[SCM] Samba Shared Repository - branch master updated

[Günther Deschner]

The branch, master has been updated
       via  a5a7b9e... s3-lsa: Fix _lsa_CreateAccount() for usage of SEC_FLAG_MAXIMUM_ALLOWED.
       via  870f2d3... s3-selftest: enable RPC-LSA-PRIVILEGES against Samba 3.
      from  7e18010... s4-smbtorture: Fix wrong comment in RPC-LSA-TRUSTED-DOMAIN test.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit a5a7b9ebc220b6477c987fe5552561c41e9d1b85
Author: Günther Deschner <gd at samba.org>
Date:   Tue Oct 20 15:54:40 2009 +0200

    s3-lsa: Fix _lsa_CreateAccount() for usage of SEC_FLAG_MAXIMUM_ALLOWED.
    
    Found by RPC-LSA-PRIVILEGES torture test.
    
    Guenther

commit 870f2d336a57f16ed5f1018ced6fa4ef5d61539c
Author: Günther Deschner <gd at samba.org>
Date:   Thu Jul 16 18:46:10 2009 +0200

    s3-selftest: enable RPC-LSA-PRIVILEGES against Samba 3.
    
    Guenther

-----------------------------------------------------------------------

Summary of changes:
 source3/rpc_server/srv_lsa_nt.c       |    5 +++++
 source3/script/tests/test_posix_s3.sh |    1 +
 2 files changed, 6 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_server/srv_lsa_nt.c b/source3/rpc_server/srv_lsa_nt.c
index a3a1218..9d1b5b9 100644
--- a/source3/rpc_server/srv_lsa_nt.c
+++ b/source3/rpc_server/srv_lsa_nt.c
@@ -1665,6 +1665,11 @@ NTSTATUS _lsa_CreateAccount(pipes_struct *p,
 		return NT_STATUS_ACCESS_DENIED;
 	}
 
+	/* Work out max allowed. */
+	map_max_allowed_access(p->server_info->ptok,
+			       &p->server_info->utok,
+			       &r->in.access_mask);
+
 	/* map the generic bits to the lsa policy ones */
 	se_map_generic(&r->in.access_mask, &lsa_account_mapping);
 
diff --git a/source3/script/tests/test_posix_s3.sh b/source3/script/tests/test_posix_s3.sh
index cfa6d5a..eaae813 100755
--- a/source3/script/tests/test_posix_s3.sh
+++ b/source3/script/tests/test_posix_s3.sh
@@ -42,6 +42,7 @@ rpc="$rpc RPC-SAMBA3-SPOOLSS RPC-SAMBA3-WKSSVC"
 rpc="$rpc RPC-NETLOGSAMBA3 RPC-SAMBA3SESSIONKEY RPC-SAMBA3-GETUSERNAME"
 rpc="$rpc RPC-SVCCTL RPC-SPOOLSS RPC-SPOOLSS-WIN RPC-NTSVCS"
 rpc="$rpc RPC-LSA-GETUSER RPC-LSA-LOOKUPSIDS RPC-LSA-LOOKUPNAMES"
+rpc="$rpc RPC-LSA-PRIVILEGES "
 rpc="$rpc RPC-SAMR RPC-SAMR-USERS RPC-SAMR-USERS-PRIVILEGES RPC-SAMR-PASSWORDS"
 rpc="$rpc RPC-SAMR-PASSWORDS-PWDLASTSET RPC-SAMR-LARGE-DC RPC-SAMR-MACHINE-AUTH"
 rpc="$rpc RPC-NETLOGON-S3 RPC-SCHANNEL RPC-SCHANNEL2 RPC-BENCH-SCHANNEL1 RPC-JOIN"


-- 
Samba Shared Repository