Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit c37d6f3c581673d74e7ec6a644ab6a7d13a55535)
|
|
Hives and predefined keys (HKEY_*) are not necessarily the same thing.
(This used to be commit 217e4e5841cfedb2b18dce3f89dd88ea4a36fe8f)
|
|
pvfs will now honor some privileges on ACLs, and it will be quite easy
to add the checks for more privileges in the necessary places, by
making calls to sec_privilege_check().
(This used to be commit 3549039d0fbc54f87ae679e7288b82b28713e487)
|
|
- add the hooks in access_check that check the privilege bitmasks for
SEC_STD_DELETE and SEC_FLAG_SYSTEM_SECURITY
(This used to be commit 0fa3764edcabffe8f7d5e40f0097f97d0c4519c4)
|
|
sam. I decided to do it the simple way of making the privileges user
attributes. w2k doesn't expose the privileges via LDAP, so we are free
to store them in any way we like without breaking compatibility.
(This used to be commit 5f29f4c3079be2fa54b94e08c829dadccc4d14c4)
|
|
this is mostly just a tidyup, but also adds the privilege_mask, which
I will be using shortly in ACL checking.
note that I had to move the definition of struct security_token out of
security.idl as pidl doesn't yet handle arrays of pointers, and the
usual workaround (to use a intermediate structure) would make things
too cumbersome for this structure, especially given we never encode it
to NDR.
(This used to be commit 7b446af09b8050746bfc2c50e9d56aa94397cc1a)
|
|
is v senstive to SMB flags2 bits
(This used to be commit c232e21218e81ac9189b651478415e9fbd67bf78)
|
|
can handle it, even for success packets (this bug was harmless, but
can be confusing in ethereal with old clients)
(This used to be commit 71e0c7b2ebbb01d64453c59e20911dc5008b9798)
|
|
(This used to be commit bba4e878b4a93e67e02b8f1332b0889947ec1a11)
|
|
(This used to be commit 5f64a60374486b9fc3d75786c3035a9017dd4d33)
|
|
(This used to be commit bcbfce7b0119538bab06801c97aa9c7d4bf3a6c6)
|
|
(This used to be commit 3040cd65151dbcc54404f9be9d1fbcf539c7b635)
|
|
(This used to be commit 952a26c561846def21d3d2f4d36cbe79a54f9eff)
|
|
in some cases)
(This used to be commit ddf7a331c58976f2c0b4a00390118f1acf60e3eb)
|
|
check that the server
hasn't given us a null pointer, otherwise we can segv when we dereference it. For example:
[size_is(*size)] *x;
uint32 *size;
if a broken server gave us x != NULL and size == NULL then we would crash. I've added
a check_null_pointer() call in pidl to catch this.
(This used to be commit 8cbd3f47a95367e861c6b99c44416a9ccef3c9ca)
|
|
(This used to be commit 4b45d3d2e86122dbe5bd258fc96ad674aba0d417)
|
|
(This used to be commit 1e12971137f50077e04a0432572275baf4fde35e)
|
|
- Added some README files
Not everything works yet, e.g. the EnumValue test appears to be broken.
(This used to be commit c169e86c1f52763b83e77e509f89cb91f9b69071)
|
|
(This used to be commit 573230ea99136bd66d00bac18effd28b1e5ba76f)
|
|
thanks to Bjoern JACKE <samba@j3e.de> for pointing this out
(This used to be commit 53c4d0a7d83181afbe01bbbb0840cb2a086b45da)
|
|
(This used to be commit 1ddab01d2ac0a51278cbd13d6d9369973c7a5b3a)
|
|
(This used to be commit f2f21033b65b82251b5ea0b2475ceb1bb3657fb3)
|
|
thanks to volker for pointing this out
(This used to be commit 2b67f18bdb58164697efd428391d4cbc46398464)
|
|
otherwise the creds structure might be invalid
(This used to be commit 76285b3390f20366d53c7b2509ac07e1f88f7309)
|
|
schannel code.
I would also like to give a gentle reminder to everyone to please run
the appropriate test scripts when you change a subsystem. It's a shame
to have this test code and not use it, and it takes much longer for
another developer to track down a bug in your new code than it would
take for you fix to it at the time you first add it.
- for rpc changes run test_rpc.sh
- for CIFS changes run test_posix.sh
- for ldb changes run test-tdb in lib/ldb/
(This used to be commit 0c58b254cabd236911021aff87c73183356fa8e3)
|
|
of arrays.
(This used to be commit b47e203a054e26d5d0c133a3c3b8d9502bd6ac69)
|
|
(This used to be commit 83221a0da07bf7c45757e737782f2f4ee541ad88)
|
|
QueryValue
(This used to be commit 659d0295314c6a070698fc81223044f4d7366993)
|
|
that depend on variables that come after the array in the structure or function.
This has been something that has been problematic for a while, but the
winreg QueryValue problem finally prompted me to fix it properly. We
should now go back and fix up all the ugly workarounds we have used to
avoid this problem in other calls.
Unfortunately the solution is fairly complex, and involves the use of
the internal ndr token lists (similar to the solution for relative
pointers). I wonder if anyone else will be able to follow the logic if
I get run over by a bus :-)
(This used to be commit e839b19ec5581f669f2a7705b1fb80845313251c)
|
|
(This used to be commit 30c58b046d65164da37f705de105662f806e1331)
|
|
(This used to be commit c1023db5e8336e495c06acae1773a28d7fc90658)
|
|
Thanks to Michael Allen for some hints on what was wrong with the previous IDL.
(This used to be commit 0fa6d847433eb281eaff15b8be4a26f898689f0a)
|
|
NOTE:
[u]int64 uses 4 Byte alignment
and HYPER_T uses 8 Byte alignment
metze
(This used to be commit 717454eb2fd2bf90e67074acefdae5304cd7433f)
|
|
Guenter Kukkukk
(This used to be commit 49c8df5648eae1e8222c0dd2859fd2ff62ef34ce)
|
|
(many thanks to tridge for telling me that HYPER_T isn't the same as uint64!)
metze
(This used to be commit 74b9ef4de5263953aa2e03401a271f2830163efe)
|
|
(This used to be commit 24d9f97bd6059d90eeead23900225e286047a862)
|
|
(This used to be commit c4c83f04f55d206716380330d2a4d2b31f893346)
|
|
sorry!:-)
metze
(This used to be commit c2495d60a11febb2715d0dbf3f6598d8edccfb11)
|
|
the idea is to have a directory service db layer
which will be used by the ldap server, samr server, drsuapi server
authentification...
I plan to make different implementations of this interface possible
- current default will be the current samdb code with sam.ldb
- a compat implementation for samba3 (if someone wants to write one)
- a new dsdb implementation which:
- understands naming contexts (directory parrtitions)
- do schema and acl checking checking
- maintain objectGUID, timestamps and USN number,
maybe linked attributes ('member' and 'memberOf' attributes)
- store metadata on a attribute=value combination...
metze
(This used to be commit 893a8b8bca2f020fbbe6f469aaa8dd4478249eb8)
|
|
mode, so after we
call it we need to return, and not continue processing packets
(This used to be commit 33e4cee17dbfbb79e5ae68fda893a4d313865eb5)
|
|
(NOTE: that the drsuapi_DsReplicaObjMetaData2 struct is not corrently parsed yet
and there're some unknown fields left in someother infotypes)
metze
(This used to be commit 4fd57d5e7cff085a8c003ea82f282e26dc1346d9)
|
|
dcerpc_ndr_request_send()
- this allows us to call dcerpc_log_packet() when we receive a packet we
can't parse correctly
metze
(This used to be commit a7a6cea112a180a28188997ca99f30d8dd286bb8)
|
|
metze
(This used to be commit 979c453c4dedf0006997dfc9994331e49643b741)
|
|
metze
(This used to be commit e5db58526825476fd6d8d80c8ee6c3bca0e23c84)
|
|
metze
(This used to be commit ab6ec6b5f4e04322eb151b7bf9c530a0dc16bf89)
|
|
metze
(This used to be commit 5d7d6f02cf1aa731d371c97054480d83d85102cb)
|
|
metze
(This used to be commit ea7b496995573426486b7eab5de822d5602d7368)
|
|
the backend what is actually in use
metze
(This used to be commit 6f3eb7bc03609108b9e0ea5676fca3d04140e737)
|
|
metze
(This used to be commit 717f7c3555ecf6265b5b30783f3214f4ca3b6c00)
|
|
metze
(This used to be commit e6d83d019dc46ff7ae32e7c8f9f7a3ab7d0cdcf3)
|