summaryrefslogtreecommitdiffstats
path: root/source4/libcli/ldap
Commit message (Collapse)AuthorAgeFilesLines
* s4-modules Remove lp_ctx from init functions that no longer need itAndrew Bartlett2011-06-061-1/+1
| | | | | | | | Now that we don't allow the smb.conf to change the modules dir, many functions that simply load modules or initialise a subsytem that may load modules no longer need an lp_ctx. Andrew Bartlett
* libcli/ldap pull LIBCLI_LDAP_MESSAGE and LIBCLI_LDAP_NDR into a libraryAndrew Bartlett2011-04-131-1/+1
| | | | | | This reduces symbol duplication Andrew Bartlett
* s4:ldap_controls: allow DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID over sockets.Stefan Metzmacher2010-12-131-2/+2
| | | | | | | | | The DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID control has to data attached to it. So we can allow it to be send over LDAP. We'll accept this control over the privileged ldapi socket only. metze
* s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij2010-10-311-12/+0
| | | | | | | | The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
* s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to ↵Nadezhda Ivanova2010-10-271-2/+0
| | | | | | | | | | | determine the source of the request The aclread module used to use a control to make sure the request comes from the ldap server, but now the rootdse filters out any unregistered controls comming from ldap, so the control is lost. Using the LDB_HANDLE_FLAG_UNTRUSTED is a much more elegant solution. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Wed Oct 27 11:55:11 UTC 2010 on sn-devel-104
* waf: Stop automaticaly changing dashes to underscores in library names.Jelmer Vernooij2010-10-261-1/+1
|
* waf: Remove lib prefix from libraries manually.Jelmer Vernooij2010-10-261-1/+1
|
* s4: Drop duplicate 'lib' prefix for private libraries.Jelmer Vernooij2010-10-261-1/+1
|
* s4: Rename LIBCLI_LDAP to libcli_ldap.Jelmer Vernooij2010-10-241-1/+1
|
* s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij2010-10-241-1/+1
|
* s4/ldb:introduce the LDB_CONTROL_PROVISION_OID controlMatthias Dieter Wallnöfer2010-10-231-0/+2
| | | | | | | This control is exactly thought for the actions which previously were performed using the RELAX one. We agreed that the RELAX control will only remain for interactions with OpenLDAP.
* ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into ↵Matthias Dieter Wallnöfer2010-10-231-2/+2
| | | | | | LDB_CONTROL_BYPASS_OPERATIONAL_OID It's nicer to have this consistent with "BYPASS_PASSWORD_HASH".
* s4-libcli: make LIBCLI_LDAP a private libraryAndrew Tridgell2010-10-211-7/+8
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* Revert "s4:dsdb - make the RELAX control private"Andrew Bartlett2010-10-181-2/+1
| | | | | | | | This must be available to the OpenLDAP backend, to set the GUID values in some situations. We need a proper ACL mechanism to control the use or abuse of this control. This reverts commit 10adee89367cee9add993869280542418fb3d370.
* s4:dsdb - make the RELAX control privateMatthias Dieter Wallnöfer2010-10-161-1/+2
| | | | | | | This makes our LDAP much more secure and less error-prone. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 16 19:43:36 UTC 2010 on sn-devel-104
* s4:libcli/ldap/ldap_controls.c - fix up the controls listMatthias Dieter Wallnöfer2010-10-161-29/+49
| | | | | | - add missing private controls and comments - use control defines rather than hardcoded values -> easier to comprehend - reorder controls
* s4-ildap: two more places that need talloc_reparent()Andrew Tridgell2010-09-281-1/+1
| | | | | | | these contexts can have references Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 28 00:04:03 UTC 2010 on sn-devel-104
* s4-ildap: fixed a talloc_steal with references errorAndrew Tridgell2010-09-271-1/+1
| | | | | | | | | We need talloc_reparent() instead Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 27 20:38:00 UTC 2010 on sn-devel-104
* s4:libcli/ldap: fix sending oneway requestsStefan Metzmacher2010-09-271-18/+26
| | | | metze
* s4-ldap: Added a control to apply the access checks on read via LDAPNadezhda Ivanova2010-09-261-0/+2
|
* s4/ldap: use time_mono for reconnect timeoutBjörn Jacke2010-09-101-2/+2
|
* s4-dsdb: added support for LDB_CONTROL_RODC_DCPROMO_OIDAndrew Tridgell2010-08-171-0/+1
| | | | | | | | | | | | this control adds a unique msDS-SecondaryKrbTgtNumber attribute to a user object. There is some 'interesting' interaction with the rangeLower and rangeUpper attributes and this add. We don't implementat rangeLower/rangeUpper yet, but when we do we'll need an override for this control (or be careful about module ordering). Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldap: use common functions for ldap flag controls encode/decodeAndrew Tridgell2010-08-171-163/+11
| | | | | | | many controls are simple present/not-present flags, and don't need their own parsers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-162-5/+5
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4/libcli: Register LDB_CONTROL_REVEAL_INTERNALS and ↵Endi S. Dewata2010-06-281-0/+4
| | | | | | DSDB_CONTROL_PASSWORD_CHANGE_STATUS_OID controls. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* ldb:controls - add the "TREE_DELETE" control for allowing subtree deletesMatthias Dieter Wallnöfer2010-06-201-0/+20
|
* s4:ldap_controls.c - remove encoding functions for private recalculate SD ↵Matthias Dieter Wallnöfer2010-06-201-19/+0
| | | | control
* s4: Remove an uselessly exposed controlMatthieu Patou2010-06-071-1/+0
|
* s4:libcli/ldap Update headermap.txt (autotools build) and wscript_build for ↵Andrew Bartlett2010-05-211-1/+1
| | | | | | | | libcli_ldap.h It took a little while to find where to update this... Andrew Bartlett
* s4:libcli/ldap Rename ldap.h to libcli_ldap.hAndrew Bartlett2010-05-216-5/+5
| | | | | | | It is a problem if a samba header is called ldap.h if we also want to use OpenLDAP's ldap.h Andrew Bartlett
* s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell2010-04-061-0/+2
| | | | them
* s4-waf: install the rest of the headersAndrew Tridgell2010-04-061-5/+1
|
* build: commit all the waf build files in the treeAndrew Tridgell2010-04-061-0/+12
|
* s4-libcli: Added NULL handlers for DSDB_CONTROL_DN_STORAGE_FORMAT_OID and ↵Endi S. Dewata2010-03-021-0/+4
| | | | | | LDB_CONTROL_AS_SYSTEM_OID Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4/ldap: Refactor the fix for ldap nested searchesKamen Mazdrashki2010-02-171-4/+0
| | | | | | | | | | | Current implementation synchronizes processing for all types of LDAP request, not only LDAP_Search ones. Synchronization for ldap replies processing is done locally in ldb_ildap module as this concerns only ildb_callback() function. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4/ldap: Fix nested searches SEGFAULT bugKamen Mazdrashki2010-01-291-0/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4: fix SD update and password change in upgrade scriptMatthieu Patou2009-11-281-0/+20
| | | | | | | | | - reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:ldbcli - Added encoder/decoder for relax control.Endi S. Dewata2009-11-191-2/+20
|
* s4:libcli/ldap Add 'relax' OID to known network representationsAndrew Bartlett2009-11-121-0/+2
| | | | | | | | This patch, inspired by a patche by Endi S. Dewata <edewata@redhat.com>, allows this control to be passed to the LDAP backend. Andrew Bartlett
* s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where neededMatthias Dieter Wallnöfer2009-10-141-1/+3
| | | | | | For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way.
* s4: fix various warnings (not "const" related ones)Matthias Dieter Wallnöfer2009-10-022-3/+2
|
* s4:libcli/ldap Explain why we set a hostname for ldapi:// connectionsAndrew Bartlett2009-08-171-1/+3
| | | | | | | It is a pretty odd thing to do, and it's only because of the restrictions of DIGEST-MD5 in Cyrus SASL that we do it. Andrew Bartlett
* s4:libcli/ldap: the tls code steals the original socket on its own nowStefan Metzmacher2009-07-311-3/+0
| | | | metze
* s4:libcli/ldap: add support for new Recycle Bin Feature LDAP ControlsStefan Metzmacher2009-07-231-0/+40
| | | | | | | LDAP_SERVER_SHOW_RECYCLED_OID 1.2.840.113556.1.4.2064 LDAP_SERVER_SHOW_DEACTIVATED_LINK_OID 1.2.840.113556.1.4.2065 metze
* fixed the encoding/decoding of the reverse attribute for server side sortAndrew Tridgell2009-06-101-3/+10
|
* libcli/ldap: move generic ldap control encoding code to ldap_message.cStefan Metzmacher2009-02-242-129/+6
| | | | | | | As they can we static there, we pass the specific handlers as parameter where we need to support controls. metze
* s4:libcli/ldap: don't use 'void **out' as arguments as the behavior is not ↵Stefan Metzmacher2009-02-241-17/+32
| | | | | | defined in C. metze
* libcli/ldap: move ldap_ndr from source4/ to toplevelStefan Metzmacher2009-02-243-114/+1
| | | | metze
* libcli/ldap: move ldap_errors.h to the toplevel and install itStefan Metzmacher2009-02-241-66/+0
| | | | metze
* libcli/ldap: move ldap_message.[ch] from source4/ to the toplevelStefan Metzmacher2009-02-244-1701/+1
| | | | metze