diff options
| author | Günther Deschner <gd@samba.org> | 2007-07-11 09:39:08 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:28:31 -0500 |
| commit | 1c957f9559880712acd335c9df11191df0386df0 (patch) | |
| tree | 88123438b0efe17bbbaf4f5b7afba6ed37765ff9 /source3/include | |
| parent | e05f45baefb050248064f58474e5ddddb2761111 (diff) | |
| download | samba-1c957f9559880712acd335c9df11191df0386df0.tar.gz samba-1c957f9559880712acd335c9df11191df0386df0.tar.bz2 samba-1c957f9559880712acd335c9df11191df0386df0.zip | |
r23826: Fix gpo security filtering by matching the security descriptor ace's for the
extended apply group policy right.
Guenther
(This used to be commit d832014a6fef657f484412372b5d09047552b183)
Diffstat (limited to 'source3/include')
| -rw-r--r-- | source3/include/ads.h | 3 | ||||
| -rw-r--r-- | source3/include/rpc_secdes.h | 1 |
2 files changed, 3 insertions, 1 deletions
diff --git a/source3/include/ads.h b/source3/include/ads.h index cbab016d46..c01a1055b2 100644 --- a/source3/include/ads.h +++ b/source3/include/ads.h @@ -341,4 +341,7 @@ typedef struct { int val; int critical; } ads_control; + +#define ADS_EXTENDED_RIGHT_APPLY_GROUP_POLICY "edacfd8f-ffb3-11d1-b41d-00a0c968f939" + #endif /* _INCLUDE_ADS_H_ */ diff --git a/source3/include/rpc_secdes.h b/source3/include/rpc_secdes.h index 1c49e4242d..298d4e664e 100644 --- a/source3/include/rpc_secdes.h +++ b/source3/include/rpc_secdes.h @@ -37,7 +37,6 @@ #define SEC_RIGHTS_EXTENDED 0x100 /* change/reset password, receive/send as*/ #define SEC_RIGHTS_CHANGE_PASSWD SEC_RIGHTS_EXTENDED #define SEC_RIGHTS_RESET_PASSWD SEC_RIGHTS_EXTENDED -#define SEC_RIGHTS_APPLY_GROUP_POLICY SEC_RIGHTS_EXTENDED #define SEC_RIGHTS_FULL_CTRL 0xf01ff #define SEC_ACE_OBJECT_PRESENT 0x00000001 /* thanks for Jim McDonough <jmcd@us.ibm.com> */ |