1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

3191 Commits

Author SHA1 Message Date
Stefan Metzmacher
25715e32f0 r4418: fix compiler warning and remove unused typedef
metze
(This used to be commit 5861657fd1)
2007-10-10 13:07:47 -05:00
Volker Lendecke
6372b4e4a4 r4417: Reply to samr_QueryDomainInfo with the same static value as level2 does.
Volker
(This used to be commit 04cf580ef3)
2007-10-10 13:07:46 -05:00
Volker Lendecke
6f2e88a09c r4416: [in,out] variables do have an r->out component...
Volker
(This used to be commit 97247c9029)
2007-10-10 13:07:46 -05:00
Volker Lendecke
6aaefee85f r4415: Implement samr_RemoveMemberFromForeignDomain. This is needed to delete a user
with usrmgr.exe.

To fix: Remove domain group membership attrib values when a user is deleted.

Volker
(This used to be commit 83d180c732)
2007-10-10 13:07:46 -05:00
Volker Lendecke
8da7a60557 r4414: Various bits&pieces:
* Implement samr_search_domain, filter out all elements with no "objectSid"
  attribute and all objects outside a specified domain sid.

* Minor cleanups in dcerpc_samr.c due to that.

* Implement srvsvc_NetSrvGetInfo level 100. A quick hack to get usrmgr.exe
  one step further.

* Same for samr_info_DomInfo1.

Volker
(This used to be commit cdec896113)
2007-10-10 13:07:46 -05:00
Andrew Tridgell
3450ed666c r4413: login failure doesn't warrant a level 1 debug (its filling my logs during torture tests)
(This used to be commit b9284c16dc)
2007-10-10 13:07:45 -05:00
Andrew Tridgell
ef179fddb3 r4412: SEC_FILE_READ_ATTRIBUTE is always granted, even if not requested. This was being done
in the full ACL code, but not in the unix access check code, which meant that qfileinfo
was failing for some parameters
(This used to be commit 96d017e521)
2007-10-10 13:07:45 -05:00
Andrew Tridgell
373bca5bcd r4411: when checking for create permissions, we need to check the parent, not the child!
(This used to be commit 30b4c20b1c)
2007-10-10 13:07:45 -05:00
Andrew Tridgell
4f16988ead r4410: pvfs_rename_one() should not check for create permissions, as the rename
is always in the same directory
(This used to be commit babf3480a4)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
91190fdad8 r4409: fixed handling of zero access masks for the POSITION_INFORMATION query/set levels
(This used to be commit 75e7229476)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
e913a48ded r4408: added the remaining access check hooks into pvfs. All calls should now have acl checking,
and obey the various inheritance rules.
(This used to be commit 5fe51807d6)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
447a346f0d r4407: stricter checking of parameters on hard link creation in the RAW-RENAME test
(This used to be commit b239589b00)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
1c092c5ba6 r4406: - don't call the xattr unlink hook on unlink unless the link count is 1, otherwise
the xattrs of the remaining link are removed

- fix the handling of attribute set on directories
(This used to be commit fa44e3cce0)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
1e4a4c4d6e r4405: added acl inheritance to the mkdir and t2mkdir backends.
(This used to be commit b44d4d17df)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
8631bf2bcc r4404: check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic
(This used to be commit e4ee8b776b)
2007-10-10 13:07:43 -05:00
Andrew Tridgell
abe22d0351 r4403: - added ACL inheritance in the pvfs backend. ACLs are now inherited on
file and directory creation via ntcreatex. pvfs now passes the
  inheritance test in RAW-ACLS

- cleaned up the error handling a bit in pvfs_open()
(This used to be commit f4dfb63d53)
2007-10-10 13:07:43 -05:00
Andrew Tridgell
e20be5a6be r4402: use __location__ instead of __LINE__ in the RAW-RENAME test
(This used to be commit 09ac133820)
2007-10-10 13:07:43 -05:00
Andrew Tridgell
a477387cd0 r4401: stricter test for correct ACL inheritance in RAW-ACLS
(This used to be commit 1bb7691963)
2007-10-10 13:07:43 -05:00
Andrew Bartlett
07e1553f60 r4400: Pass rootdse.ldif past the subst code.
Andrew Bartlett
(This used to be commit d901c8fb64)
2007-10-10 13:07:43 -05:00
Volker Lendecke
b386af06d0 r4399: Implement samr_GetAliasMembership and samr_GetGroupsForUser. With these two,
usrmgr.exe seems to become usable. Some quirks, but it's worth a try.

Volker
(This used to be commit 9c62a239cd)
2007-10-10 13:07:43 -05:00
Volker Lendecke
a4ba60f4c2 r4398: Make usrmgr.exe believe we're a DC. Otherwise it will not show global groups.
Index on "key" attribute.

Volker
(This used to be commit 9c23d73ec2)
2007-10-10 13:07:43 -05:00
Volker Lendecke
91abe814d1 r4397: Fix a bug where '(&(objectclass=domain)(!(objectclass=builtindomain)))' fell
back to a full search.

Volker
(This used to be commit 55c9fbd4f4)
2007-10-10 13:07:42 -05:00
Jelmer Vernooij
a89f6df4a9 r4396: Generate newrootdse.ldb in provision.pl as well
(This used to be commit 3ebaec6edb)
2007-10-10 13:07:42 -05:00
Jelmer Vernooij
e3cd42615b r4395: Generate "newhklm.ldb" using provision.pl
(This used to be commit fa53c56236)
2007-10-10 13:07:42 -05:00
Jelmer Vernooij
b2125c125f r4394: Use 'raw' protocol towers in the lists in the endpoint rather then
dcerpc_binding structs.
(This used to be commit 9175b72972)
2007-10-10 13:07:42 -05:00
Volker Lendecke
4fd56d5d1a r4393: Trivial bugfix for a silly bug
(This used to be commit ae3c329e9d)
2007-10-10 13:07:42 -05:00
Volker Lendecke
62a32a2e62 r4392: Fix samr_GetAliasMembership idl
(This used to be commit b0b9332519)
2007-10-10 13:07:42 -05:00
Andrew Tridgell
359cf872df r4391: bring the default ACL inline with what w2k3 uses
(This used to be commit 16967f7502)
2007-10-10 13:07:42 -05:00
Jelmer Vernooij
f05bc12213 r4390: Registry value and key names are case-insensitive
Nicer menu layout in gregedit
(This used to be commit 2948b9750d)
2007-10-10 13:07:42 -05:00
Andrew Tridgell
d39ae54341 r4389: added checking for the default inherited ACL, which is used when no ACEs
are inheritable
(This used to be commit e30b8d5783)
2007-10-10 13:07:41 -05:00
Andrew Tridgell
66b8ff22e0 r4388: - allow ACE flags to be specified in security_descriptor_create()
- added a test for all combinations of the inheritance ACE flags and how
  they are propogated to child directories and files
(This used to be commit fdb38c8e4b)
2007-10-10 13:07:41 -05:00
Andrew Tridgell
92152aa006 r4387: added a TODO about the NTCREATEX_FLAGS_OPEN_DIRECTORY flag - it seems to open
the parent of the specified directory ?!
(This used to be commit a012d1c978)
2007-10-10 13:07:41 -05:00
Andrew Bartlett
e3da3b48b1 r4386: Grr, fix copy-and-paste bug.
Andrew Bartlett
(This used to be commit 13aa88ed65)
2007-10-10 13:07:41 -05:00
Andrew Bartlett
ecabb2dce5 r4385: Set the correct target service.
Andrew Bartlett
(This used to be commit 722f59c7c8)
2007-10-10 13:07:41 -05:00
Andrew Bartlett
2c1e008ee3 r4384: Try again to fix compiling against a specified KRB5 library.
The strong feeling I get is that this is just not possible, if as
Fedora has, the MIT installation is in /usr/lib, but this is one step
closer anyway.

Andrew Bartlett
(This used to be commit da4cf53767)
2007-10-10 13:07:41 -05:00
Andrew Tridgell
0a1342f51e r4383: in order to cope with overfilled buffers on trans2 findfirst we need to use 32 bit offsets and lengths
in trans2 fill code, even though the packets themselves can only use 16 bit lengths. This prevents
the overflow detection code from failing due to 16 bit length wrap.
(This used to be commit 5cd74c22e9)
2007-10-10 13:07:41 -05:00
Andrew Tridgell
ba4a563222 r4382: check for bad tid in SMBtdis
(This used to be commit 44ca3f41cc)
2007-10-10 13:07:40 -05:00
Volker Lendecke
03a914931e r4381: Add my copyright
(This used to be commit 9e27a83ac3)
2007-10-10 13:07:40 -05:00
Volker Lendecke
a7a1fada8d r4380: Implement samr_QueryDisplayInfo. This probably needs some polishing (Do we
have to sort the entries?)

Volker
(This used to be commit 26d21bb5cc)
2007-10-10 13:07:40 -05:00
Andrew Bartlett
d5fd599678 r4379: Merge more Kerberos related configure checks (by jra, gd and Lars
Mueller <lmuelle@suse.de>) from 3.0 to Samba4.

Andrew Bartlett
(This used to be commit 9c74e04098)
2007-10-10 13:07:40 -05:00
Volker Lendecke
e08d8505d2 r4378: Implement samr_EnumDomainGroups and samr_EnumDomainAliases.
Hmmm. How do I tell ldb not to descend into cn=Builtin?

Volker
(This used to be commit c95d20cd7c)
2007-10-10 13:07:40 -05:00
Volker Lendecke
8445576d7f r4377: Fix default groupType attributes.
Volker
(This used to be commit 15d50350b5)
2007-10-10 13:07:40 -05:00
Volker Lendecke
e14a5a9167 r4376: Implement samr_AddAliasMember, samr_DeleteAliasMember and
samr_GetMembersInAlias.

Volker
(This used to be commit 78802720ae)
2007-10-10 13:07:40 -05:00
Volker Lendecke
2333ea56f3 r4375: Implement samr_OpenAlias, samr_QueryAliasInfo and samr_SetAliasInfo. Fix IDL
for samr_SetAliasInfo.

Volker
(This used to be commit d70e237190)
2007-10-10 13:07:39 -05:00
Volker Lendecke
296c0d8eac r4374: Follow metzes hint, change LookupRids a bit
(This used to be commit b8fa5b9419)
2007-10-10 13:07:39 -05:00
Jelmer Vernooij
dcff66281c r4373: Support setting values and fix a segfault
(This used to be commit cdb6980cdc)
2007-10-10 13:07:39 -05:00
Volker Lendecke
f0d3e9de7e r4372: Implement samr_LookupRids
(This used to be commit 1bab3254f6)
2007-10-10 13:07:39 -05:00
Jelmer Vernooij
b0e6ce645a r4371: Add "Create Key", "Delete Key" and "Delete Value" buttons.
gregedit now can do the same things as regedt32 except for finding
data and setting values. (and a few segfaults...)
(This used to be commit ada16f31e4)
2007-10-10 13:07:39 -05:00
Volker Lendecke
77529ae792 r4367: Implement samr_AddGroupMember, samr_DeleteGroupMember and
samr_QueryGroupMember.

Volker
(This used to be commit 43581c3711)
2007-10-10 13:07:39 -05:00
Volker Lendecke
b29b10e48e r4366: Fix ldb_modify_internal: Adding values to an existing attribute you could end
up with a corrupt data structure on disk, namely with two attribute structures
for the same attribute name.

Volker
(This used to be commit 284044b5b2)
2007-10-10 13:07:38 -05:00