1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-14 20:23:54 +03:00
Commit Graph

97 Commits

Author SHA1 Message Date
Kai Blin
e59c2eaf68 r26588: Janitorial: Rename torture_*_add_*test to torture_*_add_*test_const.
Also rename the corresponding wrap_ functions.
2007-12-26 11:57:05 -06:00
Jelmer Vernooij
15038d9586 r26572: Fix warnings in the Python code. 2007-12-24 01:51:04 -06:00
Jelmer Vernooij
c550c03372 r26570: - Trim size of the swig-generated Python bindings by removing a bunch of {}'s.
- Start working on Python equivalents for various EJS tests.
- Fix regression in argument order for reg_diff_apply() in EJS bindings.
2007-12-24 01:51:03 -06:00
Jelmer Vernooij
2b7cfa5d9a r26464: Tighten dependencies. 2007-12-21 05:50:29 +01:00
Jelmer Vernooij
760fcc8bfa r26454: Add simple SWIG macro for wrapping talloced types. 2007-12-21 05:50:22 +01:00
Jelmer Vernooij
3378b6a559 r26399: Use -O option for SWIG (less evil generated code). 2007-12-21 05:49:29 +01:00
Jelmer Vernooij
08501fbef3 r26248: Check in SWIG output so SWIG is not required when running out of svn. 2007-12-21 05:47:26 +01:00
Jelmer Vernooij
87472e35c0 r26199: Allow constructing new sids, implement __eq__ for sids. 2007-12-21 05:46:47 +01:00
Jelmer Vernooij
8625cd403b r26197: Add bindings for libsecurity. 2007-12-21 05:46:47 +01:00
Jelmer Vernooij
f734df3144 r25903: Move more files out of torture/ 2007-12-21 05:44:46 +01:00
Günther Deschner
947fff9941 r25803: Make our security descriptor acl manipulation methods more generic so that we
can add and delete ACEs for SACLs as well as for DACLs.

Guenther
2007-12-21 05:44:06 +01:00
Günther Deschner
0306e0183d r25801: Add security_ace_create() function.
Guenther
2007-12-21 05:44:04 +01:00
Günther Deschner
2e028503a3 r25739: We forgot to copy revision and type flags in security_descriptor_copy().
Guenther
2007-12-21 05:43:37 +01:00
Günther Deschner
99408cf20c r25610: Add security_descriptor_appendv() which takes va_list directly.
Guenther
2007-12-21 05:42:52 +01:00
Günther Deschner
1ebcceb922 r25608: Call security_descriptor_append from within security_descriptor_create.
Guenther
2007-12-21 05:42:51 +01:00
Günther Deschner
7dd0d28d25 r25607: Allow to set security descriptor type flags at creation time with
security_descriptor_create().

Guenther
2007-12-21 05:42:51 +01:00
Günther Deschner
7d8f53b1c7 r25604: Add security_descriptor_append() helper function.
Guenther
2007-12-21 05:42:48 +01:00
Jelmer Vernooij
566aa14139 r25554: Convert last instances of BOOL, True and False to the standard types. 2007-10-10 15:07:55 -05:00
Jeremy Allison
0844dbf597 r25175: Change to talloc_asprintf_append_buffer().
Jeremy.
2007-10-10 15:06:46 -05:00
Jelmer Vernooij
5085c53fcf r25027: Fix more warnings. 2007-10-10 15:05:41 -05:00
Jelmer Vernooij
08bb1ef643 r25000: Fix some more C++ compatibility warnings. 2007-10-10 15:05:27 -05:00
Andrew Tridgell
fcf38a38ac r23792: convert Samba4 to GPLv3
There are still a few tidyups of old FSF addresses to come (in both s3
and s4). More commits soon.
2007-10-10 14:59:12 -05:00
Stefan Metzmacher
1fdc71918a r21307: make it possible to pass in NULL for domain or rid,
if someone isn't interessted in one of it

metze
2007-10-10 14:48:08 -05:00
Stefan Metzmacher
18cc56be6a r20801: try to always fix up the acl revision when we add or remove
an ace

metze
2007-10-10 14:43:31 -05:00
Stefan Metzmacher
6ce994720c r20800: fix compiler warnings
metze
2007-10-10 14:43:31 -05:00
Stefan Metzmacher
a67bb43659 r20799: if any ace has the optional sub object, the acl revision needs
to be SECURITY_ACL_REVISION_ADS (4)

metze
2007-10-10 14:43:31 -05:00
Stefan Metzmacher
532395a18d r20795: dom_sid_parse_talloc() gets an null terminated string as input,
the SDDL string has the sid strings embedded, so we need to create
a null terminated string...

metze
2007-10-10 14:43:30 -05:00
Volker Lendecke
bb39360370 r17848: Ok, this did not do it. Still got the same problem. 2007-10-10 14:16:48 -05:00
Volker Lendecke
1a9401738f r17846: Ok, this is a patch that needs further discussion. On Solaris, snprintf seems
to be broken. The %lu modifies apparently can not cope with the high
bit==1. In dom_sid_string I added some printfs and got:

auth: 21
auth: 2666793276
auth: 679821296
auth: 2310223117
auth: 1206
sid=S-1-5-21-8446744072081377596-679821296-8446744071724807437-1206

The "auth:" values are direct printfs, the sid= is the resulting code from
dom_sid_string.

I could not reproduce it with a simple test program, and #ifdef'ing out
HAVE_SNPRINTF in config.h manually does not help either, probably because the
dynamic linker overwrites the symbol in lib/replace.

Checking it in because it fixes the RPC-SAMBA3-SHARESEC test directly on host
"sunx", I would like to see whether it also fixes IRIX and AIX.

Volker
2007-10-10 14:16:48 -05:00
Volker Lendecke
6718550822 r17082: Add a test that walks and tests denying tconX access via the share security
descriptor. This is something that W2k3 does _not_ pass and probably is not
expected to, it seems the don't check access at tconX time.

Thanks to metze for the hint how in the srvsvc_NetShareInfo1501 struct the
length of the sd can be encoded in idl.

As metze says, there's probably more to the share secdesc, this needs more
testing. This one is here to walk the samba3 code.

Volker
2007-10-10 14:10:11 -05:00
Jelmer Vernooij
aa6d66fda6 r15573: Fix build of systems that have iconv headers in non-standard locations
Split of system/locale.h header from system/iconv.h

Previously, iconv wasn't being used on these systems
2007-10-10 14:05:58 -05:00
Jelmer Vernooij
849818dcde r15457: Get rid of more usages of uint_t 2007-10-10 14:05:37 -05:00
Jelmer Vernooij
c19c2b51d3 r15328: Move some functions around, remove dependencies.
Remove some autogenerated headers (which had prototypes now autogenerated by pidl)
Remove ndr_security.h from a few places - it's no longer necessary
2007-10-10 14:05:17 -05:00
Jelmer Vernooij
5b3ab728ed r15297: Move create_security_token() to samdb as it requires SAMDB (and the rest of LIBSECURITY doesn't)
Make the ldb password_hash module only depend on some keys manipulation code, not full heimdal
Some other dependency fixes
2007-10-10 14:05:04 -05:00
Jelmer Vernooij
adc8a019b6 r15207: Introduce PRIVATE_DEPENDENCIES and PUBLIC_DEPENDENCIES as replacement
for REQUIRED_SUBSYSTEMS.
2007-10-10 14:04:18 -05:00
Stefan Metzmacher
be7285bdeb r15079: w2k3 returns NT_STATUS_PRIVILEGE_NOT_HELD if SEC_FLAG_SYSTEM_SECURITY is
desired but SeSecurityPrivilege isn't granted

metze
2007-10-10 14:04:07 -05:00
Stefan Metzmacher
81390dcda5 r14894: - add some 'const'
- remove sid_active_in_token() was the same as security_token_has_sid()
- rename some functions

metze
2007-10-10 14:00:12 -05:00
Stefan Metzmacher
a69f000324 r14891: fix a bug found by the ibm checker
the problem was that we shift with <<= (privilege-1)

and we called the function with privilege=0

add some checks to catch invalid privilege values
and hide the mask representation in privilege.c

metze
2007-10-10 14:00:12 -05:00
Stefan Metzmacher
9ec706238c r14860: create libcli/security/security.h
metze
2007-10-10 13:59:44 -05:00
Stefan Metzmacher
e391f3c98a r14840: - rename some functions
- stack specific functions on top of generic ones

metze
2007-10-10 13:59:41 -05:00
Stefan Metzmacher
0ad464f686 r14641: fix typo
metze
2007-10-10 13:59:04 -05:00
Jelmer Vernooij
51b4270513 r14542: Remove librpc, libndr and libnbt from includes.h 2007-10-10 13:58:42 -05:00
Jelmer Vernooij
3dd477ca51 r14464: Don't include ndr_BASENAME.h files unless strictly required, instead
try to include just the BASENAME.h files (containing only structs)
2007-10-10 13:57:27 -05:00
Jelmer Vernooij
1228358767 r13924: Split more prototypes out of include/proto.h + initial work on header
file dependencies
2007-10-10 13:52:24 -05:00
Andrew Bartlett
7ccddfd351 r12858: This moves the libnet_LookupPdc code to use a GetDC request to find
the remote server's name, or in the absence of a local nbt_server to
communicate with (or without root access), a node status request.

The result is that we are in a better position to use kerberos, as well
as to remove the 'password server' mandatory parameter for the samsync
and samdump commands.  (I need this to put these into SWAT).

The only problem I have is that I must create a messaging context, which
requires a server ID.  As a client process, I don't expect to get
messages, but it is currently required for replies, so I generate a
random() number.  We probably need the servers to accept connections on
streamed sockets too, for client-only tasks that want IRPC.

Because I wanted to test this code, I have put the NET-API-* tests into
our test scripts, to ensure they pass and keep passing.  They are good
frontends onto the libnet system, and I see no reason not to test them.

In doing so the NET-API-RPCCONNECT test was simplified to take a
binding string on the command line, removing duplicate code, and
testing the combinations in the scripts instead.

(I have done a bit of work on the list shares code in libnet_share.c
to make it pass 'make test')

In the future, I would like to extend the libcli/findds.c code (based
off volker's winbind/wb_async_helpers.c, which is why it shows up a bit
odd in the patch) to handle getting multiple name replies, sending a
getdc request to each in turn.

(posted to samba-technical for review, and I'll happily update with
any comments)

Andrew Bartlett
2007-10-10 13:50:54 -05:00
Andrew Bartlett
10eadf4812 r12747: Add a couple more token tests, used by the kludge ACL module.
Andrew Bartlett
2007-10-10 13:49:49 -05:00
Jelmer Vernooij
70e7449318 r12608: Remove some unused #include lines. 2007-10-10 13:49:03 -05:00
Jelmer Vernooij
ca8db1a0cd r12592: Remove some useless dependencies 2007-10-10 13:49:00 -05:00
Jelmer Vernooij
0aca5fd513 r12542: Move some more prototypes out to seperate headers 2007-10-10 13:47:55 -05:00
Jelmer Vernooij
b24f2583ed r12498: Eliminate INIT_OBJ_FILES and ADD_OBJ_FILES. We were not using
the difference between these at all, and in the future the
fact that INIT_OBJ_FILES include smb_build.h will be sufficient to
have recompiles at the right time.
2007-10-10 13:47:45 -05:00