From: Günther Deschner <gd@samba.org>
Date: Wed, 20 May 2009 11:32:25 +0000 (+0200)
Subject: s4: try to fix privileges implementation in order to pass the RPC-SAMR-USERS-PRIVILEG... 
X-Git-Tag: tdb-1.1.5~463
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9a13af9a994e385a5966eed7cdf3a2add00f8f08;p=thirdparty%2Fsamba.git

s4: try to fix privileges implementation in order to pass the RPC-SAMR-USERS-PRIVILEGES test.

Guenther
---

diff --git a/librpc/gen_ndr/security.h b/librpc/gen_ndr/security.h
index 32ea2eaacd9..f90dd413a8f 100644
--- a/librpc/gen_ndr/security.h
+++ b/librpc/gen_ndr/security.h
@@ -166,7 +166,8 @@ enum sec_privilege
 	SEC_PRIV_ENABLE_DELEGATION=21,
 	SEC_PRIV_INTERACTIVE_LOGON=22,
 	SEC_PRIV_NETWORK_LOGON=23,
-	SEC_PRIV_REMOTE_INTERACTIVE_LOGON=24
+	SEC_PRIV_REMOTE_INTERACTIVE_LOGON=24,
+	SEC_PRIV_MACHINE_ACCOUNT=25
 }
 #else
  { __donnot_use_enum_sec_privilege=0x7FFFFFFF}
@@ -194,6 +195,7 @@ enum sec_privilege
 #define SEC_PRIV_INTERACTIVE_LOGON ( 22 )
 #define SEC_PRIV_NETWORK_LOGON ( 23 )
 #define SEC_PRIV_REMOTE_INTERACTIVE_LOGON ( 24 )
+#define SEC_PRIV_MACHINE_ACCOUNT ( 25 )
 #endif
 ;
 
diff --git a/librpc/idl/security.idl b/librpc/idl/security.idl
index caad08e9544..825ce96d712 100644
--- a/librpc/idl/security.idl
+++ b/librpc/idl/security.idl
@@ -261,7 +261,8 @@ interface security
 		SEC_PRIV_ENABLE_DELEGATION         = 21,
 		SEC_PRIV_INTERACTIVE_LOGON         = 22,
 		SEC_PRIV_NETWORK_LOGON             = 23,
-		SEC_PRIV_REMOTE_INTERACTIVE_LOGON  = 24
+		SEC_PRIV_REMOTE_INTERACTIVE_LOGON  = 24,
+		SEC_PRIV_MACHINE_ACCOUNT           = 25
 	} sec_privilege;
 
 
diff --git a/source4/libcli/security/privilege.c b/source4/libcli/security/privilege.c
index 2cbef135382..2ebc1dc915a 100644
--- a/source4/libcli/security/privilege.c
+++ b/source4/libcli/security/privilege.c
@@ -123,7 +123,11 @@ static const struct {
 
 	{SEC_PRIV_REMOTE_INTERACTIVE_LOGON,   
 	 "SeRemoteInteractiveLogonRight",
-	"Remote Interactive logon"}
+	"Remote Interactive logon"},
+
+	{SEC_PRIV_MACHINE_ACCOUNT,
+	 "SeMachineAccountPrivilege",
+	"Add workstations to domain"}
 };