CVS update: samba/source/rpcclient

Jean Francois Micouleau Jean-Francois.Micouleau at dalalu.fr
Tue Dec 11 21:17:42 EST 2001


On Mon, 10 Dec 2001, Tim Potter wrote:

> SAMR query sec obj returns different results depending on which sam handle
> it is passed.  Not sure what these different contexts are called or what
> they are used for.
>
>  - if a rid is specified to samquerysecobj then use the sam user policy
>     handle for that rid
>  - if -d is specified then use the sam domain policy handle
>  - otherwise just use the sam connect policy handle
>
> JF, any ideas about this?

no. I looked at the samr value and couldn't decipher what they are.

whereas on the lsaquerysecobj:

SID: S-1-5-32-544 -> Specific bits: 0x1fff
SID: S-1-1-0 -> Specific bits: 0x801

that's:
#define POLICY_VIEW_LOCAL_INFORMATION              0x00000001L
#define POLICY_VIEW_AUDIT_INFORMATION              0x00000002L
#define POLICY_GET_PRIVATE_INFORMATION             0x00000004L
#define POLICY_TRUST_ADMIN                         0x00000008L
#define POLICY_CREATE_ACCOUNT                      0x00000010L
#define POLICY_CREATE_SECRET                       0x00000020L
#define POLICY_CREATE_PRIVILEGE                    0x00000040L
#define POLICY_SET_DEFAULT_QUOTA_LIMITS            0x00000080L
#define POLICY_SET_AUDIT_REQUIREMENTS              0x00000100L
#define POLICY_AUDIT_LOG_ADMIN                     0x00000200L
#define POLICY_SERVER_ADMIN                        0x00000400L
#define POLICY_LOOKUP_NAMES                        0x00000800L
#define POLICY_NOTIFICATION                        0x00001000L

that makes sense !







More information about the samba-cvs mailing list