Matthias Dieter Wallnöfer
6e720ecd25
s4:SID handling - always encode the SID using "ldap_encode_ndr_dom_sid" for LDAP filters
...
This makes also lookups through special backends as "samba3sam" work.
2010-09-13 22:41:06 +02:00
Matthias Dieter Wallnöfer
9d4dc69627
s4:lib/policy/gp_filesys.c - remove dead code
...
Found out by Solaris cc
2010-09-10 22:45:50 +02:00
Andrew Bartlett
6cf29b3e4f
s4:security Change struct security_token->sids from struct dom_sid * to struct dom_sid
...
This makes the structure much more like NT_USER_TOKEN in the source3/
code. (The remaining changes are that privilages still need to be merged)
Andrew Bartlett
2010-08-23 08:50:55 +10:00
Andrew Bartlett
7c6ca95bec
s4:security Remove use of user_sid and group_sid from struct security_token
...
This makes the structure more like Samba3's NT_USER_TOKEN
2010-08-18 09:50:38 +10:00
Andrew Tridgell
56db40d5fd
s4-build: use @PACKAGE_VERSION@ in s4 pc.in files
...
this gets replaced by vnum from the build rule
2010-08-09 12:27:23 +10:00
Andrew Tridgell
6b266b85cf
s4-loadparm: 2nd half of lp_ to lpcfg_ conversion
...
this converts all callers that use the Samba4 loadparm lp_ calling
convention to use the lpcfg_ prefix.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-07-16 18:24:27 +10:00
Andrew Tridgell
4cb423f527
s4-python: python is not always in /usr/bin
...
Using "#!/usr/bin/env python" is more portable. It still isn't ideal
though, as we should really use the python path found at configure
time. We do that in many places already, but some don't.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-24 18:46:57 +10:00
Matthias Dieter Wallnöfer
58715dd365
s4:libpolicy - fix printf output specifiers to suppress warning
2010-06-20 20:34:48 +02:00
Matthias Dieter Wallnöfer
26bcbf6e35
s4:libpolicy - Solaris compatibility fix
2010-06-20 20:25:00 +02:00
Jelmer Vernooij
52307a11e1
libpolicy: Fix the build.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:13 +02:00
Wilco Baan Hofman
e18a172207
Add preliminary support for storing changed Group Policies.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:13 +02:00
Wilco Baan Hofman
04133225c1
Refactor policy filesystem code.
...
* It now uses reusable code to download the GPT.
* It creates a list before copying for better error handling.
* String_replace is now used instead of manually replacing '\\' with '/'
for local paths.
* A security check has been added for file names with "../".
* It adheres to the 80 column rule, if at all possible.
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:13 +02:00
Wilco Baan Hofman
b9b85d6b0e
Fix memory allocation with error handling.
...
Also moved pypolicy.c headers around so as not to generate compile warnings
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:13 +02:00
Wilco Baan Hofman
c09922cfae
Code cleanups: GUID generation, lp_dnsdomain instead of lp_realm, missing spaces.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
5c2c8dfc5a
Set inherit flag type to bool.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
d61f0240ee
Fix 'magic' numbers to be strlen(something)
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
e86ef688ee
Change talloc_steal to strdup because function might not expect it.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
674d559f37
Add GP ini functions.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
3fe793fce7
Remove iconv convenience in used functions, which were deleted in commit f9ca9e46ad
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
8f74ee01d9
Add ini parser for GPO's.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
c36bd5de6a
Add net gpo setacl support. Create gp_set_acl function. Show ACL in net gpo show.
...
Cleanup memory allocation of gp_create_gpo
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
5434171296
Fix set GPT security descriptor to match windows' behaviour.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
31aeddfa43
Fix crash when get_gpo_info returns incorrect data.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:12 +02:00
Wilco Baan Hofman
299531ce32
Add preliminary NT ACL support for GPT (GPO on filesystem).
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Jelmer Vernooij
60bc5fe0ed
samba4: Add python bindings for samba.policy.get_gplink_options.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Jelmer Vernooij
381e824658
policy: Add samba.policy.get_gpo_flags binding.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
41fae89daf
Add gpo create functionality. Also fix gPLink handling bugs
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
32ee6f8cfd
Fix mode_t in mkdir.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
2b761c3def
Optimize the backslash logic in the path traversal.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
f24f472d44
Fix error in logic, making recursion work past the first level.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
3b11a53304
Add fetch function for GPO which fetches all relevant files from the sysvol share.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
698144851a
Add getinheritance and setinheritance to net gpo util and library.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
a4cb72790c
Implemented delete group policy link function and corresponding feature in net gpo.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
f0353fddde
Changed add_gplink to set_gplink, so we can change gPLink options as well.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:11 +02:00
Wilco Baan Hofman
40d7181507
Add add gPLink function and corresponding net gpo linkadd call.
...
Also added some definitions for future functions in policy.h
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:10 +02:00
Wilco Baan Hofman
a1fceac844
Rename files to reflect the libpolicy naming convention. Also fix the GNU make build.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:10 +02:00
Wilco Baan Hofman
b025715419
Rename libgpo to lib/policy to avoid confusion with samba3 and add waf build
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20 17:19:10 +02:00