← Back to branch summary

~ubuntu-branches/ubuntu/maverick/samba/maverick-security

« back to all changes in this revision

Viewing changes to source/lib/netapi/localgroup.c

  • Committer: Bazaar Package Importer
  • Author(s): Andrew Mitchell
  • Date: 2009-05-18 13:26:04 UTC
  • mfrom: (0.28.5 sid)
  • Revision ID: james.westby@ubuntu.com-20090518132604-ebyuqimgymtr3h0k
Tags: 2:3.3.4-2ubuntu1
https://launchpad.net/bugs/312449
https://launchpad.net/bugs/300221
* Merge from debian unstable, remaining changes:
  + debian/patches/VERSION.patch:
    - setup SAMBA_VERSION_SUFFIX to Ubuntu.
  + debian/smb.conf:
    - add "(Samba, Ubuntu)" to server string.
    - comment out the default [homes] share, and add a comment about
      "valid users = %S" to show users how to restrict access to
      \\server\username to only username.
    - Set 'usershare allow guests', so that usershare admins are
      allowed to create public shares in addition to authenticated
      ones.
    - add map to guest = Bad user, maps bad username to guest access.
  + debian/samba-common.config:
    - Do not change priority to high if dhclient3 is installed.
    - Use priority medium instead of high for the workgroup question.
  + debian/samba-common.postinst: Add more informative error message for
    the case where smb.conf was manually deleted (LP: #312449)
  + debian/mksambapasswd.awk:
    - Do not add user with UID less than 1000 to smbpasswd.
  + debian/control:
    - Make libwbclient0 replace/conflict with hardy's likewise-open.
    - Don't build against ctdb.
    - Add suggests keyutils for smbfs. (LP: #300221)
  + debian/rules:
    - enable "native" PIE hardening.
    - remove --with-ctdb and --with-cluster-support=yes
  + Add ufw integration:
    - Created debian/samba.ufw profile.
    - debian/rules, debian/samba.dirs, debian/samba.files: install 
      profile
    - debian/control: have samba sugguest ufw.
* Dropped patches:
  + debian/patches/fix-upstream-bug-6186.patch: Merged upstream

Show diffs side-by-side

added added

removed removed

Lines of Context:
source/lib/netapi/localgroup.c
159
159
        }
160
160
 
161
161
        werr = libnetapi_samr_open_builtin_domain(ctx, pipe_cli,
162
 
                                                  SAMR_ACCESS_OPEN_DOMAIN |
 
162
                                                  SAMR_ACCESS_LOOKUP_DOMAIN |
163
163
                                                  SAMR_ACCESS_ENUM_DOMAINS,
164
164
                                                  SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
165
165
                                                  &connect_handle,
184
184
 
185
185
        werr = libnetapi_samr_open_domain(ctx, pipe_cli,
186
186
                                          SAMR_ACCESS_ENUM_DOMAINS |
187
 
                                          SAMR_ACCESS_OPEN_DOMAIN,
 
187
                                          SAMR_ACCESS_LOOKUP_DOMAIN,
188
188
                                          SAMR_DOMAIN_ACCESS_CREATE_ALIAS |
189
189
                                          SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
190
190
                                          &connect_handle,
285
285
        }
286
286
 
287
287
        werr = libnetapi_samr_open_builtin_domain(ctx, pipe_cli,
288
 
                                                  SAMR_ACCESS_OPEN_DOMAIN |
 
288
                                                  SAMR_ACCESS_LOOKUP_DOMAIN |
289
289
                                                  SAMR_ACCESS_ENUM_DOMAINS,
290
290
                                                  SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
291
291
                                                  &connect_handle,
310
310
 
311
311
        werr = libnetapi_samr_open_domain(ctx, pipe_cli,
312
312
                                          SAMR_ACCESS_ENUM_DOMAINS |
313
 
                                          SAMR_ACCESS_OPEN_DOMAIN,
 
313
                                          SAMR_ACCESS_LOOKUP_DOMAIN,
314
314
                                          SAMR_DOMAIN_ACCESS_CREATE_ALIAS |
315
315
                                          SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
316
316
                                          &connect_handle,
463
463
        }
464
464
 
465
465
        werr = libnetapi_samr_open_builtin_domain(ctx, pipe_cli,
466
 
                                                  SAMR_ACCESS_OPEN_DOMAIN |
 
466
                                                  SAMR_ACCESS_LOOKUP_DOMAIN |
467
467
                                                  SAMR_ACCESS_ENUM_DOMAINS,
468
468
                                                  SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
469
469
                                                  &connect_handle,
488
488
 
489
489
        werr = libnetapi_samr_open_domain(ctx, pipe_cli,
490
490
                                          SAMR_ACCESS_ENUM_DOMAINS |
491
 
                                          SAMR_ACCESS_OPEN_DOMAIN,
 
491
                                          SAMR_ACCESS_LOOKUP_DOMAIN,
492
492
                                          SAMR_DOMAIN_ACCESS_CREATE_ALIAS |
493
493
                                          SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
494
494
                                          &connect_handle,
640
640
        }
641
641
 
642
642
        werr = libnetapi_samr_open_builtin_domain(ctx, pipe_cli,
643
 
                                                  SAMR_ACCESS_OPEN_DOMAIN |
 
643
                                                  SAMR_ACCESS_LOOKUP_DOMAIN |
644
644
                                                  SAMR_ACCESS_ENUM_DOMAINS,
645
645
                                                  SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
646
646
                                                  &connect_handle,
667
667
 
668
668
        werr = libnetapi_samr_open_domain(ctx, pipe_cli,
669
669
                                          SAMR_ACCESS_ENUM_DOMAINS |
670
 
                                          SAMR_ACCESS_OPEN_DOMAIN,
 
670
                                          SAMR_ACCESS_LOOKUP_DOMAIN,
671
671
                                          SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
672
672
                                          &connect_handle,
673
673
                                          &domain_handle,
788
788
        }
789
789
 
790
790
        werr = libnetapi_samr_open_builtin_domain(ctx, pipe_cli,
791
 
                                                  SAMR_ACCESS_OPEN_DOMAIN |
 
791
                                                  SAMR_ACCESS_LOOKUP_DOMAIN |
792
792
                                                  SAMR_ACCESS_ENUM_DOMAINS,
793
793
                                                  SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2 |
794
794
                                                  SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS |
800
800
        }
801
801
 
802
802
        werr = libnetapi_samr_open_domain(ctx, pipe_cli,
803
 
                                          SAMR_ACCESS_OPEN_DOMAIN |
 
803
                                          SAMR_ACCESS_LOOKUP_DOMAIN |
804
804
                                          SAMR_ACCESS_ENUM_DOMAINS,
805
805
                                          SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2 |
806
806
                                          SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS |
1101
1101
        }
1102
1102
 
1103
1103
        werr = libnetapi_samr_open_builtin_domain(ctx, pipe_cli,
1104
 
                                                  SAMR_ACCESS_OPEN_DOMAIN |
 
1104
                                                  SAMR_ACCESS_LOOKUP_DOMAIN |
1105
1105
                                                  SAMR_ACCESS_ENUM_DOMAINS,
1106
1106
                                                  SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
1107
1107
                                                  &connect_handle,
1131
1131
 
1132
1132
        werr = libnetapi_samr_open_domain(ctx, pipe_cli,
1133
1133
                                          SAMR_ACCESS_ENUM_DOMAINS |
1134
 
                                          SAMR_ACCESS_OPEN_DOMAIN,
 
1134
                                          SAMR_ACCESS_LOOKUP_DOMAIN,
1135
1135
                                          SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT,
1136
1136
                                          &connect_handle,
1137
1137
                                          &domain_handle,
1355
1355
{
1356
1356
        LIBNETAPI_REDIRECT_TO_LOCALHOST(ctx, r, NetLocalGroupSetMembers);
1357
1357
}
1358