Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-11-10 | Remove fstring from map_username. Create a more sane interface than the ↵ | Jeremy Allison | 1 | -9/+24 | |
called-parameter-is-modified. Jeremy. | |||||
2010-10-22 | Revert "Wrap security_token_has_privilege() with a check for ↵ | Jeremy Allison | 1 | -5/+5 | |
lp_enable_privileges(). Needed" Not needed - privileges code prevents "enable privileges = no" from adding privileges anyway. This reverts commit a8b95686a7bde3f96f141b6938e24e101567ef54. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 22 23:41:36 UTC 2010 on sn-devel-104 | |||||
2010-10-22 | Wrap security_token_has_privilege() with a check for lp_enable_privileges(). ↵ | Jeremy Allison | 1 | -5/+5 | |
Needed to maintain compatibility with smb.conf manpage. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 22 18:15:48 UTC 2010 on sn-devel-104 | |||||
2010-10-14 | s3 Replace is_sid_in_token() with security_token_has_sid() from common code | Andrew Bartlett | 1 | -3/+3 | |
The two routines are identical, so there is no need to keep both. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-10-12 | libcli/security Provide a common, top level libcli/security/security.h | Andrew Bartlett | 1 | -1/+1 | |
This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104 | |||||
2010-10-07 | samr: for correctness, rename samr_RidTypeArray to samr_RidAttrArray. | Günther Deschner | 1 | -3/+3 | |
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Oct 7 12:04:32 UTC 2010 on sn-devel-104 | |||||
2010-10-07 | s3-samr: fix _samr_QueryGroupMember(). | Günther Deschner | 1 | -2/+5 | |
that array contains attributes, not sid types. Guenther | |||||
2010-10-03 | s3: Remove talloc_autofree_context() from srv_samr_nt.c | Volker Lendecke | 1 | -4/+2 | |
The dispinfo structs need to survive within a process across pipe opens, but they don't have a special destructor | |||||
2010-09-23 | s3-dcerpc: finally remove the legaqcy spnego_type variable from pipe_auth_data | Simo Sorce | 1 | -2/+2 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-09-20 | s3-util: use shared dom_sid_dup. | Günther Deschner | 1 | -2/+2 | |
Guenther | |||||
2010-09-20 | s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions. | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2010-09-11 | s3-samr Explian better the use of two privileges in this call | Andrew Bartlett | 1 | -0/+4 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Rework access_check_object() to take two privileges | Andrew Bartlett | 1 | -60/+51 | |
This allows the privileges bitmap to be used only when setting privileges, and uses an the LUID constant for all 'does this user have this privilege' operations. The advantage is that we now only need one API to determine if a token has a privilege, and much less code needs to know what type is used for the underlying bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Convert from user_has_privileges() -> security_token_has_privilege() | Andrew Bartlett | 1 | -1/+1 | |
This new call is available in the merged privileges code, and takes an enum as the parameter, rather than a bitmask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3:auth Remove NT_USER_TOKEN | Andrew Bartlett | 1 | -2/+2 | |
The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Further changes to remove SE_PRIV | Andrew Bartlett | 1 | -6/+6 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-08-27 | s3: Pass rhost through to smb_pam_passchange | Volker Lendecke | 1 | -7/+21 | |
2010-08-25 | s3-lsa: separate out init_lsa headers. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-08-17 | s3-samr: Correctly fix the transition from enum to uint32_t. | Andreas Schneider | 1 | -1/+5 | |
What type an enum is depends on the implementation, the compiler and probably the compiler options. sizeof(enum) is normally not sizeof(int)! | |||||
2010-08-17 | s3-samr: Fixed some build warnings. | Andreas Schneider | 1 | -3/+3 | |
2010-08-05 | s3-secrets: only include secrets.h when needed. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-07-28 | s3-dcerpc: Use dcerpc_AuthType in pipe_auth_data | Simo Sorce | 1 | -1/+3 | |
2010-07-28 | s3-samr: Use struct pipes_struct. | Andreas Schneider | 1 | -69/+69 | |
2010-07-13 | s3-dceprc: Store opnum in its own variable | Simo Sorce | 1 | -1/+1 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-07-05 | samr.idl:UserInfo structures - fix some names according to MS-SAMR documentation | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
See MS-SAMR section "FULL IDL" | |||||
2010-06-10 | s3:misc make use of server_[event/messaging]_context directly | Andreas Schneider | 1 | -1/+1 | |
Untangle these functions from smbd specific dependencies so they can be freely used in multiple servers. | |||||
2010-06-03 | s3-security: use shared "Standard access rights.". | Günther Deschner | 1 | -8/+8 | |
Guenther | |||||
2010-05-31 | s3:smbd map_username() doesn't need sconn anymore | Simo Sorce | 1 | -6/+3 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-05-31 | s3-samr: give the system user a free pass for _samr_QueryUserInfo{2} level 18. | Günther Deschner | 1 | -0/+5 | |
Guenther | |||||
2010-05-28 | s3-samr: Fix crash bug in _samr_QueryUserInfo{2} level 18. | Günther Deschner | 1 | -4/+13 | |
Guenther | |||||
2010-05-21 | s3:dom_sid Global replace of DOM_SID with struct dom_sid | Andrew Bartlett | 1 | -25/+25 | |
This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-05-18 | s3-passdb: move get_logon_hours_from_pdb() into samr server. | Günther Deschner | 1 | -0/+26 | |
Guenther | |||||
2010-05-18 | s3-secdesc: remove "typedef struct security_descriptor SEC_DESC". | Günther Deschner | 1 | -9/+9 | |
Guenther | |||||
2010-05-18 | s3-secdesc: remove "typedef struct security_acl SEC_ACL". | Günther Deschner | 1 | -2/+2 | |
Guenther | |||||
2010-05-18 | s3-secdesc: remove "typedef struct security_ace SEC_ACE". | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-05-18 | s3-crypto: only include crypto headers when crypto is done. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-05-18 | s3-samr: move samr helper prototypes outside of proto.h | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-05-18 | s3-rpc_misc: clean out include/rpc_misc.h. | Günther Deschner | 1 | -5/+5 | |
Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther | |||||
2010-04-19 | s3-spoolss: fix samr_ValidatePassword_Change. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-04-17 | s3: Slightly simpify samr_ValidatePassword_Reset | Volker Lendecke | 1 | -12/+13 | |
2010-04-17 | s3: Slightly simpify samr_ValidatePassword_Change | Volker Lendecke | 1 | -12/+13 | |
2010-01-10 | s3: Use sid_check_is_domain instead of a direct sid_equal | Volker Lendecke | 1 | -3/+6 | |
2010-01-10 | s3: Replace most calls to sid_append_rid() by sid_compose() | Volker Lendecke | 1 | -4/+4 | |
2009-12-15 | s3: Fix _samr_GetAliasMembership for results with 0 rids | Volker Lendecke | 1 | -0/+8 | |
2009-11-26 | s3-rpc: Avoid including every pipe's client and server stubs everywhere in ↵ | Günther Deschner | 1 | -0/+1 | |
samba. Guenther | |||||
2009-11-10 | s3-samr: implement _samr_ValidatePassword(). | Günther Deschner | 1 | -10/+118 | |
Guenther | |||||
2009-10-19 | Fix typo. | Karolin Seeger | 1 | -2/+2 | |
privilage -> privilege Karolin | |||||
2009-10-16 | s3:srv_samr_nt - another fix for the reject reason | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2009-10-08 | s3/s4 - Adapt the IDL changes on various locations | Matthias Dieter Wallnöfer | 1 | -3/+4 | |
2009-09-15 | s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags. | Günther Deschner | 1 | -1/+1 | |
Guenther |