summaryrefslogtreecommitdiff
path: root/source3/rpc_server
AgeCommit message (Collapse)AuthorFilesLines
2012-07-17s3:rpc_server: add support for AES bases netlogon schannelStefan Metzmacher1-0/+4
metze Signed-off-by: Günther Deschner <gd@samba.org>
2012-07-12s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam()Michael Adam1-7/+7
This does not check whether the given sid is in our domain, but but whether it belongs to the local sam, which is a different thing on a domain member server. Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Thu Jul 12 18:36:02 CEST 2012 on sn-devel-104
2012-07-12s3: rename sid_check_is_domain() to sid_check_is_our_sam()Michael Adam1-6/+6
This does not check whether the given sid is the domain sid, but whether it is the sid of the local sam, which is different for a domain member server.
2012-07-06s3-lsarpc: Enforce a secure connection for LookupSids3 and LookupNames4.Andreas Schneider1-8/+14
http://thread.gmane.org/gmane.network.protocol.cifs.general/291
2012-07-06s3-lsarpc: Restrict lsa_LookupNames4 to ncacn_ip_tcp connections.Andreas Schneider1-12/+23
See MS-LAT, Section 2.1 Transport.
2012-07-06s3-lsarpc: Restrict lsa_LookupSids3 to ncacn_ip_tcp connections.Andreas Schneider1-12/+23
See MS-LAT, Section 2.1 Transport.
2012-07-06s3-lsarpc: Restrict the transport for ncacn_np functions.Andreas Schneider1-0/+42
See MS-LAT, section 2.1 Transport.
2012-07-06s3-rpc_server: Make it possible to use more rpc exceptions.Andreas Schneider18-376/+348
2012-07-03s3-printing: Remove deprecated lp_printer_admin().Andreas Schneider1-42/+14
2012-06-27s3-param: Rename loadparm_s3_context -> loadparm_s3_helpersAndrew Bartlett2-6/+6
This helps clarify the role of this structure and wrapper function. The purpose here is to provide helper functions to the lib/param loadparm_context that point back at the s3 lp_ functions. This allows a struct loadparm_context to be passed to any point in the code, and always refer to the correct loadparm system. If this has not been set, the variables loaded in the lib/param code will be returned. As requested by Michael Adam. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jun 27 17:11:16 CEST 2012 on sn-devel-104
2012-06-26s3-printing: pass a talloc ctx to unpack_pjobDavid Disseldorp1-1/+1
Rather than allocating the devicemode on a null context.
2012-06-26s3-printing: clean up print_job_pause/resume interfaceDavid Disseldorp1-8/+4
Currently both return a bool and sometimes set a werr pointer argument, always return werror instead.
2012-06-26s3-printing: rename queue->job sysjobDavid Disseldorp1-8/+8
Print jobs maintain two job identifiers, the jobid allocated by the spoolss layer (pj->jobid), and the job identifier defined by the printing backend (pj->sysjob). Printer job queues currently only contain a single job identifier variable (queue->job), the variable is sometimes representative of the spoolss layer job identifier, and more often representative of the printing backend id. This change renames the queue job identifier from queue->job to queue->sysjob, in preparation for a change to only store the printing backend identifier.
2012-06-21s3:util: rename procid_equal() to serverid_equal()Michael Adam1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-06-19Remove unused variables and code.Jeremy Allison1-9/+0
2012-06-19Fix more "set but not used" warnings.Jeremy Allison1-6/+3
2012-06-19Fix a bunch of "set but not used" warnings.Jeremy Allison1-14/+7
2012-06-19s3:rpc_server/lsasd: remove dependency to libgen.h and basename()Stefan Metzmacher1-8/+11
metze
2012-06-19auth: Use only security_token_is_system to determine that a user is SYSTEMAndrew Bartlett1-1/+1
This removes the duplication on how to detect that a user is system in Samba now that the smbd system account is also only SID_NT_SYSTEM we can use the same check everywhere. Andrew Bartlett Signed-off-by: Andreas Schneider <asn@samba.org>
2012-06-19s3-spoolss: delete_drivers should be called as the connecting user.Andreas Schneider1-1/+1
Signed-off-by: Andreas Schneider <asn@samba.org>
2012-06-05s3:lib: split things into a conn_tdb.hStefan Metzmacher1-0/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jun 5 19:28:35 CEST 2012 on sn-devel-104
2012-05-28s3:rpc_server: don't do any magic in is_known_pipename() anymoreStefan Metzmacher1-12/+3
The callers have to check if they allow something else than the raw pipe file name. If we allow more than windows allows, we risks Samba specific client behavior. E.g. winbindd only works against Samba servers. metze
2012-05-28s3:rpc_server: return OBJECT_NAME_NOT_FOUND instead of PIPE_NOT_AVAILABLEStefan Metzmacher1-1/+1
metze
2012-05-28s3:libsmb: get rid of cli_state_protocolLuk Claes1-1/+2
Signed-off-by: Luk Claes <luk@debian.org> Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-05-24s3:smbd/msdfs: pass 'allow_broken_path' to get_referred_path()Stefan Metzmacher1-4/+7
Note the DCERPC code should not be smb2 specific! I wonder why this is at all smb2 specific... metze
2012-05-24s3:smbd/msdfs: let create_conn_struct() also fake the 'smbd_server_connection'Stefan Metzmacher1-2/+8
metze
2012-05-23s3:rpc_server/dfs: pass allow_broken_path=true to create_junction()Stefan Metzmacher1-2/+4
DCERPC code can't be smb2 specific! I'm not sure if 'true' is the correct value here, but at least it matches the old behavior and the tcp and smb1 cases. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed May 23 21:56:05 CEST 2012 on sn-devel-104
2012-05-10s3: Fix Coverity ID 242714 Uninitialized scalar variableVolker Lendecke1-1/+2
In an error path we are closing domain_handle without opening it
2012-05-09s3-spoolss: Set DWORD values correctly.Andreas Schneider1-9/+9
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed May 9 11:13:00 CEST 2012 on sn-devel-104
2012-05-01Fix bug #8873 - self granting privileges in security=ads.Jeremy Allison1-4/+12
Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue May 1 01:04:46 CEST 2012 on sn-devel-104
2012-04-25s3:registry: remove usage of reg_objects from srv_spoolss_nt.cGregor Beck1-1/+0
Signed-off-by: Andreas Schneider <asn@samba.org>
2012-04-16param: Change from _lp to lp__ as the prefix for internal parameter wrappersAndrew Bartlett1-1/+1
This will make a merge with the lib/param param code easier, as we can then paste lp_ to the front of all parameters unconditionally. Andrew Bartlett
2012-04-05build: Remove SMB_STRUCT_DIR defineAndrew Bartlett1-1/+1
2012-04-05build: Remove sys_closedir wrapperAndrew Bartlett1-2/+2
2012-04-05build: Remove sys_opendir wrapperAndrew Bartlett1-1/+1
2012-04-05build: Remove sys_open wrapperAndrew Bartlett1-3/+3
2012-03-24use usleep rather than sys_usleep in various places, in anticipation of ↵Jelmer Vernooij1-1/+1
usleep moving to libreplace.
2012-03-24lib/util: Remove obsolete sys_getpid() and sys_fork().Jelmer Vernooij5-5/+5
The performance of these is minimal (these days) and they can return invalid results when used as part of applications that do not use sys_fork(). Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Mar 24 21:55:41 CET 2012 on sn-devel-104
2012-03-24libreplace: Add getpeereid implementation.Jelmer Vernooij1-1/+2
2012-03-24lib/util: Remove dummy wrapper for getpwnam().Jelmer Vernooij1-1/+1
2012-03-20libndr: Rename policy_handle_empty to ndr_policy_handle_empty.Jelmer Vernooij1-2/+2
This makes the NDR namespace a bit clearer, in preparation of ABI checking.
2012-03-20libndr: Rename ndr64_transfer_syntax and null_ndr_syntax_id so they have a ↵Jelmer Vernooij3-7/+7
ndr_ prefix. This makes the NDR namespace a bit clearer, in preparation of ABI checking.
2012-03-14s3-spoolss: Check return type of update_dsspooler().Andreas Schneider1-12/+18
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Mar 14 19:38:45 CET 2012 on sn-devel-104
2012-03-14s3-spoolss: Check return codes in update_dsspooler.Andreas Schneider1-40/+170
2012-03-14s3-rpc_server: Increase debug level for policy handle.Andreas Schneider1-5/+5
2012-03-13s3-spoolss: Consistently fail OpenPrinterEx with "" printernameAndrew Bartlett1-0/+4
samba3.rpc.spoolss.printserver has become a flakey test recently, and this papers over the real problem. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Mar 13 17:51:00 CET 2012 on sn-devel-104
2012-03-13s3-rpc: Decrypt with the proper session key in CreateTrustedDomainEx2.Alexander Bokovoy2-79/+85
On LSA and SAMR pipes session_key is truncated to 16 byte when doing encryption/decryption. However, this was not done for trusted domain-related modifying operations. As result, Samba 4 client libraries do not work against Samba 3 while working against Windows 2008 r2. Solved this by introducing "session_extract_session_key()" function that allows to specify intent of use of the key. Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Tue Mar 13 12:23:44 CET 2012 on sn-devel-104
2012-03-08s3-auth: Remove single-implementation plugin layerAndrew Bartlett1-2/+2
The ->get_ntlm_challenge and ->check_ntlm_password elements of struct auth_context were only ever initialised to a single value. Make it easier to follow by just calling the function directly. Andrew Bartlett
2012-03-07s3-rpc_server: Do not register embedded ncacn_np endpoints by defaultAndrew Bartlett1-1/+8
The end point mapper is primarily in support of lsasd, and the key SAMR, LSA and NETLOGON services being accessed over TCP/IP. The end point mapper does not appear to be used for the well-known mappings to named pipes, and we have a problem with how to safely register the embedded pipes. For now, disable this to avoid re-registration storms in production, until we sort out a better way. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Mar 7 14:27:38 CET 2012 on sn-devel-104
2012-03-07s3-rpc_server: Do not setup ncalrpc pipes and TCP for embedded rpc serversAndrew Bartlett1-108/+38
Embedded RPC services are those not launched in the preforked lsasd and spoolssd children. The reason that these child processes were created is that is is not possible to correctly listen for ncalrpc and TCP connections without creating a child process. Therefore, we should not have these embedded RPC services to listen on these sockets just because the endpoint mapper has been enabled. Andrew Bartlett
generated by cgit (git 2.34.1) at 2024-12-02 03:34:52 +0000