diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-08-26 16:04:53 +1000 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-09-11 18:46:04 +1000 |
| commit | d2883ffde92b60c57466146975a3a279b5826c89 (patch) | |
| tree | 06ef1e027584d83791628746ed06b10446b3f8ad /librpc/idl | |
| parent | 86233ec13527ad93ef3add7d24bd8f781693f2b0 (diff) | |
| download | samba-d2883ffde92b60c57466146975a3a279b5826c89.tar.gz samba-d2883ffde92b60c57466146975a3a279b5826c89.tar.bz2 samba-d2883ffde92b60c57466146975a3a279b5826c89.zip | |
security.idl clarify which privilages are LUID and bitmap values
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Diffstat (limited to 'librpc/idl')
| -rw-r--r-- | librpc/idl/security.idl | 16 |
1 files changed, 10 insertions, 6 deletions
diff --git a/librpc/idl/security.idl b/librpc/idl/security.idl index 922b264df9..59d3f5c143 100644 --- a/librpc/idl/security.idl +++ b/librpc/idl/security.idl @@ -352,9 +352,11 @@ interface security ********************************************************************/ -/* we have to define the LUID here due to a horrible check by printmig.exe - that requires the SeBackupPrivilege match what is in Windows. So match - those that we implement and start Samba privileges at 0x1001 */ + /* LUID values for privileges known about by Samba (bottom 32 bit of enum, top bits are 0) */ + + /* we have to define the LUID here due to a horrible check by printmig.exe + that requires the SeBackupPrivilege match what is in Windows. So match + those that we implement and start Samba privileges at 0x1001 */ typedef enum { SEC_PRIV_INCREASE_QUOTA = 0x5, @@ -389,9 +391,11 @@ interface security SEC_PRIV_REMOTE_INTERACTIVE_LOGON = 0x2024 } sec_privilege; -/* - * We will use our own bitmap here as the Samba3 privilages.tdb records these values - */ + + /* Bitmap of privilege values for internal use only. We need + * our own bitmap here as privilages.tdb records these values + * as a bitmap (privilages.ldb uses the string forms). + */ typedef [bitmap64bit] bitmap { SE_NETWORK_LOGON = 0x00000001, SE_INTERACTIVE_LOGON = 0x00000002, |