summaryrefslogtreecommitdiff
path: root/source4/librpc/idl/samr.idl
AgeCommit message (Collapse)AuthorFilesLines
2008-07-21Rename structures to better match the names in the WSPP IDL.Andrew Bartlett1-9/+9
The 'comment' element in a number of domain structures is called oem_information. This was picked up actually because with OpenLDAP doing the schema checking, it noticed that 'comment' was not a valid attribute. The rename tries to keep this consistant in both the LDB mappings and IDL, so we don't make the same mistake in future. This has no real schema impact, as this value isn't actually used for anything, as 'comment' was not used in the provision. Andrew Bartlett (This used to be commit 65dc0d536590d055a5ee775606ac90ee5fcaee9a)
2008-02-21samr.idl: windows uses lsa_AsciiStringLarge in QueryDisplayInfoStefan Metzmacher1-1/+1
Tested with nt4 and w2k3. metze (This used to be commit 24ec069751ef8db1211c50e7ca1e527adaa6432c)
2008-02-04samr.idl: don't use pointer_default_top() and specify "unique" explizitStefan Metzmacher1-48/+47
Note: this doesn't change the generated output! metze (This used to be commit 14ee13c1fe2d17ebfd031a1cd2fbf2a9b72cdfc9)
2008-01-24Rename samr_*AccessMask bitfields to start with SAMR_.Günther Deschner1-32/+32
Guenther (This used to be commit 70773be51a568dfc793111044cef93baa343d715)
2008-01-12idl: Use typedef rather than declare.Jelmer Vernooij1-2/+2
(This used to be commit 3fd750bd54f150ff62fd8165406bd26d03d624cf)
2007-12-21r26332: Add samr_ValidationStatus error mapping to samr_ValidatePassword().Günther Deschner1-1/+21
Torture test to follow. Guenther (This used to be commit 10ccfb4c8970bdb140aa9daf945caea72a4ab7cd)
2007-12-21r26331: Add IDL for samr_ValidatePassword(). A very interesting call.Günther Deschner1-5/+75
Guenther (This used to be commit 2b8d7fe16beecf2ea60d6712238527504ccee44c)
2007-10-10r24779: add 11 specific access rights that applies to accessmasks for UserRonnie Sahlberg1-3/+17
objects on the samr pipe. 8 of these bits : get name etc get locale get loc com set attributes change password set password get groups comes from wireshark/ethereal where they were added Aug 21 2002 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054 3 bits : get attributes get group membership change group membership also come from wireshark/ethereal where they were added Jul 24 2003 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=8022&r2=8080 (This used to be commit 1c2729228a341a2d063a444e9546e7e09f23c966)
2007-10-10r24777: add 11 specific access rights to the access mask forRonnie Sahlberg1-1/+15
domains on the samr pipe 10 of these bits : lookup info 1 set info 1 lookup info 2 set info 2 create user create group create alias enum account open account set info 3 come from wireshark/ethereal and were added to wireshark in Aug 21 2002 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054 one bit lookup alias also comes from wireshark where it was added in wireshark in Feb 21 2003 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=7173&r2=7178 (This used to be commit 4b2c8e28657b31c606d21946e7949c9cc52613c9)
2007-10-10r24775: add 5 specific access right bits for the accessmask that refersRonnie Sahlberg1-2/+10
to Groups on the samr pipe the five bits lookup info set info add member remove member get members comes from the wireshark/ethereal sources where they were added in Aug 21 2002 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054 (This used to be commit 1f00ac5dbe8f034d845c4e579a3f517311784900)
2007-10-10r24774: add 5 specific access mask bits for policy handles created for aliasesRonnie Sahlberg1-2/+10
these five access mask bits : add member remove members get members lookup info set info come from wireshark/ethereal where they were added to cvs in Aug 21 2002 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054 (This used to be commit e39556ba4cc76b2754ef891d5c696bc3a5761310)
2007-10-10r24772: add a bitmap that describes 6 of the specific accessmask bits forRonnie Sahlberg1-5/+14
policy handles that are create by Connect?() calls on the samr pipe. these bits come from the wireshark/ethereal sources where they have been documented for a long time. the bits : connect to server initialize server create domain were added to wireshark/ethereal in svn 8080 Jul 24 2003 the bits : open domain enum domain shutdown server were added to wireshark/ethereal in svn 6054 Aug 21 2002 (This used to be commit 04e67bb6807c318de44d5434bc4344b24494b4a1)
2007-10-10r24052: Fix some of the NT4 usrmgr.exe portions of bug 4815.Andrew Bartlett1-1/+1
- The icons in usermgr were incorrect, because the acct_flags were not filled in (due to missing attribute in ldb query) - The Full name was missing, and the description used as the full name (due to missing attributes in ldb query and incorrect IDL) To prove the correctness of these fixes, I added a substantial new test to RPC-SAMR-USERS, to ensure cross-consistancy between QueryDisplayInfo and QueryUserInfo on each user. This showed that for some reason, we must add ACB_NORMAL to the acct_flags on level 2 queries (for machine trust accounts)... Getting this right is important, because Samba3's RPC winbind methods uses these queries. Andrew Bartlett (This used to be commit 9475d94a61e36b3507e5fd2e6bb6f0667db4a607)
2007-10-10r23643: Fix the build farm tests. We were incorrectly passing theJim McDonough1-17/+30
RPC-SAMBA3-GETUSERNAME tests before the previous password expiration fixes, because if you create a user and only set the password administratrively, the "last set time" should not get updated. Needed to add some more of the fields_present flags to do this. (This used to be commit ce5637de22c19551c0ce5147658ceae33b976ef1)
2007-10-10r21662: More samr testsJelmer Vernooij1-5/+5
(This used to be commit 2eae55819ec51dc53aa8bdea7b777cb2e8444cea)
2007-10-10r21660: Add another testJelmer Vernooij1-4/+4
(This used to be commit 0b1e793ed56e3c4c592d8baaf3139e42b01b942b)
2007-10-10r20149: Remove the smb.conf distinction between PDC and BDC. Now the correctAndrew Bartlett1-4/+4
way to setup a Samba4 DC is to set 'server role = domain controller'. We use the fSMORoleOwner attribute in the base DN to determine the PDC. This patch is quite large, as I have corrected a number of places that assumed taht we are always the PDC, or that used the smb.conf lp_server_role() to determine that. Also included is a warning fix in the SAMR code, where the IDL has seperated a couple of types for group display enumeration. We also now use the ldb database to determine if we should run the global catalog service. In the near future, I will complete the DRSUAPI DsGetDomainControllerInfo server-side on the same basis. Andrew Bartlett (This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
2007-10-10r19588: Use include and import statements rather than depends() and helper().Jelmer Vernooij1-2/+2
(This used to be commit 347ae9628202ca4de4318ef8156999239aad9192)
2007-10-10r18890: sort the flags out and remove unknown as there's stillRafal Szczesniak1-6/+4
quite a few of them (not sure if these are used actually). rafal (This used to be commit 1622d4608bc738b73d6f51c758828f96602b3e59)
2007-10-10r18887: add flags found while on the plane.Rafal Szczesniak1-14/+19
rafal (This used to be commit ec59441977205af9a38926b3d432ec0de6379573)
2007-10-10r18639: Get rid of the keepref supportJelmer Vernooij1-2/+1
(This used to be commit d1364ef0cd8f1a64f44476476323ab390ac4de48)
2007-10-10r18635: Make sure to display samr_GroupAttrs in samr_DispInfo for groups insteadGünther Deschner1-1/+14
of interpreting them as samr_AcctFlags. Guenther (This used to be commit ed02c1afc82391f5aeb7caa9a6cd942b1b95e630)
2007-10-10r18375: Volker noticed that this is in fact an 8bit number - well spotted!Andrew Tridgell1-1/+1
(This used to be commit 3f80b6b87bf4a3ae3a2fce51764ed70bcf0ea497)
2007-10-10r16773: Fix one more RPC-SAMR test (an alias level), and make it clear thatAndrew Bartlett1-8/+8
the unknown value in the samr_GroupInfo structures are the group attributes. Andrew Bartlett (This used to be commit c50095efabb62fbed2e4df7e883df1054e4d92c9)
2007-10-10r15776: Don't generate ref pointers in Samba4-generated code. There is no pointJelmer Vernooij1-1/+2
in having pointers for outgoing data when you can already modify the top-level element. This can be overridden (temporarily) by specifying the new "keepref" attribute. Once we've removed keepref from all IDL files, I'll remove this attribute as well. (This used to be commit bdc6dd37503ced8322a671d225122ccffbb8bfec)
2007-10-10r15653: Remove idl_types.h include where possible. RemoveJelmer Vernooij1-6/+6
types from .h file that are now in pidls' aliases list. (This used to be commit fadb9529ec7e1208b9f58a4e8b633d5a50633e82)
2007-10-10r14055: merge from samba3. add ACB_NO_AUTH_DATA_REQD, this has been verifiedGünther Deschner1-1/+2
although not automatically tested in smbtorture right now. Guenther (This used to be commit 46e191cfa5cc45175b23815017f70d6271e35e23)
2007-10-10r13925: fix dependenciesStefan Metzmacher1-1/+1
metze (This used to be commit 9dad1fb7bbc387d10c38334e3393dc9f18f4fa2f)
2007-10-10r13908: Improve the RPC-SAMSYNC test to cross-check some attributes I wasn'tAndrew Bartlett1-1/+2
sure about. This finds a new ACB_PW_EXPIRED attribute. Andrew Bartlett (This used to be commit 54caf949425cb9a3437bd7051930384167b5e07d)
2007-10-10r13634: Fix typo.Günther Deschner1-1/+1
Guenther (This used to be commit cd569446a1bbfca08ff16a06b3af7bb94986a5ad)
2007-10-10r13633: Adding more SE_GROUP bits and make it a bitmask as well.Günther Deschner1-5/+11
Guenther (This used to be commit 8e939896822e9727919a49638c818a7d7faabb78)
2007-10-10r13632: The "password_properties" is a bitmask as well.Günther Deschner1-10/+12
Guenther (This used to be commit 0d918764b1f0c1aa65f826b9a845746c914f87df)
2007-10-10r13631: Add DOMAIN_PASSWORD_LOCKOUT_ADMINS (this bit only allows to lockoutGünther Deschner1-0/+1
Administrator, not Domain Admins in general). Guenther (This used to be commit abad44a57dfdf492f548c05a897af341ba0f5e68)
2007-10-10r13630: Add new ACB-bits as seen in acct_flags in the PAC info3Günther Deschner1-11/+17
(merge from Samba 3). Guenther (This used to be commit fa1127c5456fd112568e929e409953dcd3cb2e21)
2007-10-10r11438: Move enum samr_RejectReason into misc.idl so I can use it in a globalAndrew Bartlett1-5/+1
prototype. Andrew Bartlett (This used to be commit a3abffc75805c8e333f387a96a1dbc352669d359)
2007-10-10r11099: Replace unistr with [string] equivalentJelmer Vernooij1-4/+4
(This used to be commit 6a8291c80ee814a6bdc092b3ef53f450f30b44a0)
2007-10-10r9574: - made the sec_info fields in lsa and samr use a IDL bitmapAndrew Tridgell1-2/+4
- fixed winreg_GetKeySecurity() to use a sec_info field correctly - simplied the winreg torture code, removing the separate opens for each hive - added torture cleanup code in winreg test - added 'create with security descriptor' in the winreg torture test (This used to be commit f20695decd587f7b6bbdbd4861441bd19ab85078)
2007-10-10r8232: remove samr_String and netr_String as they are the same as lsa_StringStefan Metzmacher1-102/+84
metze (This used to be commit e601042c07d7b6eed0dc34e5b136d9266b8a0f81)
2007-10-10r7993: Further work on the Krb5 PAC.Andrew Bartlett1-5/+9
We now generate the PAC, and can verifiy both our own PAC and the PAC from Win2k3. This commit adds the PAC generation code, spits out the code to get the information we need from the NETLOGON server back into a auth/ helper function, and adds a number of glue functions. In the process of building the PAC generation code, some hints in the Microsoft PAC specification shed light on other parts of the code, and the updates to samr.idl and netlogon.idl come from those hints. Also in this commit: The Heimdal build package has been split up, so as to only link the KDC with smbd, not the client utils. To enable the PAC to be veified with gensec_krb5 (which isn't quite dead yet), the keyblock has been passed back to the calling layer. Andrew Bartlett (This used to be commit e2015671c2f7501f832ff402873ffe6e53b89466)
2007-10-10r7870: fixed the RPC-SCHANNEL test. It turned out it was my const changes, asAndrew Tridgell1-1/+1
they slightly changed the semantics of value() in pidl, which broke a optimisation hack in some of our IDL files. I've changed the idl files to remove the hack for now. Sometime we need to find a better way to handle these :-) (This used to be commit 765f75ea630b13b1605409ff47a52cc11a1e496b)
2007-10-10r7552: Use ParseExpr() for [value] attributes; allowsJelmer Vernooij1-4/+4
us somewhat cleaner IDL. (This used to be commit b7b01bccd101654d1f5ec83cba9dea7e9431d6ce)
2007-10-10r7029: Make array support in pidl similar to that in other IDL compilers. We ↵Jelmer Vernooij1-10/+10
should now able to use constructions like these: [size_is(20)] int *x; -> Pointer to array of 20 ints [size_is(20)] int x[]; -> Array of 20 ints [size_is(20)] int *x[]; -> Array of 20 pointers to ints [size_is(20,)] int *x[] -> Array of 20 pointers to ints [size_is(,20)] int *x[]; -> Pointer to array of 20 ints [size_is(,20)] int **x; -> Pointer to pointer to array of 20 ints [size_is(20)] int x[][30]; -> 20 blocks of 30 ints (This used to be commit ecf583da71c2f80be124c17fccdcb284b47e0695)
2007-10-10r6973: Merge new version of pidl into the main SAMBA_4_0 branch.Jelmer Vernooij1-1/+2
The main difference in this new version is the extra data structure generated between the IDL data structure and the NDR parser: IDL -> NDR -> { ndr_parser, ndr_header, eparser, etc } This makes the ndr_parser.pm internals much more sane. Other changes include: - Remove unnecessary calls with NDR_BUFFERS (for example, GUID doesn't have any buffers, just scalars) as well as some (unnecessary) nested setting of flags. - Parse array loops in the C code rather then calling ndr_pull_array(). This allows us to have, for example, arrays of pointers or arrays of pointers to arrays, etc.. - Use if() {} rather then if () goto foo; everywhere - NDR_IN no longer implies LIBNDR_FLAG_REF_ALLOC - By default, top level pointers are now "ref" (as is the default in most other IDL compilers). This can be overridden using the default_pointer_top() property. - initial work on new ethereal parser generators by Alan DeKok and me - pidl now writes errors in the standard format used by compilers, which is parsable by most editors - ability to warn about the fact that pidl extension(s) have been used, useful for making sure IDL files work with other IDL compilers. oh, and there's probably some other things I can't think of right now.. (This used to be commit 13cf227615f6b9e0e5fa62e59197024410254f01)
2007-10-10r6544: Use common structures between SAMR, NETLGON and the Krb5 PAC.Andrew Bartlett1-9/+9
Fill out the group list for the SamLogon reply, so clients get the supplementary groups. Andrew Bartlett (This used to be commit d9c31e60a72c345e3a23a7eb742906bcfc18721c)
2007-10-10r6325: Rename aliasname -> alias_name in CreateDomAlias function.Tim Potter1-1/+1
(This used to be commit 63dfa9b80649928baf72687381fcfb6dd4d20032)
2007-10-10r5879: Rename SAMR_FIELD_WORKSTATION to SAMR_FIELD_WORKSTATIONS - it is a list.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 7822101cb5213f192f3195648970784a9de4fac4)
2007-10-10r5783: Test renaming of accounts in the RPC-SAMR test, and add support intoAndrew Bartlett1-1/+2
the SAMR server. Andrew Bartlett (This used to be commit fd748f9d2f8f354f76587d92b94de83bffe1c6dc)
2007-10-10r5672: Use switch_type() and the token storage mechanism for unions:Jelmer Vernooij1-5/+5
- Makes union handling less special - Allows unions in arrays, etc - Compatible with midl - Pidl will warn about switch_type() and the type of the switch_is() variable being different (This used to be commit dc6b4ffc82a191631bc16a4b93a4916a39183ec6)
2007-10-10r5661: Be a little stricter on syntax regarding arrays. A pointer to anJelmer Vernooij1-13/+13
array can now only be : type *name[]; rather then : type *name; which was supported in the past. Warnings will be given when the first syntax is used. Reasons for this change in behaviour include improved readability and the fact that the second format makes dealing with multiple levels of pointers harder. (This used to be commit a416de5825c540fd3741731c4be05e9a659a6fdb)
2007-10-10r5364: Rename string fields called 'domain' and 'name' to be 'domain_name'.Tim Potter1-3/+3
(This used to be commit 6749b9404d4e9876ecd964e038c608f05d2c0b69)
generated by cgit (git 2.34.1) at 2024-12-04 07:01:04 +0000