Matthias Dieter Wallnöfer
7be36a0bd9
s4:lib/registry/util.c - strtoll call - better say explicitly that data is in hex format
...
Template is commit deebc934ed
from Wilco.
2010-10-15 08:45:15 +02:00
Matthias Dieter Wallnöfer
80550746ff
s4:ntptr/ntptr_simple_ldb.c - use LDB result constants
2010-10-15 08:45:15 +02:00
Matthias Dieter Wallnöfer
c362ce36b3
s4:libnet_samsync_ldb.c - use LDB result constants
2010-10-15 08:45:15 +02:00
Matthias Dieter Wallnöfer
ace4378de1
s4:lsa RPC server - use LDB result constant
2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
b647b2d5b3
s4:samldb LDB module - cosmetic - use "ldb" variable rather than "ldb_module_get_ctx"
2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
9310da1e2b
s4:samdb_create_foreign_security_principal - proof error code of "samdb_msg_add_string"
2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
9e69b22e70
s4:dsdb/common/util.c - samdb_msg_add_* calls - proof for more OOM conditions
2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
06ec5d0177
s4:dsdb/common/util.c - samdb_msg_add_string - the attribute name doesn't need to be duplicated
...
This is done internally by the LDB library - look at "ldb_msg_add_empty".
2010-10-15 08:45:01 +02:00
Matthias Dieter Wallnöfer
d099f86a37
s4:libds/common/flags.h - fix typo
2010-10-15 08:41:33 +02:00
Matthias Dieter Wallnöfer
9bc57e19e6
s4:dsdb - remove "samdb_msg_add_value"
...
This can be substituted by "ldb_msg_add_value".
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Oct 15 00:21:53 UTC 2010 on sn-devel-104
2010-10-15 00:21:53 +00:00
Matthias Dieter Wallnöfer
a0e9814c0d
s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", "samdb_result_uint64" and "samdb_result_string"
...
We have ldb_msg_find_attr_as_* calls which do exactly the same. Therefore this
reduces only code redundancies.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-10-15 08:36:01 +11:00
Volker Lendecke
c2533f94b5
s3: Remove smbd_server_conn from construct_reply
...
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu Oct 14 12:35:07 UTC 2010 on sn-devel-104
2010-10-14 12:35:07 +00:00
Volker Lendecke
63e08ef885
s3: Lift smbd_server_conn from receive_smb_talloc
2010-10-14 13:53:07 +02:00
Volker Lendecke
a2db154caa
s3: Lift smbd_server_conn from receive_smb_raw_talloc
2010-10-14 13:53:07 +02:00
Volker Lendecke
fa0de39551
s3: Lift smbd_server_conn from receive_smb_raw_talloc_partial_read
2010-10-14 13:53:07 +02:00
Volker Lendecke
cac60a7041
s3: Remove some explicit smbd_server_conn refs in process_smb()
2010-10-14 13:53:06 +02:00
Volker Lendecke
81bdb5910c
s3: Rename "conn" to the more used "sconn" in process_smb()
2010-10-14 13:53:06 +02:00
Matthias Dieter Wallnöfer
9a3810fbb2
s4:samldb LDB module - attempt to fix integer handling on big-endian platforms
...
And beside this it's also nicer to use standard LDB functions for type
conversions.
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Oct 14 08:26:53 UTC 2010 on sn-devel-104
2010-10-14 08:26:53 +00:00
Andrew Tridgell
3921d6f4d3
s4-waf: automatically remove stale C and header files
...
this prevents stale .c and .h files in bin/ from causing build
problems
Thanks to Thomas Nagy for the example implementation!
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 07:44:13 UTC 2010 on sn-devel-104
2010-10-14 07:44:13 +00:00
Andrew Tridgell
f1f5a23400
s4-heimdal: fixed some trailing commas in heimdal build
2010-10-14 16:23:45 +11:00
Andrew Tridgell
40a6e019fd
security: ensure the merge of libcli/security doesn't change s3 behaviour
...
Jeremy, you put a #if 0 around this logic in this commit:
8344e945
(Jeremy Allison 2008-10-31 10:51:45 -0700 181)
is this still needed?
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 03:16:41 UTC 2010 on sn-devel-104
2010-10-14 03:16:41 +00:00
Andrew Bartlett
f7ffc12e2d
libcli/security Use static SIDs rather than parsing from strings
...
This should make the security_token_is_*() calls a little faster.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
a879a4610d
libcli/auth Merge source4/libcli/security and util_sid.c into the common code
...
This should ensure we only have one copy of these core functions
in the tree.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
8b22eefd25
libcli/security Define traditional constants in terms of IDL macros
...
The source3/ code uses these constants in a lot of places, and it will
take time and care to rename them, if that is desired. Linking the
macros here will at least allow common code to use the IDL based macros,
and preserve a documentary link between the constants (other than just their value)
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
949541cc6f
libcli/security Move source3/lib/util_seaccess.c into the common code
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
353d9bc3e4
s4-acl Merge sec_access_check() with se_access_check() from source3/
...
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
058daa1cf5
s3-acl Use uint32_t for counting the ACEs
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
a040466d0d
s3-acl Merge source4-supported privileges into se_access_check
...
This will shortly be the common se_access_check function.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
7c6105ec27
s3-util_nttoken.c Also copy the rights_mask when copying a security_token
...
These are unused in source3/ code at the moment, but it would be
unfortunate if that were to change, and this function not be updated.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
170b345e0c
s3-auth Use security_token_debug() from common code
...
This prints the security token including the privileges as strings
instead of just a bitmap.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
58cf83732a
s3-auth use security_token_has_sid() from the common code
...
The wrapper call is left here to avoid changing semantics for
the NULL parameter case.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
deb7c02436
s3 Replace is_sid_in_token() with security_token_has_sid() from common code
...
The two routines are identical, so there is no need to keep both.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Tridgell
c41bb6e846
s4: show samba version in bin/samba -b
...
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 02:24:47 UTC 2010 on sn-devel-104
2010-10-14 02:24:47 +00:00
Matthias Dieter Wallnöfer
8c21a45e5c
s4:samldb LDB module - cosmetic fixups
...
- Update the module description
- Fix indentation
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 20:55:18 UTC 2010 on sn-devel-104
2010-10-13 20:55:18 +00:00
Jelmer Vernooij
e13b934355
heimdal: Add soname for com_err.
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 20:00:40 UTC 2010 on sn-devel-104
2010-10-13 20:00:40 +00:00
Jelmer Vernooij
f0124542bc
heimdal: Add sonames.
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 18:15:04 UTC 2010 on sn-devel-104
2010-10-13 18:15:04 +00:00
Jelmer Vernooij
01d14b4c57
samdb: Set soname.
2010-10-13 17:32:20 +00:00
Matthias Dieter Wallnöfer
bf657db3c4
s4:sam.py - tests for "userAccountControl" attribute
...
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 17:31:29 UTC 2010 on sn-devel-104
2010-10-13 17:31:29 +00:00
Matthias Dieter Wallnöfer
3411e71c76
s4:samldb LDB module - deny creation of temporary duplicate accounts
2010-10-13 18:46:13 +02:00
Matthias Dieter Wallnöfer
ed68189c5f
s4:samldb LDB module - proof the account type also on LDB modify operations
2010-10-13 18:37:20 +02:00
Jelmer Vernooij
18ea6c5dce
ldb: Only build LIBLDB_MAIN when building ldb itself.
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 15:41:29 UTC 2010 on sn-devel-104
2010-10-13 15:41:29 +00:00
Matthias Dieter Wallnöfer
36c1ed215d
s4:sam.py - add a test for the group type changing behaviour
...
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 14:17:31 UTC 2010 on sn-devel-104
2010-10-13 14:17:31 +00:00
Matthias Dieter Wallnöfer
826496ce55
s4:samldb LDB module - support the group type changing properly
...
This is exactly that what Windows allows. It was proven by a blackbox test.
And we also need to deny add operations of builtin groups.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
09ce56d957
s4:ldap.py - test the "isCriticalSystemObject" behaviour
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
5cb99aa81a
s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
...
It recognizes it now automatically.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
9bcb656bba
s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
4638bd11b5
s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
...
They're only allowed to be created with the RELAX control specified.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
8806008024
s4:samldb LDB module - first implementation of the samldb primary group trigger
...
This was done according to MS-SAMR 3.1.1.8.2
But do use it only for add operations at the moment.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
635996e97c
s4:samldb LDB module - use the new "objectclass_trigger" for add operations
...
Additionally clean up "samldb_fill_object" which is now much easier to
comprehend.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
2b6cbf2eb0
s4:samldb LDB module - first implementation of the samldb objectclass trigger
...
This was done according to MS-SAMR 3.1.1.8.1
I need to perform some RELAX checks since otherwise the provision wouldn't work
anymore.
2010-10-13 13:35:21 +00:00