mirror of
https://github.com/samba-team/samba.git
synced 2025-02-15 05:57:49 +03:00
6c87e96149
not the privileges. Usually we don't need them, so the memory is free early. lib/util_sid.c: added some helper functions to check an SID. passdb/passdb.c: renamed local_lookup_rid() to local_lookup_sid() and pass an RID all the way. If the group doesn't exist on the domain SID, don't return a faked one as it can collide with a builtin one. Some rpc structures have been badly designed, they return only rids and force the client to do subsequent lsa_lookup_sid() on the domain sid and the builtin sid ! rpc_server/srv_util.c: wrote a new version of get_domain_user_groups(). Only the samr code uses it atm. It uses the group mapping code instead of a bloody hard coded crap. The netlogon code will use it too, but I have to do some test first. J.F.
-
62 lines
1.7 KiB
C
62 lines
1.7 KiB
C
/*
|
|
* Unix SMB/Netbios implementation.
|
|
* Version 1.9.
|
|
* RPC Pipe client / server routines
|
|
* Copyright (C) Andrew Tridgell 1992-2000,
|
|
* Copyright (C) Jean François Micouleau 1998-2001.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#define PRIV_ALL_INDEX 5
|
|
|
|
#define SE_PRIV_NONE 0x0000
|
|
#define SE_PRIV_ADD_MACHINES 0x0006
|
|
#define SE_PRIV_SEC_PRIV 0x0008
|
|
#define SE_PRIV_TAKE_OWNER 0x0009
|
|
#define SE_PRIV_ADD_USERS 0xff01
|
|
#define SE_PRIV_PRINT_OPERATOR 0xff03
|
|
#define SE_PRIV_ALL 0xffff
|
|
|
|
#define ENUM_ONLY_MAPPED True
|
|
#define ENUM_ALL_MAPPED False
|
|
|
|
#define MAPPING_WITH_PRIV True
|
|
#define MAPPING_WITHOUT_PRIV False
|
|
|
|
#define PR_NONE 0x0000
|
|
#define PR_LOG_ON_LOCALLY 0x0001
|
|
#define PR_ACCESS_FROM_NETWORK 0x0002
|
|
#define PR_LOG_ON_BATCH_JOB 0x0004
|
|
#define PR_LOG_ON_SERVICE 0x0010
|
|
|
|
|
|
typedef struct _GROUP_MAP {
|
|
gid_t gid;
|
|
DOM_SID sid;
|
|
enum SID_NAME_USE sid_name_use;
|
|
fstring nt_name;
|
|
fstring comment;
|
|
uint32 systemaccount;
|
|
PRIVILEGE_SET priv_set;
|
|
} GROUP_MAP;
|
|
|
|
typedef struct _PRIVS {
|
|
uint32 se_priv;
|
|
char *priv;
|
|
char *description;
|
|
} PRIVS;
|
|
|