1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

465 Commits

Author SHA1 Message Date
Stefan Metzmacher
ae42636167 r4338: reuse netlogon structs in the krb5 PAC
that simplifies the code a lot...

also add a note: we should fail the krb5 auth if there's no
PAC present (when heimdal is ready for that:-)

metze
(This used to be commit 532641a7003d23b034a253d166482f18c2de6191)
2007-10-10 13:07:36 -05:00
Andrew Tridgell
6bc971d8b5 r4310: fixed the authority_name field in lsa_GetUserName()
(This used to be commit f78506697ad23456fcac6e8916d0dad05b0df6cc)
2007-10-10 13:07:33 -05:00
Stefan Metzmacher
c2f94222e9 r4309: idl and torture test for lsa_GetUserName()
why does samba3 return domain_name as in the unknown_name field in the code
and on the wire it returns DCERPC_FAULT_OP_RNG_ERROR?

all of my test machines NT4,W2K,W2K3,XP returned NULL

and if I file the string in the .in.* the server echos the strings back
and returns NT_STATUS_INVALID_PARAMETER

metze
(This used to be commit 67e765b7e984d7aac2a7786b5bd0c80d10d6de5d)
2007-10-10 13:07:33 -05:00
Andrew Tridgell
e52b216473 r4279: added IDL and test code for lsa_AddPrivilegesToAccount() and lsa_RemovePrivilegesFromAccount()
(This used to be commit 705b870c73995609c8d3ebb24418538bfe20c05b)
2007-10-10 13:07:31 -05:00
Stefan Metzmacher
75f02f9d4d r4203: the bind_info blob isn't a const.
here's the idl to parse it, because we don't want the
callers to manually de/encode this

metze
(This used to be commit 983f74c3651759991378b0d7b13b0952d77b3544)
2007-10-10 13:07:26 -05:00
Andrew Tridgell
02f7d260a2 r4195: added IDL, test suite and server side code for lsa_LookupPrivValue
(This used to be commit 7bddd4740332017bb5f4bddcc9ba0234d05378bd)
2007-10-10 13:07:25 -05:00
Stefan Metzmacher
6ed5055d8e r4181: use int32 for level
metze
(This used to be commit 3a6047bc47671bfab14272dfa81f80f4457b209c)
2007-10-10 13:07:23 -05:00
Stefan Metzmacher
7d24d23e55 r4178: the level is mostly singed not unsigned
metze
(This used to be commit 6411c00b3c2c4e11da2b41bfa53e0d42368e3e76)
2007-10-10 13:07:23 -05:00
Stefan Metzmacher
985e86b04d r4176: I just remeber that I have already implement STR_CONFORMANT
so use it in DsReplicaSync()

metze
(This used to be commit ca610da1fc3c059d35e17238e8cac5e5b38790c3)
2007-10-10 13:07:23 -05:00
Jelmer Vernooij
fedca61e8f r4175: InitiateSystemShutdownEx IDL and torture test
(This used to be commit 3538130bf5d656ed4b0e2c84294e995814860e34)
2007-10-10 13:07:22 -05:00
Stefan Metzmacher
edf98253fa r4174: nicer debug output
metze
(This used to be commit 79bdcabcc57da9f7d01b09d3b33fe22770c6e7e8)
2007-10-10 13:07:22 -05:00
Andrew Tridgell
72273b5046 r4171: an attempt at better IDL for DsReplicaSync
(This used to be commit a4ebef4f53d0eb5aef1bc4ae76ac9ad66bf3b528)
2007-10-10 13:07:22 -05:00
Jelmer Vernooij
1971d529b4 r4168: Implement QueryValue in the server
IDL for NotifyChangeKeyValue
(This used to be commit a40214243136ed5208a1bec494ad1fbf821524ba)
2007-10-10 13:07:21 -05:00
Jelmer Vernooij
4c202a20fa r4167: Fix CreateKey
Support CreateKey in the RPC registry backend
(This used to be commit ad8d9e6f73619332d93c38a1879233e199e8ba25)
2007-10-10 13:07:21 -05:00
Jelmer Vernooij
65e688f5dd r4158: Fix IDL for InitiateShutdown and AbortShutdown and run both only
when dangerous tests are enabled.
(This used to be commit a763bd838558bdd7bcab3ca7ee91c1846d7a950f)
2007-10-10 13:07:20 -05:00
Jelmer Vernooij
59cfd5495e r4157: QueryMultipleValues IDL and torture test
Initialisation data pointer in QueryValue torture test
(This used to be commit 72618dfe95c785d3a3a71cc4a70b59696f2d418e)
2007-10-10 13:07:20 -05:00
Jelmer Vernooij
43ddb0a7ae r4156: GetKeySecurity() IDL and torture test
(This used to be commit 1c49de51aeb6041a3b53b8da7dc8e2bcf089bfe0)
2007-10-10 13:07:20 -05:00
Andrew Tridgell
6ca874f71a r4147: converted from NT_USER_TOKEN to struct security_token
this is mostly just a tidyup, but also adds the privilege_mask, which
I will be using shortly in ACL checking.

note that I had to move the definition of struct security_token out of
security.idl as pidl doesn't yet handle arrays of pointers, and the
usual workaround (to use a intermediate structure) would make things
too cumbersome for this structure, especially given we never encode it
to NDR.
(This used to be commit 7b446af09b8050746bfc2c50e9d56aa94397cc1a)
2007-10-10 13:06:31 -05:00
Andrew Tridgell
4141cdf62c r4113: modified EnumValue in winreg to take advantage of the new pidl handling
of arrays.
(This used to be commit b47e203a054e26d5d0c133a3c3b8d9502bd6ac69)
2007-10-10 13:06:27 -05:00
Andrew Tridgell
aad22cabbf r4111: fixed winreg to use much simpler (and I believe correct) IDL for QueryValue
(This used to be commit 659d0295314c6a070698fc81223044f4d7366993)
2007-10-10 13:06:27 -05:00
Jelmer Vernooij
2c93ec0ff0 r4105: Fix IDL for QueryValue() and add a torture test for it.
Thanks to Michael Allen for some hints on what was wrong with the previous IDL.
(This used to be commit 0fa6d847433eb281eaff15b8be4a26f898689f0a)
2007-10-10 13:06:27 -05:00
Stefan Metzmacher
87d5e061e0 r4102: more uint64 vs HYPER_T fixes
NOTE:
 [u]int64 uses 4 Byte alignment
 and HYPER_T uses 8 Byte alignment

metze
(This used to be commit 717454eb2fd2bf90e67074acefdae5304cd7433f)
2007-10-10 13:06:26 -05:00
Stefan Metzmacher
58e6233c2e r4100: fix drsuapi_DsReplicaObjMetaData2() idl
(many thanks to tridge for telling me that HYPER_T isn't the same as uint64!)

metze
(This used to be commit 74b9ef4de5263953aa2e03401a271f2830163efe)
2007-10-10 13:06:26 -05:00
Stefan Metzmacher
57314e0df3 r4087: - add idl and torture tests for drsuapi_DsReplicaGetInfo()
(NOTE: that the drsuapi_DsReplicaObjMetaData2 struct is not corrently parsed yet
 and there're some unknown fields left in someother infotypes)

metze
(This used to be commit 4fd57d5e7cff085a8c003ea82f282e26dc1346d9)
2007-10-10 13:06:25 -05:00
Stefan Metzmacher
37e2570632 r4081: use clearer names
metze
(This used to be commit 5d7d6f02cf1aa731d371c97054480d83d85102cb)
2007-10-10 13:06:24 -05:00
Stefan Metzmacher
a7e97c1ecc r4078: use clearer names
metze
(This used to be commit 717f7c3555ecf6265b5b30783f3214f4ca3b6c00)
2007-10-10 13:06:23 -05:00
Stefan Metzmacher
c62615f268 r4075: implement RemoteTOD server function
metze
(This used to be commit 0c6d4246a45f649e7373606f12db74c2acd0f538)
2007-10-10 13:06:23 -05:00
Andrew Tridgell
9defca2895 r4072: - changed the names of some of the well known sids to be more consistent
- added string constants for the important privileges.
(This used to be commit d5bc706140faf2d0a917f90f87884cd097e8a48c)
2007-10-10 13:06:22 -05:00
Günther Deschner
fbb5a6a0fa r4057: unknown5 represents the account policy "Users must logon to change
password".

Guenther
(This used to be commit 18e01ae25493d2b4b9b86d090199d5202d7a9e42)
2007-10-10 13:06:20 -05:00
Andrew Tridgell
58c326809a r4052: fixed a bunch of code to use the type safe _p allocation macros
(This used to be commit 80d15fa3402a9d1183467463f6b21c0b674bc442)
2007-10-10 13:06:18 -05:00
Andrew Tridgell
cc8f4358cc r4035: more effort on consistent naming of the access mask bits.
This removes the duplicate named SEC_RIGHTS_MAXIMUM_ALLOWED and
SEC_RIGHTS_FULL_CONTROL, which are just other names for
SEC_FLAG_MAXIMUM_ALLOWED and SEC_RIGHTS_FILE_ALL. The latter names
match the new naming conventions in security.idl

Also added names for the generic->specific mappings for files are
directories
(This used to be commit 17a4e0b3aca227b40957ed1e0c57e498debc6ddf)
2007-10-10 13:06:16 -05:00
Andrew Tridgell
fdc9f417d8 r4011: get rid of rpc_secdes.h and replace it with a single sane set of
definitions for security access masks, in security.idl

The previous definitions were inconsistently named, and contained many
duplicate and misleading entries. I kept finding myself tripping up
while using them.
(This used to be commit 01c0fa722f80ceeb3f81f01987de95f365a2ed3d)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
5ef59e9a0a r4003: run successful against a nt4 sp6 pdc with one nt4 sp6 trust and a w2k3 trust
metze
(This used to be commit 5101cd51a24fdcda8dd8fc4da446782948290f9b)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
114b43a167 r3999: - reply with the same DsBindInfo blob as w2k3 in the server function
- add idl for drsuapi_DsReplicaSync() not yet complete

- just return WERR_OK for the drsuapi_DsReplicaSync() server function

metze
(This used to be commit e896925ac0b58bd48b5b9cc2d675682409d09ae1)
2007-10-10 13:06:12 -05:00
Stefan Metzmacher
29053605a7 r3996: add some comments
metze
(This used to be commit 87a92d3d5c7c2ab0bc07a9fb101022b3db1d637b)
2007-10-10 13:06:12 -05:00
Stefan Metzmacher
05def77d80 r3984: success full parse the repsFrom/repsTo LDAP fields
metze
(This used to be commit 56c66f4a090b1efca011fc2fc9880c4d93da164c)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
b56d1c5cb7 r3978: added IDL and test code for lsa_LookupSids2() and lsa_LookupNames2()
(This used to be commit 9da455ed56ebc167f295b231c2730e3ff9c94617)
2007-10-10 13:06:10 -05:00
Stefan Metzmacher
e547588368 r3956: start to decode the repsFrom and repsTo fileds but not ready
metze
(This used to be commit 44f168c44de908fdf38b39aae8bf10e80206410a)
2007-10-10 13:06:07 -05:00
Stefan Metzmacher
8ac9d36f93 r3942: decode the 'replUpToDateVector' blob
metze
(This used to be commit 42b9f0bd476f2175e856ea8f79577eb9eda905e2)
2007-10-10 13:06:07 -05:00
Andrew Tridgell
f2a605eeab r3939: - added "posix:fakeoplocks" option for testing with oplocks forced on
- added support for sticky write times after a setfileinfo, by using a
  write_time field in the DosAttrib xattr structure.
(This used to be commit 4a52fae82d8305e999f94f1947daa21dab54cdfd)
2007-10-10 13:06:06 -05:00
Stefan Metzmacher
7e2e2cf9b2 r3927: add idl file for NDR encoded LDAP attributes used for the directory service
metze
(This used to be commit 07803f28863db72a7691766da912878459eec70a)
2007-10-10 13:06:06 -05:00
Andrew Bartlett
21ebf8b942 r3922: Add yet another NETLOGON RPC. This is another varient of SamLogon,
that works only on SCHANNEL secured connections (as it needs the
implicit credentials).

Fix some of the IDL.

Andrew Bartlett
(This used to be commit 90cd7b34cc18e758e939e0183281b7a517d728f0)
2007-10-10 13:06:06 -05:00
Stefan Metzmacher
2f39a9fe62 r3920: - it seem that we need to send a magic bind_guid in DsBind()
to make DsWriteAccountSpn() work

- add idl and torture test for DsWriteAccountSpn()

metze
(This used to be commit 625826ad9050c68407ae5e8abfee13699986303c)
2007-10-10 13:06:06 -05:00
Andrew Bartlett
587745e32d r3919: Add more info levels to the QueryTrustedDomainInfo structures, with
names and other assistance from the ethereal sources.

More work needs to be done to validate some of the levels, which do
not appear in the query - perhaps they are modification levels.

Andrew Bartlett
(This used to be commit 63635533693fa364b0c697a3fe1010b3eb8b17d3)
2007-10-10 13:06:05 -05:00
Andrew Bartlett
88baaee093 r3917: A few more LSA RPCs found in my wanderings (for trusted domains, these
seem to be 'shortcut' RPCs, that just avoid an open/query pair).

Rename a few others to give us a slightly sensible pattern.

Andrew Bartlett
(This used to be commit d6a7ab57e74ab89dd163d5f9f5f901e586b0aad4)
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
e94c88cedc r3914: add idl, torture test and simple server for netr_DrsGetDCNameEx2()
metze
(This used to be commit 1ffabbaa667c7dec6657ec523f92f072a2a47a95)
2007-10-10 13:06:05 -05:00
Andrew Bartlett
201393fd8b r3908: We know that this field is a flag of some kind, and matches the output on LSA.
Andrew Bartlett
(This used to be commit e3dce0f5be9d43d84d60e8402344dadd079f1e47)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
b6b61cec79 r3907: * Rename lsa_Name to lsa_String
* Add new IDL to LSA, to query information about trusted domains (for
  cross-check with SamSync).

Andrew Bartlett
(This used to be commit 174c0778421b5154ff2ba809688ea6ef38a1478b)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
be7a3e3ce0 r3904: * Add new LSA calls to open trusted domains
* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
(This used to be commit 7094502fe0346255a89667f702289b4c8dc9fa08)
2007-10-10 13:06:03 -05:00
Jelmer Vernooij
7e3503e277 r3896: Correct header files in rpc server templates plus
some other minor fixes
(This used to be commit 9fca748fe3c12af83a006f1d0821aa560d08fc95)
2007-10-10 13:06:02 -05:00