1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-29 11:21:54 +03:00
Commit Graph

67816 Commits

Author SHA1 Message Date
Matthias Dieter Wallnöfer
7be36a0bd9 s4:lib/registry/util.c - strtoll call - better say explicitly that data is in hex format
Template is commit deebc934ed from Wilco.
2010-10-15 08:45:15 +02:00
Matthias Dieter Wallnöfer
80550746ff s4:ntptr/ntptr_simple_ldb.c - use LDB result constants 2010-10-15 08:45:15 +02:00
Matthias Dieter Wallnöfer
c362ce36b3 s4:libnet_samsync_ldb.c - use LDB result constants 2010-10-15 08:45:15 +02:00
Matthias Dieter Wallnöfer
ace4378de1 s4:lsa RPC server - use LDB result constant 2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
b647b2d5b3 s4:samldb LDB module - cosmetic - use "ldb" variable rather than "ldb_module_get_ctx" 2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
9310da1e2b s4:samdb_create_foreign_security_principal - proof error code of "samdb_msg_add_string" 2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
9e69b22e70 s4:dsdb/common/util.c - samdb_msg_add_* calls - proof for more OOM conditions 2010-10-15 08:45:14 +02:00
Matthias Dieter Wallnöfer
06ec5d0177 s4:dsdb/common/util.c - samdb_msg_add_string - the attribute name doesn't need to be duplicated
This is done internally by the LDB library - look at "ldb_msg_add_empty".
2010-10-15 08:45:01 +02:00
Matthias Dieter Wallnöfer
d099f86a37 s4:libds/common/flags.h - fix typo 2010-10-15 08:41:33 +02:00
Matthias Dieter Wallnöfer
9bc57e19e6 s4:dsdb - remove "samdb_msg_add_value"
This can be substituted by "ldb_msg_add_value".

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Oct 15 00:21:53 UTC 2010 on sn-devel-104
2010-10-15 00:21:53 +00:00
Matthias Dieter Wallnöfer
a0e9814c0d s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", "samdb_result_uint64" and "samdb_result_string"
We have ldb_msg_find_attr_as_* calls which do exactly the same. Therefore this
reduces only code redundancies.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-10-15 08:36:01 +11:00
Volker Lendecke
c2533f94b5 s3: Remove smbd_server_conn from construct_reply
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu Oct 14 12:35:07 UTC 2010 on sn-devel-104
2010-10-14 12:35:07 +00:00
Volker Lendecke
63e08ef885 s3: Lift smbd_server_conn from receive_smb_talloc 2010-10-14 13:53:07 +02:00
Volker Lendecke
a2db154caa s3: Lift smbd_server_conn from receive_smb_raw_talloc 2010-10-14 13:53:07 +02:00
Volker Lendecke
fa0de39551 s3: Lift smbd_server_conn from receive_smb_raw_talloc_partial_read 2010-10-14 13:53:07 +02:00
Volker Lendecke
cac60a7041 s3: Remove some explicit smbd_server_conn refs in process_smb() 2010-10-14 13:53:06 +02:00
Volker Lendecke
81bdb5910c s3: Rename "conn" to the more used "sconn" in process_smb() 2010-10-14 13:53:06 +02:00
Matthias Dieter Wallnöfer
9a3810fbb2 s4:samldb LDB module - attempt to fix integer handling on big-endian platforms
And beside this it's also nicer to use standard LDB functions for type
conversions.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Oct 14 08:26:53 UTC 2010 on sn-devel-104
2010-10-14 08:26:53 +00:00
Andrew Tridgell
3921d6f4d3 s4-waf: automatically remove stale C and header files
this prevents stale .c and .h files in bin/ from causing build
problems

Thanks to Thomas Nagy for the example implementation!

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 07:44:13 UTC 2010 on sn-devel-104
2010-10-14 07:44:13 +00:00
Andrew Tridgell
f1f5a23400 s4-heimdal: fixed some trailing commas in heimdal build 2010-10-14 16:23:45 +11:00
Andrew Tridgell
40a6e019fd security: ensure the merge of libcli/security doesn't change s3 behaviour
Jeremy, you put a #if 0 around this logic in this commit:

  8344e945 (Jeremy Allison    2008-10-31 10:51:45 -0700 181)

is this still needed?

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 03:16:41 UTC 2010 on sn-devel-104
2010-10-14 03:16:41 +00:00
Andrew Bartlett
f7ffc12e2d libcli/security Use static SIDs rather than parsing from strings
This should make the security_token_is_*() calls a little faster.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
a879a4610d libcli/auth Merge source4/libcli/security and util_sid.c into the common code
This should ensure we only have one copy of these core functions
in the tree.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
8b22eefd25 libcli/security Define traditional constants in terms of IDL macros
The source3/ code uses these constants in a lot of places, and it will
take time and care to rename them, if that is desired.  Linking the
macros here will at least allow common code to use the IDL based macros,
and preserve a documentary link between the constants (other than just their value)

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
949541cc6f libcli/security Move source3/lib/util_seaccess.c into the common code
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
353d9bc3e4 s4-acl Merge sec_access_check() with se_access_check() from source3/
Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:05 +00:00
Andrew Bartlett
058daa1cf5 s3-acl Use uint32_t for counting the ACEs
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
a040466d0d s3-acl Merge source4-supported privileges into se_access_check
This will shortly be the common se_access_check function.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
7c6105ec27 s3-util_nttoken.c Also copy the rights_mask when copying a security_token
These are unused in source3/ code at the moment, but it would be
unfortunate if that were to change, and this function not be updated.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
170b345e0c s3-auth Use security_token_debug() from common code
This prints the security token including the privileges as strings
instead of just a bitmap.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
58cf83732a s3-auth use security_token_has_sid() from the common code
The wrapper call is left here to avoid changing semantics for
the NULL parameter case.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
deb7c02436 s3 Replace is_sid_in_token() with security_token_has_sid() from common code
The two routines are identical, so there is no need to keep both.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Tridgell
c41bb6e846 s4: show samba version in bin/samba -b
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 02:24:47 UTC 2010 on sn-devel-104
2010-10-14 02:24:47 +00:00
Matthias Dieter Wallnöfer
8c21a45e5c s4:samldb LDB module - cosmetic fixups
- Update the module description
- Fix indentation

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 20:55:18 UTC 2010 on sn-devel-104
2010-10-13 20:55:18 +00:00
Jelmer Vernooij
e13b934355 heimdal: Add soname for com_err.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 20:00:40 UTC 2010 on sn-devel-104
2010-10-13 20:00:40 +00:00
Jelmer Vernooij
f0124542bc heimdal: Add sonames.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 18:15:04 UTC 2010 on sn-devel-104
2010-10-13 18:15:04 +00:00
Jelmer Vernooij
01d14b4c57 samdb: Set soname. 2010-10-13 17:32:20 +00:00
Matthias Dieter Wallnöfer
bf657db3c4 s4:sam.py - tests for "userAccountControl" attribute
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 17:31:29 UTC 2010 on sn-devel-104
2010-10-13 17:31:29 +00:00
Matthias Dieter Wallnöfer
3411e71c76 s4:samldb LDB module - deny creation of temporary duplicate accounts 2010-10-13 18:46:13 +02:00
Matthias Dieter Wallnöfer
ed68189c5f s4:samldb LDB module - proof the account type also on LDB modify operations 2010-10-13 18:37:20 +02:00
Jelmer Vernooij
18ea6c5dce ldb: Only build LIBLDB_MAIN when building ldb itself.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 15:41:29 UTC 2010 on sn-devel-104
2010-10-13 15:41:29 +00:00
Matthias Dieter Wallnöfer
36c1ed215d s4:sam.py - add a test for the group type changing behaviour
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 14:17:31 UTC 2010 on sn-devel-104
2010-10-13 14:17:31 +00:00
Matthias Dieter Wallnöfer
826496ce55 s4:samldb LDB module - support the group type changing properly
This is exactly that what Windows allows. It was proven by a blackbox test.

And we also need to deny add operations of builtin groups.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
09ce56d957 s4:ldap.py - test the "isCriticalSystemObject" behaviour 2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
5cb99aa81a s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
It recognizes it now automatically.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
9bcb656bba s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations 2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
4638bd11b5 s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
They're only allowed to be created with the RELAX control specified.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
8806008024 s4:samldb LDB module - first implementation of the samldb primary group trigger
This was done according to MS-SAMR 3.1.1.8.2

But do use it only for add operations at the moment.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
635996e97c s4:samldb LDB module - use the new "objectclass_trigger" for add operations
Additionally clean up "samldb_fill_object" which is now much easier to
comprehend.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
2b6cbf2eb0 s4:samldb LDB module - first implementation of the samldb objectclass trigger
This was done according to MS-SAMR 3.1.1.8.1

I need to perform some RELAX checks since otherwise the provision wouldn't work
anymore.
2010-10-13 13:35:21 +00:00