sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00
Code
17,465 Commits 60 Branches 1,146 Tags
Commit Graph

17 Commits

Author SHA1 Message Date
Gerald Carter
77c10ff9aa r4724: Add support for Windows privileges in Samba 3.0 
(based on Simo's code in trunk).  Rewritten with the
following changes:

* privilege set is based on a 32-bit mask instead of strings
  (plans are to extend this to a 64 or 128-bit mask before
   the next 3.0.11preX release).
* Remove the privilege code from the passdb API
  (replication to come later)
* Only support the minimum amount of privileges that make
  sense.
* Rewrite the domain join checks to use the SeMachineAccountPrivilege
  instead of the 'is a member of "Domain Admins"?' check that started
  all this.

Still todo:

* Utilize the SePrintOperatorPrivilege in addition to the 'printer admin'
  parameter
* Utilize the SeAddUserPrivilege for adding users and groups
* Fix some of the hard coded _lsa_*() calls
* Start work on enough of SAM replication to get privileges from one
  Samba DC to another.
* Come up with some management tool for manipultaing privileges
  instead of user manager since it is buggy when run on a 2k client
  (haven't tried xp).  Works ok on NT4.
 2007-10-10 10:53:51 -05:00
Jeremy Allison
620f2e608f r4088: Get medieval on our ass about malloc.... :-). Take control of all our allocation 
functions so we can funnel through some well known functions. Should help greatly with
malloc checking.
HEAD patch to follow.
Jeremy.
 2007-10-10 10:53:32 -05:00
Volker Lendecke
3bd72b864f r3852: Fix the build... 2007-10-10 10:53:21 -05:00
Volker Lendecke
2508d4ed1e r3566: Completely replace the queryuseraliases call. The previous implementation does 
not exactly match what you would expect.

XP workstations during login actually do this, so we should better become a
bit more correct. The LDAP query issued is not really fully optimal, but it is
a lot faster and more correct than what was there before. The change in
passdb.h makes it possible that queryuseraliases is done with a single ldap
query.

Volker
 2007-10-10 10:53:09 -05:00
Jeremy Allison
d97b9146a1 r801: Fix from "Jianliang Lu" <j.lu@tiesse.com> to return correct group 
types.
Jeremy.
 2007-10-10 10:51:46 -05:00
Jeremy Allison
538b66f4e9 r788: Inspired by patch from "Jianliang Lu" <j.lu@tiesse.com>. Correct 
sid type is WKN_GROUP, not alias. Added some more known types.
Jeremy.
 2007-10-10 10:51:38 -05:00
Gerald Carter
b393469d95 r116: volker's patch for local group and group nesting 2007-10-10 10:51:10 -05:00
Gerald Carter
33a1a374eb add well known rid for pre win2k compatible access group; bug 897 -
Jeremy Allison
72252fb0b2 Patch from Jianliang Lu j.lu@tiesse.com to manage Power Users 
group.
Jeremy.
 -
Gerald Carter
464b410734 another strequal() == 0 fix -
Gerald Carter
4bc58129e0 add Replicator and RAS Servers to list of builtin SIDs we resolve; bug 608 -
Andrew Bartlett
3a7458f947 Merge from HEAD - make Samba compile with -Wwrite-strings without additional 
warnings.  (Adds a lot of const).

Andrew Bartlett
 -
Jeremy Allison
f755711df8 Removed global_myworkgroup, global_myname, global_myscope. Added liberal 
dashes of const. This is a rather large check-in, some things may break.
It does compile though :-).
Jeremy.
 -
Jeremy Allison
597c461009 Start to merge the new ACL mapping code from Andreas Gruenbacher <agruen@suse.de>. 
Jeremy.
 -
Jelmer Vernooij
3928578b52 sync 3.0 branch with head -
Andrew Bartlett
96afea638e Globally replace 'global_sam_sid' with get_global_sam_sid(), a self 
initialising function.  This patch thanks to the work of
"Stefan (metze) Metzmacher" <metze@metzemix.de>

This is partly to enable the transition to SIDs in the the passdb.

Andrew Bartlett
 -
Andrew Bartlett
743afd96cb Move the code from lib/util_sid.c that deals with the global_sam_sid into 
a file that is linked with the passdb.

This is to avoid linking insanity when this global becomes a self-initing
function.
 -