summaryrefslogtreecommitdiffstats
path: root/source4/dsdb/common
Commit message (Collapse)AuthorAgeFilesLines
* s4-dsdb: fixed compiler warningAndrew Tridgell2011-09-081-1/+1
| | | | | | sid can be const Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb Print clearer error messages when invalid account flags are ↵Andrew Bartlett2011-09-051-0/+9
| | | | specified on add
* s4-dsdb Return ACL errors as ldb_errstring()Andrew Bartlett2011-08-261-0/+3
| | | | | | This string is reported to the caller, which makes debugging much easier. Andrew Bartlett
* s4-dsdb: added samdb_ntds_msdcs_dns_name()Andrew Tridgell2011-08-251-2/+37
| | | | | | this gets the DNS name for a NTDS GUID, based on the forest DNS name Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dsdb: added samdb_dn_to_dns_domain()Andrew Tridgell2011-08-251-0/+36
| | | | | | | this converts a DC into the equivalent DNS domain. It is used when forming t_msdcs NTDS DNS names Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dsdb: assert that base DNs are used correctlyAndrew Tridgell2011-08-251-0/+3
| | | | | | this will catch future programmer errors with incorrect base DNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb Give a less worrying error message on failure to get a transactionAndrew Bartlett2011-08-131-1/+1
|
* s4-dsdb Add ability to force a particular SID in the upgrade caseAndrew Bartlett2011-08-131-1/+16
|
* s4-dsdb Add flag to set DSDB_BYPASS_PASSWORD_HASH controlAndrew Bartlett2011-08-132-0/+9
|
* s4-dsdb: don't cache the NTDS settings DNAndrew Tridgell2011-08-121-9/+8
| | | | | | | | | this DN can change due to a server rename, so we cannot cache it. It is set by provision, but not anywhere else. This seems to not have a large performance impact Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added dn_format attribute of a dsdb_attributeAndrew Tridgell2011-08-041-7/+0
| | | | | | | this is faster than string comparisons during searches at runtime Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dsdb: fixed a warning on dsdb_delete()Andrew Tridgell2011-08-041-1/+1
| | | | | | | struct ldb_dn is never const Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dsdb: make requests for STORAGE_FORMAT control non-criticalAndrew Tridgell2011-08-041-1/+1
| | | | | | | | this allows us to use dsdb_module_dn_by_guid() from levels below the extended_dn_out module Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dsdb: added dsdb_delete() functionAndrew Tridgell2011-07-211-0/+30
| | | | | | | this gives us a delete function that takes the standard set of dsdb flags Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* Standalone samdb_ntds_site_settings_options() helperDave Craft2011-07-141-0/+48
| | | | | | | A helper function for retrieving the ntds site settings via standalone function call. Used within KCC Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-drs: cope with missing RMD_ADDTIME in linked attributesAndrew Tridgell2011-06-101-1/+1
| | | | upgraded links can be missing the RMD_ADDTIME field
* s4-dsdb Add transactions to dsdb modify helpersAndrew Bartlett2011-05-081-0/+18
|
* s4-socket: rename allow_access() to socket_allow_access()Andrew Tridgell2011-05-031-1/+1
| | | | | | this prevents a symbol collision with s3 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added a ldb err -> NTSTATUS mappingAndrew Tridgell2011-04-041-0/+78
| | | | | | | this is not perfect, but its better than always giving NT_STATUS_UNSUCCESSFUL in our RPC servers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4/ldb - remove now superflous "ldb_dn_validate" checksMatthias Dieter Wallnöfer2011-03-042-3/+3
| | | | | | | If we immediately afterwards perform an LDB base operation then we don't need an explicit "ldb_dn_validate" check anymore (only OOM makes sense). Reviewed by: Tridge
* s4:dsdb - always handle the attribute "options" as 32bit unsigned integerMatthias Dieter Wallnöfer2011-03-011-2/+3
| | | | | | | | | | It is defined as LDAP syntax 2.5.5.9 so no need at all to treat it as 64-bit integer. Reviewed by: Kamenim and Metze Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Mar 1 12:46:15 CET 2011 on sn-devel-104
* s4:dsdb/common/util.c - remove "samdb_find_or_add_value"Matthias Dieter Wallnöfer2011-03-011-8/+0
| | | | | | This isn't used anymore. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:dsdb/common/util.c - fully remove "samdb_msg_add_string"Matthias Dieter Wallnöfer2011-03-011-18/+3
| | | | | | | This isn't needed anymore and will be substituted by "ldb_msg_add_string". Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:remove many invocations of "samdb_msg_add_string"Matthias Dieter Wallnöfer2011-03-012-10/+8
| | | | | | | This call can be substituted by "ldb_msg_add_string". We only need to be careful on local objects or talloc'ed ones which live shorter than the message. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Fix some typesJelmer Vernooij2011-02-281-2/+2
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 28 23:30:06 CET 2011 on sn-devel-104
* s4/dsdb-util: Use DS_NTDSDSA_OPT_IS_GC flag definitionKamen Mazdrashki2011-02-271-1/+1
| | | | | Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Sun Feb 27 00:10:45 CET 2011 on sn-devel-104
* build: moved libds/common/flag_mapping.c into a common subsystemAndrew Tridgell2011-02-242-0/+3
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: use #include <ldb.h> for ldbAndrew Tridgell2011-02-102-3/+3
| | | | | | | | thi ensures we are using the header corresponding to the version of ldb we're linking against. Otherwise we could use the system ldb for link and the in-tree one for include Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth Remove special case for account_sid from auth_serversupplied_infoAndrew Bartlett2011-01-201-7/+6
| | | | | | | | | | | | This makes everything reference a server_info->sids list, which is now a struct dom_sid *, not a struct dom_sid **. This is in keeping with the other sid lists in the security_token etc. In the process, I also tidy up the talloc tree (move more structures under their logical parents) and check for some possible overflows in situations with a pathological number of sids. Andrew Bartlett
* s4:dsdb_find_nc_root - fix it up to let the provisioning work correctlyMatthias Dieter Wallnöfer2011-01-151-2/+2
| | | | | | | | | | | Use the temporary list unless we have at least the three main "namingContexts" from the rootDSE available (Default, Configuration, Schema - these are mandatory on all AD deployments!). This bug has been discovered by Nadya in relation with her SD work. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Jan 15 19:01:11 CET 2011 on sn-devel-104
* s4-dsdb: minimise the DN in group expansionAndrew Tridgell2011-01-141-0/+5
| | | | | | | | this DN we have came from an extended DN search, which means it may have multiple extended components. We need to minimise the DN before AD will accept it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb Implement tokenGroups expansion directly in ldb operational moduleAndrew Bartlett2011-01-141-0/+167
| | | | | | This removes a silly cross-dependency between the ldb moudle stack and auth/ Andrew Bartlett
* s4-dsdb: Added a helper function to get the default dns domain as string.Nadezhda Ivanova2010-12-221-0/+19
|
* s4:dsdb/common/util.c - remove unused variable "ndr_err"Matthias Dieter Wallnöfer2010-12-211-1/+0
|
* s4-dsdb Use sid_blob_parse()Andrew Bartlett2010-12-161-3/+3
|
* s4-smbtorture: Make test names lowercase and dot-separated.Jelmer Vernooij2010-12-111-4/+4
| | | | | | | | This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
* s4:fix some shadowed declaration warnings on Solaris by renaming the symbolsMatthias Dieter Wallnöfer2010-12-061-5/+6
|
* s4:dsdb/common/util_samr.c and auth/sam.c - fix error messageMatthias Dieter Wallnöfer2010-12-041-2/+2
|
* s4:dsdb/common/util_samr.c - "dsdb_enum_group_mem" - fix it up regarding non ↵Matthias Dieter Wallnöfer2010-12-041-7/+16
| | | | | | SAM members For example contacts.
* s4:dsdb/common/util.c - "samdb_msg_add_add/delval" - introduce also here the ↵Matthias Dieter Wallnöfer2010-12-011-2/+2
| | | | | | better memory context "msg->elements" fits better than "msg".
* s4:"dsdb_find_nc_root" - let it work also when the "namingContexts" ↵Matthias Dieter Wallnöfer2010-11-161-8/+34
| | | | | | attribute isn't available yet This is needed on provisioning when the modules aren't set up yet.
* s4:dsdb - proof against empty RDN values where expectedMatthias Dieter Wallnöfer2010-11-111-0/+5
| | | | This should prevent crashes as pointed out on the mailing list.
* s4:password_hash LDB module - move "samdb_msg_find_old_and_new_ldb_val" into ↵Matthias Dieter Wallnöfer2010-11-111-62/+0
| | | | | | | | the password_hash LDB module It's only used there and so I think it doesn't really belong in "dsdb/common/util.c" (I first thought that it could be useful for ACL checking but obviously it wasn't).
* s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()Stefan Metzmacher2010-11-091-11/+14
| | | | metze
* s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret ↵Stefan Metzmacher2010-11-092-12/+15
| | | | | | | | attributes We should have them just in one place, so that we don't forget some of them. metze
* s4:samdb_msg_find_old_and_new_ldb_val - reworkMatthias Dieter Wallnöfer2010-11-081-6/+27
| | | | | | - don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation
* s4:dsdb/common: fix memory leak in samdb_ntds_settings_dn()Stefan Metzmacher2010-11-041-1/+1
| | | | | | fetch and set should use the same name! metze
* s4:samr RPC server - remove wrong implementation of ReplicaSourceNodeNameMatthias Dieter Wallnöfer2010-10-291-22/+0
| | | | This should represent a replication partner - never the DC iself
* s4:"samdb_search_count" - introduce a "mem_ctx" parameterMatthias Dieter Wallnöfer2010-10-251-5/+4
| | | | | | | All other "samdb_search_*" calls do have one - why "samdb_search_count" doesn't? Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Oct 25 17:42:33 UTC 2010 on sn-devel-104
* ldb:gendb_* calls: support a "NULL" resultset parameterMatthias Dieter Wallnöfer2010-10-251-2/+1
| | | | | This is useful for "samdb_search_count" where only the amount of entries matters.