From 92723aaeea241f7aea7f6720ec3e6d7cb2431ad8 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Thu, 26 Aug 2010 16:04:53 +1000 Subject: [PATCH] security.idl clarify which privilages are LUID and bitmap values Signed-off-by: Andrew Tridgell --- librpc/idl/security.idl | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/librpc/idl/security.idl b/librpc/idl/security.idl index 922b264df9a..59d3f5c1434 100644 --- a/librpc/idl/security.idl +++ b/librpc/idl/security.idl @@ -352,9 +352,11 @@ interface security ********************************************************************/ -/* we have to define the LUID here due to a horrible check by printmig.exe - that requires the SeBackupPrivilege match what is in Windows. So match - those that we implement and start Samba privileges at 0x1001 */ + /* LUID values for privileges known about by Samba (bottom 32 bit of enum, top bits are 0) */ + + /* we have to define the LUID here due to a horrible check by printmig.exe + that requires the SeBackupPrivilege match what is in Windows. So match + those that we implement and start Samba privileges at 0x1001 */ typedef enum { SEC_PRIV_INCREASE_QUOTA = 0x5, @@ -389,9 +391,11 @@ interface security SEC_PRIV_REMOTE_INTERACTIVE_LOGON = 0x2024 } sec_privilege; -/* - * We will use our own bitmap here as the Samba3 privilages.tdb records these values - */ + + /* Bitmap of privilege values for internal use only. We need + * our own bitmap here as privilages.tdb records these values + * as a bitmap (privilages.ldb uses the string forms). + */ typedef [bitmap64bit] bitmap { SE_NETWORK_LOGON = 0x00000001, SE_INTERACTIVE_LOGON = 0x00000002, -- 2.34.1