summaryrefslogtreecommitdiff
path: root/source3/rpc_server/srv_samr_nt.c
AgeCommit message (Collapse)AuthorFilesLines
2009-04-20Merge commit 'origin/master' into libcli-auth-merge-without-netlogondAndrew Bartlett1-360/+265
2009-04-20Convert the domain handles to type-safe policy handlesVolker Lendecke1-283/+197
2009-04-19Make force_flush_samr_cache use a dom_sid to find what to flushVolker Lendecke1-16/+18
2009-04-19Remove flag "builtin_domain" from disp_infoVolker Lendecke1-9/+5
2009-04-19Remove flag "builtin_domain" from samr_infoVolker Lendecke1-6/+3
2009-04-19Make get_samr_info_by_sid use recent coding conventionsVolker Lendecke1-9/+5
2009-04-19Add "uint32_t access_granted" to policy handlesVolker Lendecke1-36/+27
All policy handles have a mask of allowed operations attached that were calculated at creation time, so they should carry this mask. This is the basis for consolidating all our policy handle access checks. If you want to do your own more complicated access checks further down, just pass "0" to policy_handle_find.
2009-04-18Convert the samr connect_handles to type-safe callsVolker Lendecke1-23/+37
2009-04-17s3-samr: set the builtin_domain bool flag in get_samr_dispinfo_by_sid().Günther Deschner1-0/+2
Volker, please check. Found by torture test RPC-SAMR-PASSWORDS-PWDLASTSET (which we pass with this fix). Guenther
2009-04-15Fix bug #6089 - Winbind samr_OpenDomain not possible with Samba 3.2.6+Jeremy Allison1-10/+3
What a difference a name makes... :-). Just because something is missnamed SAMR_ACCESS_OPEN_DOMAIN, when it should actually be SAMR_ACCESS_LOOKUP_DOMAIN, don't automatically use it for a security check in _samr_OpenDomain(). Jeremy.
2009-04-14Rework Samba3 to use new libcli/auth code (partial)Andrew Bartlett1-9/+10
This commit is mostly to cope with the removal of SamOemHash (replaced by arcfour_crypt()) and other collisions (such as changed function arguments compared to Samba3). We still provide creds_hash3 until Samba3 uses the credentials code in netlogon server Andrew Bartlett
2009-04-06s3-samr: add support for _samr_Connect3() while planning to pass a s4 ↵Günther Deschner1-10/+19
smbtorture test. Guenther
2009-04-03s3-samr: add support for setting password hashes via samr_SetUserInfo level 21.Günther Deschner1-4/+53
Guenther
2009-03-20s3-samr: try to to fix password_expired flag handling.Günther Deschner1-49/+71
Guenther
2009-03-18s3: remove POLICY_HND.Günther Deschner1-15/+8
Guenther
2009-03-07Shape up pdb_search a bit by making it a talloc ctx with a destructorVolker Lendecke1-48/+46
2009-02-07Fix resume handle for _samr_EnumDomainGroupsVolker Lendecke1-2/+0
2009-01-18Fix some real bugs found by "type-punned" gcc warningsVolker Lendecke1-8/+11
Type-casting does not the right thing if used the way it used to be. The function arguments have not been uint32_t's, but the type cast made the calling routine believe so. Not good... The assignment xxx=account_policy_temp does however type-convert properly, potentially cutting off the top-bits.
2009-01-08Now that all policy_handle free_fn's are just TALLOC_FREE, dump free_fnVolker Lendecke1-29/+21
2009-01-08Make samr_info a talloc context of its ownVolker Lendecke1-14/+15
2009-01-06s3-samr: avoid all init_samr_alias* functions.Günther Deschner1-6/+4
Guenther
2009-01-06s3-samr: avoid all init_samr_group* functions.Günther Deschner1-16/+11
Guenther
2009-01-06s3-samr: avoid all init_samr_Domain* functions.Günther Deschner1-83/+47
Guenther
2009-01-06s3-samr: avoid all init_samr_user* functions.Günther Deschner1-120/+62
Guenther
2009-01-05s3:events: change event_add_timed() prototype to match samba4Stefan Metzmacher1-2/+1
metze
2008-12-10Make the LookupRid access check match LookupName untilJeremy Allison1-1/+1
we know the correct bits to use here. Jeremy.
2008-12-10Fix usrmgr opening a user object as non-root.Jeremy Allison1-1/+1
Jeremy.
2008-12-09s3-samr: a level 18 password set needs to set the pwdlastset as well.Günther Deschner1-0/+4
Guenther
2008-12-05s3-samr: fix samr_SetUserInfo level 18 server-side.Günther Deschner1-16/+46
Guenther
2008-12-05s3-samr: fix samr callers of samr_UserInfo18.Günther Deschner1-2/+4
Guenther
2008-12-05s3-samr: fix SAMR_FIELD_PASSWORD callers.Günther Deschner1-2/+2
Guenther
2008-12-05s3-samr: fix init_samr_user_info2{1,3,5} callers.Günther Deschner1-1/+1
Guenther
2008-12-02s3-samr: simplify _samr_QueryUserInfo a lot and fix some few potential memleaks.Günther Deschner1-167/+37
Guenther
2008-12-02s3-samr: fix samr_SetUserInfo{2} level 23.Günther Deschner1-16/+21
Do not just start decoding/setting passwords when fields_present do not indicate there is a password to be set. Guenther
2008-12-02s3-samr: _samr_EnumDomainUsers always returns a sam array (even w/o users).Günther Deschner1-1/+1
Guenther
2008-12-02s3-samr: refuse do process UserSetInfo with 0 fields_present.Günther Deschner1-0/+12
Guenther
2008-12-02s3-samr: use samr_DomainServerState in client tools.Günther Deschner1-1/+1
Guenther
2008-12-01s3-samr: fix various potential memleaks in samr_SetUserInfo.Günther Deschner1-43/+2
Was there any reason why we did all these individual TALLOC_FREEs ? Guenther
2008-12-01s3-samr: avoid code duplication for identical code in _samr_Connect2, 4 and 5.Günther Deschner1-78/+15
Guenther
2008-12-01s3-samr: modify logging in _samr_Connect2 so that it can be called from ↵Günther Deschner1-4/+16
other calls as well. Guenther
2008-11-27s3-samr: never allow to alter pwdlastset directly.Günther Deschner1-0/+16
Guenther
2008-11-27s3-samr: fix return code for invalid password sets in SetUserInfo.Günther Deschner1-4/+4
Guenther
2008-11-27s3-samr: fix return code for invalid name in _samr_LookupDomain.Günther Deschner1-0/+3
Guenther
2008-11-27s3-samr: avoid enumeration and user creation on builtin domain handle.Günther Deschner1-0/+10
Guenther
2008-11-27s3-samr: support samr_CreateUser as well.Günther Deschner1-10/+20
Guenther
2008-11-27s3-samr: support samr_QueryUserInfo2 as well.Günther Deschner1-10/+15
Guenther
2008-11-27s3-samr: add support for _samr_QueryUserInfo level 5.Günther Deschner1-0/+108
Guenther
2008-11-25s3-samr: fix _samr_LookupNames return code.Günther Deschner1-1/+10
Guenther
2008-11-24Get rid of pipes_struct->pipe_user, we have server_info now --- YESSS!Volker Lendecke1-37/+37
2008-11-10s3-samr-idl: cleanup.Günther Deschner1-0/+3
Guenther