summaryrefslogtreecommitdiffstats
path: root/source4/dsdb/repl
Commit message (Collapse)AuthorAgeFilesLines
* libcli/security Use common security.hAndrew Bartlett2010-10-122-2/+2
| | | | | | | | | | This includes dom_sid.h and security_token.h and will be moved to the top level shortly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 03:35:36 UTC 2010 on sn-devel-104
* samdb: Add flags argument to samdb_connect().Jelmer Vernooij2010-10-101-1/+1
|
* s4-dsdb-repl: Print what the error code for failure isKamen Mazdrashki2010-10-101-1/+3
|
* s4-repl: use the GC principal name for DRS replication connectionAndrew Tridgell2010-10-013-6/+76
| | | | | | | this is required when talking to RODCs (for notify calls), and is good practice for all DCs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: don't set SPECIAL_SECRET_PROCESSING on EXOP_REPL_SECRETAndrew Tridgell2010-09-301-0/+3
| | | | | | otherwise we don't get the secrets! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drepl: don't call UpdateRefs on a RODCAndrew Tridgell2010-09-291-5/+11
| | | | | | we use the ADD_REF bit in getncchanges instead Pair-Programmed-With: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4-drepl: fixed the checking of replica_flags in the drepl serverAndrew Tridgell2010-09-291-7/+0
| | | | | | we were incorrectly avoiding a getncchanges when WRIT_REP was not set Pair-Programmed-With: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4-repl: use namingContexts from rootDSE to initialise partition listAndrew Tridgell2010-09-251-53/+36
| | | | | this is preferable to looking for the hasMasterNCs attribute on nTDSDSA objects.
* s4-repl: force on WRIT_REP when we are a writable replicaAndrew Tridgell2010-09-251-4/+3
| | | | | this ensures we always mark ourselves as writeable when we are not an RODC
* s4-repl: use dreplsrv_partition_source_dsa_by_guid to find source dsaAndrew Tridgell2010-09-251-5/+6
| | | | this avoids a list walk in the calling code
* s4:drepl_out_helpers.c - fix a counter typeMatthias Dieter Wallnöfer2010-09-241-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-drepl: use the partition UDV and hwm for extended getncchanges opsAndrew Tridgell2010-09-203-28/+75
| | | | | we find the NC root then load the uptodateness vector and highwater mark, if available, from there
* s4/fsmo: Create separate function for retrieving fsmo role dn and owner dn.Anatoliy Atanasov2010-09-201-54/+9
| | | | This functionality is needed for DsCrackNames ListRoles command also.
* s4/fsmo: Naming master support addedAnatoliy Atanasov2010-09-191-1/+2
| | | | Test suite for fsmo is extended with a test case for naming master too.
* s4-drs: Check for schema changes only in case we are *not* applying Schema ↵Kamen Mazdrashki2010-09-181-8/+19
| | | | | | | | replica This fixes the problem when we fail to replicate with a partner DC that has a newer Schema with attributeSchema objects with OIDs that we don't have in our local prefixMap.
* s4-drs: initial skeleton for DrsReplica{Add,Del,Mod} callsAndrew Tridgell2010-09-162-0/+96
|
* s4-repl: if we are an RODC don't set WRIT_REP in replicationAndrew Tridgell2010-09-161-2/+7
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: add partial attribute set to getncchanges calls for RODCsAndrew Tridgell2010-09-164-9/+67
| | | | | | | when we are a RODC we must supply a partial attribute set in the getncchanges call Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: added min_usn to extended replication callAndrew Tridgell2010-09-164-2/+9
| | | | | | | the repl_secret code needs to set it to avoid too many duplicate attributes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: added repl_secret handling Andrew Tridgell2010-09-161-1/+97
| | | | | | initiate a repl secret extended op when requested Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: cleanup the extended op calls in repl serverAndrew Tridgell2010-09-165-21/+23
| | | | | | | - use generic parameter names - trigger a run of pending ops on all extended ops - don't prevent parallel fsmo transfers - moved extended op code into drepl_extended
* s4-pyjoin: fill in the dns name in the python replication methodAndrew Tridgell2010-09-161-0/+40
| | | | | | this is needed to get the repsFrom DNS entry right Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: split out the extended op handling Andrew Tridgell2010-09-162-136/+168
| | | | | | this is not part of the rid allocation logic Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: cleanup getncchanges extended op callsAndrew Tridgell2010-09-163-40/+70
| | | | | | | | | Multiple calls are allowed to run in parallel as long as they don't conflict. This also cleans up the variable names in the extended op calls. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4/fsmo: Handle infrastructure, pdc and rid extended opsAnatoliy Atanasov2010-09-152-45/+53
| | | | | | | | | | | | | With this change we can transfer all roles back and forward, except for the naming master. Also this commit fixes the naming of fsmo_role_dn - used to point to the DN from which we read fSMORoleOwner role_owner_dn - used to point to the NTDSDSA who owns the role Now we always pass fsmo_role_dn, role_owner_dn to the extended operation and to drepl_create_role_owner_source_dsa Conflicts: source4/dsdb/repl/drepl_ridalloc.c
* s4-repl: use consistent API calls for getting DN GUIDAndrew Tridgell2010-09-151-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: add a trigger message for REPL_SECRET to auth_samAndrew Tridgell2010-09-151-0/+14
| | | | | | | | | when an RODC tries to authenticate against an account and the account has no password information it needs to send a message to the drepl server to tell it to try and replicate the secret information from a writeable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4/fsmo: Change return type from NTSTATUS to WERROR for drepl_takeFSMOroleAnatoliy Atanasov2010-09-101-1/+1
| | | | | This removed an unnecessary conversion of the return type in drepl_take_FSMO_role.
* s4/fsmo: Fix callback declarationAnatoliy Atanasov2010-09-101-1/+2
|
* s4-dreplsrv: fix 'dn' for partition object being createdKamen Mazdrashki2010-09-101-1/+9
|
* s4-drs-fsmo: try to dispatch ops in queue as soon as possibleKamen Mazdrashki2010-09-101-1/+9
| | | | | In most cases this will transfer of schema master role to look like a synchronous operation.
* s4-fsmo: update FSMO changes for recent IRPC workAndrew Tridgell2010-09-101-3/+3
| | | | | | the IRPC API has changed Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4/drs: update repsFrom only when we are not in getncchanges extended opAnatoliy Atanasov2010-09-101-4/+4
|
* s4-irpc: Added internal rpc call DREPL_TAKEFSMOROLENadezhda Ivanova2010-09-101-1/+10
| | | | | It schedules a getncchanges with extended op 6, to be used when a modify request on becomeROLEMaster atteibute on rootDSE is received.
* s4-drs: Implementation of GetNCChanges extended op 6 - fsmo role transferNadezhda Ivanova2010-09-101-0/+151
| | | | | | | | | Basically the candidate owner makes a getncchanges call with extended op 6 when they want to become the new owner. The current owner then updates the corresponding fSMORoleOwner attribute in its database with the new owner, and replicates the change to the candidate, who then becomes the owner. The patch was made in cooperation with Anatoliy Atanasov <anatoliy.atanasov@postpath.com> who kindly helped to debug it.
* s4-drs: Refactored drepl_service and send_ridalloc_request so that the ↵Nadezhda Ivanova2010-09-102-27/+48
| | | | structures can be used for other extended ops
* s4-dreplsrv: Call dreplsrv_out_operation::callback in case we fail to even ↵Kamen Mazdrashki2010-09-091-0/+8
| | | | | | | | | | | | run the operation Operation was scheduled already, so we need to call the callback function for it to be able to do its job. For instance, if we are blocking an rpc call until an operation is completed and there is no memory, then client will be blocked without knowing what is going on with the server.
* s4-dsdb/repl/drepl_out_pull.c: Remove unused codeKamen Mazdrashki2010-09-091-43/+0
|
* s4-drepl_service.c: Update (C)Kamen Mazdrashki2010-09-091-9/+10
| | | | and remove few trailing white spaces
* s4-drepsrv: Dump more info when drepl_replica_sync() failsKamen Mazdrashki2010-09-091-24/+28
| | | | | | | | | There are many spots where this function may fail and I find it very useful to know where exactly function fails and what are the input parameters during testing. REPLICA_SYNC_FAIL() macro now dumps an error message so we may remove extra DEBUG() dump in implementation.
* s4-dreplsrv: Run NC replication synchronously if requestedKamen Mazdrashki2010-09-071-30/+119
|
* s4-idl: redefine dreplsrv_refresh() to be alike other RPC function definitionsKamen Mazdrashki2010-09-051-1/+1
| | | | Sorry for the 'custom' definition first time
* s4-dreplsrv: Refactor drepl_replica_sync() to behave as described in MS-DRSRKamen Mazdrashki2010-09-031-8/+111
| | | | | | see: MS-DRSR - 4.1.23.2 Note: Synchronious replication not implemented yet.
* s4-dreplsrv: Helpers to locate source DSA in a partition by GUID or DNS nameKamen Mazdrashki2010-09-031-0/+40
|
* s4-dreplsrv: Helper to find NC by DN or GUID or SIDKamen Mazdrashki2010-09-031-0/+33
|
* s4-dreplsrv: Add caller-specific data parameter for dreplsrv_fsmo_callback_tKamen Mazdrashki2010-09-033-7/+14
| | | | | It is to be used when we need to preserve a state to be used in tha callback when dreplsrv_out_operation is completed
* s4-dreplsrv: Implement irpc stub to be used to force dreplsrv to update ↵Kamen Mazdrashki2010-08-281-0/+20
| | | | | | | | | internal cache This IRPC calls is to be used whenever repsFrom/repsTo are changed by administrative tool or KCC (i.e. Topology changes). At present, only KCC may change topology.
* s4-dreplsrv: Move partition cache update before scheduling another set of ↵Kamen Mazdrashki2010-08-281-3/+7
| | | | replications
* s4-repl: load RODC partitions using msDS-hasFullReplicaNCsAndrew Tridgell2010-08-252-4/+28
| | | | | | we mark these as incoming_only Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-163-6/+6
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>