1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-16 00:23:52 +03:00
Commit Graph

35 Commits

Author SHA1 Message Date
Andrew Tridgell
e535f84504 r4447: implement server side of lsa_LookupSids3() and lsa_LookupNames3() 2007-10-10 13:07:51 -05:00
Andrew Tridgell
745bbc0e17 r4433: added the boilerplate for the new w2k3 LSA functions in preparation
for adding LookupSids3 (needed for ACL editing from w2k3)
2007-10-10 13:07:49 -05:00
Volker Lendecke
97247c9029 r4416: [in,out] variables do have an r->out component...
Volker
2007-10-10 13:07:46 -05:00
Stefan Metzmacher
cef0d1eb29 r4340: - simplify lsa_GetUserName() server code,
we don't need to do db lookups as we already known who the user is

metze
2007-10-10 13:07:36 -05:00
Stefan Metzmacher
b43f34e873 r4323: - implement the lsa_GetUserName() server call
- give lsa_lookup_sid() a chance with foreign SIDS
  returning NT_STATUS_NO_MEMORY makes no sense here
  as the ldb_msg_find_string() doesn't allocate the string

metze
2007-10-10 13:07:35 -05:00
Andrew Tridgell
2a4c562896 r4283: adding a privilege that an account already has is not an error 2007-10-10 13:07:31 -05:00
Andrew Tridgell
76db300232 r4280: added server side support for lsa_AddPrivilegesToAccount() and lsa_RemovePrivilegesFromAccount()
these are the last of the server side privileges functions. We should
now have a complete privileges implementation.
2007-10-10 13:07:31 -05:00
Andrew Tridgell
a80c82d263 r4278: - added server support for lsa_EnumPrivsAccount() 2007-10-10 13:07:31 -05:00
Andrew Tridgell
bafdb17729 r4277: - added server support for lsa_EnumAccounts()
- expanded the lsa test suite to better test lsa_EnumAccounts()
2007-10-10 13:07:31 -05:00
Andrew Tridgell
4716334502 r4276: added server side support for lsa_OpenAccount() 2007-10-10 13:07:30 -05:00
Andrew Tridgell
31ab04f790 r4206: fixed a status code check in lsa_LookupNames2 that could cause a segv 2007-10-10 13:07:26 -05:00
Andrew Tridgell
8764909c05 r4202: added smbclient commands "addprivileges" and "delprivileges" for
easily adding/removing privileges from users
2007-10-10 13:07:26 -05:00
Andrew Tridgell
9bd806b7a2 r4199: - added server side code for lsa_RemoveAccountRights (sharing code
with lsa_AddAccountRights)
2007-10-10 13:07:25 -05:00
Andrew Tridgell
ba87142586 r4198: - added server side code for lsa_AddAccountRights 2007-10-10 13:07:25 -05:00
Andrew Tridgell
3eee8b7c13 r4196: - added server side code for lsa_LookupPrivDisplayName
- added english descriptions of privileges. We should add other
  languages in the future.
2007-10-10 13:07:25 -05:00
Andrew Tridgell
7bddd47403 r4195: added IDL, test suite and server side code for lsa_LookupPrivValue 2007-10-10 13:07:25 -05:00
Andrew Tridgell
7107320332 r4194: added server side implementation of lsa_EnumPrivs 2007-10-10 13:07:24 -05:00
Andrew Tridgell
5088a6cbf7 r4193: added server side implementation of lsa_EnumAccountsWithUserRight 2007-10-10 13:07:24 -05:00
Andrew Tridgell
8a3f265050 r4192: added server side implementation of lsa_EnumAccountRights
the "privilege" command in smbclient now works against Samba4
2007-10-10 13:07:24 -05:00
Andrew Tridgell
44d9761962 r4012: split out the lsa lookup single name logic into a separate function 2007-10-10 13:06:14 -05:00
Andrew Tridgell
677f701e71 r3994: - removed the unused reference count code in lsa server
- fixed the sid_index field in lsa LookupSids and LookupNames
2007-10-10 13:06:12 -05:00
Andrew Tridgell
e611405109 r3992: provide hooks for lsa to lookup sids allocated using the linear id->sid mapping 2007-10-10 13:06:11 -05:00
Andrew Tridgell
da12780bd9 r3980: added server side support for lsa_LookupNames() and lsa_LookupNames2() 2007-10-10 13:06:10 -05:00
Andrew Tridgell
a3f7f34b39 r3979: added server side code for lsa_LookupSids2() and fixed authority_name
return code to include our own domain.

editing of ACLs via the w2k3 GUI works nicely (and faster) with these changes
2007-10-10 13:06:10 -05:00
Andrew Bartlett
d6a7ab57e7 r3917: A few more LSA RPCs found in my wanderings (for trusted domains, these
seem to be 'shortcut' RPCs, that just avoid an open/query pair).

Rename a few others to give us a slightly sensible pattern.

Andrew Bartlett
2007-10-10 13:06:05 -05:00
Andrew Bartlett
174c077842 r3907: * Rename lsa_Name to lsa_String
* Add new IDL to LSA, to query information about trusted domains (for
  cross-check with SamSync).

Andrew Bartlett
2007-10-10 13:06:04 -05:00
Andrew Bartlett
7094502fe0 r3904: * Add new LSA calls to open trusted domains
* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
2007-10-10 13:06:03 -05:00
Andrew Tridgell
fdaa753578 r3837: added support for LsaLookupSids in the LSA rpc server. This allows the GUI ACL editor on w2k to
correctly display names instead of SIDs.
2007-10-10 13:05:58 -05:00
Andrew Tridgell
729e0026e4 r3468: split out dcerpc_server.h 2007-10-10 13:05:17 -05:00
Andrew Tridgell
b8f5fa8ac8 r3428: switched to using minimal includes for the auto-generated RPC code.
The thing that finally convinced me that minimal includes was worth
pursuing for rpc was a compiler (tcc) that failed to build Samba due
to reaching internal limits of the size of include files. Also the
fact that includes.h.gch was 16MB, which really seems excessive. This
patch brings it back to 12M, which is still too large, but
better. Note that this patch speeds up compile times for both the pch
and non-pch case.

This change also includes the addition iof a "depends()" option in our
IDL files, allowing you to specify that one IDL file depends on
another. This capability was needed for the auto-includes generation.
2007-10-10 13:05:09 -05:00
Andrew Tridgell
1ee5ed4197 r2635: mem_ctx cleanups on the lsa and netlogon pipes in the rpc server 2007-10-10 12:59:15 -05:00
Andrew Tridgell
da60987a92 r2051: switched the samdb over to using the new destructor and reference
count features of talloc, instead of re-implementing both those
features inside of samdb (which is what we did before).

This makes samdb considerably simpler, and also fixes some bugs, as I
found some error paths that didn't call samdb_close(). Those are now
handled by the fact that a talloc_free() will auto-close and destroy
the samdb context, using a destructor.
2007-10-10 12:58:21 -05:00
Volker Lendecke
48df39c133 r1814: Fix the build.
Tridge, in rpc_epmapper.c there's a whole bunch of "return
NT_STATUS_NOT_IMPLEMENTED". You told me that's wrong, you should generate the
correct fault pdu. Or is epmapper special in that respect?

Volker
2007-10-10 12:57:58 -05:00
Andrew Tridgell
d6dca96352 r919: - added lsa_QueryInfoPolicy2() to IDL, test suite and server
- added lsa_OpenPolicy2() to server

- added guid handling in samdb

- added a couple more info policy levels in lsa server

- added some DNS info in the provisioning template and script

With the above changes WinXP professional can join a Samba4 domain
2007-10-10 12:56:20 -05:00
Andrew Tridgell
0a2c6a1062 r917: - added the start of a LSA server to samba4.
- added start of QueryDomainInfo in samr server

"net rpc info" from samba3 now works against a samba4 server. I
suspect join will work fairly soon.
2007-10-10 12:56:19 -05:00