sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-11-11 00:23:51 +03:00
Code Activity
3,447 Commits 64 Branches 1,178 Tags
a9b960609142e15ba5950eb1b22944eb6df18d9c
Commit Graph

551 Commits

Author SHA1 Message Date
Andrew Tridgell
b26828bef5 r4243: a sniff from kukks showed that the ea_set interface in trans2 setfileinfo allows 
for multiple EAs to be set at once. This fixes all the ea code to allow for that.
 2007-10-10 13:07:28 -05:00
Andrew Tridgell
ef502c4030 r4229: - added support for multi-part SMBtrans and SMBtrans2 requests in the 
client code. This was essential to test the multi-part server code
  (which I will commit soon)

- when the request state is an error, ensure that req->status is not NT_STATUS_OK
 2007-10-10 13:07:27 -05:00
Andrew Tridgell
5e13571e6b r4228: make sure the caller knows the packet is in error when a signing error occurs 2007-10-10 13:07:27 -05:00
Andrew Tridgell
8764909c05 r4202: added smbclient commands "addprivileges" and "delprivileges" for 
easily adding/removing privileges from users
 2007-10-10 13:07:26 -05:00
Andrew Tridgell
3eee8b7c13 r4196: - added server side code for lsa_LookupPrivDisplayName 
- added english descriptions of privileges. We should add other
  languages in the future.
 2007-10-10 13:07:25 -05:00
Andrew Tridgell
7d981c29c2 r4182: fixed trans2 mkdir, allowing mkdir with an initial EA list 2007-10-10 13:07:23 -05:00
Stefan Metzmacher
e624bb5288 r4177: add some more error codes 
metze
 2007-10-10 13:07:23 -05:00
Andrew Tridgell
a56d95ad89 r4173: - new t2open code, that can cope with "create with EAs". Many thanks 
to kukks on #samba-technical for the sniffs that allowed me to work
  this out

- much simpler ntvfs open generic mapping code

- added t2open create with EA torture test to RAW-OPEN test
 2007-10-10 13:07:22 -05:00
Andrew Tridgell
3549039d0f r4151: added privilege attribute handling on samdb. 
pvfs will now honor some privileges on ACLs, and it will be quite easy
to add the checks for more privileges in the necessary places, by
making calls to sec_privilege_check().
 2007-10-10 13:07:19 -05:00
Andrew Tridgell
0fa3764edc r4150: - add fns for manipulating the privilege_mask in a security_token 
- add the hooks in access_check that check the privilege bitmasks for
  SEC_STD_DELETE and SEC_FLAG_SYSTEM_SECURITY
 2007-10-10 13:07:19 -05:00
Andrew Tridgell
7b446af09b r4147: converted from NT_USER_TOKEN to struct security_token 
this is mostly just a tidyup, but also adds the privilege_mask, which
I will be using shortly in ACL checking.

note that I had to move the definition of struct security_token out of
security.idl as pidl doesn't yet handle arrays of pointers, and the
usual workaround (to use a intermediate structure) would make things
too cumbersome for this structure, especially given we never encode it
to NDR.
 2007-10-10 13:06:31 -05:00
Stefan Metzmacher
e5db585268 r4084: add some more error codes 
metze
 2007-10-10 13:06:25 -05:00
Stefan Metzmacher
ea7b496995 r4080: missing file from the last commit 
metze
 2007-10-10 13:06:24 -05:00
Stefan Metzmacher
6f3eb7bc03 r4079: implement the gensec_have_feature() correctly by asking 
the backend what is actually in use

metze
 2007-10-10 13:06:23 -05:00
Stefan Metzmacher
e6d83d019d r4077: don't add wrapping to empty blobs 
metze
 2007-10-10 13:06:23 -05:00
Andrew Tridgell
8780c40f05 r4073: - added a set of lsa helper routines to make lsa lookups that are 
related to filesharing. For example, in order to manipulate ACLs
  properly its important to be able to call LookupSids, and to be able
  to lookup what privileges a SID has.

- added 3 new commands to smbclient "lookupname", "lookupsid" and
  "privileges"
 2007-10-10 13:06:23 -05:00
Stefan Metzmacher
ab2c2f27e1 r4070: move some defines from asn_1.h to the places they belong to 
metze
 2007-10-10 13:06:22 -05:00
Andrew Tridgell
335b1c6a52 r4066: add a mapping for NT_STATUS_NO_MORE_ENTRIES 2007-10-10 13:06:22 -05:00
Andrew Tridgell
19efd83b86 r4065: fixed ntstatus->dos error code for NT_STATUS_NO_SUCH_FILE 2007-10-10 13:06:21 -05:00
Stefan Metzmacher
b94f92bc66 r4063: - change char * -> uint8_t in struct request_buffer 
- change smbcli_read/write to take void * for the buffers to match read(2)/write(2)

all this fixes a lot of gcc-4 warnings

metze
 2007-10-10 13:06:21 -05:00
Andrew Tridgell
e3500811b9 r4062: the RAW-ACLS test now passes. The SEC_STD_DELETE bit is rather strange 
though - I expect we'll need to tweak that some more.
 2007-10-10 13:06:21 -05:00
Andrew Tridgell
c7cbd966d4 r4056: modified the access check code based on results from RAW-ACLS 
test. Also added generic mapping bits for pvfs. We don't pass RAW-ACLS
yet, but its close.
 2007-10-10 13:06:20 -05:00
Andrew Tridgell
eec698254f r4055: fixed more places to use type safe allocation macros 2007-10-10 13:06:20 -05:00
Andrew Tridgell
b0f6e21481 r4054: got rid of Realloc(), replacing it with the type safe macro realloc_p() 2007-10-10 13:06:19 -05:00
Andrew Tridgell
80d15fa340 r4052: fixed a bunch of code to use the type safe _p allocation macros 2007-10-10 13:06:18 -05:00
Stefan Metzmacher
0ae5794cf4 r4045: readd krb5 support defaulted to disable 
use:
gensec:krb5=yes
gensec:ms_krb5=yes

to enable it

or -k on the client tools on the command line

metze
 2007-10-10 13:06:17 -05:00
Stefan Metzmacher
1e0483a848 r4044: only send supportedMech when we also send other data 
metze
 2007-10-10 13:06:17 -05:00
Andrew Tridgell
0928b1f5b6 r4037: fixed a bunch of "might be uninitialised" warnings after enabling -O1 in my compile 2007-10-10 13:06:16 -05:00
Andrew Tridgell
891a8bc16a r4034: add a function security_descriptor_create() which can be used to 
easily create complex security descriptors for testing. This greatly
simplifies the smbtorture code I am writing for testing our
new access_check code.
 2007-10-10 13:06:16 -05:00
Andrew Tridgell
c4d21cd4b1 r4025: added a sec_access_check() function for checking security descriptors 
against a users security token and access_mask
 2007-10-10 13:06:15 -05:00
Andrew Tridgell
078d9ab05b r4015: correct copyright attributions 2007-10-10 13:06:15 -05:00
Andrew Tridgell
31a7bddbb3 r4013: got rid of a bunch of unused or unmaintained code 
- removed the clitar code. It is unmaintained, and a horribly badly done hack

 - removed client.h as it contained mostly unused definitions

 - removed the unused clidfs.c code
 2007-10-10 13:06:15 -05:00
Stefan Metzmacher
6a7eee1d99 r4001: fix segfault fix auth failed 
metze
 2007-10-10 13:06:13 -05:00
Stefan Metzmacher
2783bf393f r4000: DATA_BLOB.data is uint8_t * not void * :-) 
(thanks abartlet for telling me)

metze
 2007-10-10 13:06:13 -05:00
Andrew Tridgell
5db0eb1fe3 r3988: made dom_sid_add_rid() allocate the new sid with proper parent/child talloc 
relationship
 2007-10-10 13:06:11 -05:00
Andrew Tridgell
a3f7f34b39 r3979: added server side code for lsa_LookupSids2() and fixed authority_name 
return code to include our own domain.

editing of ACLs via the w2k3 GUI works nicely (and faster) with these changes
 2007-10-10 13:06:10 -05:00
Stefan Metzmacher
234166606d r3971: fix compiler warnings 
metze
 2007-10-10 13:06:09 -05:00
Stefan Metzmacher
3f2c3ce2f0 r3967: fix compiler warnings 
metze
 2007-10-10 13:06:09 -05:00
Stefan Metzmacher
54d5b418a7 r3960: fix compiler warnings 
metze
 2007-10-10 13:06:08 -05:00
Stefan Metzmacher
e28351f710 r3959: fix compiler warnings 
metze
 2007-10-10 13:06:08 -05:00
Stefan Metzmacher
64570b7a47 r3910: add some error codes 
metze
 2007-10-10 13:06:05 -05:00
Stefan Metzmacher
df924e1822 r3906: fix compiler warnings 
metze
 2007-10-10 13:06:04 -05:00
Stefan Metzmacher
36b11992dc r3903: better fix for -r 3902 
(not introduce new warnings:-)

metze
 2007-10-10 13:06:03 -05:00
Stefan Metzmacher
ce7686ac3e r3902: fix compiler warnings 
metze
 2007-10-10 13:06:03 -05:00
Stefan Metzmacher
efe840c8b0 r3901: fix compiler warnings 
metze
 2007-10-10 13:06:03 -05:00
Stefan Metzmacher
f2ff50dfc4 r3900: fix compiler warning 
metze
 2007-10-10 13:06:03 -05:00
Stefan Metzmacher
b1b47bda01 r3899: fix compiler warnings 
metze
 2007-10-10 13:06:03 -05:00
Jelmer Vernooij
98afb504d9 r3898: Work towards local/server DCOM support, start working 
on Simple example server side implementation
 2007-10-10 13:06:02 -05:00
Andrew Bartlett
39ae5e1dac r3885: Add security descriptor comparison to our RPC-SAMSYNC test. We now 
verify that the security descriptor found in the SamSync is the same
as what is available over SAMR.

Unfortunately, the administrator seems unable to retrieve the SACL on
the security descriptor, so I've added a new function to compare with
a mask.

Andrew Bartlett
 2007-10-10 13:06:01 -05:00
Andrew Tridgell
4468018cb6 r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans server 
- fixed revision number on default DACL

- fixed DACL_PRESENT bit in acl query

with these fixes cacls.exe and the GUI ACL editor in w2k both work
against pvfs. The GUI editor is slow as it times out looking up the
SID -> name mappings.
 2007-10-10 13:05:58 -05:00