Re: and no man page for psec in SAMBA_2_2

2002-05-03 Thread Jean Francois Micouleau
On Sat, 4 May 2002, Richard Sharpe wrote: > OK, they are now known as pipeacl etc, but I can see them. There is an SD > on lsass, and it currently allows everyone to access it. pipeacl is a different tool. It opens the SD of the named pipe, it doesn't allow to view/change the SD of that's conn

Re: and no man page for psec in SAMBA_2_2

2002-05-03 Thread Richard Sharpe
On Fri, 3 May 2002, Jean Francois Micouleau wrote: > > > On Fri, 3 May 2002, Richard Sharpe wrote: > > > > btw, Tim, the restricted anonymous enumeration "feature" you had with W2K > > > and winbind, the policy code in w2k is changing the SD on the LSA pipe. > > > > Can you explain that some m

Re: and no man page for psec in SAMBA_2_2

2002-05-03 Thread Gerald Carter
On Fri, 3 May 2002, Tim Potter wrote: > On Thu, May 02, 2002 at 02:36:31PM -0500, Gerald Carter wrote: > > > And I thought I was so close > > It's not really a supported tool, more of a hack done in the hotel room > last year. (-: I rewrote it in about 80 lines of Python yesterday though.

Re: and no man page for psec in SAMBA_2_2

2002-05-03 Thread Jean Francois Micouleau
On Fri, 3 May 2002, Richard Sharpe wrote: > > btw, Tim, the restricted anonymous enumeration "feature" you had with W2K > > and winbind, the policy code in w2k is changing the SD on the LSA pipe. > > Can you explain that some more? Do you mean that Win2K implements it by > placing an SD on the

Re: and no man page for psec in SAMBA_2_2

2002-05-02 Thread Tim Potter
On Fri, May 03, 2002 at 08:44:33AM +0200, Jean Francois Micouleau wrote: > yep we want such a tool. We even want it to work on the LSA and the SAM > pipe. Sounds good to me. > btw, Tim, the restricted anonymous enumeration "feature" you had with W2K > and winbind, the policy code in w2k is chan

Re: and no man page for psec in SAMBA_2_2

2002-05-02 Thread Richard Sharpe
On Fri, 3 May 2002, Jean Francois Micouleau wrote: > > > On Fri, 3 May 2002, Tim Potter wrote: > > > On Thu, May 02, 2002 at 02:36:31PM -0500, Gerald Carter wrote: > > > > > And I thought I was so close > > > > It's not really a supported tool, more of a hack done in the hotel room > > las

Re: and no man page for psec in SAMBA_2_2

2002-05-02 Thread Jean Francois Micouleau
On Fri, 3 May 2002, Tim Potter wrote: > On Thu, May 02, 2002 at 02:36:31PM -0500, Gerald Carter wrote: > > > And I thought I was so close > > It's not really a supported tool, more of a hack done in the hotel room > last year. (-: I rewrote it in about 80 lines of Python yesterday though.

Re: and no man page for psec in SAMBA_2_2

2002-05-02 Thread Tim Potter
On Thu, May 02, 2002 at 02:36:31PM -0500, Gerald Carter wrote: > And I thought I was so close It's not really a supported tool, more of a hack done in the hotel room last year. (-: I rewrote it in about 80 lines of Python yesterday though. The question is do we want or need a tool that can