Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-11 | s3-privs Inline dump_se_priv into callers now that it's just a uint64_t | Andrew Bartlett | 4 | -24/+9 | |
The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use talloc_realloc() not TALLOC_REALLOC_ARRAY() | Andrew Bartlett | 1 | -1/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use C99 types | Andrew Bartlett | 1 | -3/+3 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use true and false, not True and False | Andrew Bartlett | 1 | -22/+22 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Move source3/ privileges implmentation into common | Andrew Bartlett | 4 | -7/+6 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Rename structure elements for greater clarity | Andrew Bartlett | 3 | -12/+12 | |
It is important to make clear which is the LUID and which is the Samba-only bitmap mask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs More clarity in variable names | Andrew Bartlett | 1 | -4/+4 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Rename mask -> privilege_mask to be more clear | Andrew Bartlett | 1 | -26/+26 | |
After SE_PRIV was removed, it became less clear what these parameters were for. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3:auth Remove NT_USER_TOKEN | Andrew Bartlett | 32 | -121/+119 | |
The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-auth Change struct nt_user_token -> struct security_token | Andrew Bartlett | 23 | -87/+84 | |
This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-auth Change type of num_sids to uint32_t | Andrew Bartlett | 16 | -38/+48 | |
size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | security.idl Add comments | Andrew Bartlett | 1 | -1/+3 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | security.idl Update Windows privileges list to Win2008R2 | Andrew Bartlett | 1 | -30/+35 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Only store low bits of luid in privileges table | Andrew Bartlett | 2 | -18/+20 | |
Samba only uses the low bits, and this makes the code simpler. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s4-privs Add a lookup by index of privilages | Andrew Bartlett | 2 | -3/+14 | |
Now that privileges are no longer given luid values sequentially, we need another way to look them up for enumeration. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | privs Add my Copyright | Andrew Bartlett | 3 | -0/+3 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | security.idl clarify which privilages are LUID and bitmap values | Andrew Bartlett | 1 | -6/+10 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Remove comment already moved to security.idl | Andrew Bartlett | 1 | -41/+0 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Use constants from security.idl | Andrew Bartlett | 1 | -9/+9 | |
The values in security.idl have been updated to match these. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s4-privs Remove link between enum sec_privilege and the privilege bitmap | Andrew Bartlett | 2 | -46/+140 | |
This allows us to set the enum sec_privilege constants to the LUID values that are seen from windows, which we need to match, in order to preserve the support for the NT Print Migrator tool after a merge with the source3/ privileges code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Further changes to remove SE_PRIV | Andrew Bartlett | 10 | -110/+108 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | privs Move privilege bitmasks to security.idl | Andrew Bartlett | 2 | -19/+40 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3:privs Change to new host endian neutral privilages tdb format | Andrew Bartlett | 1 | -3/+16 | |
These values are stored in account_policy.tdb, and the old format, using a 128 bit bitmap was not endian neutral. The previous endian-dependent format was introduced in 46e5effea948931509283cb84b27007d34b521c8 replacing a 32 bit number which was used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3:Change SE_PRIV to uint64_t | Andrew Bartlett | 1 | -20/+20 | |
This removes the SE_PRIV typedef Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3:privileges Change SE_PRIV to be just a uint64_t | Andrew Bartlett | 2 | -46/+22 | |
We don't need 128 possible privileges here, as we only use 12. This reverts some of 46e5effea948931509283cb84b27007d34b521c8 by Jerry back in 2005, where he introduced the SE_PRIV structure to replace the uint32_t used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | lib/replace:wscript - don't check twice for type "bool" | Matthias Dieter Wallnöfer | 1 | -2/+1 | |
2010-09-11 | lib/replace:wscript - attempt to fix the features detection on Tru64 | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Hopefully now we detect the built-in "socklen_t" https://bugs.internet2.edu/jira/browse/SSPCPP-114 http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/V50_HTML/MAN/MAN5/0001____.HTM | |||||
2010-09-10 | Add check missing from previous patch after talloc_strdup(). | Jeremy Allison | 1 | -0/+3 | |
Jeremy. | |||||
2010-09-10 | Factor out the recent changes into a function - check_parent_exists(). | Jeremy Allison | 1 | -77/+103 | |
Fix this to ensure that if "start" is manipulated, then "dirpath" is changed also. Ensures that when the path: /a/long/file/name/path.txt is processed, we first stat: /a/long/file/name/path.txt and if this fails, we try to stat: /a/long/file/name if this path exists (the normal case when creating a new entry in a directory) then we no longer do the individual path name walk, but only do case insensitive lookup on the last component. If the stat fails we do the full pathname walk as normal in 3.5.x and below. Metze, examine this change for your back-port. Jeremy. | |||||
2010-09-11 | s3: Simplify the logic in generate_krb5_ccache | Volker Lendecke | 1 | -51/+28 | |
gd, jra, others, please check! | |||||
2010-09-10 | s3/winbind: use mono time for startup timeout check | Björn Jacke | 3 | -6/+6 | |
2010-09-10 | libreplace: clock_gettime sets errno | Björn Jacke | 1 | -1/+2 | |
2010-09-10 | s4/pvfs: use monotonic time for this timeout | Björn Jacke | 2 | -4/+4 | |
2010-09-10 | s4/ldap: use time_mono for reconnect timeout | Björn Jacke | 1 | -2/+2 | |
2010-09-10 | s4/torture: use time_mono for timeouts | Björn Jacke | 1 | -2/+2 | |
2010-09-10 | s4/torture: use time_mono for delta time | Björn Jacke | 1 | -2/+2 | |
2010-09-10 | s3-selftest: add print_test_extended (as called from RPC-PRINTER) to ↵ | Günther Deschner | 1 | -0/+1 | |
knownfail list. Guenther | |||||
2010-09-10 | s4:client/client.c - fix wrong return codes in "do_connect" | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Detected by the Solaris cc compiler. | |||||
2010-09-10 | s4:lib/policy/gp_filesys.c - remove dead code | Matthias Dieter Wallnöfer | 1 | -2/+0 | |
Found out by Solaris cc | |||||
2010-09-10 | s4:torture/locktest.c - add a cast in order to quiet a warning on Solaris cc | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-09-10 | s4:libcli/wrepl/winsrepl.c - add more "char *" casts in order to suppress ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Solaris warnings | |||||
2010-09-10 | s3/s4:libcli/tstream - add more "char *" casts in order to suppress Solaris ↵ | Matthias Dieter Wallnöfer | 2 | -14/+14 | |
warnings | |||||
2010-09-10 | s4:torture/ntp/ntp_signd.c - add more "char *" casts in order to suppress ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Solaris warnings | |||||
2010-09-10 | s3-printing: fix non-ads build after prototype changes. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-09-10 | s3: Simplify generate_krb5_ccache slightly | Volker Lendecke | 1 | -4/+0 | |
strequal deals with a NULL string input just fine | |||||
2010-09-10 | Check all SMB_MALLOC returns correctly. Found by Andreas Moroder ↵ | Jeremy Allison | 2 | -3/+18 | |
<andreas.moroder@gmx.net>. Jeremy | |||||
2010-09-10 | s4:torture/rpc/winreg.c - hopefully this attempt fixes Solaris "cc" on the ↵ | Matthias Dieter Wallnöfer | 1 | -27/+10 | |
buildfarm The Solaris "cc" incompatiblity on this codepart seems to be harder to fix than it looks like. | |||||
2010-09-10 | s4:getncchanges_change_master - also in this call "i" needs to be unsigned | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
2010-09-10 | s3: auth.krb5ccname and auth.unix_username are both fstrings | Volker Lendecke | 1 | -4/+2 | |
There's no point in checking for != NULL | |||||
2010-09-10 | selftest/s3-selftest.sh: knownfailure filtering for non-build-farm make test | Stefan Metzmacher | 1 | -2/+1 | |
metze |