summaryrefslogtreecommitdiff
path: root/source3/rpc_server/srv_samr_nt.c
AgeCommit message (Collapse)AuthorFilesLines
2010-09-11s3-samr Explian better the use of two privileges in this callAndrew Bartlett1-0/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Rework access_check_object() to take two privilegesAndrew Bartlett1-60/+51
This allows the privileges bitmap to be used only when setting privileges, and uses an the LUID constant for all 'does this user have this privilege' operations. The advantage is that we now only need one API to determine if a token has a privilege, and much less code needs to know what type is used for the underlying bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Convert from user_has_privileges() -> security_token_has_privilege()Andrew Bartlett1-1/+1
This new call is available in the merged privileges code, and takes an enum as the parameter, rather than a bitmask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3:auth Remove NT_USER_TOKENAndrew Bartlett1-2/+2
The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Further changes to remove SE_PRIVAndrew Bartlett1-6/+6
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-08-27s3: Pass rhost through to smb_pam_passchangeVolker Lendecke1-7/+21
2010-08-25s3-lsa: separate out init_lsa headers.Günther Deschner1-0/+1
Guenther
2010-08-17s3-samr: Correctly fix the transition from enum to uint32_t.Andreas Schneider1-1/+5
What type an enum is depends on the implementation, the compiler and probably the compiler options. sizeof(enum) is normally not sizeof(int)!
2010-08-17s3-samr: Fixed some build warnings.Andreas Schneider1-3/+3
2010-08-05s3-secrets: only include secrets.h when needed.Günther Deschner1-0/+1
Guenther
2010-07-28s3-dcerpc: Use dcerpc_AuthType in pipe_auth_dataSimo Sorce1-1/+3
2010-07-28s3-samr: Use struct pipes_struct.Andreas Schneider1-69/+69
2010-07-13s3-dceprc: Store opnum in its own variableSimo Sorce1-1/+1
Signed-off-by: Günther Deschner <gd@samba.org>
2010-07-05samr.idl:UserInfo structures - fix some names according to MS-SAMR documentationMatthias Dieter Wallnöfer1-1/+1
See MS-SAMR section "FULL IDL"
2010-06-10s3:misc make use of server_[event/messaging]_context directlyAndreas Schneider1-1/+1
Untangle these functions from smbd specific dependencies so they can be freely used in multiple servers.
2010-06-03s3-security: use shared "Standard access rights.".Günther Deschner1-8/+8
Guenther
2010-05-31s3:smbd map_username() doesn't need sconn anymoreSimo Sorce1-6/+3
Signed-off-by: Andreas Schneider <asn@samba.org>
2010-05-31s3-samr: give the system user a free pass for _samr_QueryUserInfo{2} level 18.Günther Deschner1-0/+5
Guenther
2010-05-28s3-samr: Fix crash bug in _samr_QueryUserInfo{2} level 18.Günther Deschner1-4/+13
Guenther
2010-05-21s3:dom_sid Global replace of DOM_SID with struct dom_sidAndrew Bartlett1-25/+25
This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-18s3-passdb: move get_logon_hours_from_pdb() into samr server.Günther Deschner1-0/+26
Guenther
2010-05-18s3-secdesc: remove "typedef struct security_descriptor SEC_DESC".Günther Deschner1-9/+9
Guenther
2010-05-18s3-secdesc: remove "typedef struct security_acl SEC_ACL".Günther Deschner1-2/+2
Guenther
2010-05-18s3-secdesc: remove "typedef struct security_ace SEC_ACE".Günther Deschner1-1/+1
Guenther
2010-05-18s3-crypto: only include crypto headers when crypto is done.Günther Deschner1-0/+1
Guenther
2010-05-18s3-samr: move samr helper prototypes outside of proto.hGünther Deschner1-0/+1
Guenther
2010-05-18s3-rpc_misc: clean out include/rpc_misc.h.Günther Deschner1-5/+5
Well known rids don't really belong into an rpc header, just use the ones defined in security.idl. Guenther
2010-04-19s3-spoolss: fix samr_ValidatePassword_Change.Günther Deschner1-1/+1
Guenther
2010-04-17s3: Slightly simpify samr_ValidatePassword_ResetVolker Lendecke1-12/+13
2010-04-17s3: Slightly simpify samr_ValidatePassword_ChangeVolker Lendecke1-12/+13
2010-01-10s3: Use sid_check_is_domain instead of a direct sid_equalVolker Lendecke1-3/+6
2010-01-10s3: Replace most calls to sid_append_rid() by sid_compose()Volker Lendecke1-4/+4
2009-12-15s3: Fix _samr_GetAliasMembership for results with 0 ridsVolker Lendecke1-0/+8
2009-11-26s3-rpc: Avoid including every pipe's client and server stubs everywhere in ↵Günther Deschner1-0/+1
samba. Guenther
2009-11-10s3-samr: implement _samr_ValidatePassword().Günther Deschner1-10/+118
Guenther
2009-10-19Fix typo.Karolin Seeger1-2/+2
privilage -> privilege Karolin
2009-10-16s3:srv_samr_nt - another fix for the reject reasonMatthias Dieter Wallnöfer1-1/+1
2009-10-08s3/s4 - Adapt the IDL changes on various locationsMatthias Dieter Wallnöfer1-3/+4
2009-09-15s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.Günther Deschner1-1/+1
Guenther
2009-09-13s3-samr: Fix Coverity #934 UNINIT.Günther Deschner1-1/+1
Guenther
2009-07-26Fix valgrind errors in DeleteDomainGroup and DeleteDomAliasVolker Lendecke1-4/+4
2009-07-26Fix a valgrind error in _samr_DeleteUserVolker Lendecke1-2/+2
The close_handle invalidates uinfo
2009-07-14s3-account_policy: add pdb_policy_type enum.Günther Deschner1-31/+31
Guenther
2009-07-13s3-rpc_server: pass down full unix token to map_max_allowed_access().Günther Deschner1-14/+28
Also use unix_token->uid instead of geteuid() when checking for mapping of the SEC_FLAG_MAXIMUM_ALLOWED flag. Guenther
2009-06-25s3-samr: refactor _samr_SetDomainInfo().Günther Deschner1-25/+72
Guenther
2009-06-25s3-samr: refactor _samr_QueryDomainInfo().Günther Deschner1-213/+322
Guenther
2009-06-08Pass a talloc_ctx to pdb_enum_aliasmemVolker Lendecke1-1/+2
2009-06-08s3-samr: fix enum_acb_mask type (uint32 instead of uint16).Günther Deschner1-1/+1
Guenther
2009-06-08s3-samr: support _samr_SetGroupInfo level 2.Günther Deschner1-2/+2
Guenther
2009-06-07s3-samr: SetGroupInfo level 1 should not return NT_STATUS_INVALID_INFO_CLASS.Günther Deschner1-3/+0
Found by RPC-SAMR torture test. Guenther