Joseph Sutton 7050e05742 auth: Store group attributes in auth_user_info_dc ...

Group expansion, performed in dsdb_expand_nested_groups(), now
incorporates a check of the type of each group. Those that are resource
groups receive the SE_GROUP_RESOURCE bit in the attributes which are now
carried alongside each group SID.

Whereas before, in auth_convert_user_info_dc_sambaseinfo() and
auth_convert_user_info_dc_saminfo6(), we invariantly used the flag
combination SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT |
SE_GROUP_ENABLED to set attributes in the PAC, we now take the correct
attributes from user_info_dc.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-02-08 00:03:39 +00:00

..

tests

dsdb audit tests: Use assert_in_range() for comparing timestamps

2022-03-17 00:41:34 +00:00

acl_read.c

CVE-2020-25720: s4-acl: Owner no longer has implicit Write DACL

2022-09-16 02:32:36 +00:00

acl_util.c

CVE-2020-25720: s4-acl: Owner no longer has implicit Write DACL

2022-09-16 02:32:36 +00:00

acl.c

s4:samdb: Remove unused variable

2023-02-06 22:51:31 +00:00

anr.c

CVE-2021-3670 dsdb/anr: Do a copy of the potentially anr query before starting to modify it

2021-11-25 01:41:30 +00:00

audit_log.c

audit_log: Align integer types

2020-01-03 00:04:43 +00:00

audit_util.c

dsdb: Align integer types

2019-02-27 01:35:19 +01:00

count_attrs.c

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

descriptor.c

s4-dsdb: Schedule SD propegation only after successful rename

2023-01-31 12:50:33 +00:00

dirsync.c

CVE-2020-25722: s4-acl: Make sure Control Access Rights honor the Applies-to attribute

2021-11-09 19:45:33 +00:00

dns_notify.c

Fix build after removal of an extra safe_string.h

2020-10-01 22:45:29 +00:00

dsdb_notification.c

dsdb: Correctly call ldb_module_done in dsdb_notification

2017-06-15 01:24:25 +02:00

encrypted_secrets.c

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

extended_dn_in.c

dsdb: Fix a typo

2021-01-08 20:31:33 +00:00

extended_dn_out.c

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

extended_dn_store.c

dsdb mods/extended_dn_store: used the ldb we already have

2019-04-05 04:41:25 +00:00

group_audit.c

samdb: Fix an uninitialized variable read

2021-08-06 17:22:30 +00:00

instancetype.c

…

lazy_commit.c

…

linked_attributes.c

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

netlogon.c

dsdb/netlogon: Indicate DC functional level support in samlogon response

2021-12-24 02:16:33 +00:00

new_partition.c

…

objectclass_attrs.c

CVE-2022-32746 s4/dsdb/objectclass_attrs: Fix typo

2022-07-27 10:52:36 +00:00

objectclass.c

CVE-2020-25722 Ensure the structural objectclass cannot be changed

2021-11-09 19:45:34 +00:00

objectguid.c

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

operational.c

auth: Store group attributes in auth_user_info_dc

2023-02-08 00:03:39 +00:00

paged_results.c

s4:dsdb/paged_results: fix segfault in paged_results()

2022-01-20 09:10:28 +00:00

partition_init.c

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

partition_metadata.c

dsdb: Fix a typo

2022-04-26 21:41:29 +00:00

partition.c

CVE-2022-32746 s4/dsdb/partition: Fix LDB flags comparison

2022-07-27 10:52:36 +00:00

partition.h

dsdb: Remove OpenLDAP backend complexity from partitions module

2019-08-30 08:32:30 +00:00

password_hash.c

CVE-2021-20251 s4:dsdb: Make badPwdCount update atomic

2022-09-12 23:07:37 +00:00

password_modules.h

…

proxy.c

s4:dsdsb: Check return code of cli_credentials_guess()

2021-06-29 02:19:35 +00:00

ranged_results.c

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

repl_meta_data.c

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

resolve_oids.c

…

ridalloc.c

ridalloc: Don't skip the first RID of a pool

2021-06-11 07:41:38 +00:00

rootdse.c

dsdb: Fix CID 1473454: Null pointer dereferences

2021-03-06 02:20:05 +00:00

samba3sam.c

s4:samdb: Use C99 initializer for last element of ldb_map_objectclass

2019-01-28 10:29:24 +01:00

samba3sid.c

…

samba_dsdb.c

dsdb: Remove OpenLDAP backend complexity from samba_dsdb module

2019-08-30 09:50:25 +00:00

samba_secrets.c

…

samldb.c

CVE-2022-32745 s4/dsdb/samldb: Check for empty values array

2022-07-27 10:52:36 +00:00

schema_data.c

lib/util: remove extra safe_string.h file

2020-08-28 02:18:40 +00:00

schema_load.c

Fix a comment typo copied around

2020-08-17 19:35:38 +00:00

schema_util.c

s4:dsdb/schema: don't change schema->schema_info on originating schema changes.

2016-08-11 00:49:14 +02:00

secrets_tdb_sync.c

…

show_deleted.c

show-deleted: Rename attr_filter to exclude_filter for clarity

2017-06-30 06:23:39 +02:00

subtree_delete.c

dsdb: Remove sort from subtree_delete and add comments.

2018-05-30 04:23:27 +02:00

subtree_rename.c

subtree_rename: Correct comments

2018-05-30 04:23:27 +02:00

tombstone_reanimate.c

CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message

2022-07-27 10:52:36 +00:00

unique_object_sids.c

source4 dsdb modules: Add new module "unique_object_sids"

2017-12-10 00:47:29 +01:00

update_keytab.c

…

util.c

CVE-2020-25720 s4/dsdb/util: Add functions for dsHeuristics 28, 29

2022-09-16 02:32:36 +00:00

util.h

CVE-2020-25720: s4-acl: Owner no longer has implicit Write DACL

2022-09-16 02:32:36 +00:00

vlv_pagination.c

s4:dsdb/vlv_pagination: fix segfault in vlv_results()

2022-01-20 10:04:39 +00:00

wscript

waf: Move check for gnutls_aead_cipher_init to main gnutls wscript

2019-04-30 23:18:27 +00:00

wscript_build

build: Do not build selftest binaries for builds without --enable-selftest

2019-11-22 11:48:59 +00:00

wscript_build_server

dsdb: Allow password history and password changes without an NT hash

2022-06-26 22:10:29 +00:00