| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
290db8d23647a27c39b97c189a0b2ef6ec21ca69)
|
|
|
|
|
| |
a \n is sometimes allowed in AD (eg in deleted DNs). Until we know
when is really is allowed, treat it as a warning only.
|
|
|
|
|
|
|
|
|
|
|
|
| |
The DN escape function was using the form \c where c is any
character. The unescape function was using \XX where XX is a 2 digit
hex number. The asymmetry led to quite a few problems when we start to
deal with DNs containing escape chars, such as CN=foo\0ADEL:XXX. The
result was a DN that was not accessible.
This patch changes the escaping to follow RFC2253 much more
closely. We accept either type of escape, and produce the two types of
escape, depending on the character being escaped
|
|
|
|
| |
metze
|
| |
|
|
|
|
|
|
|
|
| |
We need to work on the provision or LDB modules to avoid DN attributes
without GUIDs (caused because the target does not exist at creation
time).
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
This patch, inspired by a patche by Endi S. Dewata
<edewata@redhat.com>, allows this control to be passed to the LDAP
backend.
Andrew Bartlett
|
| |
|
| |
|
| |
|
|
|
|
| |
provision() method.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The bug here was that by assuming all linked attributes were 'normal
DNs', we would miss the binary portion of DN+Binary.
This patch then has us reparse the string to determine it's GUID, for
the GUID lookup, but maintains the binary porition into the on-disk
format.
Andrew Bartlett
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
I'm satisfied that the task this test does is already done by the time
we map the incoming schema, and process the objects. If we have the
OID mapping wrong or incomplete, we will get any errors this test
found errors there.
(And this dramaticly reduces the test time, so we can now add
RPC-DSSYNC to 'make test').
Andrew Bartlett
|
|
|
|
|
|
|
| |
This is done by comparing the values against the remote host's LDAP
server.
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
(These are deliberately there in DRS replication).
Andrew Bartlett
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
(This should make it easier to do more 'compare DRS with LDAP'
operations, as LDB is an easier interface to program.)
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
libnet_BecomeDC and libnet_UnbecomeDC()
We're supposed to pass in source_dsa_address...
metze
|
|
|
|
|
|
|
|
| |
I've left out those for which I could not find an expected value in my
default Windows 2003 server's database, and the values that rely on
the current prefix map at the time.
Andrew Bartlett
|
|
|
|
|
|
|
| |
This is most likely the cause of the DRS replication failures I
observed with my changes.
Andrew Bartlett
|
|
|
|
| |
This will allow us to do local tests against that schema
|
| |
|
|
|
|
|
|
|
| |
This will allow us in future to do tests on the LDB values we generate
from the DRS replication.
Andrew Bartlett
|
|
|
|
| |
It turns out that we always add the class/attribute to the schema.
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
These changes include reworking the code to call ldb_module_get_ctx()
less often (avoid the function calls, particularly during the step
into a complex function).
Andrew Bartlett
|
|
|
|
|
|
| |
(Found in a code review by metze)
Andrew Bartlett
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
This is now in dsdb_dn. Removing this to a specific wrapper avoids a
number of bugs where Binary DNs were being handled incorrectly.
This reverts much of tridge's commit
fd22e0304782e20b9bbb29464b6c745d409ff4c6
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
| |
This converts the code from using the binary DN code in ldb_dn to
using a special Samba-specfic wrapper around ldb_dn.
We also use the dsdb_dn code for DN+Binary and DN+String comparisons
(changed from treating them as Binary blobs)
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
| |
This aims to replace (and is based on) the code in ldb_dn.c. It is
however much stricter in the DNs it will accept.
Andrew Bartlett
|
|
|
|
|
|
|
| |
This will help simplify boilerplate comparison functions where we
don't have a shortcut way to compare.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
| |
Rather than have a repeat of the bugs we found at the plugfest where
hexidecimal strings must be in upper or lower case in particular
places, ensure that each caller chooses which case they want.
This reverts most of the callers back to upper case, as things were
before tridge's patch. The critical call in the extended DN code is
of course handled in lower case.
Andrew Bartlett
|
|
|
|
| |
Signed-off-by: TAKEDA Yasuma <yasuma@osstech.co.jp>
|
|
|
|
|
| |
Add more checks on valid levels, mark unimplemented ones as "UNSUPPORTED" and
otherwise as "INVALID_INFO_CLASS" to be safe.
|
| |
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
| |
The LogonControl tests now are split out to a new RPC-NETLOGON-ADMIN test that
tests the behaviour of that call when called by user, dc or workstation.
Guenther
|
|
|
|
|
|
| |
This size constraint is not correct in it's current form, as windows
does send us rDN values for CN with lengths longer than 64. Once we
know how this constraint really works we can add it back in.
|
|
|
|
|
|
|
|
|
| |
The change to use a common system_session broke replication as the KDC
forces CRED_DONT_USE_KERBEROS on session->credentials, which is shared
with other parts of the system.
This should be fixed once we confirm whether the ldap backend actually
relies on CRED_DONT_USE_KERBEROS
|