summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-10-14security: ensure the merge of libcli/security doesn't change s3 behaviourAndrew Tridgell1-0/+5
Jeremy, you put a #if 0 around this logic in this commit: 8344e945 (Jeremy Allison 2008-10-31 10:51:45 -0700 181) is this still needed? Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 14 03:16:41 UTC 2010 on sn-devel-104
2010-10-14libcli/security Use static SIDs rather than parsing from stringsAndrew Bartlett3-6/+7
This should make the security_token_is_*() calls a little faster. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14libcli/auth Merge source4/libcli/security and util_sid.c into the common codeAndrew Bartlett21-740/+615
This should ensure we only have one copy of these core functions in the tree. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14libcli/security Define traditional constants in terms of IDL macrosAndrew Bartlett2-65/+64
The source3/ code uses these constants in a lot of places, and it will take time and care to rename them, if that is desired. Linking the macros here will at least allow common code to use the IDL based macros, and preserve a documentary link between the constants (other than just their value) Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14libcli/security Move source3/lib/util_seaccess.c into the common codeAndrew Bartlett5-15/+62
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s4-acl Merge sec_access_check() with se_access_check() from source3/Andrew Bartlett3-4/+18
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-acl Use uint32_t for counting the ACEsAndrew Bartlett1-1/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-acl Merge source4-supported privileges into se_access_checkAndrew Bartlett1-5/+9
This will shortly be the common se_access_check function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-util_nttoken.c Also copy the rights_mask when copying a security_tokenAndrew Bartlett1-0/+4
These are unused in source3/ code at the moment, but it would be unfortunate if that were to change, and this function not be updated. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-auth Use security_token_debug() from common codeAndrew Bartlett9-36/+8
This prints the security token including the privileges as strings instead of just a bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-auth use security_token_has_sid() from the common codeAndrew Bartlett1-9/+2
The wrapper call is left here to avoid changing semantics for the NULL parameter case. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3 Replace is_sid_in_token() with security_token_has_sid() from common codeAndrew Bartlett6-21/+10
The two routines are identical, so there is no need to keep both. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s4: show samba version in bin/samba -bAndrew Tridgell1-0/+1
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 14 02:24:47 UTC 2010 on sn-devel-104
2010-10-13s4:samldb LDB module - cosmetic fixupsMatthias Dieter Wallnöfer1-9/+9
- Update the module description - Fix indentation Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 13 20:55:18 UTC 2010 on sn-devel-104
2010-10-13heimdal: Add soname for com_err.Jelmer Vernooij1-0/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 20:00:40 UTC 2010 on sn-devel-104
2010-10-13heimdal: Add sonames.Jelmer Vernooij1-2/+9
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 18:15:04 UTC 2010 on sn-devel-104
2010-10-13samdb: Set soname.Jelmer Vernooij1-1/+2
2010-10-13s4:sam.py - tests for "userAccountControl" attributeMatthias Dieter Wallnöfer1-3/+448
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 13 17:31:29 UTC 2010 on sn-devel-104
2010-10-13s4:samldb LDB module - deny creation of temporary duplicate accountsMatthias Dieter Wallnöfer1-0/+12
2010-10-13s4:samldb LDB module - proof the account type also on LDB modify operationsMatthias Dieter Wallnöfer1-0/+8
2010-10-13ldb: Only build LIBLDB_MAIN when building ldb itself.Jelmer Vernooij1-8/+8
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 15:41:29 UTC 2010 on sn-devel-104
2010-10-13s4:sam.py - add a test for the group type changing behaviourMatthias Dieter Wallnöfer1-0/+595
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 13 14:17:31 UTC 2010 on sn-devel-104
2010-10-13s4:samldb LDB module - support the group type changing properlyMatthias Dieter Wallnöfer1-1/+53
This is exactly that what Windows allows. It was proven by a blackbox test. And we also need to deny add operations of builtin groups.
2010-10-13s4:ldap.py - test the "isCriticalSystemObject" behaviourMatthias Dieter Wallnöfer1-0/+39
2010-10-13s4:setup/provision_self_join.ldif - let the samldb LDB module fill in ↵Matthias Dieter Wallnöfer1-1/+1
"isCriticalSystemObject" It recognizes it now automatically.
2010-10-13s4:samldb LDB module - deny also the direct modification of ↵Matthias Dieter Wallnöfer1-3/+14
"isCriticalSystemObject" on modify operations
2010-10-13s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" ↵Matthias Dieter Wallnöfer1-0/+9
entries They're only allowed to be created with the RELAX control specified.
2010-10-13s4:samldb LDB module - first implementation of the samldb primary group triggerMatthias Dieter Wallnöfer1-48/+61
This was done according to MS-SAMR 3.1.1.8.2 But do use it only for add operations at the moment.
2010-10-13s4:samldb LDB module - use the new "objectclass_trigger" for add operationsMatthias Dieter Wallnöfer1-142/+33
Additionally clean up "samldb_fill_object" which is now much easier to comprehend.
2010-10-13s4:samldb LDB module - first implementation of the samldb objectclass triggerMatthias Dieter Wallnöfer1-0/+176
This was done according to MS-SAMR 3.1.1.8.1 I need to perform some RELAX checks since otherwise the provision wouldn't work anymore.
2010-10-13ldb:ldb_match.c - fix a counter typeMatthias Dieter Wallnöfer1-1/+1
2010-10-13s3:gpfs: Add support for the gpfs_ftruncate callChristian Ambach3-2/+28
ported from the v3-4-ctdb branch to master This used to be commit 1f138cc9f4a Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Oct 13 13:34:25 UTC 2010 on sn-devel-104
2010-10-13s3:vfs:gpfs convert sharemodes/leases parameterChristian Ambach2-20/+64
convert gpfs:sharemodes and gpfs:leases parameters from a global setting to a per share setting
2010-10-13s3:vfs:syncops add option to disable module per shareChristian Ambach1-6/+35
add an option to disable the syncops module completely for a share with syncops:disable = true
2010-10-13s3:vfs:syncops make it possible to specify syncops:onclose per shareChristian Ambach1-7/+43
convert the onclose option of the vfs_syncops module from a global option to a service-specific one as preparation for further flags, use a struct to store in the VFS handle instead of just the onclose flag
2010-10-13wafsamba/developer: Forbid shared objects with unresolved symbols, ifJelmer Vernooij1-1/+1
the linker supports such a flag. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Wed Oct 13 12:52:22 UTC 2010 on sn-devel-104
2010-10-13wafsamba: Don't allow circular dependencies involving libraries byJelmer Vernooij1-7/+17
default.
2010-10-13dsdb/schema_data: Build as shared object.Jelmer Vernooij1-1/+1
2010-10-13dsdb/schema_load: Build as shared object.Jelmer Vernooij1-1/+1
2010-10-13samdb: Build as library.Jelmer Vernooij1-1/+1
2010-10-13ldb: raise minor version number for new ldb_msg_match_error() functionAndrew Tridgell2-1/+227
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Oct 13 11:42:18 UTC 2010 on sn-devel-104
2010-10-13s4-ldb: take advantage of ldb_match_msg_error() in more placesAndrew Tridgell4-8/+32
this gives better error checking
2010-10-13s4-schema: don't name variables after standard libc functionsAndrew Tridgell1-3/+3
2010-10-13s4-ldb: use operator_fn syntax function in ldb_match codeAndrew Tridgell1-92/+212
this also fixes error handling in case of bad syntax, memory error etc, which was previously conidered as a mismatch, but should return an error Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13s4-ldb: implement an operator_fn for the ldb-samba syntaxesAndrew Tridgell1-14/+94
this allows us to properly handle the LDB_OP_PRESENT operator on deleted linked attributes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13s4-ldb: added an optional operator_fn in the schema syntaxAndrew Tridgell3-5/+25
this function takes the operator being invoked, which will allow schema functions to provide more fine grained control over comparisons. The key bug this was introduced to fix is the incorrect handling of the LDB_OP_PRESENT test for deleted linked attributes. The backends are unaware of the deleted state of these links, so they cannot do a LDB_OP_PRESENT test on their own. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13s4-torture: zero all of trans before the test startsAndrew Tridgell1-1/+1
2010-10-13s4-torture: fixed uninitialised variable errorAndrew Tridgell1-1/+1
ret is uninitialised if the directory is empty
2010-10-13s4: don't rebuild all of heimdal when dynconfig options changeAndrew Tridgell2-7/+18
only 2 files in heimdal depend on dynconfig variables
2010-10-13autobuild: do make install after make testAndrew Tridgell1-2/+2
this ensures that commits that break uninstalled testing get caught by autobuild in future Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
generated by cgit (git 2.34.1) at 2024-11-16 00:02:27 +0000