sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Code
4,168 Commits 60 Branches 1,145 Tags 452 MiB
b4d1e192cd
Commit Graph

10 Commits

Author SHA1 Message Date
Jeremy Allison
b4d1e192cd Added SID "Everyone" S-1-1-0 as always matching if present in an ACE. 
Jeremy.
(This used to be commit b3a1038ac1)
 2000-08-08 21:51:22 +00:00
Jeremy Allison
0cabe327ef Changed the sec desc access checks to match the spec. Needs testing. 
Jeremy.
(This used to be commit 5a4a7cd472)
 2000-08-08 19:34:34 +00:00
Jeremy Allison
b3b512264d Fixed up se_access_check() to use the token list from the user struct 
as the SID list. Now to go through and tidy up the algorithm.
Jeremy.
(This used to be commit 1f7300df67)
 2000-08-04 19:56:58 +00:00
Jeremy Allison
17dcd9a834 Started to canonicalize our handling of uid -> sid code in order to 
get ready and fix se_access_check().
Added cannonical lookup_name(), lookup_sid(), uid_to_sid(), gid_to_sid()
functions that look via winbind first the fall back on local lookup.

All Samba should use these rather than trying to call winbindd code
directly.

Added NT_USER_TOKEN struct in user_struct, contains list of NT sids
associated with this user.

se_access_check() should use this (cached) value rather than attempting
to do the same thing itself when given a uid/gid pair.

More work needs to be done to preserve these things accross security
context changes (especially with the tricky pipe problem) but I'm
beginning to see how this will be done..... probably by registering
a new vuid for an authenticated RPC pipe and not treating the
pipe calls specially.

More thoughts needed - but we're almost there...

Jeremy.
(This used to be commit 5e5cc6efe2)
 2000-08-02 02:11:55 +00:00
Tim Potter
c9dc68746b Added some debugs. 
Changed interface to se_access_check to take a user struct instead of each
bit as a separate parameter.
(This used to be commit ff7938310d)
 2000-07-17 02:36:19 +00:00
Tim Potter
b561c18597 Fixes for various compile warnings on Solaris 8. 
(This used to be commit 898a483cda)
 2000-07-10 06:41:04 +00:00
Tim Potter
64299375b5 Moved winbind client functions from various odd locations to 
nsswitch/wb_client.c

Merge of nsswitch/common.c rename to nsswitch/wb_common.c from TNG.
(This used to be commit f866c18f6b)
 2000-07-10 05:40:43 +00:00
Tim Potter
8c0bb0c241 Added some useful debugging stuff. 
Fixes for se_access_check() when you are the owner of the object.
(This used to be commit 1478198b70)
 2000-07-10 04:54:09 +00:00
Tim Potter
cfc7266a7b Rewrite of se_access_check() function. Added comments and fixed a bunch of 
bugs.  I think there is a problem though with the permissions granted when
SEC_RIGHTS_MAXIMUM_ALLOWED is passed as the permissions requested.
(This used to be commit 27d821913c)
 2000-07-06 06:57:22 +00:00
Luke Leighton
1bdbb4e601 added se_access_check. 
(This used to be commit 6de329f6bf)
 2000-06-08 08:41:28 +00:00