Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-13 | ntlm_check: Fix some nonempty blank lines | Volker Lendecke | 1 | -21/+21 | |
2010-09-11 | libcli/auth/schannel_state_tdb.c - fix includes | Matthias Dieter Wallnöfer | 1 | -3/+1 | |
Otherwise we get a "declared inside parameter list" warning. | |||||
2010-09-11 | libcli/privileges Fix comment | Andrew Bartlett | 1 | -1/+1 | |
2010-09-11 | s4-privs Seperate rights and privileges | Andrew Bartlett | 2 | -14/+60 | |
These are related, but slightly different concepts. The biggest difference is that rights are not enumerated as a system-wide list. This moves the rights to security.idl due to dependencies. Andrew Bartlett | |||||
2010-09-11 | libcli/security Remove unused SE_NONE define | Andrew Bartlett | 1 | -1/+0 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Move 'private' privileges functions to another header | Andrew Bartlett | 3 | -24/+42 | |
These functions work on the bitmap, and are only exposed because the source3/ privileges storage uses the bitmap in account_policy.tdb Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Remove 'always true' return from se_priv_put_all_privileges | Andrew Bartlett | 2 | -3/+2 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/auth Failure to find the cached session key for SCHANNEL isn't level 0 | Andrew Bartlett | 1 | -1/+1 | |
This happens all the time, particularly now that we don't keep the db around after a reboot. Don't scare the admins with the level 0. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | privileges: privilege luids are not all below 64 | Andrew Tridgell | 1 | -3/+0 | |
the ones brought across from s3 have higher values Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-11 | libcli/security Make sec_privilege_from_index() return SEC_PRIV_INVALID on ↵ | Andrew Bartlett | 1 | -1/+1 | |
failure This is clearer and more consistent than using a magic -1 return Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Remove unused declarations from privileges.h | Andrew Bartlett | 1 | -51/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Expose sec_privilege_mask() | Andrew Bartlett | 2 | -1/+6 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure. | Andrew Bartlett | 1 | -1/+1 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Remove unused functions and constants. | Andrew Bartlett | 2 | -242/+14 | |
All the callers to these functions have been removed or reworked. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Rename all privilege bitmaps constants | Andrew Bartlett | 1 | -28/+28 | |
The idea here to to make it very clear how they differ from the enumerated LUID values. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Remove luid_to_se_priv() and luid_to_privilege_name() | Andrew Bartlett | 1 | -43/+4 | |
These functions duplicate other functions in the merged code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Improve dump of privileges: Just walk the table | Andrew Bartlett | 1 | -5/+4 | |
This removes some logic recently added that was just too smart - it is easier to just walk the table and do a bit match here. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Remove pointer indirection from se_priv_to_privilege_set() | Andrew Bartlett | 2 | -3/+3 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Don't export privs[] as a global variable | Andrew Bartlett | 2 | -41/+27 | |
Instead, provide access functions for the LSA and net sam callers for the information they need. They still only enumerate the first 8 privileges that have traditionally been exposed. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Merge privilege lists from source3 and source4 | Andrew Bartlett | 1 | -169/+126 | |
The LSA enumeration in source3 will not show the new privileges, but otherwise, they are now in common, and can be set by name. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Return number of entries in the old source3 list | Andrew Bartlett | 1 | -3/+4 | |
This ensures there isn't a behaviour change when the source3 list is combined with the longer source4 list. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/privileges Simplify get_privilege_luid() to return just the enum | Andrew Bartlett | 2 | -9/+4 | |
As Samba only deals with the lower 32 bits of the LUID, just return those and let the LSA layer deal with the upper 0 bits. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Don't memcpy a uint64_t value, just assign it. | Andrew Bartlett | 1 | -1/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use ARRAY_SIZE() consistantly. | Andrew Bartlett | 1 | -15/+16 | |
This avoids the use of SE_END, and has all callers walking the array using the same termination condition. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Fix and clarify privilege manipulation function comments | Andrew Bartlett | 1 | -9/+9 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Make the two privileges tables share a common struct definition | Andrew Bartlett | 2 | -27/+22 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Move source4/ privileges code into the common libcli/security | Andrew Bartlett | 3 | -4/+331 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Move manual prototypes to common privileges.h | Andrew Bartlett | 1 | -0/+88 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Inline dump_se_priv into callers now that it's just a uint64_t | Andrew Bartlett | 1 | -9/+0 | |
The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use talloc_realloc() not TALLOC_REALLOC_ARRAY() | Andrew Bartlett | 1 | -1/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use C99 types | Andrew Bartlett | 1 | -3/+3 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Use true and false, not True and False | Andrew Bartlett | 1 | -22/+22 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Move source3/ privileges implmentation into common | Andrew Bartlett | 2 | -0/+531 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-10 | s3/s4:libcli/tstream - add more "char *" casts in order to suppress Solaris ↵ | Matthias Dieter Wallnöfer | 2 | -14/+14 | |
warnings | |||||
2010-09-09 | libcli/netlogon: add LOGON_REQUEST handling to pull_nbt_netlogon_response(). | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-09-09 | libcli/netlogon: add LOGON_RESPONSE2 to pull_nbt_netlogon_response(). | Günther Deschner | 1 | -0/+9 | |
Guenther | |||||
2010-09-09 | libcli/netlogon: add NETLOGON_RESPONSE2 to push_nbt_netlogon_response(). | Günther Deschner | 2 | -1/+12 | |
Guenther | |||||
2010-08-26 | libcli/auth/ntlm_check.c - fix parameter indentation | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
2010-08-26 | manpages: Avoid using Samba-Team specific DTD, which requires net access | Jelmer Vernooij | 1 | -11/+1 | |
or modification of /etc/catalogs. | |||||
2010-08-24 | s3-dcerpc: avoid talloc_move on schannel creds in ↵ | Günther Deschner | 2 | -1/+47 | |
cli_rpc_pipe_open_schannel_with_key(). Initially, the schannel creds were talloc memduped, then, during the netlogon creds client merge (baf7274fed2f1ae7a9e3a57160bf5471566e636c) they were first talloc_referenced and then later (53765c81f726a8c056cc4e57004592dd489975c9) talloc_moved. The issue with using talloc_move here is that users of that function in winbind will only be able to have two schanneled connections, as the cached schannel credentials pointer from the netlogon pipe will be set to NULL. Do a deep copy of the struct instead. Guenther | |||||
2010-08-14 | werror.h - fix order and duplicate DS error codes | Matthias Dieter Wallnöfer | 2 | -62/+54 | |
2010-08-12 | ntlmssp: fix unitialized variable in ntlmssp_server_postauth(). | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-08-12 | Fix a typo | Volker Lendecke | 1 | -1/+1 | |
2010-08-10 | libcli/auth Make the source3/ implementation of the NTLMSSP server common | Andrew Bartlett | 2 | -0/+530 | |
This means that the core logic (but not the initialisation) of the NTLMSSP server is in common, but uses different authentication backends. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | libcli/auth/ntlmssp: remove outdated comment. The version flag is well ↵ | Günther Deschner | 1 | -2/+0 | |
understood now. Guenther | |||||
2010-08-10 | libcli/auth Move some source3/ NTLMSSP functions to the common code. | Andrew Bartlett | 3 | -0/+120 | |
libcli/auth Use true and false rather than True and False in common code Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-07-16 | s4-loadparm: 2nd half of lp_ to lpcfg_ conversion | Andrew Tridgell | 1 | -2/+2 | |
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-16 | libcli/netlogon: re-enable debugging. | Günther Deschner | 1 | -7/+0 | |
Now that we do not share binary objects anymore, we can safely enable debugging here again. Guenther This reverts commit 3eb122069b9f81196ac658375fcb828924af3e94. | |||||
2010-07-01 | s3-libads: move spnego defines to their appropriate header file. | Günther Deschner | 1 | -0/+6 | |
Guenther | |||||
2010-06-30 | libcli: Fixed a build warning for a missing prototype. | Andreas Schneider | 1 | -0/+1 | |