summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4:samldb LDB module - don't create multiple "ac" module contexts on modify ↵Matthias Dieter Wallnöfer2010-06-101-12/+6
| | | | | | | operations Since we do now run sequentially through all checks we don't need multiple "ac" contexts anymore.
* s4:dcesrv_samr_Add/DeleteAliasMember - provide better NTSTATUS return codes ↵Matthias Dieter Wallnöfer2010-06-101-6/+19
| | | | when something didn't work
* s4:dcesrv_samr_GetAliasMembership - fix type of counter variablesMatthias Dieter Wallnöfer2010-06-101-1/+2
|
* s4:dcesrv_samr_DeleteAliasMember - add more braces to fit better the coding ↵Matthias Dieter Wallnöfer2010-06-101-4/+6
| | | | styles
* s4:dcesrv_samr_AddAliasMembership - Merge the two error blocks into oneMatthias Dieter Wallnöfer2010-06-101-6/+3
|
* s4:dcesrv_samr_Add/DelGroupMember - remove the account type checkMatthias Dieter Wallnöfer2010-06-101-11/+10
| | | | MS-SAMR 3.1.5.8 speaks from accounts which are not necessarely only users.
* s4:dcesrv_samr_AddGroupMember - also the error code ↵Matthias Dieter Wallnöfer2010-06-101-0/+1
| | | | | | "LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS" is allowed This is returned when the group is the primary group of the specified entry.
* s4:samba_dsdb LDB module - move the "objectclass_attrs" module backMatthias Dieter Wallnöfer2010-06-101-1/+1
| | | | I think it should be lower in order to control also the "instanceType" module.
* s4:ldap.py - add a test to demonstrate the 'instanceType' behaviourMatthias Dieter Wallnöfer2010-06-101-0/+39
|
* s4:instancetype LDB module - prevent all types of "instanceType" manipulationMatthias Dieter Wallnöfer2010-06-101-0/+16
| | | | Also on Windows Server you aren't able to change it.
* ldb:pyldb.c - we cannot use "ldb_dn_compare" if both message DNs are NULL in ↵Matthias Dieter Wallnöfer2010-06-071-3/+5
| | | | | | "py_ldb_msg_compare" Discovered by the testcase.
* s4 python: add more unit tests to verify the compare testsMatthieu Patou2010-06-071-0/+19
|
* s4:objectclass_attrs LDB module - move the single-valued attribute check ↵Matthias Dieter Wallnöfer2010-06-072-45/+13
| | | | | | | | | | into this module It seems to me more consistent (and also to keep the same behaviour on all backends). Also the DRS hack should therefore not be needed anymore since the "repl_meta_data" module launches requests behind "objectclass_attrs".
* s4:rdn_name LDB module - move the "distinguishedName" write prevent check hereMatthias Dieter Wallnöfer2010-06-072-7/+6
| | | | In my eyes it fits better here than in the TDB backend code.
* s4:samba_dsdb LDB module - fix typosMatthias Dieter Wallnöfer2010-06-071-2/+2
|
* s4:samba_dsdb LDB module - enhance/fix module rule commentsMatthias Dieter Wallnöfer2010-06-071-3/+5
|
* s4:ldap.py - add some "objectclass" behaviour testsMatthias Dieter Wallnöfer2010-06-071-0/+190
|
* s4:objectclass LDB module - rework the code which handles the objectclasses ↵Matthias Dieter Wallnöfer2010-06-071-149/+191
| | | | | | | modification Before it has been very incomplete. We try now to match the Windows Server behaviour as close as possible.
* s4:ldap.py - enhance the attributes testcase to demonstrate how the ↵Matthias Dieter Wallnöfer2010-06-071-2/+75
| | | | | | attributes are checked against the schema and the specified objectclasses This demonstrates the bew "objectclass_attrs" LDB module behaviour.
* s4:acl LDB module - LDB attribute names should be compared using ↵Matthias Dieter Wallnöfer2010-06-071-2/+2
| | | | "ldb_attr_cmp" or "strcasecmp"
* s4:acl LDB module - adaption for "objectclass_attrs" moduleMatthias Dieter Wallnöfer2010-06-071-5/+15
| | | | | Since the attribute schema checking code moved back we need to give here the "LDB_ERR_NO_SUCH_ATTRIBUTE" error.
* s4:objectclass LDB module - remove "fix_check_attributes"Matthias Dieter Wallnöfer2010-06-071-62/+0
| | | | Also this task is now performed by the "objectclass_attrs" LDB module.
* s4:samldb LDB module - adjust the module to set always a ↵Matthias Dieter Wallnöfer2010-06-071-35/+45
| | | | | | | "defaultObjectCategory" on objectclass add operations This is needed to make the "objectclass_attrs" LDB module happy. The search check and case adjustment are done as it was using a second modify operation.
* s4:remove the "validate_update" LDB module - the task is now handled by the ↵Matthias Dieter Wallnöfer2010-06-074-141/+0
| | | | far more complete "objectclass_attrs" LDB module
* s4:dsdb - introduce a new "objectclass_attrs" LDB module which performs the ↵Matthias Dieter Wallnöfer2010-06-073-0/+401
| | | | | | | objectclass attributes checking Until now we had no real consistent mechanism which allowed us to check if attributes belong to the specified objectclasses.
* s4:objectclass LDB module - instanciate the schema variable centrally on the ↵Matthias Dieter Wallnöfer2010-06-071-28/+28
| | | | | | | "ac" context creation This unifies the position when the schema is read and prevents multiple instanciations (eg on a modification operation).
* s4:samldb LDB module - finally we can remove the RDN checkMatthias Dieter Wallnöfer2010-06-071-53/+0
| | | | This is now dynamically always done by the objectclass LDB module
* s4:ldap.py - enhance the rename tests to demonstrate the functionalityMatthias Dieter Wallnöfer2010-06-071-0/+37
|
* s4:objectclass LDB module - finally implement the correct entry rename ↵Matthias Dieter Wallnöfer2010-06-071-25/+130
| | | | | | protections Only the "systemFlags" check is still missing.
* s4:objectclass LDB module - cosmetic changeMatthias Dieter Wallnöfer2010-06-071-2/+3
|
* s4:objectclass LDB module - remove duplicated codeMatthias Dieter Wallnöfer2010-06-071-13/+4
|
* s4:objectclass LDB module - fix counter variable typesMatthias Dieter Wallnöfer2010-06-071-1/+1
|
* s4:objectclass LDB module - explain why the search can return with an empty ↵Matthias Dieter Wallnöfer2010-06-071-1/+2
| | | | return
* s4:objectclass LDB module - this "talloc_steal" is not necessaryMatthias Dieter Wallnöfer2010-06-071-1/+0
| | | | | The "parent_dn" was created on the "ac" context which lives anyway longer than this child request.
* s4:objectclass LDB module - fix error result if an entry doesn't contain a ↵Matthias Dieter Wallnöfer2010-06-071-3/+3
| | | | | | structural objectclass We need to return LDB_ERR_UNWILLING_TO_PERFORM (not LDB_ERR_NAMING_VIOLATION).
* s4:objectclass LDB module - use "ldb_oom" for expressing out of memoryMatthias Dieter Wallnöfer2010-06-071-2/+1
|
* s4:objectclass LDB module - fix header and add my copyrightMatthias Dieter Wallnöfer2010-06-071-4/+6
|
* s4-smbtorture: test workstation auth as well in RPC-SPOOLSS-ACCESS.Günther Deschner2010-06-071-2/+34
| | | | Guenther
* s4:ldb python bindings - implement comparison on Python LDB Message objectsMatthieu Patou2010-06-071-2/+38
| | | | Coauthors: Jelmer Vernooij, Matthias Dieter Wallnöfer
* s4: Remove an uselessly exposed controlMatthieu Patou2010-06-071-1/+0
|
* s4-smbtorture: handle printservers w/o printers in RPC-SPOOLSS-ACCESS.Günther Deschner2010-06-071-2/+2
| | | | Guenther
* s4:password_hash LDB module - adapt the module to the new ↵Matthias Dieter Wallnöfer2010-06-061-17/+6
| | | | "ldb_msg_remove_attr" behaviour
* ldb:ldb_msg_remove_attr - provide a better implementationMatthias Dieter Wallnöfer2010-06-061-2/+3
| | | | | We can have some special (bad) messages which contain multiple message elements for the same attribute. The AD password change ones are such an example.
* s4:samldb LDB module - this codepart isn't needed due to the objectclass LDB ↵Matthias Dieter Wallnöfer2010-06-061-13/+0
| | | | | | | module When a "computer" entry will be added, also the inherited "user" objectclass is going to be specified.
* s4:get_last_structural_class - only real structural classes can be ↵Matthias Dieter Wallnöfer2010-06-061-1/+1
| | | | | | | | | | | | candidates for fetching the last one Classes with objectCategory = 1 are always structural, these with objectCategory = 0 also (as we can see in our Windows 2008 R2 schema file where class "Person" has 0 but is structural). Abstract classes and auxiliary ones cannot be considered (objectCategory = 2, 3) http://msdn.microsoft.com/en-us/library/ms677964(VS.85).aspx
* s4:ldap.py - enhance the RDN name test to show that invalid "name" ↵Matthias Dieter Wallnöfer2010-06-061-1/+3
| | | | attributes are allowed on add operations
* s4:rdn_name LDB module - use "ldb_msg_remove_attr" for deleting attributesMatthias Dieter Wallnöfer2010-06-061-4/+2
|
* s4:rdn_name LDB module - remove "rdn_name_find_attribute"Matthias Dieter Wallnöfer2010-06-061-15/+2
| | | | It does exactly the same as "ldb_msg_find_element".
* s4:dsdb/common/util.c - provide a better implementation of the ↵Matthias Dieter Wallnöfer2010-06-061-28/+90
| | | | | | | "samdb_msg_add_(add/del)val" calls This supports now also coexisting add and delete message elements with the same attribute name.
* ldb:ltdb_filter_attrs - fix a counter variable typeMatthias Dieter Wallnöfer2010-06-061-2/+3
|