1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Commit Graph

812 Commits

Author SHA1 Message Date
Simo Sorce
d9e311ddce s4:lsa Functions to set Domain Trust Information 2010-03-22 21:49:40 -04:00
Andrew Tridgell
55c45110e6 charset: fixed a problem with the global use of the iconv_convenience structure
We had a crash bug where a cached copy of a iconv convenience pointer
was used after being freed when loadparm asked for iconv to
reload. This could happen if a python module used a iconv based
function before loadparm was completed.

The fix is to ensure that any use of this pointer remains valid, by
reusing the pointer itself when it has already been initialised, but
filling in the child elements with the updated values.
2010-03-18 14:18:41 +11:00
Günther Deschner
0e47277dd7 s3: re-run make samba3-idl.
Guenther
2010-03-16 21:52:29 +01:00
Günther Deschner
4f28afc929 lsa: fix IDL for lsa_SetTrustedDomainInfoByName.
Guenther
2010-03-16 21:51:37 +01:00
Günther Deschner
a6d42784d0 s3: re-run make samba3-idl.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-16 15:12:18 +01:00
Simo Sorce
cfa2b7b6bf s4:idl add lsaRSetForestTrustInformation
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-16 15:12:18 +01:00
Matthias Dieter Wallnöfer
c91afe9596 security.idl - push generated code diff 2010-03-16 15:01:46 +01:00
Simo Sorce
8353aa39b6 s4:idl change level to type in lsa_ForestTrustRecord. 2010-03-16 14:48:40 +01:00
Nadezhda Ivanova
a212c1dedb Added a net acl ds command for modification of ACLs on directory objects
At present the command supports only addition of control access rigts, done
so DRS access checks can be tested. It will be expanded to deal with most
ways to modify and view a DS ACL.
Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed
to this, which is "net acl ds"

./bin/net acl ds set --help
Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn

Options:
  -h, --help            show this help message and exit
  --host=HOST           LDB URL for database or target server
  --car=CAR              The access control right to allow or deny
  --action=ACTION       Deny or allow access
  --objectdn=OBJECTDN   DN of the object whose SD to modify
  --trusteedn=TRUSTEEDN
                        DN of the entity that gets access

  Samba Common Options:
    -s FILE, --configfile=FILE
                        Configuration file

  Credentials Options:
    --simple-bind-dn=DN
                        DN to use for a simple bind
    --password=PASSWORD
                        Password
    -U USERNAME, --username=USERNAME
                        Username
    -W WORKGROUP, --workgroup=WORKGROUP
                        Workgroup
    -N, --no-pass       Don't ask for a password
    -k KERBEROS, --kerberos=KERBEROS
                        Use Kerberos
2010-03-16 13:37:48 +02:00
Stefan Metzmacher
f4c227e571 librpc: rerun make idl
metze
2010-03-12 15:25:40 +01:00
Stefan Metzmacher
f85c825ae2 drsuapi.idl: don't mark drsuapi_DsGetMemberships as [todo]
metze
2010-03-12 15:25:39 +01:00
Günther Deschner
e0d85f87b7 winreg: add winreg_KeyType enum.
Guenther
2010-03-11 20:23:47 +01:00
Stefan Metzmacher
9592366dc7 librpc: rerun make idl
metze
2010-03-11 13:31:38 +01:00
Stefan Metzmacher
aef4890a7c drsuapi.idl: finish drsuapi_DsGetNT4ChangeLog idl
metze
2010-03-11 13:31:38 +01:00
Kamen Mazdrashki
7db0109bfe idl: Regenerate DRSUAPI idl files
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:08 +01:00
Kamen Mazdrashki
6853f452b4 s4/idl: drsuapi_QuerySitesByCostCtr1 'unknown' member is now known
and this it is a reserved fields for future flags - 'flags_reserver'
Must be 0 and is currently ignored.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:08 +01:00
Kamen Mazdrashki
14fd25ae82 s4/idl: QuerySitesByCost - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:07 +01:00
Kamen Mazdrashki
e76d6e9454 s4/idl: DsGetMemberships2 - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:06 +01:00
Kamen Mazdrashki
1ad805e04f s4/idl: DsRemoveDSServer - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:05 +01:00
Kamen Mazdrashki
d07883ed86 s4/idl: DsWriteAccountSpn - switch types should be unsigned
Changes also propagated into source code as they are
too minor to be done in separate commit

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:03 +01:00
Kamen Mazdrashki
d22eaddf95 s4/idl: DsCrackNames - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:02 +01:00
Kamen Mazdrashki
00135d83f4 s4/idl: DsGetMemberships - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:01 +01:00
Kamen Mazdrashki
890d408fea s4/idl: DsReplicaMod - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:00 +01:00
Kamen Mazdrashki
4ea818e349 s4/idl: DsReplicaDel - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:00 +01:00
Kamen Mazdrashki
9f71ffb06c s4/idl: DsReplicaAdd - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:59 +01:00
Kamen Mazdrashki
62b4b675fd s4/idl: DsReplicaUpdateRefs - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:58 +01:00
Kamen Mazdrashki
89f8c35ac4 s4/idl: DsGetNCChanges - switch types should be unsigned
Converting those types to unsigned should help in
creating DRSUAPI dissector for Wireshark also.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:56 +01:00
Kamen Mazdrashki
163cc1a02d s4/idl: drsuapi_DsReplicaSyncOptions flags are no more used
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:55 +01:00
Günther Deschner
b2ff159034 s3: re-run make samba3-idl.
Guenther
2010-03-05 22:03:26 +01:00
Günther Deschner
f258e98e17 winreg: fix winreg_QueryValue IDL.
Note that before this change pidl generated code that just dereferenced size_is
and length_is values from unique pointers without checking whether these
pointers were actually NULL.

With this change, pidl now throws a warning like:

	warning: Got pointer for `data_size', expected fully derefenced variable

which is not correct, probably because pidl does not evaluate the C expression.

Guenther
2010-03-05 22:00:52 +01:00
Günther Deschner
80d2e22cd8 s3: re-run make samba3-idl.
Guenther
2010-03-05 15:18:00 +01:00
Günther Deschner
4df1047e83 spoolss: fix spoolss_EnumPrinterDataEx IDL.
Guenther
2010-03-05 15:18:00 +01:00
Günther Deschner
63c0821b0b s3: re-run make samba3-idl.
Guenther
2010-03-05 15:17:59 +01:00
Günther Deschner
0e779b573b spoolss: rollback GetPrinterData[Ex] IDL.
Guenther
2010-03-05 15:17:59 +01:00
Günther Deschner
3b01ab8248 s3: re-run make samba3-idl.
Guenther
2010-03-05 15:17:58 +01:00
Günther Deschner
0528515be4 spoolss: rollback SetPrinterData{Ex} IDL.
Guenther
2010-03-05 15:17:58 +01:00
Günther Deschner
b1f18fb808 spoolss: add spoolss_Build to IDL.
Guenther
2010-02-26 17:39:21 +01:00
Simo Sorce
76f4e6f16b idl:lsa change string type
comapring win<-> traces it looks like this is an lsa_StringLarge
2010-02-24 18:35:48 -05:00
Kamen Mazdrashki
2f20a4b23e s4/idl: Regenerate IDL for DRSUAPI interface 2010-02-24 14:14:09 +02:00
Kamen Mazdrashki
0f6a453f9f s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string2' to 'value_dn_str' 2010-02-24 14:14:08 +02:00
Kamen Mazdrashki
10fce687fe s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string1' to 'attribute_name' 2010-02-24 14:14:08 +02:00
Kamen Mazdrashki
fb9880d6e8 s4/idl: rename 'guid1' to 'source_dsa_guid' in drsuapi_DsReplicaGetInfoRequest description 2010-02-24 14:14:08 +02:00
Kamen Mazdrashki
58318960b7 s4/idl: Regenerate IDL for DRSUAPI interface 2010-02-24 14:14:07 +02:00
Kamen Mazdrashki
e9438b4c12 s4/idl: drsuapi.idl fix drsuapi_DsReplicaSync definition
- Function should accept pointer to drsuapi_DsReplicaSyncRequest.
  While this doesn't generate essentially different code for
  NDR parser, using pointer will make drsuapi_DsReplicaSync
  descritpin with the rest of the functions in DRSUAPI interface.
  Another benefit is that this way we could create Wireshark
  dissector directly from Samba's verions for drsuapi.idl

- 'level' and thus the switch_type() should be uint32
2010-02-24 14:14:06 +02:00
Kamen Mazdrashki
f1a33a6cfe s4/idl: drsuapi.idl fix drsuapi_DsReplicaSyncRequest1 description
- pointer to naming_context should be [ref] pointer
  (i.e. not NULL pointer)
- other_info is actually the DNS name for Source DSA and is used
  if DRSUAPI_DRS_SYNC_BYNAME is passed
  ref: [MS-DRSR] 5.39
2010-02-24 14:14:06 +02:00
Günther Deschner
0278ef8ce3 s3: re-run make samba3-idl.
Guenther
2010-02-23 17:02:37 +01:00
Günther Deschner
d22b54c4eb spoolss: some fixes for devicemode dm extra structs.
Guenther
2010-02-23 17:01:26 +01:00
Günther Deschner
f6497a5807 s3: re-run make samba3-idl.
Guenther
2010-02-23 16:48:51 +01:00
Günther Deschner
2288e16d72 spoolss: add various DM extradata formats (including PostScript and UniDriver).
Guenther
2010-02-23 16:48:37 +01:00
Simo Sorce
d4b8be513c s4:netlogon GetTrustedDomainInformation
start implementing calls related to trusted domain information
2010-02-22 18:49:16 -05:00
Andrew Bartlett
a7036a9e47 librpc/ndr Remove unused macros
Since the change to the way we pull these OIDs from the wire, these
macros are unused.

Andrew Bartlett
2010-02-20 17:59:13 +11:00
Andrew Bartlett
9f222841fe librpc When sending endpoint mapper requests, include the minor if_version
The minor version (in the upper 16 bits of syntax->if_version) needs
to be pushed as the right hand side of the endpoint mapper floor (the
same floor as the interface UUID and major if_version).

Andrew Bartlett
2010-02-20 02:55:29 +11:00
Stefan Metzmacher
76aa37f653 librpc/ndr: don't overwrite the content in ndr_push_relative_ptr2_end()
metze
2010-02-19 08:12:42 +01:00
Andrew Bartlett
e4523e3c8f misc.idl: Add reference to the slightly odd representation of if_version
I found this confusing, so explian for the next poor programmer who
has to get up to speed with this quickly.

Andrew Bartlett
2010-02-19 16:32:49 +11:00
Günther Deschner
0a8011aa98 spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves devmode relative pointer down to sd).
Guenther
2010-02-18 15:47:59 +01:00
Günther Deschner
2881742493 spoolss: add spoolss_security_descriptor.
Guenther
2010-02-18 15:47:59 +01:00
Günther Deschner
70f8b34f51 s3: re-run make samba3-idl.
Guenther
2010-02-18 15:47:59 +01:00
Günther Deschner
f10a2d773d security: make two bitmaps public.
Guenther
2010-02-18 15:47:58 +01:00
Günther Deschner
8c4ff98ea1 spoolss: make two bitmaps public.
Guenther
2010-02-18 15:47:58 +01:00
Stefan Metzmacher
8f52957369 spoolss: make all security descriptors and devicemodes 4 byte aligned and add missing subcontexts.
Guenther
2010-02-18 15:47:57 +01:00
Günther Deschner
6d0a39741d spoolss: set NDR_RELATIVE_REVERSE flag for various unions that have relative pointers.
Guenther
2010-02-18 15:47:57 +01:00
Stefan Metzmacher
2059a165ee ndr_spoolss_buf: use LIBNDR_FLAG_NO_NDR_SIZE in NDR_SPOOLSS_SIZE_*
metze
2010-02-18 15:47:57 +01:00
Stefan Metzmacher
a4c3aeb793 spoolss: use subcontext in NDR_SPOOLSS_PUSH_ENUM_OUT macro.
metze
2010-02-18 15:47:56 +01:00
Stefan Metzmacher
8310f02414 libndr: fix ndr_size_* calculation with relative reverse buffers
metze
2010-02-18 15:47:52 +01:00
Stefan Metzmacher
4a76d29374 libndr: for now align reverse relative pointers to 2 bytes by default.
This is just a hack and we should let the callers use FLAG_ALIGN2
explicit in future.

metze
2010-02-18 13:44:04 +01:00
Stefan Metzmacher
31c7780c16 libndr: implement LIBNDR_RELATIVE_REVERSE handling
This is based on Guenther's initial code.

metze
2010-02-18 13:44:03 +01:00
Günther Deschner
05347754ee libndr: store a subcontext buffer size in ndr_push_subcontext_start.
Guenther
2010-02-18 13:44:03 +01:00
Stefan Metzmacher
b5f9c44da5 libndr: give an error when ndr_push_relative_ptr2_start()/_end() is used with the RELATIVE_REVERSE flag
metze
2010-02-18 13:44:03 +01:00
Günther Deschner
a2c34296fa libndr: add LIBNDR_FLAG_NO_RELATIVE_REVERSE so that relative reverse processing
can be disabled for single structure elements.

Guenther
2010-02-18 13:44:02 +01:00
Günther Deschner
ee13a51b05 libndr: add LIBNDR_FLAG_RELATIVE_REVERSE flag.
Guenther
2010-02-18 13:44:02 +01:00
Günther Deschner
c9fa97b017 libndr: change subcontext buffer allocation to allocate on subcontext_start.
Guenther
2010-02-18 13:44:01 +01:00
Stefan Metzmacher
98e143cd31 librpc/ndr: make ndr_push_relative_ptr2() static
metze
2010-02-18 13:44:01 +01:00
Stefan Metzmacher
e03591111a librpc/ndr_krb5pac: use ndr_push_relative_ptr2_start()/_end()
metze
2010-02-18 13:44:01 +01:00
Stefan Metzmacher
b423bd2115 librpc/ndr_drsblobs: use ndr_push_relative_ptr2_start()/_end()
metze
2010-02-18 13:44:00 +01:00
Günther Deschner
bfd6edb3e9 spoolss: fix relative pointers in ndr_push_spoolss_DriverInfo101.
Guenther
2010-02-18 13:44:00 +01:00
Günther Deschner
c869328b16 s3: re-run make full_idl.
Guenther
2010-02-18 13:44:00 +01:00
Günther Deschner
bc20d3446a libndr: add ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.
Guenther
2010-02-18 13:43:59 +01:00
Anatoliy Atanasov
55f7c74cea s4/drs: add DRSUAPI_ATTRIBUTE_options attribute 2010-02-17 18:03:31 +02:00
Anatoliy Atanasov
0e8fe821c9 s4/drs:kccdrs_replica_get_info_obj_metadata implementation
Fix the names of the drsuapi_DsReplicaInfoType enum and rebuild the .idl
The get_info_obj_metadata implementation is ported from implementation
i developed and tested at the samba io lab 2009
2010-02-17 18:03:31 +02:00
Andrew Tridgell
259129e8f4 a4-dcerpc: another attempt at dcerpc auth padding
The last change broke net vampire against w2k8r2
2010-02-14 18:44:21 +11:00
Andrew Tridgell
da86f08605 s4-rpc: be more careful about DCERPC auth padding
Cope with a wider range of auth padding in dcerpc bind_ack and
alter_context packets. We now use a helper function that calculates
the right auth padding.
2010-02-13 23:12:29 +11:00
Günther Deschner
7e328e1e1c spoolss: regenerate hand-marshalled ndr_pull_spoolss_DriverInfo101 after ndr64 changes.
Guenther
2010-02-12 11:34:56 +01:00
Günther Deschner
95846bfee6 spoolss: make sure hand-marshalled spoolss_DriverInfo101 handles relative_highest_offset.
Guenther
2010-02-12 11:34:48 +01:00
Günther Deschner
8f07339b6d spoolss: regenerate hand-marshalled ndr_push_spoolss_DriverInfo101 after ndr64 changes.
Guenther
2010-02-12 11:34:39 +01:00
Günther Deschner
2a0b16c430 s3: re-run make samba3-idl.
Guenther
2010-02-11 13:32:44 +01:00
Fernando J V da Silva
7bd7194c2b s4-drs: Add DRSUAPI_DRS_NONGC_RO_REP bit to DRS_OPTIONS
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11 12:19:51 +01:00
Kamen Mazdrashki
0a05af9277 s4/idl: regenerating drsuapi.idl
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11 21:59:37 +11:00
Kamen Mazdrashki
7dde20ae45 s4/idl: Naming reserved flags for DRSUAPI_SUPPORTED_EXTENSION_ field
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11 21:59:36 +11:00
Kamen Mazdrashki
f9d820ed52 s4/idl: Regenerate IDL for DRSUAPI interface 2010-02-05 10:51:57 +01:00
Kamen Mazdrashki
5c7f55ba26 s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_RECYCLE_BIN ext. flag for DRSUAPI
This flag corresponds to DRS_EXT_RECYCLE_BIN extended
flag in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC has enabled
  the Recycle Binoptional feature.
2010-02-05 10:51:56 +01:00
Kamen Mazdrashki
386f2c3d12 s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 flag for DRSUAPI
This flag corresponds to DRS_EXT_GETCHGREQ_V10 flag
in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC supports DRS_MSG_GETCHGREQ_V10.
2010-02-05 10:51:56 +01:00
Kamen Mazdrashki
d8a7718b9e s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 flag for DRSUAPI
This flag corresponds to DRS_EXT_GETCHGREQ_V5 flag
in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC supports DRS_MSG_GETCHGREQ_V5.
2010-02-05 10:51:55 +01:00
Kamen Mazdrashki
6687c6e182 s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY flag for DRSUAPI
This flag corresponds to DRS_EXT_ADDENTRY flag
in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC supports IDL_DRSAddEntry.
2010-02-05 10:51:54 +01:00
Kamen Mazdrashki
a342e3a419 s4/idl: drsblobs IDL regeneration
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-02-01 15:23:30 +01:00
Kamen Mazdrashki
20db3211ae s4/drsblobs: Custom ndr_print_ implementation for drsuapi_MSPrefixMap_Entry
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-02-01 15:23:30 +01:00
Kamen Mazdrashki
cd3d165778 s4/idl: PrefixMap description for W2K3 and W2K8 Schema:prefixMap attribute
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-02-01 15:23:29 +01:00
Stefan Metzmacher
f450d1f43a librpc: rerun 'make idl'
metze
2010-01-29 14:09:52 +01:00
Stefan Metzmacher
34a5d56d55 security.idl: add wellknown TrustedInstaller SID
metze
2010-01-29 14:09:50 +01:00
Matthieu Patou
1a143b8a59 s4: allow python code to dump NTACL object as well 2010-01-21 07:11:18 +13:00
Andrew Tridgell
f461a72ec3 idl: switched to using the WSPP names for the 'neighbour' DRS options
The documentation shows that all these functions in fact use the same
flags variable type. To be consistent between functions, and to allow
easy reference to the WSPP docs, it is better for us to also use this
generic DrsOptions bitfield rather than one per operations.
2010-01-18 07:25:18 +11:00