| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | |
| | |
| | |
| | |
| | |
| | | |
difference between end of file and a blank line.
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This module has been created with the purpose of being used
for searches against ldap servers without the need to handle
the control manually
You can test it by passing -o modules:paged_searches to ldbsearch
The page search size is set to 500 objects.
Simo.
|
| | | |
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | | |
OIDs and skip built-in attributes.
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
utility.
We now read the objectClasses, and sort them into order, so that
OpenLDAP will load them. We do this by walking down the 'subClassOf'
chain. This should also be used in the objectClass module to sort the
objectClass list, and to populate the @SUBCLASS records.
Andrew Bartlett
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
configure check for the interfaces.
should fix the build on some old sun boxes
metze
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | | |
Add attribute syntax mapping to the existing OpenLDAP -> AD tool.
Andrew Bartlett
|
| | | |
|
| | |
| | |
| | |
| | | |
makes the discard_const stuff nicer)
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
for objectClass=xyz. The code has been warning at me 'no
covert_operator set', and indeed this is the case. (It then proceeds to
strip this as a search expression)
In this commit, I have implemented a convert_operator for objectClass,
by pretending it is a simple MAP_CONVERT operator for the search
requests.
I also have changed the logic for when we should bail out. I can only
see reason to bail out on the search if we have both local and remote
trees. How can a remote-only search be un-splittable?
Andrew Bartlett
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
First step at fixing the build breakage with the groupmapping test. On Linux,
F_RDLCK is defined to 0, for example NetBSD has it at 1.
Still does not work fully though. Still investigating.
metze
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
needs to be renamed (operation_add?).
This allows me to match the behaviour and substitute with the
entryUUID module for remote LDAP connections.
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Martin Kühl
<mkhl@samba.org>.
Martin took over the work done last year by Jelmer, in last year's
SoC. This was a substanital task, as the the ldb modules API changed
significantly during the past year, with the addition of async calls.
This changeset reimplements and enables the ldb_map ldb module and
adapts the example module and test case, both named samba3sam, to the
implementation.
The ldb_map module supports splitting an ldb database into two parts
(called the "local" and "remote" part) and storing the data in one of
them (the remote database) in a different format while the other acts
as a fallback.
This allows ldb to e.g. store to and load data from a remote LDAP
server and present it according to the Samba4 schema while still
allowing the LDAP to present and modify its data separately.
A complex example of this is the samba3sam module (by Jelmer
Vernooij), which maps data between the samba3 and samba4 schemas.
A simpler example is given by the entryUUID module (by Andrew
Bartlett), which handles some of the differences between AD and
OpenLDAP in operational attributes. It principally maps objectGUID,
to and from entryUUID elements. This is also an example of a module
that doesn't use the local backend as fallback storage.
This merge also splits the ldb_map.c file into smaller, more
manageable parts.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
pre-processed last, and get AIX and some other hosts to pass make test
again (I think the macros were being over-overridden).
Andrew Bartlett
|
| | |
| | |
| | |
| | | |
to do
|
| | | |
|
| | |
| | |
| | |
| | | |
helper function to set them.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
HAVE_PREAD_DECL/HAVE_PWRITE_DECL
and common/io.h already defines pread and pwrite as static if they are not.
remove unneded defines
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
gidNumber attributes instead
Do not change unixName right now, we don't have an attribute to use in the posixGroup class,
and I think we should remove its usage altogether and look up users and groups by their uid/gid only.
Simo.
|
| | | |
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | |
| | |
| | | |
- and add torture tests also based on the rfc's
metze
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | | |
function.
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
they all have rangeLower=16 rangeUpper=16
and attribute syntax 2.5.5.10
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
with this you can limit a search to a specific partitions
or a search over all partitions without getting referrals.
(Witch is the default behavior on the Global Catalog Port)
metze
|
| | |
| | |
| | |
| | | |
metze
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
this attriute is used to group multiple attribute
to a propertySet for access control.
metze
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
because the handlers are called within the async callbacks
in side the main search.
Also it makes no sense to give the sddl encoder the sid of the primary
domain when we need a description of a real security_descriptor,
this only makes sense for the defaultSecurityDescriptor...
metze
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
top->level1->level2->level3
level3 has a deny destructor
talloc_free(level1)
result: top->level3
metze
|
| | | |
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | |
| | |
| | |
| | | |
creative use of memory contexts
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | | |
testsuite.
Andrew Bartlett
|
| | |
| | |
| | |
| | | |
Awesome how this didn't break everything around...
|
| | |
| | |
| | |
| | | |
Andrew Bartlett
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
reply rules to be followed.
Add code to do a fake async callback on the skipped records.
Andrew Bartlett
|