summaryrefslogtreecommitdiffstats
path: root/source/libads/ldap.c
Commit message (Collapse)AuthorAgeFilesLines
* r24252: Dump guid of msExchMailboxGuid when returned.Günther Deschner2007-08-061-0/+1
| | | | Guenther
* r24166: Fix Coverity ID 391Volker Lendecke2007-08-041-1/+1
|
* r23951: Fix segfault.Günther Deschner2007-07-181-1/+1
| | | | Guenther
* r23944: merge from SAMBA_3_2:Stefan Metzmacher2007-07-181-2/+15
| | | | | | | - always provide ads_setup_sasl_wrapping() function - read/write returning 0 means EOF and we need to return direct metze
* r23937: Use ads_config_path() when we need to know the configration context.Günther Deschner2007-07-171-26/+11
| | | | Guenther
* r23889: merge from SAMBA_3_2:Stefan Metzmacher2007-07-161-46/+46
| | | | | | | move elements belonging to the current ldap connection to a substructure. metze
* r23887: merge from SAMBA_3_2:Stefan Metzmacher2007-07-161-0/+12
| | | | | | add ads_disconnect() function metze
* r23861: Fix return code in ads_find_samaccount().Günther Deschner2007-07-131-1/+1
| | | | Guenther
* r23837: Pass ADS_STRUCT and TALLOC_CTX down to ads_disp_sd.Günther Deschner2007-07-111-1/+3
| | | | Guenther
* r23836: Add ads_config_path() and ads_get_extended_right_name_by_guid().Günther Deschner2007-07-111-0/+93
| | | | Guenther
* r23834: Allow to pass an ADS_STRUCT pointer down to the dump function ↵Günther Deschner2007-07-111-13/+13
| | | | | | | | callback in libads. Guenther
* r23833: Document ads_find_samaccount().Günther Deschner2007-07-111-0/+9
| | | | Guenther
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-07-101-2/+1
|
* r23780: Find and fix more GPL2 -> GPL3.Jeremy Allison2007-07-091-1/+1
| | | | Jeremy.
* r23772: Add ads_find_samaccount() helper function.Günther Deschner2007-07-091-0/+60
| | | | Guenther
* r23514: Remove unused function ads_get_dn_from_extended_dn().Jeremy Allison2007-06-161-29/+0
| | | | Jeremy.
* r23199: merge ldap_rename2_s() fix from SAMBA_3_0Gerald Carter2007-05-291-1/+2
|
* r22940: Merge from 3_0:Günther Deschner2007-05-161-3/+37
| | | | | | | * generic LDAP range retrieval searches * tweaks for winbindd_ads.c Guenther
* r22800: Add GPO_SID_TOKEN and an LDAP function to get tokensids from the ↵Günther Deschner2007-05-111-0/+104
| | | | | | tokenGroup attribute. Guenther
* r22799: Fix the build.Günther Deschner2007-05-111-1/+1
| | | | Guenther
* r22797: We are only interested in the DACL of the security descriptor, so ↵Günther Deschner2007-05-111-19/+35
| | | | | | | | search with the SD_FLAGS control. Guenther
* r22728: Patch from Danilo Almeida <dalmeida@centeris.com>:Gerald Carter2007-05-061-0/+70
| | | | | | When asked to create a machine account in an OU as part of "net ads join" and the account already exists in another OU, simply move the machine object to the requested OU.
* r22589: Make TALLOC_ARRAY consistent across all uses.Jeremy Allison2007-04-301-4/+8
| | | | Jeremy.
* r22112: Fix memleak pointed out by Steven Danneman <steven.danneman@isilon.com>.Jeremy Allison2007-04-061-1/+2
| | | | Jeremy.
* r21608: Fix a couple of memleaks in error code paths beforeJeremy Allison2007-03-011-1/+2
| | | | | Coverity finds them :-) Jeremy.
* r21606: Implement escaping function for ldap RDN valuesSimo Sorce2007-03-011-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix escaping of DN components and filters around the code Add some notes to commandline help messages about how to pass DNs revert jra's "concistency" commit to nsswitch/winbindd_ads.c, as it was incorrect. The 2 functions use DNs in different ways. - lookup_usergroups_member() uses the DN in a search filter, and must use the filter escaping function to escape it Escaping filters that include escaped DNs ("\," becomes "\5c,") is the correct way to do it (tested against W2k3). - lookup_usergroups_memberof() instead uses the DN ultimately as a base dn. Both functions do NOT need any DN escaping function as DNs can't be reliably escaped when in a string form, intead each single RDN value must be escaped separately. DNs coming from other ldap calls (like ads_get_dn()), do not need escaping as they come already escaped on the wire and passed as is by the ldap libraries DN filtering has been tested. For example now it is possible to do something like: 'net ads add user joe#5' as now the '#' character is correctly escaped when building the DN, previously such a call failed with Invalid DN Syntax. Simo.
* r21352: Let ads_upn_suffixes() return a pointer to an array of suffixes.Günther Deschner2007-02-151-4/+4
| | | | Guenther
* r21349: Fix memleak in ads_upn_suffixes().Günther Deschner2007-02-141-0/+3
| | | | Guenther
* r21021: Fix memleak.Günther Deschner2007-01-251-0/+1
| | | | Guenther
* r20874: We need to distinguish client sitenames per realm. We were overwritingGünther Deschner2007-01-181-4/+6
| | | | | | | the stored client sitename with the sitename from each sucessfull CLDAP connection. Guenther
* r20857: Silence gives assent :-). Checking in the fix forJeremy Allison2007-01-171-2/+17
| | | | | | | | | site support in a network where many DC's are down. I heard via Volker there is still a bug w.r.t the wrong site being chosen with trusted domains but we'll have to layer that fix on top of this. Gd - complain if this doesn't work for you. Jeremy.
* r20487: Remove the unused dn2ad_canonical() callGerald Carter2007-01-021-18/+0
|
* r19687: Fix uninitialized variables found by Coverity (and gcc -O1... ;-))Volker Lendecke2006-11-131-1/+2
| | | | Volker
* r19651: Fix interesting bug with the automatic site coverage in Active ↵Günther Deschner2006-11-101-1/+25
| | | | | | | | | | | Directory: When having DC-less sites, AD assigns DCs from other sites to that site that does not have it's own DC. The most reliable way for us to identify the nearest DC - in that and all other cases - is the closest_dc flag in the CLDAP reply. Guenther
* r19646: Fix memleak in the default_ou_string handling. Thanks to David HuGünther Deschner2006-11-091-11/+37
| | | | | | <david.hu@hp.com>. Fixes #4212. Guenther
* r19528: Fix container handling for "net ads user" and "net ads group" functionsGünther Deschner2006-11-011-1/+3
| | | | | | along with some memleaks. Guenther
* r19526: Fix minor memleak.Günther Deschner2006-11-011-0/+1
| | | | Guenther
* r19263: Be more accurate in telling what the sitename problem is in this DEBUGGünther Deschner2006-10-131-1/+1
| | | | | | statement. Guenther
* r18923: Fix more memleaks.Günther Deschner2006-09-261-2/+11
| | | | Guenther
* r18902: Also dump mS-DS-CreatorSID.Günther Deschner2006-09-251-0/+1
| | | | Guenther
* r18663: Fix one more uuid -> GUID.Jeremy Allison2006-09-191-1/+1
| | | | Jeremy.
* r18552: Ensure the sitename matches before we SAF store a DC in ADS mode.Jeremy Allison2006-09-151-4/+4
| | | | Jeremy.
* r18480: Doh ! Double-free of hostnameDN.Jeremy Allison2006-09-131-1/+0
| | | | Jeremy.
* r18464: Solaris has LDAP_SCOPE_ONELEVEL. Linux seems to have it as well.Volker Lendecke2006-09-131-5/+7
| | | | | | Fix a C++ compat warning. Volker
* r18453: Attempt to fix the non-ldap buildVolker Lendecke2006-09-131-0/+4
|
* r18446: Add the ldap 'leave domain' code - call this asJeremy Allison2006-09-131-0/+174
| | | | | | a non-fatal error path if the 'disable machine account' code succeeded. Jeremy.
* r18165: Fix memleaks.Günther Deschner2006-09-061-2/+7
| | | | Guenther
* r18063: When we get a successful connection using ADS,Jeremy Allison2006-09-051-1/+2
| | | | | | | cache the SAF name under both the domain name and the realm name, as we could be looking up under both. Jerry please check. Jeremy.
* r18019: Fix a C++ warnings: Don't use void * in libads/ for LDAPMessage anymore.Volker Lendecke2006-09-031-88/+92
| | | | | | | Compiled it on systems with and without LDAP, I hope it does not break the build farm too badly. If it does, I'll fix it tomorrow. Volker
* r18015: Try and detect network failures immediately inJeremy Allison2006-09-031-0/+20
| | | | | | | | | | set_dc_type_and_flags(). Fix problem when DC is down in ads_connect, where we fall back to NetBIOS and try exactly the same IP addresses we just put in the negative connection cache.... We can never succeed, so don't try lookups a second time. Jeremy.