1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Commit Graph

725 Commits

Author SHA1 Message Date
Andrew Bartlett
a53a42ffb8 libcli/security Rename all privilege bitmaps constants
The idea here to to make it very clear how they differ from the
enumerated LUID values.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:10 +10:00
Andrew Bartlett
92efe9a86a libcli/security Add an invalid LUID privilege value
This helps code that may not want to specify any privilege

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:09 +10:00
Andrew Bartlett
6a0176b07d security.idl Add comments
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:05 +10:00
Andrew Bartlett
2606dfa9a4 security.idl Update Windows privileges list to Win2008R2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:05 +10:00
Andrew Bartlett
d2883ffde9 security.idl clarify which privilages are LUID and bitmap values
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:04 +10:00
Andrew Bartlett
e655e9f676 s4-privs Remove link between enum sec_privilege and the privilege bitmap
This allows us to set the enum sec_privilege constants to the LUID
values that are seen from windows, which we need to match, in order
to preserve the support for the NT Print Migrator tool after a merge
with the source3/ privileges code.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:04 +10:00
Andrew Bartlett
821b9e61aa privs Move privilege bitmasks to security.idl
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11 18:46:04 +10:00
Günther Deschner
1217809c46 nbt: add nbt_netlogon_response2 to IDL.
Guenther
2010-09-08 19:35:28 +02:00
Günther Deschner
8f8ff8bb29 nbt: add NETLOGON_LOGON_REQUEST.
Guenther
2010-09-08 19:35:21 +02:00
Günther Deschner
778950ca93 nbt: add decode_nbt_netlogon_packet() to IDL.
Guenther
2010-09-08 19:35:14 +02:00
Günther Deschner
e5c7ec6698 winreg: add winreg_RestoreKeyFlags to IDL.
Guenther
2010-08-31 23:17:40 +02:00
Günther Deschner
e2f15d2a25 s4-trusts: fix trustDomainPasswords drsblobs IDL and server side support.
Also remove bogus trustCurrentPasswords struct which we just had because our IDL
was incorrect.

Guenther
2010-08-25 13:27:50 +02:00
Andrew Tridgell
e5a5ca028e idl-nbt: fixed typo 2010-08-25 08:40:04 +10:00
Andrew Bartlett
6cf29b3e4f s4:security Change struct security_token->sids from struct dom_sid * to struct dom_sid
This makes the structure much more like NT_USER_TOKEN in the source3/
code.  (The remaining changes are that privilages still need to be merged)

Andrew Bartlett
2010-08-23 08:50:55 +10:00
Kamen Mazdrashki
26efea195a s4-drsuapi: Implement custom printing for drsuapi protocol for
drsuapi_DsReplicaAttribute and drsuapi_DsAttributeValueCtr objects

This makes tracing what data has been transferred much easier
2010-08-21 00:33:52 +03:00
Andrew Tridgell
ba079f9d67 idl: added the RODC allow/deny secrets RIDs
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20 20:34:11 +10:00
Andrew Bartlett
7c6ca95bec s4:security Remove use of user_sid and group_sid from struct security_token
This makes the structure more like Samba3's NT_USER_TOKEN
2010-08-18 09:50:38 +10:00
Andrew Tridgell
2688375ffe s4-netlogon: added SEC_CHAN_RODC
This seems to be equivalent to SEC_CHAN_BDC, but for RODCs
2010-08-17 21:21:51 +10:00
Andreas Schneider
53e0421300 waf: Generate the ntprinting ndr functions. 2010-08-16 21:31:31 +02:00
Stefan Metzmacher
ad94ae9804 librpc/idl/mgmt.idl: add missing size_is()
metze
2010-08-08 11:05:19 +02:00
Andrew Tridgell
8892748085 s4-dns: expanded the DNSP code to handle more record type 2010-08-05 17:31:29 +10:00
Andrew Tridgell
2883bc94c7 dns: first version of dsnRecord parser 2010-08-05 17:31:28 +10:00
Andreas Schneider
b6e9d8d406 idl: Fixed a possible crash bug. 2010-08-02 18:33:36 +02:00
Günther Deschner
45952b5679 spoolss: fix potential crash bug in spoolss_PrinterEnumValues push path.
Guenther
2010-08-02 15:52:09 +02:00
Günther Deschner
c5e85a4987 s3-dcerpc: rename SCHANNEL_SIG_SIZE to NL_AUTH_SIGNATURE_SIZE and move to IDL.
Guenther
2010-07-16 23:09:54 +02:00
Simo Sorce
cb3725a931 dcerpc: remove ncacn_packet_header and related functions
ncacn_packet_header was an artifact and it is not necessary anymore

Signed-off-by: Günther Deschner <gd@samba.org>
2010-07-16 01:51:17 +02:00
Simo Sorce
0d9b63663f s3:dcerpc Add prs_parse_dcerpc_bind 2010-07-08 01:41:24 -04:00
Günther Deschner
389a677426 dcerpc: add ncacn_packet_header to IDL.
Guenther

Signed-off-by: Simo Sorce <idra@samba.org>
2010-07-08 00:27:55 -04:00
Matthias Dieter Wallnöfer
915ddf0dc7 samr.idl:UserInfo structures - fix some names according to MS-SAMR documentation
See MS-SAMR section "FULL IDL"
2010-07-05 15:35:54 +02:00
Nadezhda Ivanova
81240b13b3 s4-dsdb: Implementation of User-Change-Password and User-Force-Password-Change
These CARs need to be checked on password change and password reset operations.
    Apparently the password attributes are not influenced by Write Property.
    Single detele operations and modifications of dBCSPwd are let through to the
    password_hash module. This is determined experimentally.
2010-07-05 00:17:38 +03:00
Günther Deschner
cc8d6d99df s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT).
Found by torture test.

Guenther
2010-06-29 23:10:47 +02:00
Günther Deschner
c02cbaae34 winreg: fix winreg_QueryMultipleValues2 IDL.
Guenther
2010-06-29 12:26:57 +02:00
Günther Deschner
bf07bf2857 winreg: fix winreg_QueryMultipleValues() IDL and torture tests.
Guenther
2010-06-29 11:48:53 +02:00
Günther Deschner
5b17d34d62 ntlmssp: add decode_NTLMv2_RESPONSE to IDL.
Guenther
2010-06-16 14:42:23 +02:00
Nadezhda Ivanova
8823bdc7e2 Added guids for the validated writes. 2010-06-09 12:03:32 +03:00
Günther Deschner
102b0cfe62 security: move generic_mapping and standard_mapping to security.idl.
Guenther
2010-06-03 11:00:26 +02:00
Matthias Dieter Wallnöfer
11e2608ba9 s3/s4:netrEnumerateTrustedDomains - this call returns a "NTSTATUS" result
See MS-NRPC 3.5.5.6.3.
2010-05-31 12:08:59 +02:00
Günther Deschner
e94e13bd8d rap: use rap_LogonHours in rap_NetUserInfo11 as well.
Guenther
2010-05-26 22:55:45 +02:00
Günther Deschner
dd05e173a2 rap: fix typo in IDL.
Guenther
2010-05-26 22:48:32 +02:00
Günther Deschner
fbd1d50824 rap: add rap_NetUserGetInfo IDL.
Guenther
2010-05-26 22:18:07 +02:00
Andrew Bartlett
974ed9cf2c s4:idmap Seperate idmap structures from winbind.idl and match to source3/ idmap
These structures now match those in use in the source3 code.  I'm not
sure if this is the better API or not, but it is far, far safer to
remove a pointer than to add one.

Andrew Bartlett
2010-05-24 23:08:56 +10:00
Günther Deschner
032c051523 rap: fix rap_NetUserPasswordSet2 IDL.
Guenther
2010-05-21 18:10:57 +02:00
Kamen Mazdrashki
a4719a4e12 s4-drsuapi: Sort ATTID definitions by ATTID value 2010-05-21 17:36:40 +03:00
Kamen Mazdrashki
ffc46769b3 s4/drsuapi: Yet another set of predefined ATTIDs 2010-05-21 17:36:40 +03:00
Jeremy Allison
b0d7a3d123 Thanks to Andrew Bartlett's advice, fix the NTLMSSP version problem the correct way.
No more magic blobs :-). Use ndr_push_struct_blob() to
push a properly formatted VERSION struct.

Jeremy.
2010-05-19 10:36:39 -07:00
Kamen Mazdrashki
ad9050a6ff s4/drsuapi: Add another set of predefined ATTIDs
Very useful for debugging/dumping purposes
2010-05-19 02:49:05 +03:00
Matthieu Patou
970cbad79a librpc/idl: fix errors and improve idl in dfsblobs
Fix problems between strings and nstring
Allow get_deferral parameters to be used by ndr_push/pull_blobs
Handle correctly the 16 bytes padding

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-05-18 15:31:12 +02:00
Jelmer Vernooij
f9ca9e46ad Finish removal of iconv_convenience in public API's. 2010-05-18 11:45:30 +02:00
Günther Deschner
ca73e03eb7 security: merge builtin rid tables.
Guenther
2010-05-18 00:44:26 +02:00
Günther Deschner
566418f1a1 ntprinting: add ntprinting.idl.
This generates convenient unmarshalling routines for pulling out spoolss related
information out of ntprinters.tdb, ntforms.tdb and ntdrivers.tdb.

Guenther
2010-05-14 14:12:57 +02:00
Günther Deschner
732a132c4f rap: add rap_NetOEMChangePassword() to IDL.
Guenther
2010-05-10 21:30:27 +02:00
Günther Deschner
93d2e91b90 rap: add rap_NetUserPasswordSet2() to IDL.
Guenther
2010-05-08 01:46:40 +02:00
Günther Deschner
e90c874b25 rap: add IDL for rap_NetShareAdd (undocumented in MS-RAP).
Guenther
2010-05-05 17:21:05 +02:00
Günther Deschner
ab1d9a923c rap: add rap_NetPrintDestGetInfo to IDL.
Guenther
2010-05-04 15:49:27 +02:00
Günther Deschner
5455e9d77d rap: add IDL for (undocumented) NetPrintDestEnum.
Guenther
2010-05-04 15:47:04 +02:00
Andrew Tridgell
f00a9b5715 s4-waf: we don't need the symlink hack for gen_ndr any more
we can now generate files into the build directory
2010-05-04 13:47:07 +02:00
Günther Deschner
fced9445d9 rap: add rap_NetPrintJobSetInfo to IDL.
Guenther
2010-05-03 14:42:27 +02:00
Günther Deschner
24a2ddb6e3 rap: add rap_NetPrintJobGetInfo to IDL.
Guenther
2010-04-30 17:06:58 +02:00
Günther Deschner
cd90e002bd s3: add rap_NetPrintJobEnum (again a call not documented in MS-RAP).
Guenther
2010-04-30 13:52:14 +02:00
Günther Deschner
fc9c004e7d rap: use rap_status in IDL.
Guenther
2010-04-30 13:44:41 +02:00
Günther Deschner
3bfceafed7 rap: add rap_status to IDL.
Guenther
2010-04-30 13:44:41 +02:00
Günther Deschner
1cdb1a9df6 rap: add IDL for rap_NetPrintQueue{Pause,Continue,Purge}.
it seems like they are not documented (at least not in MS-RAP).

Guenther
2010-04-30 13:44:40 +02:00
Günther Deschner
a11745f21d rap: fix rap_PrintQueue2 and rap_PrintQueue4.
Guenther
2010-04-30 01:44:58 +02:00
Günther Deschner
6a13c028a9 rap: let the rap print function be autogenerated again.
Guenther
2010-04-30 01:27:59 +02:00
Günther Deschner
62ef9ad581 rap: use astring in IDL.
Guenther
2010-04-30 01:27:43 +02:00
Günther Deschner
7dd67f6d03 rap: fill in rap_PrintQueue4 IDL.
Guenther
2010-04-30 01:25:28 +02:00
Günther Deschner
696e554e80 rap: fix jobinfo IDL.
Guenther
2010-04-30 01:25:15 +02:00
Günther Deschner
4fc3aefc51 rap: fix some rap_PrintQueue IDL structures.
Guenther
2010-04-30 01:24:53 +02:00
Günther Deschner
d266af79b3 rap: add IDL for NetPrintJob{Pause,Continue,Delete}.
Guenther
2010-04-29 14:24:02 +02:00
Günther Deschner
169b72dce4 rap: add rap_NetPrintQGetInfo to IDL.
Guenther
2010-04-29 13:47:33 +02:00
Günther Deschner
ce9fde439b rap: fill in rap_PrintQueue2 IDL.
Guenther
2010-04-29 12:05:42 +02:00
Günther Deschner
f85a4ab778 s4-rap: add rap print helpers.
Guenther
2010-04-29 12:05:41 +02:00
Andrew Tridgell
2bf23735fa idl: we only need ndr_rap.[ch] and rap.h 2010-04-29 09:22:21 +10:00
Andrew Tridgell
66e47f393c s4-idl: added generated files from rap.idl 2010-04-29 08:27:58 +10:00
Günther Deschner
b66602898a rap: add rap_NetPrintQEnum to IDL.
Guenther
2010-04-28 23:23:37 +02:00
Matthias Dieter Wallnöfer
eceffe6909 nbt: samlogon/netlogon structures - unify denominations 2010-04-27 18:45:41 +02:00
Günther Deschner
8b287b92fd rap: add rap idl.
Guenther
2010-04-26 22:52:59 +02:00
Günther Deschner
440075247d spoolss: pretty-print a struct spoolss_Time.
Guenther
2010-04-22 11:53:41 +02:00
Günther Deschner
7277668128 spoolss: move up enum spoolss_Build in the IDL.
Guenther
2010-04-19 11:53:59 +02:00
Günther Deschner
5b3c22e96f spoolss: make spoolss_SetPrinterInfo0 match changes in spoolss_PrinterInfo0.
Guenther
2010-04-19 11:10:01 +02:00
Matthias Dieter Wallnöfer
1a27343366 s3/s4:netlogon IDL - fix up "struct netr_SamInfo6" regarding the "forest" attribute
According to MS-NRPC 2.2.1.4.13 this should be the DNS domainname, not the
forest one.
2010-04-12 18:49:01 +02:00
Jelmer Vernooij
e1630ecb11 idl: Use C-style comments, because cpp on some platforms doesn't accept
// comments.
2010-04-11 22:19:49 +02:00
Günther Deschner
347035d61f winreg: move REG_OPTION_NON_VOLATILE out of option bitmask.
Guenther
2010-04-09 18:33:45 +02:00
Günther Deschner
b9188e4571 winreg: fill in IDL for winreg_QueryMultipleValues2.
Guenther
2010-04-09 18:33:45 +02:00
Stefan Metzmacher
ba5825ead8 dcerpc.idl: fix typo DERPC_ => DCERPC_
metze
2010-04-09 16:28:29 +02:00
Günther Deschner
eda0aa4b91 winreg: rename winreg_KeyType to winreg_KeyOptions.
Guenther
2010-04-09 13:57:17 +02:00
Günther Deschner
8805490853 winreg: keytype options is a bitmask.
Guenther
2010-04-09 13:57:17 +02:00
Kamen Mazdrashki
8dd5705a59 librpc/idl: Use [nopython] attr for types used in decode_PrimaryKerberos method
C code generation for python module generates invalid code
(i.e. can not be compiled).
Another reason to 'hide' those types from Python is
that those types are not used at the moment
(and most probably won't be used in the future)
2010-04-09 12:21:28 +03:00
Andrew Bartlett
2ea99c22c3 librpc/idl Use [nopython] on some drsblobs.idl 'functions' as an example
It makes little sense to expose these 'functions' to anything other
than ndrdump.

Andrew Bartlett
2010-04-09 12:21:27 +03:00
Kamen Mazdrashki
63e1aae69c s4/idl: Schema:schemaInfo attribute description 2010-04-09 12:21:24 +03:00
Günther Deschner
dc4bf5651e winreg: add IDL for winreg_DeleteKeyEx.
Guenther
2010-04-09 00:27:58 +02:00
Günther Deschner
e7a157317a winreg: fill in some winreg IDL gaps.
Guenther
2010-04-08 23:48:43 +02:00
Andrew Tridgell
f9eae32f4b s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them 2010-04-06 20:27:11 +10:00
Andrew Tridgell
b7cc6d48d5 build: teach samba_pild.py about the --com-header and --dcom-proxy options 2010-04-06 20:26:52 +10:00
Andrew Tridgell
a9ea3d6fa5 build: cope with the common gen_ndr files being in the git tree 2010-04-06 20:26:49 +10:00
Andrew Tridgell
e916aff9e1 build: much nicer pidl rules 2010-04-06 20:26:47 +10:00
Günther Deschner
1ff55500de drsblobs: remove utf8string2 from ForestTrustData.
Simo, it's not really worth to add a new idl type just for being able to omit
the size field. The size field is part of the spec in MS-ADTS 7.1.6.9.3.1 so we
should have it as well.

Guenther
2010-03-25 11:04:52 +01:00
Kamen Mazdrashki
ef6976dad3 idl: drsuapi.idl - fix few more comments 2010-03-24 17:34:45 +02:00
Kamen Mazdrashki
842d75613b s4/idl: DsAddEntry V3 request description 2010-03-24 17:34:43 +02:00
Kamen Mazdrashki
6b3ff0de46 s4/idl: Remove drsuapi_DsAddEntryExtraErrorBuffer - it is not used anymore 2010-03-24 17:34:42 +02:00
Kamen Mazdrashki
3efad5a6d8 s4/idl: Complete drsuapi_DsAddEntryErrorInfo description
Members for Security, Service, Update and System errors renamed
to be more descriptive.

All those error types share same description.
2010-03-24 17:34:41 +02:00
Kamen Mazdrashki
0663799275 s4/idl: Add DsAddEntry Referral error definition 2010-03-24 17:34:40 +02:00
Kamen Mazdrashki
61e80fe3eb s4/idl: Add DsAddEntry Name resolution error definition 2010-03-24 17:34:39 +02:00
Kamen Mazdrashki
fbaf3b3799 s4/drs: pretty print for drsuapi_DsAddEntry_AttrErrListItem_V1 2010-03-24 17:34:38 +02:00
Kamen Mazdrashki
98cbcf809f s4/idl: redefine drsuapi_DsAddEntryErrorInfo1
This actually describes Attribute error during DsAddEntry execution.

Structure is renamed to drsuapi_DsAddEntryErrorInfo_Attr.
And structure to define Attribute error data are all
prefixed with drsuapi_DsAddEntry_AttrErr
2010-03-24 17:34:37 +02:00
Kamen Mazdrashki
7b4341637c s4/idl: drsuapi_DsAddEntryError refactored
Structure description and name was changed to be aligned with
WSPP definition.

Ref: [MS-DRSR] 4.1.1.1.23
2010-03-24 17:34:36 +02:00
Kamen Mazdrashki
fbc1528649 s4/idl: DsAddEntry - refactor DsAddEntryCtr2 structure
Reply structure definition was aligned with WSPP documentation
Ref: [MS-DRSR], section 4.1.1.1.7
2010-03-24 17:34:34 +02:00
Kamen Mazdrashki
4cdf4627a1 s4/idl: Update drsuapi_DsAddEntryErrorInfoX definition
drsuapi_DsAddEntryErrorInfoX is an extended error
description used by most of the error infos returned
by DsAddEntry RPC method.
2010-03-24 17:34:33 +02:00
Kamen Mazdrashki
818719f7ba s4/idl: DIRERR error codes definition
DIRERR codes specify class of error returned from
DsAddEntry method call.

Ref: [MS-DRSR], section 4.1.1.1.25
2010-03-24 17:34:32 +02:00
Kamen Mazdrashki
a4ed8dc1fd s4/idl: DsAddEntry - switch types should be unsigned 2010-03-24 17:34:31 +02:00
Simo Sorce
7d89c7c17b idl: fix comment and convert whitespaces to tabs 2010-03-24 07:46:00 -04:00
Simo Sorce
fd2bc08138 idl: fix forest trust information idl
--validate now passes
2010-03-23 18:47:39 -04:00
Karolin Seeger
18d1821490 security.idl: Add missing builtin groups.
Karolin
2010-03-23 15:22:48 +01:00
Stefan Metzmacher
0fa67c8d8f dcerpc.idl: add nca_s_* status codes from the DCE 1.1 specification
metze
2010-03-23 14:37:25 +01:00
Simo Sorce
9f84d72ef1 idl:drsblobs add code to interpret msDS-TrustForestTrustInfo 2010-03-23 01:09:50 -04:00
Simo Sorce
d9e311ddce s4:lsa Functions to set Domain Trust Information 2010-03-22 21:49:40 -04:00
Günther Deschner
4f28afc929 lsa: fix IDL for lsa_SetTrustedDomainInfoByName.
Guenther
2010-03-16 21:51:37 +01:00
Simo Sorce
cfa2b7b6bf s4:idl add lsaRSetForestTrustInformation
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-16 15:12:18 +01:00
Matthias Dieter Wallnöfer
c91afe9596 security.idl - push generated code diff 2010-03-16 15:01:46 +01:00
Simo Sorce
8353aa39b6 s4:idl change level to type in lsa_ForestTrustRecord. 2010-03-16 14:48:40 +01:00
Nadezhda Ivanova
a212c1dedb Added a net acl ds command for modification of ACLs on directory objects
At present the command supports only addition of control access rigts, done
so DRS access checks can be tested. It will be expanded to deal with most
ways to modify and view a DS ACL.
Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed
to this, which is "net acl ds"

./bin/net acl ds set --help
Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn

Options:
  -h, --help            show this help message and exit
  --host=HOST           LDB URL for database or target server
  --car=CAR              The access control right to allow or deny
  --action=ACTION       Deny or allow access
  --objectdn=OBJECTDN   DN of the object whose SD to modify
  --trusteedn=TRUSTEEDN
                        DN of the entity that gets access

  Samba Common Options:
    -s FILE, --configfile=FILE
                        Configuration file

  Credentials Options:
    --simple-bind-dn=DN
                        DN to use for a simple bind
    --password=PASSWORD
                        Password
    -U USERNAME, --username=USERNAME
                        Username
    -W WORKGROUP, --workgroup=WORKGROUP
                        Workgroup
    -N, --no-pass       Don't ask for a password
    -k KERBEROS, --kerberos=KERBEROS
                        Use Kerberos
2010-03-16 13:37:48 +02:00
Stefan Metzmacher
f85c825ae2 drsuapi.idl: don't mark drsuapi_DsGetMemberships as [todo]
metze
2010-03-12 15:25:39 +01:00
Günther Deschner
e0d85f87b7 winreg: add winreg_KeyType enum.
Guenther
2010-03-11 20:23:47 +01:00
Stefan Metzmacher
aef4890a7c drsuapi.idl: finish drsuapi_DsGetNT4ChangeLog idl
metze
2010-03-11 13:31:38 +01:00
Kamen Mazdrashki
6853f452b4 s4/idl: drsuapi_QuerySitesByCostCtr1 'unknown' member is now known
and this it is a reserved fields for future flags - 'flags_reserver'
Must be 0 and is currently ignored.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:08 +01:00
Kamen Mazdrashki
14fd25ae82 s4/idl: QuerySitesByCost - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:07 +01:00
Kamen Mazdrashki
e76d6e9454 s4/idl: DsGetMemberships2 - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:06 +01:00
Kamen Mazdrashki
1ad805e04f s4/idl: DsRemoveDSServer - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:05 +01:00
Kamen Mazdrashki
d07883ed86 s4/idl: DsWriteAccountSpn - switch types should be unsigned
Changes also propagated into source code as they are
too minor to be done in separate commit

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:03 +01:00
Kamen Mazdrashki
d22eaddf95 s4/idl: DsCrackNames - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:02 +01:00
Kamen Mazdrashki
00135d83f4 s4/idl: DsGetMemberships - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:01 +01:00
Kamen Mazdrashki
890d408fea s4/idl: DsReplicaMod - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:00 +01:00
Kamen Mazdrashki
4ea818e349 s4/idl: DsReplicaDel - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:12:00 +01:00
Kamen Mazdrashki
9f71ffb06c s4/idl: DsReplicaAdd - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:59 +01:00
Kamen Mazdrashki
62b4b675fd s4/idl: DsReplicaUpdateRefs - switch types should be unsigned
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:58 +01:00
Kamen Mazdrashki
89f8c35ac4 s4/idl: DsGetNCChanges - switch types should be unsigned
Converting those types to unsigned should help in
creating DRSUAPI dissector for Wireshark also.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:56 +01:00
Kamen Mazdrashki
163cc1a02d s4/idl: drsuapi_DsReplicaSyncOptions flags are no more used
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-10 17:11:55 +01:00
Günther Deschner
f258e98e17 winreg: fix winreg_QueryValue IDL.
Note that before this change pidl generated code that just dereferenced size_is
and length_is values from unique pointers without checking whether these
pointers were actually NULL.

With this change, pidl now throws a warning like:

	warning: Got pointer for `data_size', expected fully derefenced variable

which is not correct, probably because pidl does not evaluate the C expression.

Guenther
2010-03-05 22:00:52 +01:00
Günther Deschner
4df1047e83 spoolss: fix spoolss_EnumPrinterDataEx IDL.
Guenther
2010-03-05 15:18:00 +01:00
Günther Deschner
0e779b573b spoolss: rollback GetPrinterData[Ex] IDL.
Guenther
2010-03-05 15:17:59 +01:00
Günther Deschner
0528515be4 spoolss: rollback SetPrinterData{Ex} IDL.
Guenther
2010-03-05 15:17:58 +01:00
Günther Deschner
b1f18fb808 spoolss: add spoolss_Build to IDL.
Guenther
2010-02-26 17:39:21 +01:00
Simo Sorce
76f4e6f16b idl:lsa change string type
comapring win<-> traces it looks like this is an lsa_StringLarge
2010-02-24 18:35:48 -05:00
Kamen Mazdrashki
0f6a453f9f s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string2' to 'value_dn_str' 2010-02-24 14:14:08 +02:00
Kamen Mazdrashki
10fce687fe s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string1' to 'attribute_name' 2010-02-24 14:14:08 +02:00
Kamen Mazdrashki
fb9880d6e8 s4/idl: rename 'guid1' to 'source_dsa_guid' in drsuapi_DsReplicaGetInfoRequest description 2010-02-24 14:14:08 +02:00
Kamen Mazdrashki
e9438b4c12 s4/idl: drsuapi.idl fix drsuapi_DsReplicaSync definition
- Function should accept pointer to drsuapi_DsReplicaSyncRequest.
  While this doesn't generate essentially different code for
  NDR parser, using pointer will make drsuapi_DsReplicaSync
  descritpin with the rest of the functions in DRSUAPI interface.
  Another benefit is that this way we could create Wireshark
  dissector directly from Samba's verions for drsuapi.idl

- 'level' and thus the switch_type() should be uint32
2010-02-24 14:14:06 +02:00
Kamen Mazdrashki
f1a33a6cfe s4/idl: drsuapi.idl fix drsuapi_DsReplicaSyncRequest1 description
- pointer to naming_context should be [ref] pointer
  (i.e. not NULL pointer)
- other_info is actually the DNS name for Source DSA and is used
  if DRSUAPI_DRS_SYNC_BYNAME is passed
  ref: [MS-DRSR] 5.39
2010-02-24 14:14:06 +02:00
Günther Deschner
d22b54c4eb spoolss: some fixes for devicemode dm extra structs.
Guenther
2010-02-23 17:01:26 +01:00
Günther Deschner
2288e16d72 spoolss: add various DM extradata formats (including PostScript and UniDriver).
Guenther
2010-02-23 16:48:37 +01:00
Simo Sorce
d4b8be513c s4:netlogon GetTrustedDomainInformation
start implementing calls related to trusted domain information
2010-02-22 18:49:16 -05:00
Andrew Bartlett
e4523e3c8f misc.idl: Add reference to the slightly odd representation of if_version
I found this confusing, so explian for the next poor programmer who
has to get up to speed with this quickly.

Andrew Bartlett
2010-02-19 16:32:49 +11:00
Günther Deschner
0a8011aa98 spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves devmode relative pointer down to sd).
Guenther
2010-02-18 15:47:59 +01:00
Günther Deschner
2881742493 spoolss: add spoolss_security_descriptor.
Guenther
2010-02-18 15:47:59 +01:00
Günther Deschner
f10a2d773d security: make two bitmaps public.
Guenther
2010-02-18 15:47:58 +01:00
Günther Deschner
8c4ff98ea1 spoolss: make two bitmaps public.
Guenther
2010-02-18 15:47:58 +01:00
Stefan Metzmacher
8f52957369 spoolss: make all security descriptors and devicemodes 4 byte aligned and add missing subcontexts.
Guenther
2010-02-18 15:47:57 +01:00
Günther Deschner
6d0a39741d spoolss: set NDR_RELATIVE_REVERSE flag for various unions that have relative pointers.
Guenther
2010-02-18 15:47:57 +01:00
Günther Deschner
a2c34296fa libndr: add LIBNDR_FLAG_NO_RELATIVE_REVERSE so that relative reverse processing
can be disabled for single structure elements.

Guenther
2010-02-18 13:44:02 +01:00
Günther Deschner
ee13a51b05 libndr: add LIBNDR_FLAG_RELATIVE_REVERSE flag.
Guenther
2010-02-18 13:44:02 +01:00
Anatoliy Atanasov
55f7c74cea s4/drs: add DRSUAPI_ATTRIBUTE_options attribute 2010-02-17 18:03:31 +02:00
Anatoliy Atanasov
0e8fe821c9 s4/drs:kccdrs_replica_get_info_obj_metadata implementation
Fix the names of the drsuapi_DsReplicaInfoType enum and rebuild the .idl
The get_info_obj_metadata implementation is ported from implementation
i developed and tested at the samba io lab 2009
2010-02-17 18:03:31 +02:00
Andrew Tridgell
259129e8f4 a4-dcerpc: another attempt at dcerpc auth padding
The last change broke net vampire against w2k8r2
2010-02-14 18:44:21 +11:00
Andrew Tridgell
da86f08605 s4-rpc: be more careful about DCERPC auth padding
Cope with a wider range of auth padding in dcerpc bind_ack and
alter_context packets. We now use a helper function that calculates
the right auth padding.
2010-02-13 23:12:29 +11:00
Fernando J V da Silva
7bd7194c2b s4-drs: Add DRSUAPI_DRS_NONGC_RO_REP bit to DRS_OPTIONS
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11 12:19:51 +01:00
Kamen Mazdrashki
7dde20ae45 s4/idl: Naming reserved flags for DRSUAPI_SUPPORTED_EXTENSION_ field
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11 21:59:36 +11:00
Kamen Mazdrashki
5c7f55ba26 s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_RECYCLE_BIN ext. flag for DRSUAPI
This flag corresponds to DRS_EXT_RECYCLE_BIN extended
flag in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC has enabled
  the Recycle Binoptional feature.
2010-02-05 10:51:56 +01:00
Kamen Mazdrashki
386f2c3d12 s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 flag for DRSUAPI
This flag corresponds to DRS_EXT_GETCHGREQ_V10 flag
in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC supports DRS_MSG_GETCHGREQ_V10.
2010-02-05 10:51:56 +01:00
Kamen Mazdrashki
d8a7718b9e s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 flag for DRSUAPI
This flag corresponds to DRS_EXT_GETCHGREQ_V5 flag
in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC supports DRS_MSG_GETCHGREQ_V5.
2010-02-05 10:51:55 +01:00
Kamen Mazdrashki
6687c6e182 s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY flag for DRSUAPI
This flag corresponds to DRS_EXT_ADDENTRY flag
in [MS-DRSR] documentation.

Reference:
  [MS-DRSR] - 5.37
Description:
  If present, signifies that the DC supports IDL_DRSAddEntry.
2010-02-05 10:51:54 +01:00
Kamen Mazdrashki
cd3d165778 s4/idl: PrefixMap description for W2K3 and W2K8 Schema:prefixMap attribute
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-02-01 15:23:29 +01:00
Stefan Metzmacher
34a5d56d55 security.idl: add wellknown TrustedInstaller SID
metze
2010-01-29 14:09:50 +01:00
Matthieu Patou
1a143b8a59 s4: allow python code to dump NTACL object as well 2010-01-21 07:11:18 +13:00
Andrew Tridgell
f461a72ec3 idl: switched to using the WSPP names for the 'neighbour' DRS options
The documentation shows that all these functions in fact use the same
flags variable type. To be consistent between functions, and to allow
easy reference to the WSPP docs, it is better for us to also use this
generic DrsOptions bitfield rather than one per operations.
2010-01-18 07:25:18 +11:00
Andrew Tridgell
93531a52f0 s4-idl: in DsReplicaGetInfo unknown2 is actually an enumeration_context 2010-01-16 14:10:44 +11:00
Andrew Tridgell
c663af8b7b s4-idl: get rid of the operation specific DRS options flags
It was confusing to have several sets of incomplete options when WSPP
uses a single set.
2010-01-14 15:37:59 +11:00
Andrew Tridgell
60c5a5f39f s4-idl: update the DRS_OPTIONS bits based on the latest WSPP docs 2010-01-14 15:37:59 +11:00
Andrew Tridgell
b0090d01e0 s4-idl: give a enum for attribute cn and a 'NONE' attribute
The 'NONE' attribute has value 0xFFFFFFFF. Adding this ensures the
compiler will complain if it is set to use 16 bit enums. We rely on
being able to store 32 bits in an attid enum.
2010-01-09 13:10:28 +11:00
Andrew Tridgell
4c7bf0527a s4-idl: added some more wellknown attributeIDs
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:03:04 +11:00
Günther Deschner
be95cb6f83 spoolss: more mork on SetPrinterInfo() levels.
Guenther
2009-12-17 10:43:31 +01:00
Günther Deschner
64e588f868 spoolss: add spoolss_DriverInfo7.
Guenther
2009-12-16 16:09:41 +01:00
Volker Lendecke
0d10efe1fd s3: Allow up to 20480 entries in LookupSids, as mandated by the official IDL
Seen in the wild by putting >1000 users into BUILTIN\Users
2009-12-14 17:00:12 +01:00
Matthieu Patou
8f8613dcef idl: introduce new file: dfsblobs.idl
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-12-14 10:58:32 +01:00
Günther Deschner
e316624ddb spoolss: fix spoolss_PrinterData size calculation.
Currently we were crashing in EnumPrinterDataEx when an e.g. an empty (NULL)
string for a separator file was returned.

Guenther
2009-12-14 10:39:34 +01:00
Günther Deschner
5ae61cfbc2 spoolss: trivial fix for spoolss_FormInfo2 IDL.
Guenther
2009-12-14 10:38:53 +01:00
Günther Deschner
835e7d6c98 spoolss: remove unused spoolss_StringArray2.
Guenther
2009-12-10 17:48:50 +01:00
Günther Deschner
0ecb7f6ab2 spoolss: use spoolss_KeyNames in spoolss_EnumPrinterKey.
Guenther
2009-12-10 17:48:49 +01:00
Günther Deschner
cf2561473f spoolss: add spoolss_KeyNames union.
Guenther
2009-12-10 17:48:49 +01:00
Günther Deschner
fb3b0987f7 spoolss: add more spoolss architectures to IDL.
Guenther
2009-12-08 16:20:51 +01:00
Günther Deschner
1b6c444557 spoolss: fix spoolss_DriverInfo8 IDL.
found by RPC-SPOOLSS torture teset.

Guenther
2009-12-08 11:51:16 +01:00
Günther Deschner
08823166a1 spoolss: rework spoolss_GetPrinterDataEx and spoolss_SetPrinterDataEx.
Guenther
2009-12-07 14:42:12 +01:00
Günther Deschner
f32ccc321a spoolss: hand-marshall the spoolss_StringArray2 struct for spoolss_EnumPrinterKey.
This call is just driving me nuts :-)

Guenther
2009-12-03 01:04:02 +01:00
Günther Deschner
5f60855ba2 samba-spoolss: use spoolss_StringArray2 in spoolss_EnumPrinterKey.
This should finally resolve the endian issues we were seeing on sparc and is
much cleaner for spoolss clients and servers.

Guenther
2009-12-02 14:56:17 +01:00
Günther Deschner
292af4fc04 spoolss: add spoolss_StringArray2.
The difference to spoolss_StringArray is that in spoolss_StringArray2 the string
array is put into a subcontext of _ndr_size.

Guenther
2009-12-02 14:37:02 +01:00
Günther Deschner
91bb065977 s3-spoolss: move MAXDEVICENAME to spoolss idl.
Guenther
2009-12-02 14:36:36 +01:00
Günther Deschner
b852a3494a drsuapi: fix build warning of NDR size calculation of drsuapi_DsReplicaObjectIdentifier3Binary.
The generated size actually does not include the size of the binary itself.

Guenther
2009-12-01 00:36:50 +01:00
Matthias Dieter Wallnöfer
2e7ccdcb66 security.idl - Add some more wellknown SIDs/RIDs 2009-11-27 22:36:59 +01:00
Günther Deschner
23d77be6cb misc: mark winreg_Data little-endian except for a REG_DWORD_BIG_ENDIAN.
Guenther
2009-11-27 16:16:00 +01:00
Günther Deschner
800d6b7820 s3-spoolss: move more defines out of nt_printing.h to spoolss.idl where they belong.
Guenther
2009-11-23 12:20:24 +01:00
Günther Deschner
366946f29b spoolss: fix spoolss_EnumPrinterKey IDL.
Guenther
2009-11-23 11:44:43 +01:00