Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-23 | s3-dcerpc: add server helpers for ntlmssp auth | Simo Sorce | 2 | -0/+176 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-09-23 | gssapi: remove unused function argument | Simo Sorce | 1 | -4/+1 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-09-23 | gssapi: avoid explicit dependency on dcerpc specific structures | Simo Sorce | 1 | -2/+4 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-09-23 | s3-dcerpc: move crypto stuff in /librpc/crypto | Simo Sorce | 1 | -1/+1 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-09-21 | s3-lsa: Fix sid in DEBUG in_lsa_EnumAccountRights. | Günther Deschner | 1 | -2/+1 | |
Andrew, you removed the sid_copy buit forgot the sid, please check. Guenther | |||||
2010-09-21 | s3:registry: move reg_api_regf prototypes to their own header file. | Michael Adam | 1 | -0/+1 | |
These two calls are currently only used in the WINREG rpc server. And this reqires linking in the regfio code. | |||||
2010-09-21 | s3:registry: move the reg_api prototypes to their own header. | Michael Adam | 2 | -0/+2 | |
2010-09-21 | s3:rpc_server:ntsvcs: registry is not directly used an more. | Michael Adam | 1 | -2/+0 | |
2010-09-21 | s3:rpc_server:ntsvcs: use svcctl_lookup_dispname instead of legacy svcctl in ↵ | Michael Adam | 1 | -13/+17 | |
_PNP_GetDeviceRegProp | |||||
2010-09-21 | s3:rpc_server: registry is not direclty used in the svcctl server any more | Michael Adam | 1 | -2/+0 | |
2010-09-21 | s3:srv_ntsvcs_nt: make fill_svc_config() use svcctl_get_string_value() | Michael Adam | 1 | -16/+10 | |
instead of using legacy svcctl_fetch_regvalues() | |||||
2010-09-21 | s3:services_db: remove the TALLOC_CTX argument from svcctl_set_secdesc | Michael Adam | 1 | -2/+1 | |
2010-09-20 | s3-util: use shared dom_sid_dup. | Günther Deschner | 3 | -9/+10 | |
Guenther | |||||
2010-09-20 | s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions. | Günther Deschner | 3 | -3/+6 | |
Guenther | |||||
2010-09-20 | s3:registry: move higher level function reg_open_path to new module reg_api_util | Michael Adam | 1 | -0/+1 | |
The reg_api.c code should just export functions that direclty relate to winreg api calls. | |||||
2010-09-16 | s4-netlogon: added IDL for netr_DsrUpdateReadOnlyServerDnsRecords | Andrew Tridgell | 1 | -0/+19 | |
this is used by a RODC to do DNS updates, as TSIG updates are not allowed by RODCs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-15 | s3-rpc_server: fix some uninitalized variables and c++ build warnings. | Günther Deschner | 1 | -2/+2 | |
Guenther | |||||
2010-09-15 | s3-rpc_server: Use talloc_stackframe. | Andreas Schneider | 1 | -14/+15 | |
2010-09-15 | s3-rpc_server: Moved ncacn_np declarations in common header file. | Simo Sorce | 3 | -0/+25 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-09-15 | s3-rpc_server: Moved "external" pipe functions to rpc_ncacn_np.c. | Simo Sorce | 3 | -298/+336 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-09-15 | s3-rpc_server: Added new parametric option 'rpc_server' | Andreas Schneider | 1 | -1/+17 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-09-15 | s3-rpc_server: Renamed rpc_ncacn_np_internal.c. | Simo Sorce | 1 | -0/+0 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-09-15 | s3-rpc_server: Convert rpc_connect_spoolss_pipe into a generic interface. | Simo Sorce | 1 | -28/+50 | |
This way we have one common way to open internal pipes whether they are shortcircuited or piped to an external process. | |||||
2010-09-15 | s3-rpc_server: Added support for internal connections to external daemons. | Simo Sorce | 1 | -2/+115 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-09-15 | s3-rpc_server: Accept connections and process requests. | Simo Sorce | 1 | -17/+337 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Added helper functions to read data from a ncacn socket. | Simo Sorce | 1 | -0/+80 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Addded function to create custom pipes_struct. | Simo Sorce | 1 | -0/+99 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Add generic listener callback. | Simo Sorce | 1 | -4/+47 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Added initial generic RPC server infrastructure. | Simo Sorce | 2 | -1/+91 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Added debug to see how much data has been read out. | Simo Sorce | 1 | -0/+4 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Make process_incoming_data() public. | Simo Sorce | 1 | -1/+1 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Make pipe destructor public. | Simo Sorce | 1 | -3/+1 | |
Signed-off-by: Andreas Schneider <asn@cynapses.org> | |||||
2010-09-15 | s3-rpc_server: Fixed unhandled error condition. | Simo Sorce | 1 | -1/+2 | |
Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
2010-09-11 | s3-samr Explian better the use of two privileges in this call | Andrew Bartlett | 1 | -0/+4 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-util_sid Tidy up global struct security_token | Andrew Bartlett | 1 | -1/+1 | |
This no longer needs to be global, and should be const. We now also init it with the C99 style initialisers. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Overhaul PRIVILEGE_SET handling, avoid dealing with the bitmap | Andrew Bartlett | 1 | -56/+18 | |
This avoids us dealing with the privilege bitmap in the LSA server, and overhauls much of the rest of the handling to be currnet with the modern world of talloc. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Hide the bitmap-based grant_privilege and revoke_privilege | Andrew Bartlett | 1 | -12/+3 | |
The new wrappers avoid anything but the core privileges code dealing with the bitmap values directly. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Make privilege_enum_sids() take an LUID, not a bitmap | Andrew Bartlett | 1 | -3/+4 | |
This moves one more privileges call away from direct bitmap manipuation. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure. | Andrew Bartlett | 1 | -1/+1 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Rework access_check_object() to take two privileges | Andrew Bartlett | 2 | -65/+56 | |
This allows the privileges bitmap to be used only when setting privileges, and uses an the LUID constant for all 'does this user have this privilege' operations. The advantage is that we now only need one API to determine if a token has a privilege, and much less code needs to know what type is used for the underlying bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Remove luid_to_se_priv() and luid_to_privilege_name() | Andrew Bartlett | 1 | -3/+9 | |
These functions duplicate other functions in the merged code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Convert from user_has_privileges() -> security_token_has_privilege() | Andrew Bartlett | 5 | -38/+22 | |
This new call is available in the merged privileges code, and takes an enum as the parameter, rather than a bitmask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Remove a pointer from grant_privilege() | Andrew Bartlett | 1 | -1/+1 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Remove pointer indirection from se_priv_to_privilege_set() | Andrew Bartlett | 1 | -2/+2 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Remove a pointer indirection from revoke_privilege() | Andrew Bartlett | 1 | -1/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Don't export privs[] as a global variable | Andrew Bartlett | 1 | -5/+2 | |
Instead, provide access functions for the LSA and net sam callers for the information they need. They still only enumerate the first 8 privileges that have traditionally been exposed. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-lsa Use sec_privilege_id() to lookup name to LUID | Andrew Bartlett | 1 | -9/+4 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Return number of entries in the old source3 list | Andrew Bartlett | 1 | -1/+1 | |
This ensures there isn't a behaviour change when the source3 list is combined with the longer source4 list. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/privileges Simplify get_privilege_luid() to return just the enum | Andrew Bartlett | 1 | -4/+2 | |
As Samba only deals with the lower 32 bits of the LUID, just return those and let the LSA layer deal with the upper 0 bits. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s3-privs Inline dump_se_priv into callers now that it's just a uint64_t | Andrew Bartlett | 1 | -4/+2 | |
The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> |