1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-03 04:23:50 +03:00
Commit Graph

23 Commits

Author SHA1 Message Date
Stefan Metzmacher
0ff74d327b r15616: fix white spaces
metze
2007-10-10 14:07:00 -05:00
Jelmer Vernooij
c19c2b51d3 r15328: Move some functions around, remove dependencies.
Remove some autogenerated headers (which had prototypes now autogenerated by pidl)
Remove ndr_security.h from a few places - it's no longer necessary
2007-10-10 14:05:17 -05:00
Jelmer Vernooij
7213b7498e r14361: Support 'helper' attribute in pidl and use it.
Remove some headers from include/includes.h (they're now only included
in the file they are used)
2007-10-10 13:57:14 -05:00
Stefan Metzmacher
2cb0327528 r13927: fix dependency
metze
2007-10-10 13:52:27 -05:00
Andrew Tridgell
c30e7698e8 r12010: - added support for domain specific SID codes in SDDL strings
- added a bunch more tests to LOCAL-SDDL (all the ones from our schema)

- fixed 'mixed coded declarations' bug
2007-10-10 13:46:59 -05:00
Andrew Tridgell
dc1b83cc13 r12004: added some SEC_ADS_* security flags. Needed for a SDDL parser. 2007-10-10 13:46:58 -05:00
Andrew Tridgell
f20695decd r9574: - made the sec_info fields in lsa and samr use a IDL bitmap
- fixed winreg_GetKeySecurity() to use a sec_info field correctly

- simplied the winreg torture code, removing the separate opens for
  each hive

- added torture cleanup code in winreg test

- added 'create with security descriptor' in the winreg torture test
2007-10-10 13:34:30 -05:00
Stefan Metzmacher
83d65d0d7e r9240: - move struct security_token to the idl file, with this we can
the ndr_pull/push/print functions for it in the ntacl-lsm module

- fix compiler warnings in the ldap_encode_ndr_* code

metze
2007-10-10 13:31:37 -05:00
Andrew Tridgell
a8cb2dbdcc r8233: - added support for more base types in pidl ejs
- added auto generation of a header with prototypes for public ejs functions

- make public functions non-static

- fixed allocation of fixed sized arrays

- added 'noejs' flag indicating that a typedef will be handled manually by ejs

- added manual functions for sid and GUID, so they show up as nice
  strings in ejs scripts

This allows ejs to bring in samr, security, lsa and misc IDL functions
2007-10-10 13:19:23 -05:00
Jelmer Vernooij
b7b01bccd1 r7552: Use ParseExpr() for [value] attributes; allows
us somewhat cleaner IDL.
2007-10-10 13:18:07 -05:00
Stefan Metzmacher
2791de069a r6132: allow up to 15 sub_auth in a dom_sid
(tridge: asked me for that commit)

metze
2007-10-10 13:11:21 -05:00
Stefan Metzmacher
2a6a075c7d r5850: enable parsing of revision 4 security acl's
metze
2007-10-10 13:11:05 -05:00
Stefan Metzmacher
2fc8a604b0 r5798: limit the size of an sid, 28 bytes complete is the biggest SID
that can be handled.

tridge: do you think it would make sense to change the sub_auth[num_auths] to sub_auth[5],
        so we can copy the struct by sid1 = sid2;
	comments please

metze
2007-10-10 13:11:04 -05:00
Jelmer Vernooij
31bed62a9a r5362: Add pointer_default() support to pidl. pointer_default()
is assumed to be "ptr" if not specified (just like midl).

The validator will warn when "ptr" is used at the moment, because
pidl only supports unique, ref and relative at the moment.
2007-10-10 13:09:46 -05:00
Stefan Metzmacher
fa798fe1f0 r4649: make more use of bitmap and enum's
metze
2007-10-10 13:08:39 -05:00
Andrew Tridgell
7b446af09b r4147: converted from NT_USER_TOKEN to struct security_token
this is mostly just a tidyup, but also adds the privilege_mask, which
I will be using shortly in ACL checking.

note that I had to move the definition of struct security_token out of
security.idl as pidl doesn't yet handle arrays of pointers, and the
usual workaround (to use a intermediate structure) would make things
too cumbersome for this structure, especially given we never encode it
to NDR.
2007-10-10 13:06:31 -05:00
Andrew Tridgell
d5bc706140 r4072: - changed the names of some of the well known sids to be more consistent
- added string constants for the important privileges.
2007-10-10 13:06:22 -05:00
Andrew Tridgell
80d15fa340 r4052: fixed a bunch of code to use the type safe _p allocation macros 2007-10-10 13:06:18 -05:00
Andrew Tridgell
17a4e0b3ac r4035: more effort on consistent naming of the access mask bits.
This removes the duplicate named SEC_RIGHTS_MAXIMUM_ALLOWED and
SEC_RIGHTS_FULL_CONTROL, which are just other names for
SEC_FLAG_MAXIMUM_ALLOWED and SEC_RIGHTS_FILE_ALL. The latter names
match the new naming conventions in security.idl

Also added names for the generic->specific mappings for files are
directories
2007-10-10 13:06:16 -05:00
Andrew Tridgell
01c0fa722f r4011: get rid of rpc_secdes.h and replace it with a single sane set of
definitions for security access masks, in security.idl

The previous definitions were inconsistently named, and contained many
duplicate and misleading entries. I kept finding myself tripping up
while using them.
2007-10-10 13:06:13 -05:00
Andrew Bartlett
39ae5e1dac r3885: Add security descriptor comparison to our RPC-SAMSYNC test. We now
verify that the security descriptor found in the SamSync is the same
as what is available over SAMR.

Unfortunately, the administrator seems unable to retrieve the SACL on
the security descriptor, so I've added a new function to compare with
a mask.

Andrew Bartlett
2007-10-10 13:06:01 -05:00
Andrew Tridgell
2ff9816ae0 r3829: added a RAW-ACLS test suite that tests query/set of ACLs on a file 2007-10-10 13:05:57 -05:00
Stefan Metzmacher
b620bdd672 r3810: create a LIB_SECURITY subsystem
- move dom_sid, security_descriptor, security_* funtions to one place
  and rename some of them

metze
2007-10-10 13:05:56 -05:00