8 Commits

Author	SHA1	Message	Date
Andrew Bartlett	9eb022c8c6	provision: No longer use the wheel group in new AD Domains ... The issue here is that if we set S-1-5-32-544 (administrators) to a GID only, then users cannot force a mandetory profile to be owned by administrators (which is a requirement). There is no particularly useful reason for us to enforce this matching a system group. Andrew Bartlett	2012-10-18 17:10:58 +11:00
Jelmer Vernooij	c0d4f2462f	s4-python: Formatting fixes, break lines. ... Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Sun Sep 16 15:58:04 CEST 2012 on sn-devel-104	2012-09-16 15:58:04 +02:00
Andrew Bartlett	ac804f0d7f	smbd-posix_acls: Use a IDL union to store the ACL entry ... This is a clearer, long-term-stable structure we can hash without risking it changing. Andrew Bartlett	2012-09-12 05:26:16 +02:00
Andrew Bartlett	4437547afa	s4-selftest: Try a more complex ACL - this example from a GPO ... Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Sep 4 11:30:17 CEST 2012 on sn-devel-104	2012-09-04 11:30:17 +02:00
Andrew Bartlett	97a1f8d20b	s4-selftest: Try to make ntacl unit tests better match their names ... We are trying to test combinations of setting and getting via the VFS and directly to the underlying DB. Andrew Bartlett	2012-09-04 09:52:23 +02:00
Andrew Bartlett	4fe344ef05	selftest: Cope with the multiple possible representations of -1 in posixacl.py	2012-08-23 15:02:26 +02:00
Andrew Bartlett	bd00c92865	selftest: Extend posixacl test to check the actual ACL ... Needing to be able to write this test is the primary reason I have been reworking the VFS and posix ACL layer over the past few weeks. By exposing the POSIX ACL as a IDL object we can eaisly manipulate it in python, and then verify that the ACL was handled correctly. This ensures the when we write an ACL in provision, that it will indeed allow that access at the FS layer. We need to extend this beyond just the critical two ACLs set during provision, to also include some special (hard) cases involving the merging of ACE entries, as this is the most delicate part of the ACL transfomation. A similar test should also be written to read the posix ACL and the mapped NT ACL on a file that has never had an NT ACL set. Andrew Bartlett	2012-08-23 15:02:26 +02:00
Andrew Bartlett	318b8cb4fa	selftest: Add a test of the NT ACL -> posix ACL mapping layer ... This is the start of what will be a series of tests confirming exactly how some NT ACLs are mapped to posix ACLs. Andrew Bartlett	2012-08-23 15:02:26 +02:00