summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:SAMLDB LDB module - Rework to allow checks for wrong ↵Matthias Dieter Wallnöfer2010-01-051-50/+96
| | | | | | | | | | | | | | | | "defaultObjectCategory" attributes This allows a stricter check for "defaultObjectCategory" attributes which is performed when the "relax" control isn't specified. Additional note: As the added comment points out this isn't complete. And I personally think that moving this at some point to the "objectclass" module is a better idea to make this fully work (since there we have direct access to the schema). If someone has a good idea how to do this please inform me. Anyway, the SAMLDB module does require some restructure since at the moment it's very overloaded and therefore a bit a mess. In the meantime I started to work on a new approach to realise it in a better way.
* s4:schema_load.c - TypoMatthias Dieter Wallnöfer2010-01-051-1/+1
|
* s4:ldap_schema.py - add an additional check for validity of ↵Matthias Dieter Wallnöfer2010-01-051-0/+25
| | | | "defaultObjectCategory"
* s4:ldap_schema.py - Move generated attributes checkMatthias Dieter Wallnöfer2010-01-051-15/+15
| | | | Make more clear that they're created before the "schemaUpdateNow".
* Fix the merged build. Probably not strictly correct but allows us to "make ↵Jeremy Allison2010-01-041-1/+1
| | | | | | test". Jeremy.
* s4:dsdb/repl: convert dreplsrv_out_drsuapi_send/recv to tevent_reqStefan Metzmacher2010-01-042-99/+127
| | | | metze
* s4: Happy New Year 2010Stefan Metzmacher2010-01-041-1/+1
| | | | metze
* s4-dsdb: force REVISION_ADS for new and updated ACLs in dsdbAndrew Tridgell2010-01-021-0/+8
| | | | | | | | | w2k8-r2 gives a "schema mismatch" error if the revision is not set to REVISION_ADS and you replicate the ntsecuritydescriptor using DRS. Nadya, please check this! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: don't give an error on repsTo delete if add is also specifiedAndrew Tridgell2010-01-021-1/+3
| | | | w2k8-r2 in dcpromo asks for a delete+add during its initial join.
* s4-sddl: DRS replication needs REVISION_ADS for SDsAndrew Tridgell2010-01-021-1/+1
| | | | | DRS replication with w2k8-r2 fails with a schema mismatch error if we set the revision to NT4
* ldb: Fix the standalone ldb build.Jelmer Vernooij2010-01-021-14/+14
|
* s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNsAndrew Tridgell2010-01-025-40/+83
| | | | This allows for more flags in the future
* s4-kcc: added a preiodic task to remove deleted objectsAndrew Tridgell2010-01-024-4/+104
| | | | | we check for deleted objects in each partition every 10 minutes, using onelevel searches
* s4-dsdb: fixed several memory leaksAndrew Tridgell2010-01-021-5/+18
| | | | need to be careful with those temporary contexts
* s4-dsdb: fixed samdb_create_foreign_security_principal() to use the ↵Andrew Tridgell2010-01-021-18/+20
| | | | | | wellknown GUID This also fixes a memory leak
* s4-ldb: fixed valgrind error: ares can be freed by callbackAndrew Tridgell2010-01-021-4/+1
|
* s4-dsdb: make sure 'whenChanged' is set on modifyAndrew Tridgell2010-01-021-1/+4
| | | | We also should preserve (and then replace) whenChanged on delete
* s4-dsdb: added dsdb_tombstone_lifetime()Andrew Tridgell2010-01-022-0/+90
|
* s4-dsdb: allow system to remove deleted objectsAndrew Tridgell2010-01-021-0/+19
| | | | This will be used by a periodic job to remove tombstoned objects
* s4-ldaptest: need to use MessageElement for modify messagesAndrew Tridgell2010-01-021-2/+4
| | | | Without MessageElement() the flags are not set, which is invalid
* s4-ldb: show an error string, as well as error messageAndrew Tridgell2010-01-021-3/+4
| | | | | This makes it easier to track down error mismatches from the test suite
* s4-drs: make sure the DNs we put in the db have a extended GUIDAndrew Tridgell2010-01-021-7/+16
|
* s4-dsdb: added dsdb_set_extended_dn_guid()Andrew Tridgell2010-01-021-0/+19
|
* s4-ldbtest: fixed message element in modifyAndrew Tridgell2010-01-021-1/+2
| | | | a flags value of zero is not valid
* s4-ldb: allow modules to override error return valuesAndrew Tridgell2010-01-021-2/+4
| | | | | | The samldb module overrides the error code for some returns when handling primaryGroupID. We need to take the error from the async callback to allow this to work reliably
* s4-ldbmodify: show the error code as well as error stringAndrew Tridgell2010-01-021-1/+2
|
* s4-ldb: declate ldb_val_to_time()Andrew Tridgell2010-01-021-0/+6
|
* s4-ldb: use safe length limited conversions for int64 and timeAndrew Tridgell2010-01-021-13/+48
|
* s4-dsdb: use safe length limiting in string->integer conversionAndrew Tridgell2010-01-021-11/+35
| | | | | The ldap.py test suite could trigger a read past the end of the struct ldb_val buffer
* s4-dsdb: use ldb_val_to_time() instead of ldb_string_to_time()Andrew Tridgell2010-01-022-4/+8
|
* s4-ldb: added ldb_val_to_time() Andrew Tridgell2010-01-021-0/+27
| | | | | | This is intended as a replacement for ldb_string_to_time() for ldb_val inputs. This ensures it is length limited and includes additional validity checks
* s4-drs: sort linked attributesAndrew Tridgell2010-01-021-0/+73
| | | | | See MS-DRSR section 4.1.10.5.17 for a description of the sorting comparison function
* s4-drs: re-resolve the DN in linked attribute processingAndrew Tridgell2010-01-021-0/+10
| | | | w2k8-r2 sometimes sends the DN with an old target
* s4-drs: use dsdb_module_rename()Andrew Tridgell2010-01-021-4/+3
| | | | | | Use the new dsdb_module_rename() for DRS rename handling, instead of ldb_rename(). This stops us going to the top of the module stack on a rename.
* s4-drs: use dsdb linked attribute parse functionsAndrew Tridgell2010-01-022-42/+5
| | | | This makes the code considerably more readable
* s4-dsdb: added parse functions for DRS linked attribute blobsAndrew Tridgell2010-01-021-0/+69
|
* s4-drs: set flag to indicate that we do support linked attributesAndrew Tridgell2010-01-021-4/+1
|
* s4-ldb: show the error code as well as errstrAndrew Tridgell2010-01-021-2/+3
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed valgrind error in replmd modifyAndrew Tridgell2010-01-021-1/+1
| | | | | | | We are using the values from a search result, so we need to steal them onto the msg before we free the search results Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: don't try to remove backlinks directlyAndrew Tridgell2010-01-021-1/+2
| | | | | | | backlinks need to be removed as a side effect of removing the forward link Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: isRecycled only exists in FL W2K8-R2Andrew Tridgell2010-01-021-0/+13
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: use DSDB_FLAG_OWN_MODULEAndrew Tridgell2010-01-021-3/+3
| | | | | | | We need DRS driven replication changes to update replPropertyMetaData, so it needs to call into the repl_meta_data module logic Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: update comment to refect only forward link in this fnAndrew Tridgell2010-01-021-2/+4
| | | | | | This function only update forward links Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: fixed typo for uSNCreatedAndrew Tridgell2010-01-021-1/+1
| | | | | | This broke DRS replication from samba to windows Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: use dsdb_module_guid_by_dn()Andrew Tridgell2010-01-021-1/+1
| | | | We should not be going to the top of the module stack
* s4-drs: cope better with NULL GUIDS from DRSAndrew Tridgell2010-01-021-11/+25
| | | | | | | | It is valid to get a NULL GUID over DRS for a deleted forward link. We need to match by DN if possible when seeing if we should update an existing link. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: give an error message in repl_meta_data if we don't get a partition ↵Andrew Tridgell2010-01-021-0/+1
| | | | control
* s4-drs: treat a zero GUID as not present in replmd_add_fix_laAndrew Tridgell2010-01-021-3/+6
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: update highwatermark after successfully encoding the objectAndrew Tridgell2010-01-021-8/+8
|
* s4-drs: send all linked attributes at the end of a replication cycleAndrew Tridgell2010-01-021-3/+7
| | | | This ensures that a link is not seen before the object it points to