repo.or.cz
/
Samba.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
s3-rpc_server: support AES decryption in netr_ServerPasswordSet2 server.
2012-12-03
S
t
efan Metzmacher
s4:ds
d
b/
s
ubtre
e
_delete: delete from the leafs to the
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
St
e
fan Metzmach
e
r
s4:dsd
b
/su
b
tree_delet
e
: do the recursive
d
elet
e
AS_SYSTEM
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
an Met
z
macher
s
4:dsdb/subtree_delete: do an early
return and
avoid
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4
:
ds
d
b/obj
e
c
tclass: do not
p
a
ss
the callers co
n
t
r
ols
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzm
a
cher
s4:dsdb/acl:
r
equire SEC_ADS_DELETE_
T
REE
i
f the TRE
E
_DELETE
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan
Metzmacher
s4:dsdb/dirsync: rem
o
ve
u
nus
e
d 'deletedattr' variable
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmach
e
r
s
4
:provision:
a
dd p
e
k
L
ist and msDS-E
x
ecu
t
eSc
r
i
p
tPassword
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
St
e
fan Metzma
c
her
s4
:
d
sdb/common: add pekLi
s
t
and
m
s
D
S-ExecuteScriptPassword
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
tefan Metzma
c
her
s4:d
s
db/acl: also ad
d
DSDB_SE
C
RET_ATTRIBUTES into the
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
tefan
M
etzmacher
s4:dsdb/desc
r
iptor: the old nTSec
u
ri
t
yD
e
scri
p
t
o
r is
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan
Metzma
c
her
s4:d
s
db/descriptor: make explici
t
that
w
e don't suppo
r
t
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
t
ef
a
n
M
etzm
a
cher
s4:
d
sdb/descriptor: r
e
move so
m
e
nestin
g
from descriptor_modify
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzm
a
c
h
e
r
s4:dsdb
/
descriptor: r
e
move so
m
e unneces
s
a
ry n
e
s
t
i
ng
commit
|
commitdiff
|
tree
2012-12-03
Stefan Me
t
zmacher
s4:
d
sdb/des
c
riptor: add some e
r
ror
checks to descriptor_
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metz
m
ache
r
s4
:
dsdb/descriptor:
remove support for
u
n
u
s
e
d LDB_CONTROL_RE
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Me
t
z
m
acher
s
4:dsdb/desc
r
iptor: move
special dn check to the st
a
rt
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s
4:sam
b
a_upgrad
e
provi
s
i
o
n: use the
sd_
f
lags:
1
:15 c
o
n
trol
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
St
e
fa
n
Metzmacher
s4:pro
v
ision:
a
dd g
e
t_em
p
t
y_descriptor()
commit
|
commitdiff
|
tree
2012-12-03
Stefan
Metzmacher
s
4
:
d
s
db/
d
escriptor: if th
e
caller s
p
ecifi
e
s no DACL
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:dsdb/descripto
r
: gi
v
e SYSTEM the corr
e
c
t
defaul
t
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
St
e
fan Metzma
c
her
s4:ds
d
b/acl_r
e
ad: enable
a
c
l
c
he
c
king on sear
c
h by
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s
4:dsdb/acl_rea
d
: sp
e
c
i
fy t
h
e correct access_m
a
sk for
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
a
n
Metzmacher
s4:
d
sdb/acl_read: do search fo
r
instanceType AS_
S
YST
E
M
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s
4
:
dsdb/
a
c
l
: calcu
l
ate the correct access_
m
a
sk when
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
an Metzmacher
s4:dsd
b
/acl: don'
t
protect confide
n
tial attributes
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan M
e
t
zmache
r
s4:dsd
b
/ac
l
: remove unused "
a
cl:
p
e
rform" option
commit
|
commitdiff
|
tree
2012-12-03
S
tef
a
n Met
z
macher
s
4
:dsdb/acl: do h
e
lper searches
AS_SYSTEM and with
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:dsdb/descriptor: m
a
ke
it clear t
h
a
t
t
he
S
D Flags
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
tefan Me
t
zmacher
s4:dsdb/descriptor
:
make use of
d
s
db_request_sd_
f
lags()
commit
|
commitdiff
|
tree
2012-12-03
S
tefa
n
Metzm
a
cher
s4:dsdb/descriptor: always use descriptor_searc
h
_cal
l
back
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:dsdb
/
descriptor
:
do sea
r
ches
fo
r
n
T
SecurityD
e
scri
p
tor
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:dsdb/acl_uti
l
: add ds
d
b
_reque
s
t
_sd_flags() helper
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefa
n
M
et
z
macher
s4:ds
d
b/
a
cl_util: do hel
p
er searches AS
_
S
YSTEM
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:dsdb/extended_dn_st
o
re: do
h
elper searches
A
S_SYSTEM
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:dsdb/ex
t
ended_dn_in:
d
o helper searches AS_SYSTEM
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
an
Metzmach
e
r
s4:dsdb/objectclass: do
h
e
lper searches A
S
_SYSTE
M
a
n
d
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
t
e
fan Metzmacher
s4:ds
d
b/
r
ootdse
:
do
h
elper sea
r
ches
A
S_SYSTEM
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metz
m
ach
e
r
s4
:
dsdb/rootdse:
remove unused variable
commit
|
commitdiff
|
tree
2012-12-03
St
e
f
a
n Metzm
a
cher
s4:dsdb/
d
irsy
n
c:
e
xpl
i
c
i
tly as
k
f
o
r
sdctr->secinf
o
_
flags
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefa
n
Met
z
macher
s4:
d
sd
b
/
dir
s
y
n
c
: use the correct nc_root to fetch re
p
lUpToDa
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
t
efan Metzma
c
h
er
s4:dsd
b
/dirsync
:
check r
e
sult
o
f
r
eplUpToDat
e
Vector
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Me
t
zma
c
h
e
r
s4:dsdb/schema_data: fix debug mes
s
age
i
n schema_data_modi
f
y()
commit
|
commitdiff
|
tree
2012-12-03
Stefan Me
t
zmac
h
er
s
4:python/ntacl: add 'a
s
_s
d
dl'
o
pt
i
on
to ds
a
cl2fsacl()
commit
|
commitdiff
|
tree
2012-12-03
Stefa
n
Metzmache
r
s4:pytho
n
/ntacl: allow str
i
ng or
objects
f
or s
d
/s
i
d
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4
:
samb
a
-
tool/gpo: fix the oper
a
tion or
d
er when creating
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:samba-tool
/
gpo: us
e
'g
P
C
F
ileS
y
sPath' when
dele
t
ing
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stef
a
n Metzmache
r
s4
:
samba-
t
o
o
l
/
gpo: u
s
e the
dns_d
o
main from the server
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
t
efa
n
Met
z
mach
e
r
s
4
:
l
i
b
cli
/
f
inddc
s
_cldap: allow io->in
.
server_addres
s
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzmacher
s4:libcli/fin
d
d
c
s_
c
ldap:
t
ry all
N
BT
#
1C addresses
commit
|
commitdiff
|
tree
2012-12-03
Stef
a
n Metzma
c
her
s3:smbcacls
:
ad
d
-
-
query
-
se
c
ur
i
ty-info and -
-
s
e
t-secu
r
ity
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Me
t
zm
a
ch
e
r
s3:libsmb
:
add cli_{
q
u
e
ry
,
set}_s
e
curi
t
y_descriptor
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Metzma
c
her
libcli
/
se
c
urity: remov
e
duplicate aces
in
se_create_chi
l
d
_s
e
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stef
a
n Metzmacher
s3:smbd/open
:
fal
l
back to Builtin_
A
dminist
r
ators if
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan M
e
tzmac
h
er
s3:smbd/ope
n
: try t
h
e primary sid
(
u
ser) as group_si
d
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan
M
etzmacher
s
3:
s
mbd/open: use Builtin_Administrat
o
rs as owner of
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Michael
A
dam
s4
:
tests/samba_tool/gpo
.
py: fix acc
i
d
e
n
tial l
i
ne b
r
eak
commit
|
commitdiff
|
tree
2012-12-03
Stefa
n
M
etz
m
a
cher
s4:test
s
/s
a
mba_tool/g
p
o
.
py: ad
d
test_show_as
_
ad
m
in()
commit
|
commitdiff
|
tree
2012-12-03
Stef
a
n M
e
tzmach
e
r
s
4
:netcm
d
/gp
o
.
py: let g
e
t_
g
po_
i
nfo explicitly
a
sk
for
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Met
z
mach
e
r
s4:netcmd/gpo
.
py: o
n
ly ask for OWNER/GROUP/DAC
L
when
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Met
z
macher
s4:netc
m
d/gpo
.
py: the nTSe
c
urityDes
c
riptor may not
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
S
t
efan
Metz
m
acher
s4:netcmd/gpo
.
py
:
s
/
n
tS
e
curityDescriptor/nTSecurityDescriptor
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
an Metzm
a
c
h
er
WHATSNEW
.
t
x
t
: "acl compat
i
bility" was removed
commit
|
commitdiff
|
tree
2012-12-03
St
e
fan Metz
m
ache
r
s
3:vfs_gpfs: add no memo
r
y check
in gpfs2sm
b
_acl()
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
a
n
M
e
t
z
macher
s
3
:vfs_gpfs:
m
ake sure we return th
e
correct
errno
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan Met
z
m
a
c
h
er
s
4
:smbd/open: ad
d
m
issing TALLOC_F
R
EE(fra
m
e) to
in
h
erit_new_
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Ste
f
an
Metzmacher
s3:
v
fs_ai
x
acl2
:
make use of vfs_aixacl_util
.
h
commit
|
commitdiff
|
tree
2012-12-03
Stef
a
n Metzmach
e
r
s3
:
vfs_mod
u
les: fix *sy
s
_ac
l
_blob_get_{fi
l
e,fd} and
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Stefan
Met
z
mach
e
r
s3:param:
s
e
t
"map archive = no" in ROLE_ACTIVE_D
I
RECTOR
Y
_DC
commit
|
commitdiff
|
tree
2012-12-03
A
n
d
rew Bartlett
vfs: Remove type paramete
r
from sys_ac
l
_
b
lob_get_{fd
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
M
icha
e
l
A
dam
s3:
p
a
r
am: ma
k
e in
i
t_l
o
cals(
)
static
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew B
a
rtlett
s3-p
a
r
am: Han
d
le setting default
A
D DC per-shar
e
s
e
tti
n
g
s
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartl
e
tt
sam
b
a
-tool: Add new samba-to
o
l gpo ac
l
check and test
commit
|
commitdiff
|
tree
2012-12-03
Andrew B
a
rtle
t
t
scripting n
t
acl
s
: Do not pl
a
ce a SACL in the GPO filesyst
e
m ACL
commit
|
commitdiff
|
tree
2012-12-03
And
r
ew Bartlett
ntvfs: Fi
l
l in
s
d->type based on the
ne
w
ACL bein
g
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
And
r
ew Bart
l
ett
smbd:
R
em
o
ve N
T
4 compatabi
l
ity handling in posi
x
-
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartlet
t
smbd:
C
orrectly se
t
fsp->is_
d
i
r
ectory before dealing
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andr
e
w Bart
l
ett
Ensure we Correctly se
t
fsp->is_dire
c
tory before
d
ea
l
ing
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bar
t
lett
selftest:
A
dd --tmp
d
ir to 'samba-t
o
ol
g
po create' tes
t
commit
|
commitdiff
|
tree
2012-12-03
A
n
drew
Bart
l
et
t
se
l
ftest: Avoid ret
u
r
n
ing e
r
rors
(
r
a
ther than
f
ailur
e
s
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartlett
sel
f
test: Avoid
t
es
t
cr
o
ss
-
co
n
t
a
m
ination in samba
.
tests
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartl
e
tt
selftest
:
Add tests for expected behavi
o
ur o
n
di
r
ectories
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andre
w
Bartlett
pysm
b
d: Add SMB_
A
CL_EXE
C
UTE to the mask set b
y
make_simple_ac
l
()
commit
|
commitdiff
|
tree
2012-12-03
Andre
w
Bartlett
selftest: Make samba
.
tests
.
ntacl also use TestCaseInTempDir
commit
|
commitdiff
|
tree
2012-12-03
An
d
r
ew Bartlett
provisi
o
n: Mak
e
dsac
l
2f
s
acl() t
a
ke a secu
r
it
y
.
dom
_
sid
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andr
e
w Bartlett
p
rovision: Also walk directories checki
n
g
A
C
L
s
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartlett
sel
f
test: check that samba-tool gpo wo
r
ks for basi
c
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
A
ndrew Bartle
t
t
vfs_a
c
l_common: In a
d
d_directory_inheritabl
e
_
c
ompone
n
t
s
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Jelmer V
e
r
noo
i
j
TestCaseInTem
p
D
i
r:
U
s
e addCleanup
rather than tearDown
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
A
n
drew Bartle
t
t
sefltest: use Tes
t
C
a
seInTempDir and
s
etUp
/
tea
r
Down
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew
Bartlett
provision:
F
ix comments in ch
e
cksysv
o
l
acl (c
h
erry picked
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartl
e
tt
vfstest: set uma
s
k(0) in vfstest
commit
|
commitdiff
|
tree
2012-12-03
Andrew
B
ar
t
l
e
tt
pysmbd: S
e
t
uma
s
k to
0 during
s
mbd o
p
erations (che
r
ry
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
And
r
ew
B
a
rtlett
py
s
mbd: R
e
m
ember to cl
o
se file
s
after setting th
e
NT
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Ba
r
tlett
pysmbd
:
Add hook
for unlink() s
o
py
t
hon s
c
ripts can
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
And
r
ew Bartlett
p
y
thon-ntacls: Cope
w
ith ACL
revi
s
ion 4
commit
|
commitdiff
|
tree
2012-12-03
Andrew
Bartlett
dbwrap: use talloc_stackfra
m
e
() in db_tdb_log_k
e
y()
commit
|
commitdiff
|
tree
2012-12-03
Andrew
B
artlett
s
e
lf
t
est
:
Always u
n
link the tempf in
posixacl test
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
A
n
drew Bartlett
s
e
lftest: Cover
the impo
r
t
a
nt non-Samba inva
l
idation
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew Bartlett
selftest: Cover one mor
e
NT ACL invali
d
ation case and
.
.
.
commit
|
commitdiff
|
tree
2012-12-03
Andrew B
a
rtlett
s
e
lftest: Add
m
any
m
o
re
t
e
s
ts
for ou
r
posix ACL handling
commit
|
commitdiff
|
tree
next