summaryrefslogtreecommitdiffstats
path: root/source4/dsdb
Commit message (Collapse)AuthorAgeFilesLines
* kcc/drepl: Build as service.Jelmer Vernooij2010-11-141-4/+6
|
* Build wrepl server as service by default.Jelmer Vernooij2010-11-141-1/+1
|
* s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password ↵Matthias Dieter Wallnöfer2010-11-131-6/+9
| | | | | | | | | | conversion errors This errors can happen also on a regular basis - then we shouldn't return ERR_OPERATIONS_ERROR (this error code is reserved for very serious failures). Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 13 12:37:36 UTC 2010 on sn-devel-104
* s4:objectclass LDB module - multiple "objectClass" change elements are ↵Matthias Dieter Wallnöfer2010-11-132-173/+178
| | | | | | unfortunately still allowed The test message has been compressed - therefore I've now used "modify_ldif".
* samldb: relax groupType modification checksMatthieu Patou2010-11-121-27/+32
| | | | | Allow programs with the PROVISION control to bypass groupType checks. This is needed by upgradeprovision for older alpha (11, 10 ...)
* s4:objectclass LDB module - we should not simply ignore additional ↵Matthias Dieter Wallnöfer2010-11-122-2/+29
| | | | | | | | | | "objectClass" attribute changes There first one we perform all other tentatives are terminated with ERR_ATTRIBUTE_OR_VALUE_EXISTS (tested against Windows). Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Nov 12 19:39:07 UTC 2010 on sn-devel-104
* s4:repl_meta_data LDB module - convert two debug messages into error messagesMatthias Dieter Wallnöfer2010-11-121-4/+4
| | | | These regarding "objectGUID".
* s4:samldb/objectclass_attrs LDB modules - move "description" logic from ↵Matthias Dieter Wallnöfer2010-11-124-198/+245
| | | | | | "objectclass_attrs" into "samldb" This according to an answer from dochelp is SAM specific behaviour.
* Lowercase DNS_UPDATE_SRV name.Jelmer Vernooij2010-11-121-1/+1
|
* s4-repl: Propagate remote prefixMap in DRSUAPI data conversion functionsKamen Mazdrashki2010-11-112-3/+21
|
* s4-dsdb_syntax: Warning message that we can't find requested ATTID in Schema ↵Kamen Mazdrashki2010-11-111-0/+1
| | | | Cache
* s4-prefixMap: dsdb_schema_pfm_oid_from_attid() to use const prefixMapKamen Mazdrashki2010-11-111-1/+2
| | | | It is not supposed to change supplied prefixMap
* s4-dsdb_syntax: Use remote prefixMap to handle generic cases in ↵Kamen Mazdrashki2010-11-111-2/+7
| | | | drsuapi_to_ldb conversions
* s4-dsdb_syntax: Add remote prefixMap member for dsdb_syntax conversionsKamen Mazdrashki2010-11-112-0/+5
|
* s4-repl: dsdb_extended_replicated_objects_convert -> ↵Kamen Mazdrashki2010-11-112-23/+23
| | | | | | dsdb_replicated_objects_convert/ It is part of dsdb_replicated_* family of functions
* s4-repl: dsdb_extended_replicated_objects_commit -> ↵Kamen Mazdrashki2010-11-112-6/+6
| | | | | | dsdb_replicated_objects_commit It is part of dsdb_replicated_* family of functions
* s4-repl: dsdb_convert_object -> dsdb_origin_object_convertKamen Mazdrashki2010-11-111-7/+7
| | | | | It is used in dsdb_origin_objects_commit() func, hence the dsdb_origin_ prefix
* s4-dsdb Remove incorrectly declared ** variable used as *.Andrew Bartlett2010-11-111-6/+3
| | | | | | | | | | | The cleartext_utf16_str variable was declared char **, but due to the cast on convert_string_talloc() and the lack of type checking here and on data_blob_const (due to void *) it was able to be used as if it was a char *. The simple solution seems to be to fill in cleartext_utf16 blob directly. Andrew Bartlett
* s4-dsdb Convert new krbtgt_xxx password into UTF16Andrew Bartlett2010-11-111-1/+12
| | | | | | | The new stricter test on clearTextPassword values caught out that we did not provide a utf16 password here. Andrew Bartlett
* s4-dsdb Return an error if we can't convert UTF16MUNGED -> UTF8Andrew Bartlett2010-11-111-1/+5
| | | | | | | | The UTF16MUNGED helper will map all invalid sequences (except odd input length) to valid input sequences, per the rules. Therefore if it fails, we need to bail out, somehing serious is wrong. Andrew Bartlett
* s4:dsdb - proof against empty RDN values where expectedMatthias Dieter Wallnöfer2010-11-114-2/+28
| | | | This should prevent crashes as pointed out on the mailing list.
* Cannot create OU using custom Schema classZahari Zahariev2010-11-111-0/+56
| | | | | | | If we define our own child class 'subClassOf' system Schema class e.g. organizationalUnit then we cannot create OU in the Dafualt Naming Context that has this custom Schama class in the objectClass attribute.
* s4:objectclass LDB module - allow RDNs also to come from superclassesMatthias Dieter Wallnöfer2010-11-111-11/+39
| | | | Detected by a testcase written by Zahari Zahariev.
* s4:passwords.py - add a test for the normal "userPassword" behaviourMatthias Dieter Wallnöfer2010-11-111-1/+97
| | | | Just to make sure that this works now too
* s4:password_hash and acl LDB modules - handle the "userPassword" attribute ↵Matthias Dieter Wallnöfer2010-11-114-12/+59
| | | | according to the "dSHeuristics"
* s4:password_hash LDB module - move "samdb_msg_find_old_and_new_ldb_val" into ↵Matthias Dieter Wallnöfer2010-11-112-78/+77
| | | | | | | | the password_hash LDB module It's only used there and so I think it doesn't really belong in "dsdb/common/util.c" (I first thought that it could be useful for ACL checking but obviously it wasn't).
* s4:local_password LDB module - remove schema checking code and fix some typosMatthias Dieter Wallnöfer2010-11-111-12/+6
| | | | This is now done by the "objectclass_attrs" LDB module.
* s4:ldb_modules/util.c - "dsHeuristics" -> "dSHeuristics"Matthias Dieter Wallnöfer2010-11-111-2/+2
|
* s4:acl.py - two password change tests are expected to fails on Windows 2000 ↵Matthias Dieter Wallnöfer2010-11-111-3/+14
| | | | function level
* s4:python tests - fix script names in the help textMatthias Dieter Wallnöfer2010-11-115-5/+5
|
* s4-pydsdb: py_dsdb_am_rodc() may call samdb_rodc() only once to get the job ↵Kamen Mazdrashki2010-11-101-1/+1
| | | | done :)
* s4-pydsdb: py_dsdb_load_partition_usn() - simplify error handling inKamen Mazdrashki2010-11-101-2/+4
| | | | and print on which partition error has occured
* s4-pydsdb-py_samdb_ntds_objectGUID(): Avoid potential memory leakKamen Mazdrashki2010-11-101-7/+6
| | | | in case py_ldb is not a valid LDB
* s4-pydsdb-py_dsdb_get_oid_from_attid(): Avoid potential memory leakKamen Mazdrashki2010-11-101-2/+2
| | | | in case py_ldb is not a valid LDB
* s4-pydsdb.c: Fix small memory leak in py_samdb_set_domain_sid()Kamen Mazdrashki2010-11-101-0/+1
|
* s4/syntax: Add tests for DN+String and DN+BinaryAnatoliy Atanasov2010-11-101-0/+420
| | | | | | | These tests aim to verify the behavior for 2.5.5.7 and 2.5.5.14 syntaxes. Autobuild-User: Anatoliy Atanasov <anatoliy@samba.org> Autobuild-Date: Wed Nov 10 06:57:04 UTC 2010 on sn-devel-104
* s4:dsdb/operational.c: use DSDB_SECRET_ATTRIBUTES_EX()Stefan Metzmacher2010-11-091-5/+2
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 9 22:43:44 UTC 2010 on sn-devel-104
* s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()Stefan Metzmacher2010-11-091-11/+14
| | | | metze
* s4:dsdb/local_password: use DSDB_SECRET_ATTRIBUTESStefan Metzmacher2010-11-091-7/+3
| | | | metze
* s4:dsdb/schema/schema_filtered.c: make never_in_filtered_attrs static constStefan Metzmacher2010-11-091-1/+2
| | | | metze
* s4:dsdb/schema/schema_filtered.c: use DSDB_SECRET_ATTRIBUTESStefan Metzmacher2010-11-091-11/+1
| | | | metze
* s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret ↵Stefan Metzmacher2010-11-092-12/+15
| | | | | | | | attributes We should have them just in one place, so that we don't forget some of them. metze
* s4-drs: reduce verbosity of dreplsrv_out_connection_attachAndrew Tridgell2010-11-081-2/+2
|
* s4-attid: Uppercase ATTID type constantsKamen Mazdrashki2010-11-083-10/+10
| | | | | | | Thanks Metze for noting this! Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Mon Nov 8 23:06:41 UTC 2010 on sn-devel-104
* s4:password_hash LDB module - introduce a "userPassword" flag which ↵Matthias Dieter Wallnöfer2010-11-081-15/+37
| | | | | | | | | | | enables/disables the two "userPassword" behaviours - Enabled: "userPassword" password change behaviour (will later be linked to the "dSHeuristics") - Disabled: "userPassword" plain attribute behaviour (default) Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 15:28:06 UTC 2010 on sn-devel-104
* s4:passwords.py - test empty password attributes behaviourMatthias Dieter Wallnöfer2010-11-081-1/+154
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 12:09:56 UTC 2010 on sn-devel-104
* s4:password_hash LDB module - deleting password attributes is a little more ↵Matthias Dieter Wallnöfer2010-11-081-6/+6
| | | | complicated
* s4:samdb_msg_find_old_and_new_ldb_val - reworkMatthias Dieter Wallnöfer2010-11-082-10/+38
| | | | | | - don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation
* s4:password_hash LDB module - clear the fact that a delete of password ↵Matthias Dieter Wallnöfer2010-11-081-1/+1
| | | | attributes isn't possible
* s4:acl LDB module - define the delete passwords special case a bit betterMatthias Dieter Wallnöfer2010-11-081-3/+4
|