summaryrefslogtreecommitdiffstats
path: root/source4/dsdb
Commit message (Collapse)AuthorAgeFilesLines
* Fix headers, ldb_includes.h is a private header,Simo Sorce2009-02-237-3/+8
| | | | do not reference it from ldb.h
* added a workaround to the handling of unicodePwd for Win7-betaAndrew Tridgell2009-02-101-1/+30
| | | | | | | | | | | | | | | | | | The Win7-beta domain process has changed. It no longer uses SAMR for setting the password, and instead uses a ldap modify on a SASL encrypted ldap connection. We didn't handle that as the unicodePwd attribute has a dual use, holding the nt style MD4 hases for DRS replication, but holding a UTF-16 plaintext password for a LDAP modify. This patch copes with the ldap unicodePwd modify by recognising the format and creating the correct attributes on the fly. Note that this assumes we will never get a unicodePwd attribute set in NT MD4 format with the first 2 and last 2 bytes set to 0x22 0x00. Andrew Bartlett is looking at a more robust solution, possibly using a flag to say that this modify came via ldap, and not internal ldb calls.
* s4:schema_fsmo: s/class/sclassStefan Metzmacher2009-02-021-7/+7
| | | | metze
* s4:update_keytab: s/delete/do_deleteStefan Metzmacher2009-02-021-7/+7
| | | | metze
* s4:service_task: s/private/private_dataStefan Metzmacher2009-02-021-1/+1
| | | | metze
* s4:kludge_acl: s/class/sclassStefan Metzmacher2009-02-021-5/+5
| | | | metze
* s4:dsdb/schema: s/class/sclassStefan Metzmacher2009-02-022-31/+32
| | | | metze
* s4:extended_dn_out: s/private/p s/new/nattrsStefan Metzmacher2009-02-021-40/+40
| | | | metze
* s4:repl_meta_data: fix segfault after ldb changesStefan Metzmacher2009-01-311-1/+1
| | | | metze
* Fix proxy moduleSimo Sorce2009-01-301-2/+2
|
* Fix all other modules to use ldb_module.h instead of ldb_private.hSimo Sorce2009-01-3016-558/+801
| | | | The only 2 modules escaping the rule so far are rootdse and partitions
* Fix misfiled headers.Simo Sorce2009-01-301-1/+0
| | | | | Some public functions were mistakenly put into ldb_private.h Revert all modules to only include ldb_module.h
* s4:fix the build after 380874ef863866c94c999ef53252b9d30df65e88Stefan Metzmacher2009-01-301-0/+1
| | | | metze
* Fix the mess with ldb includes.Simo Sorce2009-01-3010-76/+147
| | | | | | | | Separate again the public from the private headers. Add a new header specific for modules. Also add service function for modules as now ldb_context and ldb_module are opaque structures for them.
* Allow overriding the function that ships the request in the Samba 3Jelmer Vernooij2009-01-211-1/+1
| | | | client code.
* s4:lib/tevent: rename structsStefan Metzmacher2008-12-298-13/+13
| | | | | | | | | | | | | | | | | | | | list="" list="$list event_context:tevent_context" list="$list fd_event:tevent_fd" list="$list timed_event:tevent_timer" for s in $list; do o=`echo $s | cut -d ':' -f1` n=`echo $s | cut -d ':' -f2` r=`git grep "struct $o" |cut -d ':' -f1 |sort -u` files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4` for f in $files; do cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp mv $f.tmp $f done done metze
* Fix more compiler warnings in various places.Jelmer Vernooij2008-12-234-33/+33
|
* Fix missing symbols issues when building with shared libraries.Jelmer Vernooij2008-12-221-1/+1
|
* Fix more tests, improve repr() functions for various Python types.Jelmer Vernooij2008-12-211-9/+2
|
* Fix various Python-related bugs.Jelmer Vernooij2008-12-211-170/+170
|
* Treat DN+STring as a binary string for nowAndrew Bartlett2008-12-201-4/+4
| | | | | | | This matches the way we work with DN+Binary. We need this for the OpenLDAP backend. Andrew Bartlett
* Now store the GUID and SID from a DN over DRSUAPI into ldb.Andrew Bartlett2008-12-204-43/+162
| | | | | | | Until the extended DN work was compleated, there was no way to store the additional metadata. Andrew Bartlett
* Fix samba3sam test after removal of dom_sid IDL file.Jelmer Vernooij2008-12-181-2/+2
|
* s4:dsdb: remove normalise moduleAndrew Bartlett2008-12-172-206/+0
| | | | | | The extended_dn_out module provides the functionality now. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:dsdb: split extended_dn into extended_dn_in, extended_dn_out and ↵Andrew Bartlett2008-12-176-672/+1515
| | | | | | | | | | | | | | | | | | | extended_dn_store. By splitting the module, the extended_dn_in and extended_dn_store moudles can use extended_dn_out to actually get the extended DN. This avoids code duplication. The extended_dn_out module also contains a client implementation of the OpenLDAP dereference control (draft-masarati-ldap-deref-00). This also introduces a new control 'DSDB_CONTROL_DN_STORAGE_FORMAT_OID' to ask the extended_dn_out module to return whatever the 'storage format' is. This allows us to work with both OpenLDAP (which performs a dereference at run time) and LDB (which stores the GUID and SID on disk). Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:dsdb: Make the linked_attributes module set an extended dnAndrew Bartlett2008-12-171-192/+325
| | | | | | | | | | This means that linked attributes will always have the same case form as the actaul entry, as we search for that entry. We then also use the GUID and SID found on that entry to fill in the extended DN on disk. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:rootdse: fix the logic to indentify a rootdse searchAndrew Bartlett2008-12-171-2/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:ldb: make it possible to return per entry controlsAndrew Bartlett2008-12-1711-14/+14
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:samldb: make use of dom_sid_split_rid()Andrew Bartlett2008-12-171-4/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:samldb: improve error stringsAndrew Bartlett2008-12-171-6/+8
| | | | | | | | When things go wrong with LDB, this routine seems to be particularly sensitive to it. This extra debugging should help the next poor soul who breaks LDB. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:dsdb: add support for DSDB_OPENLDAP_DEREFERENCE_CONTROLAndrew Bartlett2008-12-171-0/+22
| | | | | | | | | | | Encode and decode the OpenLDAP dereference control (draft-masarati-ldap-deref-00) At this time, the ldb_controls infrustructure does not handle request and reply controls having different formats, so this is purely the client implementation (ie, there is no decode of the client->server packet, and no encode of the server->client packet). Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Add hint to use passwordAttributes in @KLUDGE_ACL in futureAndrew Bartlett2008-12-171-1/+2
| | | | | | | This module is not used at the moment, but if we do use it again, we should try to avoid duplicate lists. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Make greater use of 'GUID_from_data_blob'Andrew Bartlett2008-12-171-40/+11
| | | | | | | | | This avoids accidentily running off the end of a string, and uses a single 'guess which type of GUID I have' algorithm. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Fix sequence number generation against OpenLDAPAndrew Bartlett2008-12-171-0/+8
| | | | | | | | | It seems that in 2deeb99fff1a90c79ba1927e1a069362e250a63c adding the partition control to this request was missed out. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:password_hash: really catch the clearTextPasswordAttr case...Stefan Metzmacher2008-12-051-1/+1
| | | | | | | | | This fixes the creation of the user object for incoming trusts in dcesrv_lsa_CreateTrustedDomain_base(). And now w2k3 trust samba4 just fine:-) metze
* s4:kludge_acl: allow everybody to read the sequence numberStefan Metzmacher2008-12-041-1/+27
| | | | metze
* Don't treat the DN+binary syntax as a DN.Andrew Bartlett2008-12-021-2/+2
| | | | This should fix the OpenLDAP backend
* s4:dsdb/samdb: don't allow objects without objectClassStefan Metzmacher2008-11-171-2/+2
| | | | | | We're using @ROOTDSE instead of CN=ROOTDSE. metze
* Run the original operation before we update linked attrsAndrew Bartlett2008-11-171-17/+24
| | | | | | | | | | This causes the linked attribute modifies to occour after the original operation is entered in the transaction (any failure still fails the lot). This means (I hope) that we can have another module search the originating record when the backlink is created, filling in the GUID and SID for the extended DN. Andrew Bartlett
* The samba3sam test does not really need the extended_dn moduleAndrew Bartlett2008-11-171-1/+1
| | | | | | | (This module has been split up into extended_dn_in, extended_dn_out and extended_dn_store). Andrew Bartlett
* s4:dsdb/schema_fsmo: provide "extendedAttributeInfo" and "extendedClassInfo"Stefan Metzmacher2008-11-161-0/+56
| | | | metze
* s4:dsdb/schema: add a function to generate the "extendedClassInfo" valuesStefan Metzmacher2008-11-161-4/+44
| | | | metze
* s4:dsdb/schema: add a function to generate the "extendedAttributeInfo" valuesStefan Metzmacher2008-11-161-7/+83
| | | | metze
* s4:dsdb/schema: use pointers for rangeLower and rangeUpper.Stefan Metzmacher2008-11-162-6/+41
| | | | | | | This makes clear there's an value stored in the schema, as they can be '0'. metze
* s4:dsdb/schema: we don't need to use find_syntax_map_by_ad_oid() as the ↵Stefan Metzmacher2008-11-161-3/+1
| | | | | | syntax is already known metze
* s4:librpc/ndr: integrate NDR_MISC into LIBNDRStefan Metzmacher2008-11-162-5/+5
| | | | metze
* s4-dsdb: add samdb_msg_add_parameters.Günther Deschner2008-11-101-0/+11
| | | | Guenther
* s4-dsdb: add samdb_result_parameters.Günther Deschner2008-11-101-0/+22
| | | | Guenther
* s4: dsdb/schema: fix the equality and comment of DN+String syntaxStefan Metzmacher2008-11-081-3/+2
| | | | metze
* s4: fix samba4.samba3sam.python testStefan Metzmacher2008-11-081-2/+2
| | | | metze