summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
| * s4:setup: don't set objectCategory: CN=Domain-DNS,${SCHEMADN}Andrew Bartlett2008-12-171-3/+0
| | | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:torture: add ldb testsAndrew Bartlett2008-12-173-1/+751
| | | | | | | | | | | | | | | | These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:ldap_server: return the extended dn to the LDAP client if availableAndrew Bartlett2008-12-171-1/+16
| | | | | | | | | | | | | | This uses an early peek at the extended_dn_control (in the request) to see what output format to use. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:ldb-samba: register samba specific extended dn handlersAndrew Bartlett2008-12-171-51/+138
| | | | | | | | | | | | | | | | | | This provides the two extended DN handlers for the GUID and SID types, and makes the parsing more strict (where possible, it uses ndr_pull_struct_blob_all(), to cause an error if trailing data is found). Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:samldb: make use of dom_sid_split_rid()Andrew Bartlett2008-12-171-4/+3
| | | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:samldb: improve error stringsAndrew Bartlett2008-12-171-6/+8
| | | | | | | | | | | | | | | | When things go wrong with LDB, this routine seems to be particularly sensitive to it. This extra debugging should help the next poor soul who breaks LDB. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:ldb.i: hang the dn on the NULL context as the python destructor will free itAndrew Bartlett2008-12-171-0/+2
| | | | | | | | | | | | This fixes a bug in the ldb.i python wrapper, that showed up under valgrind. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:ldb: use try to print the extended dn in the ldif outputAndrew Bartlett2008-12-171-2/+4
| | | | | | | | | | | | | | | | This allows searches with the extended DN control to still print the extended DN in ldif output (it would otherwise be parsed and hidden in the structure). Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:dsdb: add support for DSDB_OPENLDAP_DEREFERENCE_CONTROLAndrew Bartlett2008-12-172-0/+137
| | | | | | | | | | | | | | | | | | | | | | Encode and decode the OpenLDAP dereference control (draft-masarati-ldap-deref-00) At this time, the ldb_controls infrustructure does not handle request and reply controls having different formats, so this is purely the client implementation (ie, there is no decode of the client->server packet, and no encode of the server->client packet). Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:libcli/ldap: split out a ldap_decode_attribs_bare() functionAndrew Bartlett2008-12-171-8/+18
| | | | | | | | | | | | | | | | | | | | | | The OpenLDAP dereference control (draft-masarati-ldap-deref-00) uses an attribute list, as found in the search reply, but without one enclosing ASN1_SEQUENCE(0) This allows the dereference control parsing code to use this as a helper function. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:ldb_ildap: try to pass extended DNs to the serverAndrew Bartlett2008-12-171-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | Whenever we pass a DN to the LDAP server, we now use ldb_dn_get_extended_linearized(). This allows us to send the extended DN if set, and therefore allows searches of the form '<GUID=aaa45ea0-94cd-45e9-8753-abe455d9a8f1>'. We actually use the '0' format (GUID=aaa45ea094cd45e98753abe455d9a8f1) because it is more widely supported (by Win2k in particular). Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4:ldb: add infrastructure for extended dn handlersAndrew Bartlett2008-12-174-60/+524
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This introduces a new set of pluggable syntax, for use on the extended DN, and uses them when parsing the DN. If the DN appears to be in the extended form, we no longer return the full DN 'as is', but only return the normal part from ldb_dn_get_linearized(). When validating/parsing the DN we validate not only the format of the DN, but also the contents of the GUID or SID (to ensure they are plausable). We also have functions to set and get the extended components on the DN. For now, extended_dn_get_linearized() returns a newly constructed and allocated string each time. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * Add hint to use passwordAttributes in @KLUDGE_ACL in futureAndrew Bartlett2008-12-171-1/+2
| | | | | | | | | | | | | | This module is not used at the moment, but if we do use it again, we should try to avoid duplicate lists. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * Make greater use of 'GUID_from_data_blob'Andrew Bartlett2008-12-171-40/+11
| | | | | | | | | | | | | | | | | | This avoids accidentily running off the end of a string, and uses a single 'guess which type of GUID I have' algorithm. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * Fix sequence number generation against OpenLDAPAndrew Bartlett2008-12-171-0/+8
| | | | | | | | | | | | | | | | | | It seems that in 2deeb99fff1a90c79ba1927e1a069362e250a63c adding the partition control to this request was missed out. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * Fix header installation after move of gen_ndr headers.Jelmer Vernooij2008-12-162-29/+29
| |
| * Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell2008-12-1743-5211/+242
| |\
| * | an experimental patch for fixing ldb bloatAndrew Tridgell2008-12-173-9/+352
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ldb indexing can cause huge files, and huge memory usage. This experiment allows us to keep indexes in memory during a transaction, then to write the indexes to disk when the transaction completes. The result is that the db is much smaller (we have seen improvements of about 100x in file size) and memory usage during large transactions is also greatly reduced Note that this patch uses the unusual strategy of putting pointers into a ldb (and thus into a tdb). This works because the pointers are only there during a transaction, so the pointers are not exposed to any other users of the database. The pointers allow us to avoid some really bad allocation problems with tdb record allocation during the re-indexing.
* | | Start converting registry python module to plain C rather than SWIG.Jelmer Vernooij2008-12-165-4870/+132
| |/ |/|
* | Remove use of C++ keywords.Jelmer Vernooij2008-12-162-6/+6
| |
* | Share object files for gen_ndr.Jelmer Vernooij2008-12-164-141/+131
| |
* | Simplify idl-deps.pl script a bit.Jelmer Vernooij2008-12-161-15/+21
| |
* | Add new script for building IDL files in librpc/idl, generating bothJelmer Vernooij2008-12-161-1/+1
| | | | | | | | Samba 3 and Samba 4 output.
* | s4/provision: Upper case default realm, use only first part of realm as ↵Jelmer Vernooij2008-12-161-2/+2
| | | | | | | | default domain name.
* | nsswitch: Fix paths for Samba4 blackbox wbinfo testKai Blin2008-12-161-2/+2
| |
* | Merge branch 'master' of ssh://git.samba.org/data/git/sambaJelmer Vernooij2008-12-1631-5061/+82
|\ \
| * | nsswitch: Move nsswitch files from source4 to top level nsswitch dirKai Blin2008-12-1622-5039/+7
| | |
| * | nsswitch: Move source3 files to top level dir.Kai Blin2008-12-161-6/+0
| | | | | | | | | | | | Don't move source4 files yet to not confuse git's rename tracking too much.
| * | Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-develAndrew Bartlett2008-12-168-15/+61
| |\|
| | * repack the ldb after re-indexingAndrew Tridgell2008-12-161-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | re-indexing in ldb is triggered on any modification to the @ATTRIBUTES or @INDEXLIST records. This happens to produce a worst-case fragmentation of the database, as all @INDEX records are deleted then re-created. By repacking after re-indexing we ensure that the database ends up without extreme fragmentation.
| | * use transactions in ldbadd, ldbmodify and ldbeditAndrew Tridgell2008-12-163-0/+30
| | | | | | | | | | | | | | | | | | | | | | | | The command line tools ldbadd, ldbmodify and ldbedit should operate within a transaction to make them more efficient. The ldbadd tool in particular is much faster when adding a large number of records if all the adds happen within a transaction. Previously there was a transaction per record.
| | * Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell2008-12-1657-681/+21156
| | |\
| | * \ Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell2008-12-0394-3832/+3945
| | |\ \
| | * | | fixed options argument to ldb connect in pythonAndrew Tridgell2008-11-062-10/+18
| | | | | | | | | | | | | | | | | | | | | | | | | The options argument to ldb connect() needs to be marked for the same special handling as attrs in search
| | * | | don't give errors when an empty modules list is given to ldbAndrew Tridgell2008-11-062-5/+9
| | | | |
| * | | | A more-commented version of rpc_server crash fix, matching closer theAndrew Bartlett2008-12-161-1/+14
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | previous behaviour for the 'bad bind' case. (It is only close, not matching - Windows 2008 sends a different, non-zero, assoc_group_id each time) Andrew Bartlett
* / | | Rename dom_sid.idl -> server_id.idl (since it no longer actually contains ↵Jelmer Vernooij2008-12-1612-9/+69
|/ / / | | | | | | | | | the dom_sid). No longer include it from security.idl.
* | | Add python extensions for dom_sid.Jelmer Vernooij2008-12-161-0/+58
| | |
* | | Rename ldap.h to ldap-util.h to avoid clashing with the system ldap.hJelmer Vernooij2008-12-141-1/+1
| | |
* | | Merge branch 'master' of ssh://git.samba.org/data/git/sambaJelmer Vernooij2008-12-141-0/+47
|\ \ \
| * | | Added torture test for doing an openX over a directoryJeremy Allison2008-12-131-0/+47
| | | | | | | | | | | | | | | | | | | | to ensure we get the correct error message. Jeremy.
* | | | Move dom_sid to the Samba 3 IDL file, remove the old definition.Jelmer Vernooij2008-12-123-284/+3
| | | |
* | | | Manually marshall dom_sid, so we can use a fixed size array forJelmer Vernooij2008-12-126-50/+36
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | dom_sid.sub_auths rather than a dynamically allocated one. This makes it possible to use the same DCE/RPC object code for Samba 3 and Samba 4's DCE/RPC parsers and allows copying sids more easily (since they no longer contain any pointers). The cost of having additional manual marshalling code is limited (~35 additional lines of C code).
* | | Remove noejs property, which is no longer used.Jelmer Vernooij2008-12-122-5/+5
| | |
* | | s4:fix segfault in rpc-server, when client binds to unsupported service.Stefan Metzmacher2008-12-121-1/+1
| | | | | | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org>
* | | Add interactive flag to setup/provision (also the default when no arguments ↵Jelmer Vernooij2008-12-111-2/+27
| | | | | | | | | | | | are given).
* | | s4:selftest: samba4 fails the changed delete testStefan Metzmacher2008-12-111-0/+2
| | | | | | | | | | | | metze
* | | s4:libcli/resolve: add resolve_name_all*() which return all addresses not ↵Stefan Metzmacher2008-12-117-49/+115
| | | | | | | | | | | | | | | | | | only the first one metze
* | | s4-smbtorture: skip ServerGetTrustInfo for samba4.Günther Deschner2008-12-101-0/+1
| | | | | | | | | | | | Guenther
* | | s4-smbtorture: add simple netr_ServerGetTrustInfo test.Günther Deschner2008-12-101-0/+42
| | | | | | | | | | | | Guenther
generated by cgit (git 2.34.1) at 2025-09-25 18:39:10 +0000