summaryrefslogtreecommitdiff
path: root/source3/include
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2007-07-11 09:39:08 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 12:28:31 -0500
commit1c957f9559880712acd335c9df11191df0386df0 (patch)
tree88123438b0efe17bbbaf4f5b7afba6ed37765ff9 /source3/include
parente05f45baefb050248064f58474e5ddddb2761111 (diff)
downloadsamba-1c957f9559880712acd335c9df11191df0386df0.tar.gz
samba-1c957f9559880712acd335c9df11191df0386df0.tar.bz2
samba-1c957f9559880712acd335c9df11191df0386df0.zip
r23826: Fix gpo security filtering by matching the security descriptor ace's for the
extended apply group policy right. Guenther (This used to be commit d832014a6fef657f484412372b5d09047552b183)
Diffstat (limited to 'source3/include')
-rw-r--r--source3/include/ads.h3
-rw-r--r--source3/include/rpc_secdes.h1
2 files changed, 3 insertions, 1 deletions
diff --git a/source3/include/ads.h b/source3/include/ads.h
index cbab016d46..c01a1055b2 100644
--- a/source3/include/ads.h
+++ b/source3/include/ads.h
@@ -341,4 +341,7 @@ typedef struct {
int val;
int critical;
} ads_control;
+
+#define ADS_EXTENDED_RIGHT_APPLY_GROUP_POLICY "edacfd8f-ffb3-11d1-b41d-00a0c968f939"
+
#endif /* _INCLUDE_ADS_H_ */
diff --git a/source3/include/rpc_secdes.h b/source3/include/rpc_secdes.h
index 1c49e4242d..298d4e664e 100644
--- a/source3/include/rpc_secdes.h
+++ b/source3/include/rpc_secdes.h
@@ -37,7 +37,6 @@
#define SEC_RIGHTS_EXTENDED 0x100 /* change/reset password, receive/send as*/
#define SEC_RIGHTS_CHANGE_PASSWD SEC_RIGHTS_EXTENDED
#define SEC_RIGHTS_RESET_PASSWD SEC_RIGHTS_EXTENDED
-#define SEC_RIGHTS_APPLY_GROUP_POLICY SEC_RIGHTS_EXTENDED
#define SEC_RIGHTS_FULL_CTRL 0xf01ff
#define SEC_ACE_OBJECT_PRESENT 0x00000001 /* thanks for Jim McDonough <jmcd@us.ibm.com> */