summaryrefslogtreecommitdiff
path: root/source3/lib
AgeCommit message (Collapse)AuthorFilesLines
2010-09-11s3-privs Convert from user_has_privileges() -> security_token_has_privilege()Andrew Bartlett1-2/+2
This new call is available in the merged privileges code, and takes an enum as the parameter, rather than a bitmask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Remove a pointer from grant_privilege()Andrew Bartlett1-7/+7
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Remove a pointer indirection from revoke_privilege()Andrew Bartlett1-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Inline dump_se_priv into callers now that it's just a uint64_tAndrew Bartlett1-10/+6
The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Move source3/ privileges implmentation into commonAndrew Bartlett1-458/+0
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Rename structure elements for greater clarityAndrew Bartlett1-9/+9
It is important to make clear which is the LUID and which is the Samba-only bitmap mask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs More clarity in variable namesAndrew Bartlett1-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Rename mask -> privilege_mask to be more clearAndrew Bartlett1-26/+26
After SE_PRIV was removed, it became less clear what these parameters were for. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3:auth Remove NT_USER_TOKENAndrew Bartlett5-14/+14
The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-auth Change struct nt_user_token -> struct security_tokenAndrew Bartlett2-7/+7
This common structure is defined in security.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-auth Change type of num_sids to uint32_tAndrew Bartlett3-7/+7
size_t is overkill here, and in struct security_token in the num_sids is uint32_t. This includes a change to the prototype of add_sid_to_array() and add_sid_to_array_unique(), which has had a number of consequnetial changes as I try to sort out all the callers using a pointer to the number of sids. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Only store low bits of luid in privileges tableAndrew Bartlett1-17/+19
Samba only uses the low bits, and this makes the code simpler. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11privs Add my CopyrightAndrew Bartlett1-0/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Remove comment already moved to security.idlAndrew Bartlett1-41/+0
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Use constants from security.idlAndrew Bartlett1-9/+9
The values in security.idl have been updated to match these. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Further changes to remove SE_PRIVAndrew Bartlett1-48/+48
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3:privs Change to new host endian neutral privilages tdb formatAndrew Bartlett1-3/+16
These values are stored in account_policy.tdb, and the old format, using a 128 bit bitmap was not endian neutral. The previous endian-dependent format was introduced in 46e5effea948931509283cb84b27007d34b521c8 replacing a 32 bit number which was used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3:Change SE_PRIV to uint64_tAndrew Bartlett1-20/+20
This removes the SE_PRIV typedef Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3:privileges Change SE_PRIV to be just a uint64_tAndrew Bartlett1-24/+5
We don't need 128 possible privileges here, as we only use 12. This reverts some of 46e5effea948931509283cb84b27007d34b521c8 by Jerry back in 2005, where he introduced the SE_PRIV structure to replace the uint32_t used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-09Fox missing SMB_MALLOC return checks noticed by "Andreas Moroder ↵Jeremy Allison2-0/+13
<andreas.moroder@gmx.net>". Jeremy.
2010-09-08Fix warnings caused by double ";;" at the end of the time_mono() fixes.Jeremy Allison1-3/+3
2010-09-08s3/ldap: use monotonic clock for timeouts in smbldapBjörn Jacke1-17/+23
tevent would need monotonic clock features to make also smbldap's idle handling aware of backward clock jumps. Other areas in smbldap are clock jump save now.
2010-09-02s3-param: added lp_set_cmdline() and --option= parameterAndrew Tridgell1-0/+10
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-01s3-ctdb: ctdbd_init_connection() is static to this file.Günther Deschner1-8/+0
Guenther
2010-08-31s3: messaging_ctdbd_connection() was only called with procid_self()Volker Lendecke4-18/+12
Eventually we'll get this right...
2010-08-31s3: messaging_ctdbd_init potentially modifies my_vnnVolker Lendecke1-0/+1
If we call messaging_ctdbd_connection() we end up with the wrong vnn in our messaging context. This is a bit of a hack, get_my_vnn() needs to go eventually along with procid_self()
2010-08-31s3: Make ctdbd_init_connection staticVolker Lendecke1-2/+2
2010-08-31s3: use monotonic time in timeout of sys_select_intr()Björn Jacke1-10/+11
2010-08-31s3: use clock_gettime() in timespec_current()Björn Jacke1-4/+1
2010-08-31s3-auth Rename NT_USER_TOKEN privileges -> privilege_maskAndrew Bartlett2-6/+6
This is closer to the struct security_token from security.idl Andrew Bartlett
2010-08-31s3-auth Rename NT_USER_TOKEN user_sids -> sidsAndrew Bartlett2-10/+10
This is closer to the struct security_token from security.idl
2010-08-29s3: Remove smbd_server_fd()Volker Lendecke1-5/+0
This breaks the perfcol_onefs() build. Tim, Steve, this use of smbd_server_fd is replacable by calls into substitute.c. I don't have a onefs environment around to build a fix, so I've decided to insert an #error, making it not compile. The fix should be pretty obvious, you can get the socket data via "%I" and "%i" substitutions.
2010-08-29s3: Set the client_id in substitute.c onceVolker Lendecke1-12/+33
This never changes during a client connection's life, so we can set it once.
2010-08-28s3: Fix a (highly unlikly) memleak in set_local_machine_name()Volker Lendecke1-4/+4
2010-08-28s3: Fix some DEBUGsVolker Lendecke1-2/+2
2010-08-28s3: Remove smbd_server_fd() from set_local_machine_name()Volker Lendecke1-15/+0
2010-08-28s3: Fix a typoVolker Lendecke1-1/+1
2010-08-28s3: Remove the dependency of g_lock on procid_selfVolker Lendecke1-9/+13
procid_self() references global vars, don't depend on them unnecessarily
2010-08-26s3-build: use talloc_dict.h only where needed.Günther Deschner1-0/+1
Guenther
2010-08-26s3-build: use dbwrap.h only where needed.Günther Deschner11-0/+11
Guenther
2010-08-26s3-build: only include krb5 environment variables where required.Günther Deschner1-0/+1
Guenther
2010-08-26s3-build: only include libnscd.h where needed.Günther Deschner1-0/+4
Guenther
2010-08-26s3-idmap: only include idmap headers where needed.Günther Deschner2-0/+11
Guenther
2010-08-26s3-build: only include nsswitch header where needed.Günther Deschner1-0/+1
Guenther
2010-08-26s3-build: only include memcache.h where needed.Günther Deschner3-0/+3
Guenther
2010-08-25s3-lsa: separate out init_lsa headers.Günther Deschner5-0/+5
Guenther
2010-08-25s3:smbd: add a nfs backend for sysquotas.Michael Adam2-0/+274
This module is based on the Solaris/FreeBSD implementation of NFS quotas in the quotas.c module. It implements the SMB_USER_QUOTA_TYPE query of the get_quotas call. The other types and the set_quota call are not implemented.
2010-08-22s3: Fix some nonemtpy blank linesVolker Lendecke1-2/+2
2010-08-22s3: Move check_access to cgi.c, its only userVolker Lendecke1-81/+0
2010-08-22s3: Replace calls to check_access by allow_accessVolker Lendecke1-0/+4
We already have both the name and address of the client stored now