Andreas Schneider
6118c2ec2c
s3: Use root_mode() to get uid_wrapper working correctly.
...
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2014-04-17 14:56:06 +02:00
Michael Adam
4754743860
s3:registry: let reg_values_need_update() return true if the backend does not implement the method
...
Otherwise the value cache might become outdated.
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Mon May 7 16:11:05 CEST 2012 on sn-devel-104
2012-05-07 16:11:05 +02:00
Michael Adam
fb58951f93
s3:registry: let reg_subkeys_need_update() return true if the backend does not implement the method
...
Otherwise the subkey cache might become outdated.
2012-05-07 14:09:09 +02:00
Andreas Schneider
2f65ae25df
s3: Include uid_wrapper where it is missing.
2011-10-27 13:32:02 +02:00
Gregor Beck
356ed8644c
s3:registry avoid updating keys which are going to be deleted in
...
reg_deletekey_recursive
this changes the complexity from O(n^2) to O(n) and reduces the time of
a 'net conf drop' with 10000 shares from 6min to 1.5s
Signed-off-by: Michael Adam <obnox@samba.org>
2011-08-08 15:27:07 +02:00
Andrew Bartlett
f768b32e37
libcli/security Provide a common, top level libcli/security/security.h
...
This will reduce the noise from merges of the rest of the
libcli/security code, without this commit changing what code
is actually used.
This includes (along with other security headers) dom_sid.h and
security_token.h
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
2010-10-12 05:54:10 +00:00
Andrew Bartlett
4bfc8d3b1a
s3-auth Change struct nt_user_token -> struct security_token
...
This common structure is defined in security.idl
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:05 +10:00
Michael Adam
b94267aa3f
s3:registry: extraxt the reg_dispatcher prototypes into their own header.
...
And use them only where needed.
2010-05-25 10:35:26 +02:00
Günther Deschner
d4474ba470
s3-secdesc: use SD_REVISION from security.idl.
...
Guenther
2010-05-18 12:52:18 +02:00
Günther Deschner
7f6bb48bdf
s3-secdesc: remove "typedef struct security_descriptor SEC_DESC".
...
Guenther
2010-05-18 12:30:12 +02:00
Günther Deschner
8951c8301a
s3-secdesc: remove "typedef struct security_acl SEC_ACL".
...
Guenther
2010-05-18 12:30:12 +02:00
Günther Deschner
a8b01d1f3b
s3-secdesc: remove "typedef struct security_ace SEC_ACE".
...
Guenther
2010-05-18 12:30:11 +02:00
Günther Deschner
fe31b67d5e
s3-registry: only include registry headers when really needed.
...
Guenther
2010-05-18 01:15:38 +02:00
Günther Deschner
b4d09134fd
s3-registry: make sure root has full registry access (in particular for make test).
...
Guenther
2010-03-16 15:13:52 +01:00
Michael Adam
cec8428747
s3:registry: replace typedef REGISTRY_KEY by struct registry_key_handle
...
Michael
2009-04-27 11:21:04 +02:00
Michael Adam
221151a2a2
s3:registry: replace typedef REGVAL_CTR by struct regval_ctr.
...
This paves the way for hiding the typedef and the implementation
from the surface.
Michael
2009-04-27 11:21:02 +02:00
Volker Lendecke
62db0ea0cf
Use talloc_tos() in regkey_access_check()
2009-02-27 11:20:17 +01:00
Michael Adam
97508eefb7
s3:registry: add a delete_subkey method to the backend ops.
...
This is to provide a more atomic means of deleting a subkey of a key.
Michael
2009-02-26 13:22:55 +01:00
Michael Adam
602bfeb360
s3:registry: add a create_subkey method to the backend ops.
...
This is to provide a more atomic means of adding a subkey of a key.
Michael
2009-02-26 13:22:54 +01:00
Michael Adam
58fc61217d
s3:registry: replace typedef "REGSUBKEY_CTR" by "struct regsubkey_ctr"
...
This paves the way for hiding the typedef and the implementation from the
surface.
Michael
2009-02-26 13:22:51 +01:00
Jeremy Allison
0b62cdbed0
Quieten down a boatload of shadowed variable warnings on Solaris.
...
Makes real problems easier to spot.
Jeremy.
2009-02-23 15:03:29 -08:00
Jeremy Allison
8344e94574
Unify se_access_check with the S4 code. Will make
...
calculation of SEC_FLAG_MAXIMUM_ALLOWED much easier
for files.
Jeremy.
2008-10-31 10:51:45 -07:00
Jeremy Allison
e5692d4cbe
Remove SEC_ACCESS. It's a uint32_t.
...
Jeremy.
2008-10-09 09:49:03 -07:00
Michael Adam
413c2e9b0a
registry: remove the REGISTRY_HOOKS layer from the reghook cache.
...
There is no need to save the keyname again, we only need to
get the REGISTRY_OPS out of the pathtree.
Furthermore, this makes life easier, since we can now pass
in keynames as temporarily allocated strings.
Michael
(This used to be commit 2f9ee2f782
)
2008-04-13 01:43:42 +02:00
Michael Adam
f3694d50a3
Add NT Authority\System as group sid to default registry key security descriptor.
...
Michael
(This used to be commit 9f0448ca32
)
2008-02-18 17:41:20 +01:00
Michael Adam
59e7ee6d7d
Change construct_registry_sd() to return WERROR instead of the SEC_DESC *.
...
Michael
(This used to be commit 91dbe79df2
)
2008-02-18 17:41:20 +01:00
Michael Adam
e16f039f26
Reformat construct_registry_sd() slightly (stick to coding rules).
...
Michael
(This used to be commit d87fb13959
)
2008-02-18 17:41:20 +01:00
Michael Adam
d38e756feb
Use BUILTIN\administrators as owner of the default registry key security descriptor.
...
Michael
(This used to be commit 52e9815765
)
2008-02-18 17:41:20 +01:00
Michael Adam
1b4dfc2e7d
Move reg_frontend_hilvl.c to reg_dispatcher.c
...
This is actually the dispatcher to the registered registry backends.
Michael
(This used to be commit 39d65d11f8
)
2008-01-21 08:49:12 +01:00