1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-29 16:23:52 +03:00
Commit Graph

3159 Commits

Author SHA1 Message Date
Stefan Metzmacher
5861657fd1 r4418: fix compiler warning and remove unused typedef
metze
2007-10-10 13:07:47 -05:00
Volker Lendecke
04cf580ef3 r4417: Reply to samr_QueryDomainInfo with the same static value as level2 does.
Volker
2007-10-10 13:07:46 -05:00
Volker Lendecke
97247c9029 r4416: [in,out] variables do have an r->out component...
Volker
2007-10-10 13:07:46 -05:00
Volker Lendecke
83d180c732 r4415: Implement samr_RemoveMemberFromForeignDomain. This is needed to delete a user
with usrmgr.exe.

To fix: Remove domain group membership attrib values when a user is deleted.

Volker
2007-10-10 13:07:46 -05:00
Volker Lendecke
cdec896113 r4414: Various bits&pieces:
* Implement samr_search_domain, filter out all elements with no "objectSid"
  attribute and all objects outside a specified domain sid.

* Minor cleanups in dcerpc_samr.c due to that.

* Implement srvsvc_NetSrvGetInfo level 100. A quick hack to get usrmgr.exe
  one step further.

* Same for samr_info_DomInfo1.

Volker
2007-10-10 13:07:46 -05:00
Andrew Tridgell
b9284c16dc r4413: login failure doesn't warrant a level 1 debug (its filling my logs during torture tests) 2007-10-10 13:07:45 -05:00
Andrew Tridgell
96d017e521 r4412: SEC_FILE_READ_ATTRIBUTE is always granted, even if not requested. This was being done
in the full ACL code, but not in the unix access check code, which meant that qfileinfo
was failing for some parameters
2007-10-10 13:07:45 -05:00
Andrew Tridgell
30b4c20b1c r4411: when checking for create permissions, we need to check the parent, not the child! 2007-10-10 13:07:45 -05:00
Andrew Tridgell
babf3480a4 r4410: pvfs_rename_one() should not check for create permissions, as the rename
is always in the same directory
2007-10-10 13:07:44 -05:00
Andrew Tridgell
75e7229476 r4409: fixed handling of zero access masks for the POSITION_INFORMATION query/set levels 2007-10-10 13:07:44 -05:00
Andrew Tridgell
5fe51807d6 r4408: added the remaining access check hooks into pvfs. All calls should now have acl checking,
and obey the various inheritance rules.
2007-10-10 13:07:44 -05:00
Andrew Tridgell
b239589b00 r4407: stricter checking of parameters on hard link creation in the RAW-RENAME test 2007-10-10 13:07:44 -05:00
Andrew Tridgell
fa44e3cce0 r4406: - don't call the xattr unlink hook on unlink unless the link count is 1, otherwise
the xattrs of the remaining link are removed

- fix the handling of attribute set on directories
2007-10-10 13:07:44 -05:00
Andrew Tridgell
b44d4d17df r4405: added acl inheritance to the mkdir and t2mkdir backends. 2007-10-10 13:07:44 -05:00
Andrew Tridgell
e4ee8b776b r4404: check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic 2007-10-10 13:07:43 -05:00
Andrew Tridgell
f4dfb63d53 r4403: - added ACL inheritance in the pvfs backend. ACLs are now inherited on
file and directory creation via ntcreatex. pvfs now passes the
  inheritance test in RAW-ACLS

- cleaned up the error handling a bit in pvfs_open()
2007-10-10 13:07:43 -05:00
Andrew Tridgell
09ac133820 r4402: use __location__ instead of __LINE__ in the RAW-RENAME test 2007-10-10 13:07:43 -05:00
Andrew Tridgell
1bb7691963 r4401: stricter test for correct ACL inheritance in RAW-ACLS 2007-10-10 13:07:43 -05:00
Andrew Bartlett
d901c8fb64 r4400: Pass rootdse.ldif past the subst code.
Andrew Bartlett
2007-10-10 13:07:43 -05:00
Volker Lendecke
9c62a239cd r4399: Implement samr_GetAliasMembership and samr_GetGroupsForUser. With these two,
usrmgr.exe seems to become usable. Some quirks, but it's worth a try.

Volker
2007-10-10 13:07:43 -05:00
Volker Lendecke
9c23d73ec2 r4398: Make usrmgr.exe believe we're a DC. Otherwise it will not show global groups.
Index on "key" attribute.

Volker
2007-10-10 13:07:43 -05:00
Volker Lendecke
55c9fbd4f4 r4397: Fix a bug where '(&(objectclass=domain)(!(objectclass=builtindomain)))' fell
back to a full search.

Volker
2007-10-10 13:07:42 -05:00
Jelmer Vernooij
3ebaec6edb r4396: Generate newrootdse.ldb in provision.pl as well 2007-10-10 13:07:42 -05:00
Jelmer Vernooij
fa53c56236 r4395: Generate "newhklm.ldb" using provision.pl 2007-10-10 13:07:42 -05:00
Jelmer Vernooij
9175b72972 r4394: Use 'raw' protocol towers in the lists in the endpoint rather then
dcerpc_binding structs.
2007-10-10 13:07:42 -05:00
Volker Lendecke
ae3c329e9d r4393: Trivial bugfix for a silly bug 2007-10-10 13:07:42 -05:00
Volker Lendecke
b0b9332519 r4392: Fix samr_GetAliasMembership idl 2007-10-10 13:07:42 -05:00
Andrew Tridgell
16967f7502 r4391: bring the default ACL inline with what w2k3 uses 2007-10-10 13:07:42 -05:00
Jelmer Vernooij
2948b9750d r4390: Registry value and key names are case-insensitive
Nicer menu layout in gregedit
2007-10-10 13:07:42 -05:00
Andrew Tridgell
e30b8d5783 r4389: added checking for the default inherited ACL, which is used when no ACEs
are inheritable
2007-10-10 13:07:41 -05:00
Andrew Tridgell
fdb38c8e4b r4388: - allow ACE flags to be specified in security_descriptor_create()
- added a test for all combinations of the inheritance ACE flags and how
  they are propogated to child directories and files
2007-10-10 13:07:41 -05:00
Andrew Tridgell
a012d1c978 r4387: added a TODO about the NTCREATEX_FLAGS_OPEN_DIRECTORY flag - it seems to open
the parent of the specified directory ?!
2007-10-10 13:07:41 -05:00
Andrew Bartlett
13aa88ed65 r4386: Grr, fix copy-and-paste bug.
Andrew Bartlett
2007-10-10 13:07:41 -05:00
Andrew Bartlett
722f59c7c8 r4385: Set the correct target service.
Andrew Bartlett
2007-10-10 13:07:41 -05:00
Andrew Bartlett
da4cf53767 r4384: Try again to fix compiling against a specified KRB5 library.
The strong feeling I get is that this is just not possible, if as
Fedora has, the MIT installation is in /usr/lib, but this is one step
closer anyway.

Andrew Bartlett
2007-10-10 13:07:41 -05:00
Andrew Tridgell
5cd74c22e9 r4383: in order to cope with overfilled buffers on trans2 findfirst we need to use 32 bit offsets and lengths
in trans2 fill code, even though the packets themselves can only use 16 bit lengths. This prevents
the overflow detection code from failing due to 16 bit length wrap.
2007-10-10 13:07:41 -05:00
Andrew Tridgell
44ca3f41cc r4382: check for bad tid in SMBtdis 2007-10-10 13:07:40 -05:00
Volker Lendecke
9e27a83ac3 r4381: Add my copyright 2007-10-10 13:07:40 -05:00
Volker Lendecke
26d21bb5cc r4380: Implement samr_QueryDisplayInfo. This probably needs some polishing (Do we
have to sort the entries?)

Volker
2007-10-10 13:07:40 -05:00
Andrew Bartlett
9c74e04098 r4379: Merge more Kerberos related configure checks (by jra, gd and Lars
Mueller <lmuelle@suse.de>) from 3.0 to Samba4.

Andrew Bartlett
2007-10-10 13:07:40 -05:00
Volker Lendecke
c95d20cd7c r4378: Implement samr_EnumDomainGroups and samr_EnumDomainAliases.
Hmmm. How do I tell ldb not to descend into cn=Builtin?

Volker
2007-10-10 13:07:40 -05:00
Volker Lendecke
15d50350b5 r4377: Fix default groupType attributes.
Volker
2007-10-10 13:07:40 -05:00
Volker Lendecke
78802720ae r4376: Implement samr_AddAliasMember, samr_DeleteAliasMember and
samr_GetMembersInAlias.

Volker
2007-10-10 13:07:40 -05:00
Volker Lendecke
d70e237190 r4375: Implement samr_OpenAlias, samr_QueryAliasInfo and samr_SetAliasInfo. Fix IDL
for samr_SetAliasInfo.

Volker
2007-10-10 13:07:39 -05:00
Volker Lendecke
b8fa5b9419 r4374: Follow metzes hint, change LookupRids a bit 2007-10-10 13:07:39 -05:00
Jelmer Vernooij
cdb6980cdc r4373: Support setting values and fix a segfault 2007-10-10 13:07:39 -05:00
Volker Lendecke
1bab3254f6 r4372: Implement samr_LookupRids 2007-10-10 13:07:39 -05:00
Jelmer Vernooij
ada16f31e4 r4371: Add "Create Key", "Delete Key" and "Delete Value" buttons.
gregedit now can do the same things as regedt32 except for finding
data and setting values. (and a few segfaults...)
2007-10-10 13:07:39 -05:00
Volker Lendecke
43581c3711 r4367: Implement samr_AddGroupMember, samr_DeleteGroupMember and
samr_QueryGroupMember.

Volker
2007-10-10 13:07:39 -05:00
Volker Lendecke
284044b5b2 r4366: Fix ldb_modify_internal: Adding values to an existing attribute you could end
up with a corrupt data structure on disk, namely with two attribute structures
for the same attribute name.

Volker
2007-10-10 13:07:38 -05:00