summaryrefslogtreecommitdiffstats
path: root/source4/dsdb/samdb
Commit message (Collapse)AuthorAgeFilesLines
* dsdb: improve debug messageAndrew Tridgell2011-10-204-5/+4
| | | | | | | show the reply type in "Invalid reply type" messages Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 20 00:57:05 CEST 2011 on sn-devel-104
* s4-messaging: Pass the loadparm context, not just the messaging pathAndrew Bartlett2011-10-132-2/+2
| | | | | | This will allow the TDB layer to get at the lp_ctx for tdb options. Andrew Bartlett
* s3:utils change data_blob_dup_talloc() to take a DATA_BLOB by valueGregor Beck2011-10-121-1/+1
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher2011-10-072-1/+41
| | | | | | | | | | Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
* s4:dsdb: fix the order of DSDB_CONTROL_* defines in samdb.hStefan Metzmacher2011-10-071-10/+10
| | | | | | | This makes clear that struct dsdb_control_password_change belongs to DSDB_CONTROL_PASSWORD_CHANGE_OID. metze
* s4-dsdb: special case for deleted objects one way linkAndrew Tridgell2011-10-071-4/+17
| | | | | | | | | we show wellknown links to the deleted objects container Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Oct 7 07:58:08 CEST 2011 on sn-devel-104
* s4-dsdb: don't display links to deleted objectsAndrew Tridgell2011-10-071-9/+42
| | | | | | | unless the user asks for the display of deactivated links, we should not display DNs that link to deleted objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed behaviour of show_deleted and show_recycled controlAndrew Tridgell2011-10-071-38/+71
| | | | | | | | to correctly implement the show_deleted and show_recycled control we need to know if the recyclebin is enabled. When not enabled, the isRecycled attribute is ignored, and only isDeleted is used. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed the check_optional_feature() callAndrew Tridgell2011-10-071-19/+24
| | | | | | | | the dsdb_check_optional_feature() call should look on our own NTDS DN for the enabled feature. This should work for all features, not just for forest wide fetaures. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: allow deletion of backlinks if DSDB_CONTROL_DBCHECK givenAndrew Tridgell2011-10-062-1/+5
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell2011-10-061-0/+3
| | | | | | this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: allow groupType update on deleted objectsAndrew Tridgell2011-10-061-1/+2
| | | | | | this allows dbcheck to fix groupType on objects that have been deleted Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: Do not assume that all deleted objects have an objectCategory and ↵Andrew Bartlett2011-10-061-2/+2
| | | | | | | sAMAccountType Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Oct 6 03:43:13 CEST 2011 on sn-devel-104
* dsdb: Do not attempt to resolve conflicts on an RODCAndrew Bartlett2011-10-061-2/+26
|
* dsdb: fix double-free in replication failure case on RODCAndrew Bartlett2011-10-061-1/+1
|
* s4-dsdb: add the DSDB_CONTROL_PARTIAL_REPLICA when neededAndrew Tridgell2011-10-041-0/+9
| | | | | | | when we are adding an object via DRS, we need to add the DSDB_CONTROL_PARTIAL_REPLICA control if we are replicating a partial replica, so ensure the partition module creates new NCs as partial replicas
* s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell2011-10-043-0/+27
| | | | | | | | this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added DSDB_REPL_FLAG_ADD_NCNAME flagAndrew Tridgell2011-10-041-0/+1
|
* s4-dsdb: fixed formatting of a debug messageAndrew Tridgell2011-10-041-1/+1
| | | | another missing newline
* s4-partition: allow creation of uninstantiated partitionsAndrew Tridgell2011-10-041-6/+0
| | | | | this is needed for a subdomain join by a new NC. The NC is initially uninstantiated
* s4-dsdb: allow uninstantiated NC headsAndrew Tridgell2011-10-041-2/+4
| | | | | this allows INSTANCE_TYPE_WRITE to be not set if INSTANCE_TYPE_UNINSTANT is set
* s4-dsdb: implement DSDB_REPL_FLAG_PRIORITISE_INCOMINGAndrew Tridgell2011-10-041-4/+22
| | | | | | With this set, we accept changes even if they have the same tuple as the local copy. This can be used by a FULL_SYNC replication to recover a replica that is corrupt
* s4-dsdb: disallow changes based on instanceTypeAndrew Tridgell2011-10-041-4/+13
| | | | | | if instanceType does not include INSTANCE_TYPE_WRITE, then disallow changes to any replicated attributes. This ensures partial replicates are not alterered
* s4-dsdb: added DSDB_REPL_FLAG* to replicationAndrew Tridgell2011-10-041-2/+15
| | | | | | this allows the replication server to control replication via a set of flags. Initial flags will allow control for partial replications and full_sync support
* build: avoid util.h as a public header name due to conflict with MacOSAndrew Bartlett2011-09-238-8/+8
|
* s4-dsdb: load the partialReplica attribute in the @PARTITION objectAndrew Tridgell2011-09-223-2/+27
| | | | | | this modifies the partition module to honor a partialReplica attribute on the @PARTITION module, marking partiations as partial replicas so the NO_GLOBAL_CATALOG control can be honoured
* s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell2011-09-221-0/+3
| | | | | | | this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
* s4-dsdb: cope with out of sync replication attributes in partition moduleAndrew Tridgell2011-09-191-1/+68
| | | | | | | | | | | | | if the @ATTRIBUTES or other objects which are replicated between partions become out of sync, then the ldb would fail to open. This changes ensures that we can always fix those records, by running the operation in the top level partition, and replicating the result to the other partitions Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 04:31:48 CEST 2011 on sn-devel-104
* s4-drs: cope with REPL_OBJ getncchanges call for new objectAndrew Tridgell2011-09-191-5/+10
| | | | | | | | when we do a subdomain join we create a new object using a REPL_OBJ getncchanges call for the partitions DN. This has a side effect of creating that object. We need to skip the UDV update in that case Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-cracknames: use consistent search for crossRef objectsAndrew Tridgell2011-09-081-2/+4
| | | | | | | | | This matches the search in other places Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Sep 8 05:02:54 CEST 2011 on sn-devel-104
* s4-dsdb: prevent crash on bad DN in construct_parent_guid()Andrew Tridgell2011-09-081-0/+3
| | | | this was found by a flakey test in autobuild
* s4-cracknames: fixed cracknames to use more specific searchAndrew Tridgell2011-09-051-13/+12
| | | | | | | | | | this uses the bitwise comparison ldap operators to ensure we only get NC roots Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Sep 5 12:48:39 CEST 2011 on sn-devel-104
* s4-schema consolidate schema handlingAndrew Bartlett2011-09-051-21/+5
| | | | | | | It also creates a single routine dsdb_load_ldb_results_into_schema() to handle cases where the schema is in the form of an ldb_result. Andrew Bartlett
* s4-dsdb Return ACL errors as ldb_errstring()Andrew Bartlett2011-08-262-17/+30
| | | | | | This string is reported to the caller, which makes debugging much easier. Andrew Bartlett
* s4-dsdb: fixed use of RMD flags in ldb search in dirsync moduleAndrew Tridgell2011-08-251-2/+2
| | | | | | | | | I'm pretty sure a SHOW_DELETED was wanted here Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Aug 25 01:10:13 CEST 2011 on sn-devel-104
* s4-dsdb: fixed newlines in DEBUG() calls in cracknamesAndrew Tridgell2011-08-251-14/+14
| | | | Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dsdb: assert that base DNs are used correctlyAndrew Tridgell2011-08-251-0/+5
| | | | | | this will catch future programmer errors with incorrect base DNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: enforce NULL DN validity in partition moduleAndrew Tridgell2011-08-251-0/+3
| | | | | | | | | windows does not allow a search on the empty DN except for rootDSE searches or for phantom_root searches (ie. with --cross-ncs). By enforcing this in Samba we make it more likely that our tests and utilities will work against windows Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed basedn in extended_dn_in moduleAndrew Tridgell2011-08-251-6/+10
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: cleanup use of NULL vs base DN in samldbAndrew Tridgell2011-08-251-7/+18
| | | | | | | NULL should be used when doing all partition searches. The default basedn should be used when wanting just the domain NC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: removed unused function in ACL moduleAndrew Tridgell2011-08-251-39/+0
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed all partitions search in cracknamesAndrew Tridgell2011-08-251-1/+1
| | | | | | | when searching all partitions we must use the NULL basedn, or we will miss partitions in multi-domain setups Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* credentials: Rename library to samba-credentials to avoid name clashes.Jelmer Vernooij2011-08-181-1/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Aug 18 22:16:38 CEST 2011 on sn-devel-104
* s4-dsdb: fixed deletion of backlinks for fl2000 DCsAndrew Tridgell2011-08-181-18/+13
| | | | | | | | | when in FL 2000 we were not correctly deleting backlinks as we uses dsdb_find_dn_by_guid() which doesn't find deleted objects. Modules should use dsdb_module_dn_by_guid() which prevents going to the top level, and finds deleted objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added comments and fixed backlink check in repl_meta_dataAndrew Tridgell2011-08-181-2/+17
| | | | | | | | added comments explaining the backlink deletion code, plus fix a use of a bitwise operation in a boolean expression, and avoid calling dsdb_functional_level() inside a loop Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dirsync: use dsdb_module_dn_by_guid() not dsdb_find_dn_by_guid() in modulesAndrew Tridgell2011-08-181-1/+1
| | | | | | this prevents us going to the top level of the module stack Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: Provide additional method to connect to specified database pathAmitay Isaacs2011-08-131-5/+16
| | | | | | samdb_connect() now calls samdb_connect_url() with default "sam.ldb". Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb ensure we honour the hash_values control, even for really odd hashesAndrew Bartlett2011-08-131-2/+4
|
* s4-dsdb: expand dsServiceName from GUID form at runtimeAndrew Tridgell2011-08-121-6/+54
| | | | | | | this allows dsServiceName to be stored as an extended DN or GUID form in @ROOTDSE, and its string form will be found at runtime. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: remove the naming_fsmo and pdc_fsmo modulesAndrew Tridgell2011-08-123-42/+0
| | | | | | | these are not needed now that the rootdse modules calculates the validFSMOs attribute at runtime Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
generated by cgit (git 2.34.1) at 2025-09-28 03:08:00 +0000