r24777: add 11 specific access rights to the access mask for

domains on the samr pipe

10 of these bits :
  lookup info 1
  set info 1
  lookup info 2
  set info 2
  create user
  create group
  create alias
  enum account
  open account
  set info 3
come from wireshark/ethereal and were added to wireshark in Aug 21 2002
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054

one bit
  lookup alias
also comes from wireshark where it was added in wireshark in Feb 21 2003

http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=7173&r2=7178
(This used to be commit 4b2c8e28657b31c606d21946e7949c9cc52613c9)

diff --git a/source4/librpc/idl/samr.idl b/source4/librpc/idl/samr.idl
index 25849ea6b7bbffacd601259d701d3160056ba10e..d36fe93d04e2a469b1f75c98e9b4b92235e34068 100644 (file)
--- a/source4/librpc/idl/samr.idl
+++ b/source4/librpc/idl/samr.idl
@@ -50,6 +50,20 @@ import "misc.idl", "lsa.idl", "security.idl";
                SAMR_ACCESS_OPEN_DOMAIN         = 0x00000020
        } samr_ConnectAccessMask;
 
+       typedef [bitmap32bit] bitmap {
+               DOMAIN_ACCESS_LOOKUP_INFO_1  = 0x00000001,
+               DOMAIN_ACCESS_SET_INFO_1     = 0x00000002,
+               DOMAIN_ACCESS_LOOKUP_INFO_2  = 0x00000004,
+               DOMAIN_ACCESS_SET_INFO_2     = 0x00000008,
+               DOMAIN_ACCESS_CREATE_USER    = 0x00000010,
+               DOMAIN_ACCESS_CREATE_GROUP   = 0x00000020,
+               DOMAIN_ACCESS_CREATE_ALIAS   = 0x00000040,
+               DOMAIN_ACCESS_LOOKUP_ALIAS   = 0x00000080,
+               DOMAIN_ACCESS_ENUM_ACCOUNTS  = 0x00000100,
+               DOMAIN_ACCESS_OPEN_ACCOUNT   = 0x00000200,
+               DOMAIN_ACCESS_SET_INFO_3     = 0x00000400
+       } samr_DomainAccessMask;
+
        typedef [bitmap32bit] bitmap {
                GROUP_ACCESS_LOOKUP_INFO     = 0x00000001,
                GROUP_ACCESS_SET_INFO        = 0x00000002,
@@ -145,7 +159,7 @@ import "misc.idl", "lsa.idl", "security.idl";
        /* Function    0x07     */
        [public] NTSTATUS samr_OpenDomain(
                [in,ref]      policy_handle *connect_handle,
-               [in]          uint32 access_mask,
+               [in]          samr_DomainAccessMask access_mask,
                [in,ref]      dom_sid2 *sid,
                [out,ref]     policy_handle *domain_handle
                );