000-07-101-14/+14
|
* Moved winbind client functions from various odd locations toTim Potter2000-07-101-7/+11
| | | | | | nsswitch/wb_client.c Merge of nsswitch/common.c rename to nsswitch/wb_common.c from TNG.
* make protoTim Potter2000-07-102-335/+336
|
* More rpcclient merge issues:Gerald Carter2000-07-073-0/+129
| | | | | | | | | | | | * fixes some readline bugs from the merge * first attempt at commands (spoolenum almost works) * no changes to existing functions in HEAD; only additions of new functions. I'll weed out what I can as I go. --jerry
* printing/nt_printing.c: (From JF) use the driver name - already given to us.Jeremy Allison2000-07-061-16/+23
| | | | | | | | printing/printing.c: priority needs to be 1 not zero (found by checked build). rpc_server/srv_spoolss_nt.c: Log invalid handle access, also print out if this is a different pid handle. This will help track down client access after a connection is closed. Jeremy.
* Moved authenticated pipe user details into a current_user struct.Tim Potter2000-07-061-1/+1
|
* Moved printer ACE mask values from nt_printing.h to rpc_spoolss.hTim Potter2000-07-062-9/+6
|
* Include nss.h if present or define enough values to allow client access toTim Potter2000-07-061-0/+15
| | | | winbind.
* Added global_sid_NULL S-1-0-0 to list of global sids.Tim Potter2000-07-061-0/+1
|
* new protosAndrew Tridgell2000-07-061-1/+0
|
* don't need shmem any moreAndrew Tridgell2000-07-062-34/+0
|
* Some more sec_ctx changes. Modified some fields in the pipe_structTim Potter2000-07-032-18/+19
| | | | | structure so authenticated pipe users can have their unix groups set when become_authenticated_pipe_user() is called.
* first pass at merging rpcclient from TNG to HEAD. You can get aGerald Carter2000-07-037-105/+353
| | | | | | | | | | | | | | semi-connection and a rpcclient prompt, but no functionality there yet. Will be a few more days on that. The changes to the header files were minor. A few struct's and a few additional fields to existing ones. No deletions. **minimal change necessary** :-) Well, maybe not minimal, but I tried. All other programs compile, link and run ok from what I can tell so I don;t think I broke anything. --jerry
* Changing drivers using the properties page works - but only if getting/settingJeremy Allison2000-06-261-384/+384
| | | | | | | | | | security descriptors is disabled (as it is in this code). If get/set sd's is enabled spooler.exe crashes on NT. I'll investigate and fix that issue next. Jeremy.
* make protoTim Potter2000-06-231-0/+41
|
* Added parenthesis around definition of PRINTER_ACE_PRINT.Tim Potter2000-06-231-1/+1
|
* make protoTim Potter2000-06-231-386/+393
|
* Added MAX_SEC_CTX_DEPTHTim Potter2000-06-231-0/+2
|
* Changed enumports to show printernames as ports. In line with 'the grand ↵Jeremy Allison2000-06-221-1/+1
| | | | | | | plan' :-) Gerald & I discussed with HP. More changes to follow. Jeremy.