Re: Access control to SAM / _samr_query_sec_obj

2002-06-10 Thread Kai Krueger
Hi Here comes the next part of the access control patch. It fixes the nt_user_token in the pipes_struct and should therefore make the whole patch function correctly so that it probably could then be applied. Till now the current_user struct in pipes_struct was only initialised in the code for

ANSI C (was RE: Access control to SAM / _samr_query_sec_obj)

2002-06-06 Thread Matt Seitz
From: Tim Potter [mailto:[EMAIL PROTECTED]] On Thu, Jun 06, 2002 at 09:01:45PM +1000, Andrew Bartlett wrote: Secondly, I have some further style nit-picks: - We can't use \\ as a comment in Samba, as many C compilers don't understand it. It's actually not ANSI C! Another one I found

Re: Access control to SAM / _samr_query_sec_obj

2002-06-05 Thread Kai Krueger
This is the first version of the patch to implement access control to SAM. It implements checks of the desired access in all open functions (those that create handles) against the appropriate default SDs of the previous patch and associates the granted access bits with the handle. These

Re: Access control to SAM / _samr_query_sec_obj

2002-06-05 Thread Jeremy Allison
On Wed, Jun 05, 2002 at 07:51:53PM +0200, Kai Krueger wrote: This is the first version of the patch to implement access control to SAM. It implements checks of the desired access in all open functions (those that create handles) against the appropriate default SDs of the previous patch and

Re: Access control to SAM / _samr_query_sec_obj

2002-06-05 Thread Kai Krueger
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] Sent: Wednesday, June 05, 2002 8:07 PM Subject: Re: Access control to SAM / _samr_query_sec_obj Nice patch. I do have one request though. I've (for years) been removing magic numerical constants from Samba (like

Access control to SAM / _samr_query_sec_obj

2002-05-31 Thread Kai Krueger
Hi, currently, as far as I can see, the access control to the SAM database is only based upon file access to the db-files. On normal installations therefore only the root user can change, delete or add things instead of the entire administrators group. As this is IMHO rather unhelpfull,

Re: Access control to SAM / _samr_query_sec_obj

2002-05-31 Thread Tim Potter
On Sat, Jun 01, 2002 at 12:17:19AM +0200, Kai Krueger wrote: currently, as far as I can see, the access control to the SAM database is only based upon file access to the db-files. On normal installations therefore only the root user can change, delete or add things instead of the entire