summaryrefslogtreecommitdiff
path: root/source4/lib/policy
AgeCommit message (Collapse)AuthorFilesLines
2010-10-14s4-acl Merge sec_access_check() with se_access_check() from source3/Andrew Bartlett1-1/+1
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-12libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett1-2/+1
This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
2010-10-10wafsamba: Fix handling of pyembed/pyext.Jelmer Vernooij1-1/+2
2010-09-13s4:SID handling - always encode the SID using "ldap_encode_ndr_dom_sid" for ↵Matthias Dieter Wallnöfer1-2/+5
LDAP filters This makes also lookups through special backends as "samba3sam" work.
2010-09-10s4:lib/policy/gp_filesys.c - remove dead codeMatthias Dieter Wallnöfer1-2/+0
Found out by Solaris cc
2010-08-23s4:security Change struct security_token->sids from struct dom_sid * to ↵Andrew Bartlett1-1/+1
struct dom_sid This makes the structure much more like NT_USER_TOKEN in the source3/ code. (The remaining changes are that privilages still need to be merged) Andrew Bartlett
2010-08-18s4:security Remove use of user_sid and group_sid from struct security_tokenAndrew Bartlett1-1/+1
This makes the structure more like Samba3's NT_USER_TOKEN
2010-08-09s4-build: use @PACKAGE_VERSION@ in s4 pc.in filesAndrew Tridgell1-1/+1
this gets replaced by vnum from the build rule
2010-07-16s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell3-8/+8
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-24s4-python: python is not always in /usr/binAndrew Tridgell1-1/+1
Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-20s4:libpolicy - fix printf output specifiers to suppress warningMatthias Dieter Wallnöfer1-1/+1
2010-06-20s4:libpolicy - Solaris compatibility fixMatthias Dieter Wallnöfer1-1/+5
2010-06-20libpolicy: Fix the build.Jelmer Vernooij2-2/+2
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add preliminary support for storing changed Group Policies.Wilco Baan Hofman3-0/+101
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Refactor policy filesystem code.Wilco Baan Hofman1-97/+244
* It now uses reusable code to download the GPT. * It creates a list before copying for better error handling. * String_replace is now used instead of manually replacing '\\' with '/' for local paths. * A security check has been added for file names with "../". * It adheres to the 80 column rule, if at all possible. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Fix memory allocation with error handling.Wilco Baan Hofman5-21/+135
Also moved pypolicy.c headers around so as not to generate compile warnings Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Code cleanups: GUID generation, lp_dnsdomain instead of lp_realm, missing ↵Wilco Baan Hofman2-9/+6
spaces. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Set inherit flag type to bool.Wilco Baan Hofman1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Fix 'magic' numbers to be strlen(something)Wilco Baan Hofman2-4/+6
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Change talloc_steal to strdup because function might not expect it.Wilco Baan Hofman1-5/+5
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add GP ini functions.Wilco Baan Hofman2-2/+134
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Remove iconv convenience in used functions, which were deleted in commit ↵Wilco Baan Hofman2-3/+0
f9ca9e46ad24036bf00cb361a6cef4b2e7e98d7d Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add ini parser for GPO's.Wilco Baan Hofman3-2/+17
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add net gpo setacl support. Create gp_set_acl function. Show ACL in net gpo ↵Wilco Baan Hofman3-1/+101
show. Cleanup memory allocation of gp_create_gpo Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Fix set GPT security descriptor to match windows' behaviour.Wilco Baan Hofman1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Fix crash when get_gpo_info returns incorrect data.Wilco Baan Hofman2-5/+12
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add preliminary NT ACL support for GPT (GPO on filesystem).Wilco Baan Hofman3-37/+119
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20samba4: Add python bindings for samba.policy.get_gplink_options.Jelmer Vernooij2-0/+52
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20policy: Add samba.policy.get_gpo_flags binding.Jelmer Vernooij3-0/+122
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add gpo create functionality. Also fix gPLink handling bugsWilco Baan Hofman6-18/+473
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Fix mode_t in mkdir.Wilco Baan Hofman1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Optimize the backslash logic in the path traversal.Wilco Baan Hofman1-24/+9
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Fix error in logic, making recursion work past the first level.Wilco Baan Hofman1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add fetch function for GPO which fetches all relevant files from the sysvol ↵Wilco Baan Hofman5-5/+277
share. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add getinheritance and setinheritance to net gpo util and library.Wilco Baan Hofman2-0/+65
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Implemented delete group policy link function and corresponding feature in ↵Wilco Baan Hofman1-1/+69
net gpo. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Changed add_gplink to set_gplink, so we can change gPLink options as well.Wilco Baan Hofman2-7/+16
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Add add gPLink function and corresponding net gpo linkadd call.Wilco Baan Hofman2-47/+89
Also added some definitions for future functions in policy.h Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Rename files to reflect the libpolicy naming convention. Also fix the GNU ↵Wilco Baan Hofman4-4/+6
make build. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Rename libgpo to lib/policy to avoid confusion with samba3 and add waf buildWilco Baan Hofman5-0/+671
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>