diff options
| author | Jeremy Allison <jra@samba.org> | 2000-08-02 02:11:55 +0000 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2000-08-02 02:11:55 +0000 |
| commit | 17dcd9a834fc915fb1ff2d8042a23000eeb7acfa (patch) | |
| tree | 18a9a8cfa2883baf163da29265fd08b8a3b81c9f /source3/include/smb.h | |
| parent | 7f36df301e28dc8ca0e5bfadc109d6e907d9ba2b (diff) | |
| download | samba-17dcd9a834fc915fb1ff2d8042a23000eeb7acfa.tar.gz samba-17dcd9a834fc915fb1ff2d8042a23000eeb7acfa.tar.bz2 samba-17dcd9a834fc915fb1ff2d8042a23000eeb7acfa.zip | |
Started to canonicalize our handling of uid -> sid code in order to
get ready and fix se_access_check().
Added cannonical lookup_name(), lookup_sid(), uid_to_sid(), gid_to_sid()
functions that look via winbind first the fall back on local lookup.
All Samba should use these rather than trying to call winbindd code
directly.
Added NT_USER_TOKEN struct in user_struct, contains list of NT sids
associated with this user.
se_access_check() should use this (cached) value rather than attempting
to do the same thing itself when given a uid/gid pair.
More work needs to be done to preserve these things accross security
context changes (especially with the tricky pipe problem) but I'm
beginning to see how this will be done..... probably by registering
a new vuid for an authenticated RPC pipe and not treating the
pipe calls specially.
More thoughts needed - but we're almost there...
Jeremy.
(This used to be commit 5e5cc6efe2e4687be59085f562caea1e2e05d0a8)
Diffstat (limited to 'source3/include/smb.h')
| -rw-r--r-- | source3/include/smb.h | 20 |
1 files changed, 12 insertions, 8 deletions
diff --git a/source3/include/smb.h b/source3/include/smb.h index bc9f17544c..aaebe56f33 100644 --- a/source3/include/smb.h +++ b/source3/include/smb.h @@ -399,6 +399,15 @@ typedef struct sid_info } DOM_SID; +/* + * The complete list of SIDS belonging to this user. + * Created when a vuid is registered. + */ + +typedef struct _nt_user_token { + size_t num_sids; + DOM_SID *user_sids; +} NT_USER_TOKEN; /*** query a local group, get a list of these: shows who is in that group ***/ @@ -556,8 +565,8 @@ typedef struct connection_struct char *connectpath; char *origpath; - struct vfs_ops vfs_ops; /* Filesystem operations */ - struct vfs_connection_struct *vfs_conn; /* VFS specific connection stuff */ + struct vfs_ops vfs_ops; /* Filesystem operations */ + struct vfs_connection_struct *vfs_conn; /* VFS specific connection stuff */ char *user; /* name of user who *opened* this connection */ uid_t uid; /* uid of user who *opened* this connection */ @@ -1663,12 +1672,7 @@ typedef struct int n_groups; gid_t *groups; -#if 0 - NET_USER_INFO_3 usr; /* This should not be here. */ -#else - DOM_SID user_sid; - DOM_SID *group_sids; -#endif + NT_USER_TOKEN nt_user_token; /* per-user authentication information on NT RPCs */ /* lkclXXXX - THIS SHOULD NOT BE HERE! */ |