samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2010-03-04	s4:operational LDB module - make the counters unsigned	Matthias Dieter Wallnöfer	1	-2/+2
	No need to have signed counters here.
2010-03-04	s4:operational LDB - implement the "tokenGroups" constructed attribute	Matthias Dieter Wallnöfer	1	-0/+95
	It contains the transitive SID closure (expand member/memberOf attributes) of a certain SAM object. The "tokenGroups" attribute never contains the SID of the object itself. References: http://msdn.microsoft.com/en-us/library/ms680275(VS.85).aspx, http://support.microsoft.com/kb/301916, MS-ADTS 3.1.1.4.5.19.
2010-03-04	s4:operational LDB module - use right memory context int ↵	Matthias Dieter Wallnöfer	1	-2/+2
	"construct_primary_group_token" Use the "msg" as temporary context and not "ldb" which lives much longer.
2010-02-21	s4:operational LDB module - enable support for passing referrals through it	Matthias Dieter Wallnöfer	1	-2/+1

2009-12-16	s4-dsdb: when the SD_FLAGS control is set, don't remove nTSecurityDescriptor	Andrew Tridgell	1	-10/+19

2009-12-12	s4:operational LDB module - cosmetic - reorder an attribute list	Matthias Dieter Wallnöfer	1	-8/+8
	This matches the default handling order in the "password_hash" module (it's nice to have this consistent).
2009-12-09	s4-dsdb: fixed steal of parentGUID for empty msg	Andrew Tridgell	1	-4/+10
	msg->elements could be NULL before we add parentGUID
2009-12-07	s4:dsdb Use ldb_match_msg_objectclass in operational.c	Andrew Bartlett	1	-6/+1
	This avoids not only a possibly non-portable compiler expression, but also the need to look up the schema each time. Andrew Bartlett
2009-12-07	s4:dsdb Make primaryGroupToken calculation more efficient and correct	Andrew Bartlett	1	-20/+46
	The original code here would do a subtree search under each object, attempting to determine if it was a group. This was incorrect, and inefficient - we just need to ask for the objectClass attribute, and check that value before returning the group's RID. (Much of this patch reworks operational.c to allow a search for 2 attributes for this calculation). Andrew Bartlett
2009-12-07	s4:dsdb Make parentGUID handler use dsdb_module_search_dn()	Andrew Bartlett	1	-18/+29
	This avoids doing a new search from the top of the module stack. This also removes the helper function dsdb_find_parentguid_by_dn() which is now unused. Andrew Bartlett
2009-12-07	s4:dsdb Hide the LM password by default too	Andrew Bartlett	1	-1/+2

2009-12-04	s4-drsutil: fixed a memory leak in samdb_search_count	Andrew Tridgell	1	-1/+4
	In general functions that don't return any memory should not take a memory context. Otherwise it is too easy to have a bug like this where memory is leaked
2009-12-03	s4:operational LDB module - Fix usage of LDB constants	Matthias Dieter Wallnöfer	1	-4/+4

2009-11-26	s4:operational LDB module - Don't do the write checks here	Matthias Dieter Wallnöfer	1	-16/+0
	Let this perform the schema in the "objectclass" module.
2009-11-24	s4:operational LDB module - Prevent the modification of operational attributes	Andrew Bartlett	1	-0/+16
	(merged by Andrew Bartlett) Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-11-24	s4:dsdb Return the subSchemaSubEntry operational attribute on every object	Andrew Bartlett	1	-4/+40

2009-11-20	Cosmetic patch - fixed case of attribute name.	Nadezhda Ivanova	1	-1/+1

2009-11-20	s4-dsdb: some more attribuutes that we should only give if asked for	Andrew Tridgell	1	-1/+6

2009-11-20	s4-dsdb: removed attributes that should not be displayed by default	Andrew Tridgell	1	-0/+37
	Some attributes (like ntSecurityDescriptor) are stored in our db, but should only be displayed if asked for. This also applied to parentGUID from old installs, which is now generated.
2009-11-20	s4-drs: Synchronous Implementation of generated parentGUID	Fernando J V da Silva	1	-2/+34
	This generated parentGUID on demand, rather than getting it from the database Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-09-12	s4-samdb: internal s4 ldb modules should be GPL not LGPL	Andrew Tridgell	1	-15/+11
	I think these modules ended up LGPL because someone based the module on an existing LGPL module in the core ldb, and it spread from there. Certainly there is no reason for the ldb modules that are not distributed as part of ldb to be LGPL.
2009-08-11	s4:operational - Remove some outdated comments	Matthias Dieter Wallnöfer	1	-12/+0

2009-08-11	s4:operational module - move and enhancements	Matthias Dieter Wallnöfer	1	-0/+347
	This moves the "operational" LDB module to the right place under "dsdb/samdb/ldb_modules" (suggested by abartlet) and enhances it for supporting dynamic generated "primaryGroupToken" for AD groups. This should fix bug #6466.