summaryrefslogtreecommitdiffstats
path: root/source4/dsdb
Commit message (Collapse)AuthorAgeFilesLines
* dsdb: improve debug messageAndrew Tridgell2011-10-204-5/+4
| | | | | | | show the reply type in "Invalid reply type" messages Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 20 00:57:05 CEST 2011 on sn-devel-104
* s4-messaging: Pass the loadparm context, not just the messaging pathAndrew Bartlett2011-10-132-2/+2
| | | | | | This will allow the TDB layer to get at the lp_ctx for tdb options. Andrew Bartlett
* s3:utils change data_blob_dup_talloc() to take a DATA_BLOB by valueGregor Beck2011-10-123-5/+5
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* Remove pointless exception catching in tests.Jelmer Vernooij2011-10-092-10/+4
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 9 00:00:26 CEST 2011 on sn-devel-104
* s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher2011-10-072-1/+41
| | | | | | | | | | Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
* s4:dsdb: fix the order of DSDB_CONTROL_* defines in samdb.hStefan Metzmacher2011-10-071-10/+10
| | | | | | | This makes clear that struct dsdb_control_password_change belongs to DSDB_CONTROL_PASSWORD_CHANGE_OID. metze
* s4-dsdb: special case for deleted objects one way linkAndrew Tridgell2011-10-071-4/+17
| | | | | | | | | we show wellknown links to the deleted objects container Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Oct 7 07:58:08 CEST 2011 on sn-devel-104
* s4-dsdb: don't display links to deleted objectsAndrew Tridgell2011-10-071-9/+42
| | | | | | | unless the user asks for the display of deactivated links, we should not display DNs that link to deleted objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed one_way_link calculationAndrew Tridgell2011-10-071-1/+2
| | | | | | we need to check for the other end of the link, not the current linkID Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed behaviour of show_deleted and show_recycled controlAndrew Tridgell2011-10-071-38/+71
| | | | | | | | to correctly implement the show_deleted and show_recycled control we need to know if the recyclebin is enabled. When not enabled, the isRecycled attribute is ignored, and only isDeleted is used. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed the check_optional_feature() callAndrew Tridgell2011-10-071-19/+24
| | | | | | | | the dsdb_check_optional_feature() call should look on our own NTDS DN for the enabled feature. This should work for all features, not just for forest wide fetaures. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: allow deletion of backlinks if DSDB_CONTROL_DBCHECK givenAndrew Tridgell2011-10-062-1/+5
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell2011-10-062-0/+4
| | | | | | this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: allow groupType update on deleted objectsAndrew Tridgell2011-10-061-1/+2
| | | | | | this allows dbcheck to fix groupType on objects that have been deleted Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: use the rodc_replica flag on the partitionAndrew Tridgell2011-10-061-2/+2
| | | | | | | | this sets DSDB_REPL_FLAG_PARTIAL_REPLICA when replicating a RODC partition, which tells the replication code to map instanceType to remove the INSTANCE_TYPE_WRITE bit Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: ensure we load replicated partitions for RODCsAndrew Tridgell2011-10-062-46/+35
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: Do not assume that all deleted objects have an objectCategory and ↵Andrew Bartlett2011-10-061-2/+2
| | | | | | | sAMAccountType Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Oct 6 03:43:13 CEST 2011 on sn-devel-104
* dsdb: Do not attempt to resolve conflicts on an RODCAndrew Bartlett2011-10-061-2/+26
|
* dsdb: fix double-free in replication failure case on RODCAndrew Bartlett2011-10-061-1/+1
|
* s4-dsdb Allow repl server to start even when no master NCs are presentAndrew Bartlett2011-10-061-7/+1
|
* s4-dsdb: fixed re-join of subdomainAndrew Tridgell2011-10-041-3/+4
| | | | | | if we repeat the join of a subdomain then we try to re-create the NC for the subdomain during a DsAddEntry(). This allows that re-creation to succeed if the NC already exists
* s4-dns: add all forest DCs to named.conf.updateAndrew Tridgell2011-10-041-12/+54
| | | | this allows all DCs to update DNS entries
* s4-kcc: if we are a GC, auto-add partial replicasAndrew Tridgell2011-10-041-3/+147
| | | | | when we are a global catalog server, the KCC needs to add partial replicas for all domain partitions that we don't have copies of
* s4-dsdb: simplify samdb_is_gc()Andrew Tridgell2011-10-041-28/+2
| | | | we already have a function for returning the NTDS options
* s4-dsdb: add the DSDB_CONTROL_PARTIAL_REPLICA when neededAndrew Tridgell2011-10-041-0/+9
| | | | | | | when we are adding an object via DRS, we need to add the DSDB_CONTROL_PARTIAL_REPLICA control if we are replicating a partial replica, so ensure the partition module creates new NCs as partial replicas
* s4-repl: try harder to find the right SPN in replication serverAndrew Tridgell2011-10-041-23/+72
| | | | | | | | | | | | when doing DRS between domains, using the right SPN is essential so the KDC can generate referrals to point us at the right DC. We prefer the GC/hostname/DNSDOMAIN form if possible, but if we can't find the hostname then this changes the code that generates the target principal name to use either the msDS-HasDomainNCs or hasMasterNCs attributes to try to find the target DC domainname so we can use the E3514235-4B06-11D1-AB04-00C04FC2DCD2/GUID/DNSDOMAIN SPN form. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell2011-10-046-60/+97
| | | | | | | | this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added DSDB_REPL_FLAG_ADD_NCNAME flagAndrew Tridgell2011-10-041-0/+1
|
* s4-dsdb: fixed formatting of a debug messageAndrew Tridgell2011-10-041-1/+1
| | | | another missing newline
* s4-partition: allow creation of uninstantiated partitionsAndrew Tridgell2011-10-041-6/+0
| | | | | this is needed for a subdomain join by a new NC. The NC is initially uninstantiated
* s4-dsdb: allow uninstantiated NC headsAndrew Tridgell2011-10-041-2/+4
| | | | | this allows INSTANCE_TYPE_WRITE to be not set if INSTANCE_TYPE_UNINSTANT is set
* s4-repl: support creation of new NCs via DsAddEntryAndrew Tridgell2011-10-041-0/+84
| | | | | this adds a flag to dsdb_origin_objects_commit that tells it to create a new NC based on the nCName in a crossRef object
* s4-repl: fixed formatting of some debug messagesAndrew Tridgell2011-10-041-5/+5
|
* s4-repl: update instanceType in partial_replica replicationAndrew Tridgell2011-10-041-0/+20
| | | | | | when we receive objects to a partial replica, we need to change the incoming instanceType to not include the INSTANCE_TYPE_WRITE flag. Partial replicas unset this flag.
* s4-repl: add FULL_SYNC and PARTIAL_REPLICA flagsAndrew Tridgell2011-10-041-5/+27
| | | | | this sets the appropriate flags for replication with FULL_SYNC and partial replica replications
* s4-dsdb: implement DSDB_REPL_FLAG_PRIORITISE_INCOMINGAndrew Tridgell2011-10-041-4/+22
| | | | | | With this set, we accept changes even if they have the same tuple as the local copy. This can be used by a FULL_SYNC replication to recover a replica that is corrupt
* s4-dsdb: disallow changes based on instanceTypeAndrew Tridgell2011-10-041-4/+13
| | | | | | if instanceType does not include INSTANCE_TYPE_WRITE, then disallow changes to any replicated attributes. This ensures partial replicates are not alterered
* s4-dsdb: added DSDB_REPL_FLAG* to replicationAndrew Tridgell2011-10-041-2/+15
| | | | | | this allows the replication server to control replication via a set of flags. Initial flags will allow control for partial replications and full_sync support
* build: avoid util.h as a public header name due to conflict with MacOSAndrew Bartlett2011-09-238-8/+8
|
* s4-repl: remove unused principal_name elementAndrew Tridgell2011-09-221-3/+0
|
* s4-dsdb: load the partialReplica attribute in the @PARTITION objectAndrew Tridgell2011-09-223-2/+27
| | | | | | this modifies the partition module to honor a partialReplica attribute on the @PARTITION module, marking partiations as partial replicas so the NO_GLOBAL_CATALOG control can be honoured
* s4-repl: fill in GUID and SID from partition informationAndrew Tridgell2011-09-221-2/+9
| | | | | when we find a NC via a DN string, fill in the GUID and SID so the caller can properly report them
* s4-kcc: return partial replica NCs in drs showreplAndrew Tridgell2011-09-221-24/+20
| | | | | the showrepl operation should return all our replicated NCs, including partial replicas
* s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell2011-09-223-1/+14
| | | | | | | this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
* s4-dsdb: get GUID and SID for DSA from extended DNAndrew Tridgell2011-09-221-21/+27
| | | | | this allows us to use the DN from a hasPartialReplicaNCs attribute to create a reps1 object
* s4-dsdb: enable initial replication of partitions via DsReplicaSyncAndrew Tridgell2011-09-222-0/+52
| | | | | we need to create a temporary dsa object to allow the replication task to replicate a NC that is not listed in a repsFrom attribute
* s4-repl: get NCs to replicate from our NTDS objectAndrew Tridgell2011-09-221-28/+64
| | | | | | | we need to use the hasMasterNCs and hasPartialReplicaNCs attributes on our NTDS object to get the list of NCs to replicate, instead of using the rootDSE. This is needed to support replicating of GC partial replicas, which are not listed in the rootDSE
* s4-dsdb: added support for replicating with GC partial attribute setAndrew Tridgell2011-09-222-3/+51
| | | | | if we are replicating a partial replica, then we need to supply the partial attribute set we want to replicate to the server
* s4-dsdb: failing to find the object is not an error in dsdb_loadreps()Andrew Tridgell2011-09-221-3/+8
| | | | | we may not have replicated the partition yet, so this should be considered the same as having no repsFrom/repsTo
* s4-dsdb: cope with out of sync replication attributes in partition moduleAndrew Tridgell2011-09-191-1/+68
| | | | | | | | | | | | | if the @ATTRIBUTES or other objects which are replicated between partions become out of sync, then the ldb would fail to open. This changes ensures that we can always fix those records, by running the operation in the top level partition, and replicating the result to the other partitions Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 04:31:48 CEST 2011 on sn-devel-104