Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-11-16 | s4:objectclass LDB module - the "olddn" is the special DN for rename requests | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-11-16 | s4:objectclass LDB module - free "nc_root" after name context comparisons | Matthias Dieter Wallnöfer | 1 | -0/+2 | |
2010-11-15 | s4:objectclass LDB module - improve the default name context checking on ↵ | Matthias Dieter Wallnöfer | 1 | -16/+12 | |
modifications Pointed out by abartlet | |||||
2010-11-15 | s4:objectclass LDB module - implement the "objectClass" change restrictions ↵ | Matthias Dieter Wallnöfer | 1 | -0/+25 | |
on Windows 2000 forest function level Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 15 13:10:05 UTC 2010 on sn-devel-104 | |||||
2010-11-13 | s4:objectclass LDB module - multiple "objectClass" change elements are ↵ | Matthias Dieter Wallnöfer | 1 | -161/+169 | |
unfortunately still allowed The test message has been compressed - therefore I've now used "modify_ldif". | |||||
2010-11-12 | s4:objectclass LDB module - we should not simply ignore additional ↵ | Matthias Dieter Wallnöfer | 1 | -2/+16 | |
"objectClass" attribute changes There first one we perform all other tentatives are terminated with ERR_ATTRIBUTE_OR_VALUE_EXISTS (tested against Windows). Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Nov 12 19:39:07 UTC 2010 on sn-devel-104 | |||||
2010-11-11 | s4:dsdb - proof against empty RDN values where expected | Matthias Dieter Wallnöfer | 1 | -1/+3 | |
This should prevent crashes as pointed out on the mailing list. | |||||
2010-11-11 | s4:objectclass LDB module - allow RDNs also to come from superclasses | Matthias Dieter Wallnöfer | 1 | -11/+39 | |
Detected by a testcase written by Zahari Zahariev. | |||||
2010-11-08 | s4:objectclass LDB module - no idea why we'd need the "objectGUID" here | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-11-03 | s4:objectclass LDB module - the structural objectclass has always to be ↵ | Matthias Dieter Wallnöfer | 1 | -0/+6 | |
specified Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 3 16:20:55 UTC 2010 on sn-devel-104 | |||||
2010-11-01 | s4-ldb: enable version checking in dsdb ldb modules | Andrew Tridgell | 1 | -0/+1 | |
2010-11-01 | s4-dsdb: convert the rest of the ldb modules to the new module type | Andrew Tridgell | 1 | -1/+6 | |
2010-10-19 | s4-dsdb: register the DCPROMO_OID control with the rootdse | Andrew Tridgell | 1 | -0/+7 | |
this is needed to allow it over ldap Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 04:44:23 UTC 2010 on sn-devel-104 | |||||
2010-10-16 | s4:objectclass LDB module - implement the "isCriticalSystemObject" subtree ↵ | Matthias Dieter Wallnöfer | 1 | -1/+16 | |
delete protection MS-ADTS 3.1.1.5.5.7.2 Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 16 11:24:09 UTC 2010 on sn-devel-104 | |||||
2010-10-13 | s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" ↵ | Matthias Dieter Wallnöfer | 1 | -0/+9 | |
entries They're only allowed to be created with the RELAX control specified. | |||||
2010-10-10 | dsdb/modules: Split up helpers a bit to prevent recursive dependencies. | Jelmer Vernooij | 1 | -0/+1 | |
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 10 23:47:54 UTC 2010 on sn-devel-104 | |||||
2010-10-03 | s4:objectclass LDB module - introduce allowed system flags restriction | Matthias Dieter Wallnöfer | 1 | -6/+11 | |
Let us do the distinction by real use and provision by the RELAX flag Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-10-03 | s4:dsdb - substitute the "show_deleted" with the "show_recycled" control | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
We intend to see always all objects with the "show_deleted" control specified. To see also recycled objects (beginning with 2008_R2 function level) we need to use the new "show_recycled" control. As far as I see this is only internal code and therefore we don't run into problems if we do substitute it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-10-03 | s4:objectclass LDB module - fix the "crossRef" delete protection | Matthias Dieter Wallnöfer | 1 | -3/+9 | |
This is what Windows does Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-10-03 | s4:objectclass LDB module - fix the delete behaviour of server containers | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
A typo prevented the right behaviour. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-25 | ldb: mark the location of a lot more ldb requests | Andrew Tridgell | 1 | -0/+9 | |
2010-09-05 | dsdb: make the ATTRIBUTE NOT FOUND more clear | Matthieu Patou | 1 | -0/+3 | |
2010-08-17 | s4-dsdb: support LDB_CONTROL_RODC_DCPROMO_OID for nTDSDSA add | Andrew Tridgell | 1 | -1/+24 | |
this control disables the system only check for nTDSDSA add operations Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-10 | s4:objectclass LDB module - weak the check for the "rIDSet" delete constraint | Matthias Dieter Wallnöfer | 1 | -8/+10 | |
Perform it only when a "rIDSet" does exist. Requested by ekacnet for "upgradeprovision". | |||||
2010-08-07 | s4:objectclass LDB module - "add operation" - enhance and clean the ↵ | Matthias Dieter Wallnöfer | 1 | -8/+20 | |
"systemFlags" section Also here we have to test for single-valueness. | |||||
2010-08-07 | s4:objectclass LDB module - "add operation" - implement "objectCategory" ↵ | Matthias Dieter Wallnöfer | 1 | -5/+34 | |
validation | |||||
2010-08-07 | s4:objectclass LDB module - "add operation" - reject creation of LSA ↵ | Matthias Dieter Wallnöfer | 1 | -0/+8 | |
specific objects (only using the RELAX flag allowed) | |||||
2010-08-07 | s4:objectclass LDB module - "add operation" - move two checks | Matthias Dieter Wallnöfer | 1 | -17/+12 | |
To be more consistent with the MS-ADTS doc. | |||||
2010-08-07 | s4:objectclass LDB module - "add operation" - deny multiple "objectclass" ↵ | Matthias Dieter Wallnöfer | 1 | -5/+14 | |
message elements Requested by MS-ADTS 3.1.1.5.2.2 | |||||
2010-08-07 | s4:objectclass LDB module - "add" operation - free "mem_ctx" as soon as possible | Matthias Dieter Wallnöfer | 1 | -4/+2 | |
We don't need to have it around until the end of the function. | |||||
2010-08-01 | s4:objectclass LDB module - consider the "instanceType" when adding NCs | Matthias Dieter Wallnöfer | 1 | -10/+18 | |
This is requested by MS-ADTS 3.1.1.5.2.2 (NC add operation). | |||||
2010-08-01 | s4:objectclass LDB module - implement additional delete constraint checks | Matthias Dieter Wallnöfer | 1 | -3/+47 | |
MS-ADTS 3.1.1.5.5.3 | |||||
2010-07-07 | s4-dsdb: use ldb_operr() in the dsdb code | Andrew Tridgell | 1 | -38/+30 | |
this replaces "return LDB_ERR_OPERATIONS_ERROR" with "return ldb_operr(ldb)" in places in the dsdb code where we don't already explicitly set an error string. This should make is much easier to track down dsdb module bugs that result in an operations error. | |||||
2010-06-19 | s4:objectclass LDB module - disable delete operations when ↵ | Matthias Dieter Wallnöfer | 1 | -5/+80 | |
"SYSTEM_FLAG_DISALLOW_DELETE" is specified | |||||
2010-06-19 | s4:objectclass LDB module - use the old DN when displaying error messages | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-06-19 | s4:objectclass LDB module - add a better message when the parent DN is invalid | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
2010-06-19 | s4:objectclass LDB module - add an error message when someone tries to add ↵ | Matthias Dieter Wallnöfer | 1 | -3/+4 | |
entries without objectclasses | |||||
2010-06-19 | s4:objectclass LDB module - handle the case when there is a retry to add the ↵ | Matthias Dieter Wallnöfer | 1 | -0/+26 | |
root basedn This isn't quitted with a normal "NO_SUCH_OBJECT" (parent not found) but with a very special referral: one with the DN itself and the hostname is the last component value of the DN. | |||||
2010-06-18 | s4:objectclass LDB module - move "mem_ctx" initialisation lower | Matthias Dieter Wallnöfer | 1 | -16/+11 | |
Saves us some "talloc_free"s on error cases | |||||
2010-06-15 | dsdb: Fix includes when building against system ldb. | Jelmer Vernooij | 1 | -1/+1 | |
2010-06-07 | s4:objectclass LDB module - rework the code which handles the objectclasses ↵ | Matthias Dieter Wallnöfer | 1 | -149/+191 | |
modification Before it has been very incomplete. We try now to match the Windows Server behaviour as close as possible. | |||||
2010-06-07 | s4:objectclass LDB module - remove "fix_check_attributes" | Matthias Dieter Wallnöfer | 1 | -62/+0 | |
Also this task is now performed by the "objectclass_attrs" LDB module. | |||||
2010-06-07 | s4:objectclass LDB module - instanciate the schema variable centrally on the ↵ | Matthias Dieter Wallnöfer | 1 | -28/+28 | |
"ac" context creation This unifies the position when the schema is read and prevents multiple instanciations (eg on a modification operation). | |||||
2010-06-07 | s4:objectclass LDB module - finally implement the correct entry rename ↵ | Matthias Dieter Wallnöfer | 1 | -25/+130 | |
protections Only the "systemFlags" check is still missing. | |||||
2010-06-07 | s4:objectclass LDB module - cosmetic change | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
2010-06-07 | s4:objectclass LDB module - remove duplicated code | Matthias Dieter Wallnöfer | 1 | -13/+4 | |
2010-06-07 | s4:objectclass LDB module - fix counter variable types | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-06-07 | s4:objectclass LDB module - explain why the search can return with an empty ↵ | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
return | |||||
2010-06-07 | s4:objectclass LDB module - this "talloc_steal" is not necessary | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
The "parent_dn" was created on the "ac" context which lives anyway longer than this child request. | |||||
2010-06-07 | s4:objectclass LDB module - fix error result if an entry doesn't contain a ↵ | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
structural objectclass We need to return LDB_ERR_UNWILLING_TO_PERFORM (not LDB_ERR_NAMING_VIOLATION). |