summaryrefslogtreecommitdiff
path: root/source3/rpc_server/srv_samr_nt.c
AgeCommit message (Collapse)AuthorFilesLines
2010-11-10Remove fstring from map_username. Create a more sane interface than the ↵Jeremy Allison1-9/+24
called-parameter-is-modified. Jeremy.
2010-10-22Revert "Wrap security_token_has_privilege() with a check for ↵Jeremy Allison1-5/+5
lp_enable_privileges(). Needed" Not needed - privileges code prevents "enable privileges = no" from adding privileges anyway. This reverts commit a8b95686a7bde3f96f141b6938e24e101567ef54. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 22 23:41:36 UTC 2010 on sn-devel-104
2010-10-22Wrap security_token_has_privilege() with a check for lp_enable_privileges(). ↵Jeremy Allison1-5/+5
Needed to maintain compatibility with smb.conf manpage. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 22 18:15:48 UTC 2010 on sn-devel-104
2010-10-14s3 Replace is_sid_in_token() with security_token_has_sid() from common codeAndrew Bartlett1-3/+3
The two routines are identical, so there is no need to keep both. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-12libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett1-1/+1
This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
2010-10-07samr: for correctness, rename samr_RidTypeArray to samr_RidAttrArray.Günther Deschner1-3/+3
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Oct 7 12:04:32 UTC 2010 on sn-devel-104
2010-10-07s3-samr: fix _samr_QueryGroupMember().Günther Deschner1-2/+5
that array contains attributes, not sid types. Guenther
2010-10-03s3: Remove talloc_autofree_context() from srv_samr_nt.cVolker Lendecke1-4/+2
The dispinfo structs need to survive within a process across pipe opens, but they don't have a special destructor
2010-09-23s3-dcerpc: finally remove the legaqcy spnego_type variable from pipe_auth_dataSimo Sorce1-2/+2
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-20s3-util: use shared dom_sid_dup.Günther Deschner1-2/+2
Guenther
2010-09-20s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.Günther Deschner1-1/+2
Guenther
2010-09-11s3-samr Explian better the use of two privileges in this callAndrew Bartlett1-0/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Rework access_check_object() to take two privilegesAndrew Bartlett1-60/+51
This allows the privileges bitmap to be used only when setting privileges, and uses an the LUID constant for all 'does this user have this privilege' operations. The advantage is that we now only need one API to determine if a token has a privilege, and much less code needs to know what type is used for the underlying bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Convert from user_has_privileges() -> security_token_has_privilege()Andrew Bartlett1-1/+1
This new call is available in the merged privileges code, and takes an enum as the parameter, rather than a bitmask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3:auth Remove NT_USER_TOKENAndrew Bartlett1-2/+2
The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Further changes to remove SE_PRIVAndrew Bartlett1-6/+6
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-08-27s3: Pass rhost through to smb_pam_passchangeVolker Lendecke1-7/+21
2010-08-25s3-lsa: separate out init_lsa headers.Günther Deschner1-0/+1
Guenther
2010-08-17s3-samr: Correctly fix the transition from enum to uint32_t.Andreas Schneider1-1/+5
What type an enum is depends on the implementation, the compiler and probably the compiler options. sizeof(enum) is normally not sizeof(int)!
2010-08-17s3-samr: Fixed some build warnings.Andreas Schneider1-3/+3
2010-08-05s3-secrets: only include secrets.h when needed.Günther Deschner1-0/+1
Guenther
2010-07-28s3-dcerpc: Use dcerpc_AuthType in pipe_auth_dataSimo Sorce1-1/+3
2010-07-28s3-samr: Use struct pipes_struct.Andreas Schneider1-69/+69
2010-07-13s3-dceprc: Store opnum in its own variableSimo Sorce1-1/+1
Signed-off-by: Günther Deschner <gd@samba.org>
2010-07-05samr.idl:UserInfo structures - fix some names according to MS-SAMR documentationMatthias Dieter Wallnöfer1-1/+1
See MS-SAMR section "FULL IDL"
2010-06-10s3:misc make use of server_[event/messaging]_context directlyAndreas Schneider1-1/+1
Untangle these functions from smbd specific dependencies so they can be freely used in multiple servers.
2010-06-03s3-security: use shared "Standard access rights.".Günther Deschner1-8/+8
Guenther
2010-05-31s3:smbd map_username() doesn't need sconn anymoreSimo Sorce1-6/+3
Signed-off-by: Andreas Schneider <asn@samba.org>
2010-05-31s3-samr: give the system user a free pass for _samr_QueryUserInfo{2} level 18.Günther Deschner1-0/+5
Guenther
2010-05-28s3-samr: Fix crash bug in _samr_QueryUserInfo{2} level 18.Günther Deschner1-4/+13
Guenther
2010-05-21s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett1-25/+25
This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-18s3-passdb: move get_logon_hours_from_pdb() into samr server.Günther Deschner1-0/+26
Guenther
2010-05-18s3-secdesc: remove "typedef struct security_descriptor SEC_DESC".Günther Deschner1-9/+9
Guenther
2010-05-18s3-secdesc: remove "typedef struct security_acl SEC_ACL".Günther Deschner1-2/+2
Guenther
2010-05-18s3-secdesc: remove "typedef struct security_ace SEC_ACE".Günther Deschner1-1/+1
Guenther
2010-05-18s3-crypto: only include crypto headers when crypto is done.Günther Deschner1-0/+1
Guenther
2010-05-18s3-samr: move samr helper prototypes outside of proto.hGünther Deschner1-0/+1
Guenther
2010-05-18s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner1-5/+5
Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
2010-04-19s3-spoolss: fix samr_ValidatePassword_Change.Günther Deschner1-1/+1
Guenther
2010-04-17s3: Slightly simpify samr_ValidatePassword_ResetVolker Lendecke1-12/+13
2010-04-17s3: Slightly simpify samr_ValidatePassword_ChangeVolker Lendecke1-12/+13
2010-01-10s3: Use sid_check_is_domain instead of a direct sid_equalVolker Lendecke1-3/+6
2010-01-10s3: Replace most calls to sid_append_rid() by sid_compose()Volker Lendecke1-4/+4
2009-12-15s3: Fix _samr_GetAliasMembership for results with 0 ridsVolker Lendecke1-0/+8
2009-11-26s3-rpc: Avoid including every pipe's client and server stubs everywhere in ↵Günther Deschner1-0/+1
samba. Guenther
2009-11-10s3-samr: implement _samr_ValidatePassword().Günther Deschner1-10/+118
Guenther
2009-10-19Fix typo.Karolin Seeger1-2/+2
privilage -> privilege Karolin
2009-10-16s3:srv_samr_nt - another fix for the reject reasonMatthias Dieter Wallnöfer1-1/+1
2009-10-08s3/s4 - Adapt the IDL changes on various locationsMatthias Dieter Wallnöfer1-3/+4
2009-09-15s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.Günther Deschner1-1/+1
Guenther