Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit c22ec556b1df777b3b99669403dd1f9094a37a7a)
|
|
This also removes parse_lsa.c entirely.
Guenther
(This used to be commit f802ba035c95e63c5a6ff9f2fb484d62341cd1a7)
|
|
Guenther
(This used to be commit 6458ef3977b60f24b87eb88cf870a9f23929ca85)
|
|
Guenther
(This used to be commit 80e39330bf15cc57f2780a5b900d8a2b14d92fa9)
|
|
Guenther
(This used to be commit 34c0e64026b7f5f223c7d7f1d7e162b5659f3bd3)
|
|
Guenther
(This used to be commit 15b97d1aafd6c8ad936944b611188154b191167f)
|
|
Guenther
(This used to be commit 5b700aba1a2e1559c17fec9d82e87312e8a5b15d)
|
|
Guenther
(This used to be commit 8125d8557fb4b27873f8eabc6ad1019491d18cce)
|
|
Guenther
(This used to be commit 004598bc1322b6e2deb62115713768682fee988e)
|
|
Guenther
(This used to be commit 8c476ad51622f76bf8f03f6255369b8e19f24a72)
|
|
Guenther
(This used to be commit 90b07714ddb16ef87865cdf4f9c64c0372200e42)
|
|
Guenther
(This used to be commit f995b1ddc75e5091c6eb012b80dcaa9c78ce368e)
|
|
Guenther
(This used to be commit 5550c5c387ad66ffe8532e669b6155a28c6e54d1)
|
|
Guenther
(This used to be commit d853f4f2634a3273c193cc52e7aaa4e7234a827c)
|
|
equivalents.
Guenther
(This used to be commit 4ca3b1c02ee44ddcab8d1b100497939de62558e6)
|
|
Guenther
(This used to be commit 793e5a608b1a40174088db6fbfcfc8cc6263a0da)
|
|
Guenther
(This used to be commit cf3a76bf19bfeb35800e0fc31e90dc4ea5c0ff85)
|
|
Guenther
(This used to be commit ddefdc5bd70620dcb94660ba5d55520e136d8d0f)
|
|
Guenther
(This used to be commit bb8e77eb74c9d178a6c77f2f9c69eb1778fb5e10)
|
|
Guenther
(This used to be commit c9a8baf5077a4e93cca241a5ec73f6ade97af607)
|
|
Guenther
(This used to be commit f193d7d944e89f94b968a369d6566d13a4fbef5c)
|
|
Guenther
(This used to be commit 0fac016d9d0018c983576d5cc8c3e06f40360b73)
|
|
Guenther
(This used to be commit 3a32082ef5bb0152545b391ce4cb8ca3a28939da)
|
|
Guenther
(This used to be commit 9b2aeeb36903591ea55cfdfe22f32d69703daaf1)
|
|
Guenther
(This used to be commit a52066e6083ff4b0d21b57ba43a812c02c0cbd78)
|
|
Guenther
(This used to be commit d9c8a2271d5d4ff845f1fe5986a2c63d79c41415)
|
|
Guenther
(This used to be commit b37b2b77edec72fc3f53b3461aa1c210e4366c1b)
|
|
Guenther
(This used to be commit 99dd28da84c270f46535bd2ffa6bfef96d2e2eed)
|
|
rpccli_lsa_open_trusted_domain_by_name,
rpccli_lsa_query_trusted_domain_info_by_sid and
rpccli_lsa_query_trusted_domain_info_by_name).
Guenther
(This used to be commit f2fb3473455f20e7314a9d33f5a1c923d3057d97)
|
|
(This used to be commit b0132e94fc5fef936aa766fb99a306b3628e9f07)
|
|
Jeremy.
(This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3)
|
|
in a lookup_sidX reply isn't optional - like the
lookup_sidX query it needs to be defined in the
struct.
All this will go away with PIDL (thank goodness....).
Jerry - I think this is a showstopper to be merged
for 3.0.25b.
I'll be watching the build farm to see if anything broke.
Jeremy.
(This used to be commit 9300b92f7a51eb80fdc039d8dad23ea9ce82aa8f)
|
|
(This used to be commit 5de76767e857e9d159ea46e2ded612ccd6d6bf19)
|
|
servers. Also add a new "net rpc audit" tool. The lsa query infolevels
were taken from samb4 IDL, the lsa policy flags and categories are
partly documented on msdn. I need to cleanup the double
lsa_query_info_policy{2}{_new} calls next.
Guenther
(This used to be commit 0fed66926f4b72444abfc8ffb8c46cca8d0600aa)
|
|
Jeremy.
(This used to be commit f1a362580ae37730dc8393a79f832aed5d0ea4be)
|
|
Jeremy.
(This used to be commit b57406c89feaf550f6c2d29ef0ed73a935908add)
|
|
Jeremy.
(This used to be commit 2274709587bd1f27bea2eacf633182f20cd07b1e)
|
|
Jeremy.
(This used to be commit a9e1d0f3b4fd7a0732a5023d0b4dcc2c4b1b03f8)
|
|
Jeremy.
(This used to be commit a164cfab420a2439dad8fd85f8b4d652087fa6b9)
|
|
Sync with trunk as off r13315
(This used to be commit 17e63ac4ed8325c0d44fe62b2442449f3298559f)
|
|
* \PIPE\unixinfo
* winbindd's {group,alias}membership new functions
* winbindd's lookupsids() functionality
* swat (trunk changes to be reverted as per discussion with Deryck)
(This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3)
|
|
rpcclient-tester for some info-levels.
Jerry, I tried to adopt to prs_pointer() where possible and to not
interfere with your work for usrmgr.
- Add "net rpc trustdom vampire"-tool.
This allows to retrieve Interdomain Trust(ed)-Relationships from
NT4-Servers including cleartext-passwords (still stored in the local
secrets.tdb).
The net-hook was done in cooperation with Lars Mueller
<lmuelle@suse.de>.
To vampire trusted domains simply call:
net rpc trustdom vampire -S nt4dc -Uadmin%pass
Guenther
(This used to be commit 512585293963a1737f831af697ea1dc092d63cb0)
|
|
version to 3.0.20pre1
(This used to be commit 9727d05241574042dd3aa8844ae5c701d22e2da1)
|
|
Tested client and server code.
(This used to be commit efb3ac4c69c72c0fa01c558951fa357893562bce)
|
|
* add some backwards compatibility to 'net rpc rights list'
* verify privilege name in 'net rpc rights privileges <name>' in order
to give back better error messages.
(This used to be commit 0e29dc8aa384dfa6d2495beb8a9ffb5371e60a13)
|
|
pulling back all recent rpc changes from trunk into
3.0. I've tested a compile and so don't think I've missed
any files. But if so, just mail me and I'll clean backup
in a couple of hours.
Changes include \winreg, \eventlog, \svcctl, and
general parse_misc.c updates.
I am planning on bracketing the event code with an
#ifdef ENABLE_EVENTLOG until I finish merging Marcin's
changes (very soon).
(This used to be commit 4e0ac63c36527cd8c52ef720cae17e84f67e7221)
|
|
(This used to be commit 277203b5356af58ce62eb4eec0db2eccadeeffd6)
|
|
NT has no limit. We still don't respond the way 2k would to requests
larger, which is to actually allocate the memory and send back the entire
response, plus a return status of NT_STATUS_NONE_MAPPED. Still looking
into ways of doing this without crashing windows.
(This used to be commit 9afe5acdc22adaed4b4b3d70ba3a1a7898256282)
|
|
* make sure to apply the rights_mask and not just the saved
bits from the mask in access_check_samr_object()
* allow root to grant/revoke privileges (in addition to Domain
Admins) as suggested by Volker.
Tested machine joins from XP, 2K, and NT4 with and without
pre-existing machine trust accounts. Also tested basic file
operations using cmd.exe and explorer.exe after changing the
STANDARD_RIGHTS_WRITE_ACCESS bitmask.
(This used to be commit c0e7f7ff60a4110809b8f500fdc68a1bf963da36)
|
|
(based on Simo's code in trunk). Rewritten with the
following changes:
* privilege set is based on a 32-bit mask instead of strings
(plans are to extend this to a 64 or 128-bit mask before
the next 3.0.11preX release).
* Remove the privilege code from the passdb API
(replication to come later)
* Only support the minimum amount of privileges that make
sense.
* Rewrite the domain join checks to use the SeMachineAccountPrivilege
instead of the 'is a member of "Domain Admins"?' check that started
all this.
Still todo:
* Utilize the SePrintOperatorPrivilege in addition to the 'printer admin'
parameter
* Utilize the SeAddUserPrivilege for adding users and groups
* Fix some of the hard coded _lsa_*() calls
* Start work on enough of SAM replication to get privileges from one
Samba DC to another.
* Come up with some management tool for manipultaing privileges
instead of user manager since it is buggy when run on a 2k client
(haven't tried xp). Works ok on NT4.
(This used to be commit 77c10ff9aa6414a31eece6dfec00793f190a9d6c)
|