From 0193c581148441e527b0b5b98a2a7845105006f3 Mon Sep 17 00:00:00 2001 From: Ronnie Sahlberg Date: Wed, 29 Aug 2007 12:39:58 +0000 Subject: r24777: add 11 specific access rights to the access mask for domains on the samr pipe 10 of these bits : lookup info 1 set info 1 lookup info 2 set info 2 create user create group create alias enum account open account set info 3 come from wireshark/ethereal and were added to wireshark in Aug 21 2002 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054 one bit lookup alias also comes from wireshark where it was added in wireshark in Feb 21 2003 http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=7173&r2=7178 (This used to be commit 4b2c8e28657b31c606d21946e7949c9cc52613c9) --- source4/librpc/idl/samr.idl | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) (limited to 'source4') diff --git a/source4/librpc/idl/samr.idl b/source4/librpc/idl/samr.idl index 25849ea6b7..d36fe93d04 100644 --- a/source4/librpc/idl/samr.idl +++ b/source4/librpc/idl/samr.idl @@ -50,6 +50,20 @@ import "misc.idl", "lsa.idl", "security.idl"; SAMR_ACCESS_OPEN_DOMAIN = 0x00000020 } samr_ConnectAccessMask; + typedef [bitmap32bit] bitmap { + DOMAIN_ACCESS_LOOKUP_INFO_1 = 0x00000001, + DOMAIN_ACCESS_SET_INFO_1 = 0x00000002, + DOMAIN_ACCESS_LOOKUP_INFO_2 = 0x00000004, + DOMAIN_ACCESS_SET_INFO_2 = 0x00000008, + DOMAIN_ACCESS_CREATE_USER = 0x00000010, + DOMAIN_ACCESS_CREATE_GROUP = 0x00000020, + DOMAIN_ACCESS_CREATE_ALIAS = 0x00000040, + DOMAIN_ACCESS_LOOKUP_ALIAS = 0x00000080, + DOMAIN_ACCESS_ENUM_ACCOUNTS = 0x00000100, + DOMAIN_ACCESS_OPEN_ACCOUNT = 0x00000200, + DOMAIN_ACCESS_SET_INFO_3 = 0x00000400 + } samr_DomainAccessMask; + typedef [bitmap32bit] bitmap { GROUP_ACCESS_LOOKUP_INFO = 0x00000001, GROUP_ACCESS_SET_INFO = 0x00000002, @@ -145,7 +159,7 @@ import "misc.idl", "lsa.idl", "security.idl"; /* Function 0x07 */ [public] NTSTATUS samr_OpenDomain( [in,ref] policy_handle *connect_handle, - [in] uint32 access_mask, + [in] samr_DomainAccessMask access_mask, [in,ref] dom_sid2 *sid, [out,ref] policy_handle *domain_handle ); -- cgit