summaryrefslogtreecommitdiffstats
path: root/source4/dsdb
Commit message (Collapse)AuthorAgeFilesLines
...
* Give a better error when ldb_dn_from_ldb_val failsAndrew Bartlett2008-11-041-1/+3
|
* Use ldb_dn_from_ldb_val to avoid possible over-run of the value.Andrew Bartlett2008-11-042-9/+9
| | | | | | | | The ldb_val is length-limited, and while normally NULL terminated, this avoids the chance that this particular value might not be, as well as avoiding a cast. Andrew Bartlett
* Fix use of wrong union arm in linked_attributes moduleAndrew Bartlett2008-11-041-1/+1
| | | | | | | | This bug occours frequenetly in ldb users because the union so happens to be layed out that this works. However, it is still incorrect usage... Andrew Bartlett
* use the new CH_UTF16_MUNGED charset for utf16 password buffersAndrew Tridgell2008-10-311-1/+1
| | | | now to work out how to test this ...
* Remove unused include param/param.h.Jelmer Vernooij2008-10-243-3/+0
|
* Remove iconv_convenience argument from convert_string{,talloc}() butJelmer Vernooij2008-10-244-9/+10
| | | | make them wrappers around convert_string{,talloc}_convenience().
* Move charset library to top level.Jelmer Vernooij2008-10-241-1/+1
|
* Clarify the linked attribute module behaviour with commentsAndrew Bartlett2008-10-231-1/+9
|
* Make sure prototypes are always included, make some functions static andJelmer Vernooij2008-10-205-7/+9
| | | | remove some unused functions.
* s4-drsuapi: merge drsuapi_DsGetNCChanges from s3 drsuapi idl.Günther Deschner2008-10-181-47/+49
| | | | Guenther
* Add TALLOC_CTX pointer to strhex_to_data_blob for consistency with SambaJelmer Vernooij2008-10-184-12/+7
| | | | 3.
* Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-develAndrew Bartlett2008-10-173-76/+240
|\
| * Transform the sequence_number operation into a normal extended operation as ↵Simo Sorce2008-10-163-76/+240
| | | | | | | | it should always have been. Make it also async so that it is not a special case.
* | Fix errrors in new password handling code found by RPC-SAMR.Andrew Bartlett2008-10-171-1/+1
| | | | | | | | | | | | | | | | I'm very glad we have such a comprehensive testsuite for the SAMR password change process, as it makes this a much easier task to get right. Andrew Bartlett
* | Create a 'straight paper path' for UTF16 passwords.Andrew Bartlett2008-10-163-103/+192
|/ | | | | | | | | | | | | | | | | | | | | This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett
* The ldb async merge broke all MMC management utiltiesMatthias Dieter Wallnöfer2008-10-141-4/+4
| | | | | | | | | | | | Commit 51baa8deec00244cc0a6e3d29c53932427800610 included a copy-and-paste bug which caused all MMC mangement utilities to break. Because of the typo Samba4 would no longer include the magic 'you may write to these attributes/create these classes' attributes, these tools would display all fields greyed out or 'read only', and not allow the creation of child objects. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* DSDB cosmetic patches: Some enhancementsMatthias Dieter Wallnöfer2008-10-132-6/+6
| | | | Also, use the constants more in the "ldif_handlers" module.
* Cosmetic corrections for the DSDB moduleMatthias Dieter Wallnöfer2008-10-134-13/+13
| | | | This commit applies some cosmetic corrections for the DSDB (Directory Server Database).
* Use common strlist implementation in Samba 3 and Samba 4.Jelmer Vernooij2008-10-121-1/+1
|
* Fix include paths to new location of libutil.Jelmer Vernooij2008-10-1118-18/+18
|
* Implement 'type unknown' names in the CrackNames code.Andrew Bartlett2008-10-061-10/+48
| | | | | | This guesses the type by running each of the possible options. Andrew Bartlett
* Remove compleatly bogus rename test in partitions module.Andrew Bartlett2008-10-061-17/+0
|
* Remove DESCRIPTION from generated schema lines.Andrew Bartlett2008-10-061-20/+1
| | | | | | | This is not permitted in the AD aggregate schema, and more trouble than it is worth in the OpenLDAP schema due to escaping issues. Andrew Bartlett
* Fix Domain Trust creation with Windows 2008 (and many other tools)Andrew Bartlett2008-10-061-1/+5
| | | | | | | | | | | A dITConentRules attribute (unlike objectClasses) must not contain a 'SUP'. The ADSI layer in Windows would download the whole schema, and validate it. Thanks to the team at Microsoft for very long debugging session to find this. Andrew Bartlett
* Merge commit 'master/master'Andrew Tridgell2008-10-035-48/+424
|\
| * Fix crash bugs in error paths: ac is not yet initialized here, and we don'tSimo Sorce2008-10-021-27/+18
| | | | | | | | | | need to call ldb_module_done in the main module functions, we can directly return an error. ldb_module_done() is for callbacks
| * s4:rootdse: for now don't pass down controls for the rootdse searchStefan Metzmacher2008-10-021-1/+1
| | | | | | | | metze
| * s4:partition: register DOMAIN_SCOPE and SEARCH_OPTIONS controlsStefan Metzmacher2008-10-021-0/+14
| | | | | | | | metze
| * s4:partition: pass down the SEARCH_OPTIONS control as uncriticalStefan Metzmacher2008-10-021-0/+8
| | | | | | | | metze
| * s4:linked_attributes: fix a crash bug when the definition of a target ↵Stefan Metzmacher2008-10-021-3/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | attribute is missing Windows 2003 has a broken schema where the definition of msDS-IsDomainFor is missing (which is supposed to be the backlink of the msDS-HasDomainNCs attribute. Our schema is extracted from windows 2003, so we have the problem. As the NET-API-BECOME-DC test triggers this bug, windows 2003 seems to just skip creating a backlink. metze
| * s4:kludge_acl: just fake support for the SD_FLAGS controlStefan Metzmacher2008-10-021-0/+20
| | | | | | | | metze
| * s4:extended_dn: add support for <GUID=...>, <SID=...> or <WKGUID=...,DC=...> ↵Stefan Metzmacher2008-10-021-44/+355
| | | | | | | | | | | | | | | | as basedn We resolve them into the real basedn before do the real search. metze
* | fixed the partition module and the GC handlingAndrew Tridgell2008-10-031-4/+38
| | | | | | | | | | | | | | | | | | | | - when multiple partitions are searched, consider the search a success if any of the partitions return success - only search the right subset of partitions, looking at the scope and basedn of the search This fixes several errors with GC searches
* | fixed the sense of ldb base dn comparisons in two places, and use aAndrew Tridgell2008-10-022-4/+4
|/ | | | | | direct comparison instead of a sub-tree comparison in another this fixes basedn searches on the global catalog port
* Compare sids in samba3sam tests.Jelmer Vernooij2008-09-301-11/+21
|
* s4:samldb: use the code path with async ldbStefan Metzmacher2008-09-291-43/+4
| | | | | | | | This removes the event_context leak that caused NT_STATUS_TOO_MANY_OPENED_FILES in the server, because of all the epool fds metze
* LDB ASYNC: misc changesSimo Sorce2008-09-291-3/+2
|
* LDB ASYNC: samba4 modulesSimo Sorce2008-09-2922-4333/+4946
|
* s4:dsdb: passdown DSDB_CONTROL_REPLICATED_UPDATE_OID for replicated updatesStefan Metzmacher2008-09-293-3/+37
| | | | | | | We need to make sure replicated updates are handled differently in some situations, e.g. we should bypass the schema checks. metze
* Revert LDB return code patches from Matthias.Jelmer Vernooij2008-09-254-16/+16
|
* Cosmetic corrections for the DSDB moduleMatthias Dieter Wallnöfer2008-09-244-16/+16
| | | | This commit applies some cosmetic corrections for the DSDB (Directory Server Database).
* Use loadparm since it's required by some modules.Jelmer Vernooij2008-09-241-6/+6
|
* Move source4/lib/crypto to lib/crypto.Jelmer Vernooij2008-09-242-2/+2
|
* Rename smbd -> samba.Jelmer Vernooij2008-09-241-1/+1
| | | | | | | | This reverts commit 05ea5e23cf4e70de0bd658b1c5c0ead133967091. Conflicts: source4/smbd/server.c
* Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.Simo Sorce2008-09-2313-80/+63
| | | | | The previous ldb_search() interface made it way too easy to leak results, and being able to use a printf-like expression turns to be really useful.
* Revert "Rename smbd -> samba."Jelmer Vernooij2008-09-211-1/+1
| | | | This reverts commit 0e9008be35a5b334bd65e6417193d4b8f27bdc36.
* Rename smbd -> samba.Jelmer Vernooij2008-09-211-1/+1
|
* Fix last samba3sam.py test.Jelmer Vernooij2008-09-211-24/+28
|
* Fix DNs - only one more samba3sam test failing now.Jelmer Vernooij2008-09-211-80/+72
|
* More code simplifications.Jelmer Vernooij2008-09-201-24/+25
|