summaryrefslogtreecommitdiffstats
path: root/source4/libcli/ldap
Commit message (Collapse)AuthorAgeFilesLines
* s4-dsdb: added support for LDB_CONTROL_RODC_DCPROMO_OIDAndrew Tridgell2010-08-171-0/+1
| | | | | | | | | | | | this control adds a unique msDS-SecondaryKrbTgtNumber attribute to a user object. There is some 'interesting' interaction with the rangeLower and rangeUpper attributes and this add. We don't implementat rangeLower/rangeUpper yet, but when we do we'll need an override for this control (or be careful about module ordering). Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldap: use common functions for ldap flag controls encode/decodeAndrew Tridgell2010-08-171-163/+11
| | | | | | | many controls are simple present/not-present flags, and don't need their own parsers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-162-5/+5
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4/libcli: Register LDB_CONTROL_REVEAL_INTERNALS and ↵Endi S. Dewata2010-06-281-0/+4
| | | | | | DSDB_CONTROL_PASSWORD_CHANGE_STATUS_OID controls. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* ldb:controls - add the "TREE_DELETE" control for allowing subtree deletesMatthias Dieter Wallnöfer2010-06-201-0/+20
|
* s4:ldap_controls.c - remove encoding functions for private recalculate SD ↵Matthias Dieter Wallnöfer2010-06-201-19/+0
| | | | control
* s4: Remove an uselessly exposed controlMatthieu Patou2010-06-071-1/+0
|
* s4:libcli/ldap Update headermap.txt (autotools build) and wscript_build for ↵Andrew Bartlett2010-05-211-1/+1
| | | | | | | | libcli_ldap.h It took a little while to find where to update this... Andrew Bartlett
* s4:libcli/ldap Rename ldap.h to libcli_ldap.hAndrew Bartlett2010-05-216-5/+5
| | | | | | | It is a problem if a samba header is called ldap.h if we also want to use OpenLDAP's ldap.h Andrew Bartlett
* s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell2010-04-061-0/+2
| | | | them
* s4-waf: install the rest of the headersAndrew Tridgell2010-04-061-5/+1
|
* build: commit all the waf build files in the treeAndrew Tridgell2010-04-061-0/+12
|
* s4-libcli: Added NULL handlers for DSDB_CONTROL_DN_STORAGE_FORMAT_OID and ↵Endi S. Dewata2010-03-021-0/+4
| | | | | | LDB_CONTROL_AS_SYSTEM_OID Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4/ldap: Refactor the fix for ldap nested searchesKamen Mazdrashki2010-02-171-4/+0
| | | | | | | | | | | Current implementation synchronizes processing for all types of LDAP request, not only LDAP_Search ones. Synchronization for ldap replies processing is done locally in ldb_ildap module as this concerns only ildb_callback() function. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4/ldap: Fix nested searches SEGFAULT bugKamen Mazdrashki2010-01-291-0/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4: fix SD update and password change in upgrade scriptMatthieu Patou2009-11-281-0/+20
| | | | | | | | | - reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:ldbcli - Added encoder/decoder for relax control.Endi S. Dewata2009-11-191-2/+20
|
* s4:libcli/ldap Add 'relax' OID to known network representationsAndrew Bartlett2009-11-121-0/+2
| | | | | | | | This patch, inspired by a patche by Endi S. Dewata <edewata@redhat.com>, allows this control to be passed to the LDAP backend. Andrew Bartlett
* s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where neededMatthias Dieter Wallnöfer2009-10-141-1/+3
| | | | | | For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way.
* s4: fix various warnings (not "const" related ones)Matthias Dieter Wallnöfer2009-10-022-3/+2
|
* s4:libcli/ldap Explain why we set a hostname for ldapi:// connectionsAndrew Bartlett2009-08-171-1/+3
| | | | | | | It is a pretty odd thing to do, and it's only because of the restrictions of DIGEST-MD5 in Cyrus SASL that we do it. Andrew Bartlett
* s4:libcli/ldap: the tls code steals the original socket on its own nowStefan Metzmacher2009-07-311-3/+0
| | | | metze
* s4:libcli/ldap: add support for new Recycle Bin Feature LDAP ControlsStefan Metzmacher2009-07-231-0/+40
| | | | | | | LDAP_SERVER_SHOW_RECYCLED_OID 1.2.840.113556.1.4.2064 LDAP_SERVER_SHOW_DEACTIVATED_LINK_OID 1.2.840.113556.1.4.2065 metze
* fixed the encoding/decoding of the reverse attribute for server side sortAndrew Tridgell2009-06-101-3/+10
|
* libcli/ldap: move generic ldap control encoding code to ldap_message.cStefan Metzmacher2009-02-242-129/+6
| | | | | | | As they can we static there, we pass the specific handlers as parameter where we need to support controls. metze
* s4:libcli/ldap: don't use 'void **out' as arguments as the behavior is not ↵Stefan Metzmacher2009-02-241-17/+32
| | | | | | defined in C. metze
* libcli/ldap: move ldap_ndr from source4/ to toplevelStefan Metzmacher2009-02-243-114/+1
| | | | metze
* libcli/ldap: move ldap_errors.h to the toplevel and install itStefan Metzmacher2009-02-241-66/+0
| | | | metze
* libcli/ldap: move ldap_message.[ch] from source4/ to the toplevelStefan Metzmacher2009-02-244-1701/+1
| | | | metze
* s4:libcli/ldap: remove reference to DEBUG()Stefan Metzmacher2009-02-241-1/+0
| | | | | | This prepares using ldap_message.c in source3/ later metze
* s4:libcli: split out LIBCLI_LDAP_MESSAGE subsystemStefan Metzmacher2009-02-245-287/+300
| | | | metze
* Worked around a problem with select/poll/epoll and gnutls Andrew Tridgell2009-02-181-0/+4
| | | | | | | | | | | | | | | | | | | Our packet layer relies on the event system reliably telling us when a packet is available. When we are using a socket layer like TLS then things get a bit trickier, as there may be bytes in the encryption buffer which could be read even if there are no bytes at the socket level. The GNUTLS library is supposed to prevent this happening by always leaving some data at the socket level when there is data to be processed in its buffers, but it seems that this is not always reliable. To work around this I have added a new packet option packet_set_unreliable_select() which tells the packet layer to not assume that the socket layer has a reliable select, and to instead keep trying to read from the socket until it gets back no data. This option is set for the ldap client and server when TLS is negotiated. This seems to fix the problems with the ldaps tests.
* s4:libcli/ldap: use const char * const *attributes as in all other placesStefan Metzmacher2009-02-132-2/+2
| | | | metze
* Fix the mess with ldb includes.Simo Sorce2009-01-303-43/+68
| | | | | | | | Separate again the public from the private headers. Add a new header specific for modules. Also add service function for modules as now ldb_context and ldb_module are opaque structures for them.
* s4:libcli/ldap: convert to tevent_* apiStefan Metzmacher2009-01-032-14/+14
| | | | metze
* s4:socket: use a socket_wrapper aware function to auto close the fd event ↵Stefan Metzmacher2009-01-031-3/+4
| | | | | | for sockets metze
* s4:lib/tevent: rename structsStefan Metzmacher2008-12-293-9/+9
| | | | | | | | | | | | | | | | | | | | list="" list="$list event_context:tevent_context" list="$list fd_event:tevent_fd" list="$list timed_event:tevent_timer" for s in $list; do o=`echo $s | cut -d ':' -f1` n=`echo $s | cut -d ':' -f2` r=`git grep "struct $o" |cut -d ':' -f1 |sort -u` files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4` for f in $files; do cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp mv $f.tmp $f done done metze
* Rename samba-socket -> samba_socket to fix a couple more compilerJelmer Vernooij2008-12-241-1/+1
| | | | warnings.
* s4:lib/socket: socket_connect_send() and socket_connect_ev() should only ↵Stefan Metzmacher2008-12-181-1/+1
| | | | | | wrok with addresses metze
* s4: fix LIBEVENTS dependencies and use more forward declarationsStefan Metzmacher2008-12-171-1/+0
| | | | | | | We should only include events.h where we really need it and prefer forward declarations of 'struct event_context' metze
* s4:dsdb: add support for DSDB_OPENLDAP_DEREFERENCE_CONTROLAndrew Bartlett2008-12-171-0/+115
| | | | | | | | | | | Encode and decode the OpenLDAP dereference control (draft-masarati-ldap-deref-00) At this time, the ldb_controls infrustructure does not handle request and reply controls having different formats, so this is purely the client implementation (ie, there is no decode of the client->server packet, and no encode of the server->client packet). Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:libcli/ldap: split out a ldap_decode_attribs_bare() functionAndrew Bartlett2008-12-171-8/+18
| | | | | | | | | | | The OpenLDAP dereference control (draft-masarati-ldap-deref-00) uses an attribute list, as found in the search reply, but without one enclosing ASN1_SEQUENCE(0) This allows the dereference control parsing code to use this as a helper function. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Improve debug when SASL search failsAndrew Bartlett2008-11-171-1/+1
|
* Add gensec_settings structure. This wraps loadparm_context for now, butJelmer Vernooij2008-11-021-1/+2
| | | | should in the future only contain some settings required for gensec.
* Fix function parameters.Jelmer Vernooij2008-10-231-1/+1
|
* Use common error definitions.Jelmer Vernooij2008-10-231-3/+3
|
* Make sure prototypes are always included, make some functions static andJelmer Vernooij2008-10-203-0/+3
| | | | remove some unused functions.
* Fix include paths to new location of libutil.Jelmer Vernooij2008-10-113-4/+4
|
* LDB ASYNC: misc changesSimo Sorce2008-09-291-1/+1
|
* Fix nasty bug that would come up only if a client connection to a remoteSimo Sorce2008-09-242-9/+13
| | | | | | | | | ldap server suddenly dies. We were creating a wrong talloc hierarchy, so the event.fde was not freed automatically as expected. This in turn made the event system call the ldap io handlers with a null packet structure, causing a segfault. Fix also the ordering in ldap_connection_dead() Thanks to Metze for the huge help in tracking down this one.