summaryrefslogtreecommitdiff
path: root/source3/rpc_server/lsa
AgeCommit message (Collapse)AuthorFilesLines
2011-07-20s3-auth Remove seperate guest booleanAndrew Bartlett1-1/+1
Instead, we base our guest calculations on the presence or absense of the authenticated users group in the token, ensuring that we have only one canonical source of this important piece of authorization data Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-20s3-auth use auth_user_info not netr_SamInfo3 in auth3_session_infoAndrew Bartlett1-1/+1
This makes auth3_session_info identical to auth_session_info The logic to convert the info3 to a struct auth_user_info is essentially moved up the stack from the named pipe proxy in source3/rpc_server to create_local_token(). Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-20s3-auth Use guest boolean in auth_user_info_unixAndrew Bartlett1-1/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-20s3-auth Use struct auth_user_info_unix for unix_name and sanitized_usernameAndrew Bartlett1-1/+1
This is closer to the layout of struct auth_session_info in auth.idl Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-20s3-auth Use *unix_token rather than utok in struct auth3_session_infoAndrew Bartlett1-6/+6
This brings this structure one step closer to the struct auth_session_info. A few SMB_ASSERT calls are added in some key places to ensure that this pointer is initialised, to make tracing any bugs here easier in future. NOTE: Many of the users of this structure should be reviewed, as unix and NT access checks are mixed in a way that should just be done using the NT ACL. This patch has not changed this behaviour however. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-15lsa: lsa_CreateTrustedDomainEx takes lsa_TrustDomainInfoAuthInfo, notGünther Deschner1-1/+4
lsa_TrustDomainInfoAuthInfoInternal. Guenther
2011-07-15lsa: rename auth info argument in lsa_CreateTrustedDomainEx2Günther Deschner1-5/+5
Guenther
2011-06-09s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array()Andrew Bartlett1-8/+8
Using the standard macro makes it easier to move code into common, as TALLOC_ZERO_ARRAY isn't standard talloc.
2011-06-09s3-talloc Change TALLOC_ZERO_P() to talloc_zero()Andrew Bartlett1-9/+9
Using the standard macro makes it easier to move code into common, as TALLOC_ZERO_P isn't standard talloc.
2011-06-09s3-talloc Change TALLOC_P() to talloc()Andrew Bartlett1-2/+2
Using the standard macro makes it easier to move code into common, as TALLOC_P isn't standard talloc.
2011-06-09s3-talloc Change TALLOC_ARRAY() to talloc_array()Andrew Bartlett1-4/+4
Using the standard macro makes it easier to move code into common, as TALLOC_ARRAY isn't standard talloc.
2011-06-09s3-talloc Change TALLOC_REALLOC_ARRAY() to talloc_realloc()Andrew Bartlett1-1/+1
Using the standard macro makes it easier to move code into common, as TALLOC_REALLOC_ARRAY isn't standard talloc. Andrew Bartlett
2011-05-18s3-lib Replace StrCaseCmp() with strcasecmp_m()Andrew Bartlett1-4/+4
strcasecmp_m() never needs to call to talloc, and via next_codepoint() still has an ASCII fast-path bypassing iconv() calls. Andrew Bartlett
2011-05-02s3: include ntdomain.h before including generated srv_ headers.Günther Deschner1-1/+1
Guenther
2011-04-05s3-auth Rename user_session_key -> session_key to match auth_session_infoAndrew Bartlett1-1/+1
2011-03-30s3: Fix Coverity ID 2332: MISSING_BREAKVolker Lendecke1-0/+1
2011-03-30s3-rpc_server: move access check functions out of samr server.Günther Deschner1-0/+1
Guenther
2011-03-30s3: only include lib/privileges.h where needed.Günther Deschner1-0/+1
This finally removes the global lsa.h inclusion. Guenther
2011-03-30s3-includes: only include ntdomain.h where needed.Günther Deschner1-0/+1
Guenther
2011-03-30s3-auth: rpc_server needs auth.hGünther Deschner1-0/+1
Guenther
2011-03-30s3-passdb: add passdb.h where needed.Günther Deschner1-0/+1
Guenther
2011-03-27s3: Fix Coverity ID 2327: FORWARD_NULLVolker Lendecke1-0/+2
Make check_ft_info robust against an invalid type. Günther, please check!
2011-03-24charcnv: removed the allow_badcharcnv and allow_bad_conv options to ↵Andrew Tridgell1-2/+1
convert_string*() we shouldn't accept bad multi-byte strings, it just hides problems Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Mar 24 01:47:26 CET 2011 on sn-devel-104
2011-03-16s3: Fix Coverity ID 2213, PASS_BY_VALUEVolker Lendecke1-6/+6
There's little point to pass a copy of this structure on the stack. Günther, please check!
2011-03-16s3: Fix Coverity ID 1012, CHECKED_RETURNVolker Lendecke1-6/+5
This is probably more or less taste. Removing the necessity for a comment is a good thing though IMO.
2011-03-16s3: Fix Coverity ID 1013, CHECKED_RETURNVolker Lendecke1-6/+5
This is probably more or less taste. Removing the necessity for a comment is a good thing though IMO.
2011-03-03s3: Use dom_sid_string in _lsa_lookup_sids_internalVolker Lendecke1-4/+1
2011-02-22s3-auth Rename auth_serversupplied_info varaiables: server_info -> session_infoAndrew Bartlett1-23/+23
These variables, of type struct auth_serversupplied_info were poorly named when added into 2001, and in good consistant practice, this has extended all over the codebase in the years since. The structure is also not ideal for it's current purpose. Originally intended to convey the results of the authentication modules, it really describes all the essential attributes of a session. This rename will reduce the volume of a future patch to replaced these with a struct auth_session_info, with auth_serversupplied_info confined to the lower levels of the auth subsystem, and then eliminated. (The new structure will be the output of create_local_token(), and the change in struct definition will ensure that this is always run, populating local groups and privileges). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-02-21s3-lsa: fix some uninitialized variables in our lsa server.Günther Deschner1-3/+3
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon Feb 21 18:47:30 CET 2011 on sn-devel-104
2011-02-17s3-lsa: support trust objects in _lsa_QuerySecurity().Günther Deschner1-0/+1
Guenther
2011-02-17s3-lsa: in _lsa_QuerySecurity() query the sd from the lsa policy handle.Günther Deschner1-6/+4
Guenther
2011-02-17s3-lsa: only proceed in _lsa_EnumTrustedDomainsEx when backend has trusted ↵Günther Deschner1-0/+9
domain support. Guenther
2011-02-16s3-ipasam: Add aliases for trusted domain userSumit Bose1-1/+3
Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Feb 16 12:58:13 CET 2011 on sn-devel-104
2011-02-16s3-lsa: Implement lsaRSetForestTrustInformationSumit Bose1-2/+499
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: Add and remove trusted domain accountSumit Bose1-5/+111
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: fix return code of _lsa_QueryTrustedDomainInfoByName()Sumit Bose1-0/+3
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: Extract auth info from trustDomainPasswordsSumit Bose1-6/+51
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: Use pdb_get_trusted_domain_by_sid in _lsa_QueryTrustedDomainInfo()Sumit Bose1-11/+9
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: fix lsa_QueryTrustedDomainInfoSumit Bose1-6/+1
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_OpenTrustedDomainByName().Günther Deschner1-7/+30
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_OpenTrustedDomain().Günther Deschner1-1/+77
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: Implement _lsa_EnumTrustedDomainsEx()Sumit Bose1-2/+67
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_CloseTrustedDomainEx().Günther Deschner1-7/+10
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_QueryTrustedDomainInfoByName().Günther Deschner1-7/+38
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_QueryTrustedDomainInfoBySid().Günther Deschner1-7/+38
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_QueryTrustedDomainInfo().Günther Deschner1-7/+139
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: make _lsa_DeleteTrustedDomain() use pdb_del_trusted_domain().Sumit Bose1-2/+3
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: implement _lsa_DeleteTrustedDomain().Günther Deschner1-7/+38
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: make lsa_lookup_trusted_domain_by_name() use pdb_get_trusted_domain().Sumit Bose1-4/+7
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16s3-lsa: add lsa_lookup_trusted_domain_by_name and ↵Günther Deschner1-0/+60
lsa_lookup_trusted_domain_by_sid. Guenther Signed-off-by: Günther Deschner <gd@samba.org>
generated by cgit (git 2.34.1) at 2024-11-17 21:48:31 +0000