summaryrefslogtreecommitdiff
path: root/source3/rpc_server/srv_lsa_nt.c
AgeCommit message (Collapse)AuthorFilesLines
2009-06-23s3-lsa: Fix error path in _lsa_EnumAccountRights.Günther Deschner1-2/+11
This needs to return NT_STATUS_OBJECT_NAME_NOT_FOUND again as described in MS-LSAD 3.1.4.5.10 and tested with the RPC-SAMR-USER-PRIVILEGES test. Guenther
2009-06-16_lsa_EnumAccountRights and _lsa_EnumPrivsAccount can return anJeremy Allison1-19/+17
empty set of privilages if the SID doesn't have any. (From [MS-LSAD.pdf]) Jeremy.
2009-06-08s3-lsa: remove old code that we cannot even compile anymore.Günther Deschner1-111/+0
Guenther
2009-05-20Add a security model to LSA. Similar to the SAMR code - usingJeremy Allison1-88/+227
the MS-LSA docs. Jeremy.
2009-05-18Change access_check_samr_object -> access_check_object.Jeremy Allison1-15/+9
Make map_max_allowed_access global. Change lsa_get_generic_sd to add Everyone:LSA_POLICY_READ|LSA_POLICY_EXECUTE, not just LSA_POLICY_EXECUTE. Jeremy.
2009-05-19s3-lsa: let _lsa_OpenPolicy() just call _lsa_OpenPolicy2().Günther Deschner1-37/+6
Guenther
2009-05-18s3-lsa: let _lsa_GetSystemAccessAccount() call into _lsa_EnumPrivsAccount().Günther Deschner1-3/+23
Inspired by lsa server from Samba 4. Just removing a user in SAMR does not remove a user in LSA. If you use usermanager from windows, the "User Rights" management gui gets unaccessable as soon as you delete a user that had privileges granted. With this fix, that no longer existing user would properly appear as an unknown account in the GUI (as it does while using usermanager with windows domains). This almost makes Samba3 pass the RPC-SAMR-USERS-PRIVILEGES test. Guenther
2009-05-18s3-lsa: start a very basic implementation of _lsa_DeleteObject().Günther Deschner1-1/+23
Certainly not the full story but this gets us closer to pass the RPC-SAMR-USERS-PRIVILEGES test. Guenther
2009-05-11s3-lsa: Fix _lsa_LookupNames2() server implementation which always returned ↵Günther Deschner1-0/+1
a NULL sid_array since 3.2.0. Found by torture test. This makes it possible to search for users while adding them to groups via windows usermanager. Guenther
2009-04-30s3-lsa: use LSA_POLICY_MODE flags in _lsa_GetSystemAccessAccount().Günther Deschner1-1/+2
Guenther
2009-04-16s3-lsa: Fix Bug #6263. Unexpected LookupSids reply crashes XP pre-SP3.Günther Deschner1-1/+9
LookupSids needs to bounce back string sids in case of NT_STATUS_NONE_MAPPED. Guenther (cherry picked from commit 1c9266c8caa59e287b993393b6050732a0b33547)
2009-04-02s3-lsa: use LSA_ROLE definitions in _lsa_QueryInfoPolicy().Günther Deschner1-2/+2
Guenther
2009-04-02s3-lsa: don't SAFE_FREE talloced structs.Günther Deschner1-2/+2
Guenther
2009-03-24Fix bug 6097Volker Lendecke1-0/+4
A client sent a SID with authority 0 and 0 sub-authorities. W2k3 replies with NT_STATUS_INVALID_SID, even if other SIDs in the list are valid. Thanks to Pavel <wylda@volny.cz> for the bug report!
2009-01-08Now that all policy_handle free_fn's are just TALLOC_FREE, dump free_fnVolker Lendecke1-17/+8
2009-01-08Use TALLOC for struct lsa_infoVolker Lendecke1-11/+13
2009-01-06s3-lsa: avoid all init_lsa* functions.Günther Deschner1-3/+7
Guenther
2008-11-24Get rid of pipes_struct->pipe_user, we have server_info now --- YESSS!Volker Lendecke1-17/+25
2008-10-31Unify se_access_check with the S4 code. Will makeJeremy Allison1-2/+4
calculation of SEC_FLAG_MAXIMUM_ALLOWED much easier for files. Jeremy.
2008-10-27s4-lsa: merge lsa_LookupSids/{2,3} from s3 lsa idl.Günther Deschner1-3/+5
Guenther
2008-10-21s3-build: fix the build.Günther Deschner1-2/+2
Guenther
2008-10-21s3-lsa-server: fix _lsa_GetUserName.Günther Deschner1-8/+21
Guenther
2008-10-17Unify access checks for lsa server functions.Jeremy Allison1-4/+17
Jeremy.
2008-10-15s3: fix s3 lsa server.Günther Deschner1-2/+2
Guenther
2008-10-09Remove SEC_ACCESS. It's a uint32_t.Jeremy Allison1-7/+3
Jeremy.
2008-07-18Fix typos.Karolin Seeger1-14/+14
the user have -> has Karolin (This used to be commit 1ee2ad1051e6076709ef8ed2f45bebff10b0c3cf)
2008-06-26Remove p->vuidVolker Lendecke1-7/+3
The users can use p->server_info. Now pipes_struct is decoupled from the SMB transport. (This used to be commit d4cf5a131919530317cd457006b4df5af2c69fa7)
2008-06-16Fix bug 5500 -- thanks to mathion at thorrovydeti.com for reportingVolker Lendecke1-0/+2
(cherry picked from commit 996c3ce6f0dbe79b0679ae30afd873c24fe5b1eb) (This used to be commit 1f86c7a2a19e66948c9b51572d3c078b6e03ef52)
2008-05-05Remove "userdom_struct user" from "struct user_struct"Volker Lendecke1-2/+2
(This used to be commit 420de035237bb08bc470c9eb820f3da2edaa6805)
2008-05-05Remove "guest" from "struct user_struct"Volker Lendecke1-1/+1
(This used to be commit 570a6b80feb5b0dc23213ba936c721e766cd4818)
2008-03-04Fix counter mismatch in lsa_LookupNames3 server.Günther Deschner1-2/+2
Guenther (This used to be commit e052d6f2c82a644986e5d99f640310d71cd5c396)
2008-03-04Fix counter mismatch in lsa_LookupNames server.Günther Deschner1-2/+2
Guenther (This used to be commit 80fd085c34befd38d33cf6e59080a2a36016a92d)
2008-03-04Fix lsa_QueryInfoPolicy: make proper talloc copies of the sids.Günther Deschner1-4/+11
Guenther (This used to be commit b9441232d66d78e66464be6c9748a023681ce6ca)
2008-03-04Zero more structs initially in LSA rpc server.Günther Deschner1-0/+4
Guenther (This used to be commit d7ce643285276790a65faff76666498595a508d7)
2008-03-03Zero out the out policy handler in lsa_CloseVolker Lendecke1-0/+1
... after a REALLY long session staring at sniffs we can now join XP to v3-2-test again... Apparently not doing this makes XP keep an internal handle to LSA open which confuses the hell out of it. Karolin, this needs to be in v3-2-stable :-) Volker (This used to be commit 2c42fc21d8bede226e411623aecd69038477373b)
2008-02-27Add my copyright.Günther Deschner1-0/+1
Guenther (This used to be commit d078a8757182d84dfd3307a2e1b751cf173aaa97)
2008-02-27Move LSA_AUDIT_NUM_CATEGORIES defines to lsa rpc_server.Günther Deschner1-0/+4
Guenther (This used to be commit 9e7d32e28ce40ff158f3705354e8673f99b462bc)
2008-02-27Use new LSA_POLICY defines in lsa rpc server code and other places.Günther Deschner1-24/+24
Guenther (This used to be commit 58cca9faf9db506bd2f6eab4a99ef85153797ab2)
2008-02-19Remove unused marshalling for LSA_LOOKUP_SIDS/2/3.Günther Deschner1-101/+0
This also removes parse_lsa.c entirely. Guenther (This used to be commit f802ba035c95e63c5a6ff9f2fb484d62341cd1a7)
2008-02-19Use pidl for _lsa_LookupSids, _lsa_LookupSids2 and _lsa_LookupSids3.Günther Deschner1-111/+118
Guenther (This used to be commit b1609801e4443a3efbc29873477ad335d0241be4)
2008-02-18Remove unused marshalling for LSA_LOOKUP_NAMES/2/3/4Günther Deschner1-76/+0
Guenther (This used to be commit 6458ef3977b60f24b87eb88cf870a9f23929ca85)
2008-02-18Use pidl for _lsa_LookupNames3 and _lsa_LookupNames4.Günther Deschner1-101/+75
Guenther (This used to be commit 4e310a19f12ba7034f33247dca0a9e7a10aa98b7)
2008-02-18Use pidl for _lsa_LookupNames() and _lsa_LookupNames2().Günther Deschner1-109/+121
Hopefully I didn't screw this up. Please check :) Guenther (This used to be commit 01b733f10c1645668f2aea2841bbdc64b4bd5c51)
2008-02-14Use pidl for _lsa_RemoveAccountRights.Günther Deschner1-25/+12
Guenther (This used to be commit 39f8508f5d978a936779fdfd51b90fec4faa4301)
2008-02-14Use pidl for _lsa_EnumAccountRights().Günther Deschner1-16/+51
Guenther (This used to be commit cb6a84712cf91d104206356f0ac256a071868d66)
2008-02-14Use pidl for _lsa_AddAccountRights().Günther Deschner1-24/+10
Guenther (This used to be commit 253cf1523871f2218e9e59b0a01f47b8bc745ac9)
2008-02-14Use pidl for _lsa_AddPrivilegesToAccount and _lsa_RemovePrivilegesFromAccount.Günther Deschner1-23/+14
Guenther (This used to be commit 0c9904864b5c3b893f99abdebb18d9624aa0f560)
2008-02-14Use pidl for _lsa_LookupPrivValue().Günther Deschner1-14/+8
Guenther (This used to be commit 87dc2471d1c2a5be17604399d4f684193a6bba38)
2008-02-14Remove white space.Günther Deschner1-60/+60
Guenther (This used to be commit a33ed085094b200e153939cb1b02e567f07b1e50)
2008-02-14Use pidl for _lsa_EnumPrivsAccount().Günther Deschner1-14/+39
Guenther (This used to be commit d7655932a7cb436f1ee44e443882e2f06d598aa0)
generated by cgit (git 2.34.1) at 2024-12-03 08:48:51 +0000