summaryrefslogtreecommitdiff
path: root/source4/dsdb/samdb/ldb_modules
AgeCommit message (Collapse)AuthorFilesLines
2011-11-29s4-dsdb: use dsdb_module_extended instead of duplicate codeAmitay Isaacs2-31/+13
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-29s4-dsdb: Return ldb_result context in dsdb_module_extendedAmitay Isaacs1-3/+20
The result of the extended operation is now available in the calling routine. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-29s4-dsdb: Remove LDB_SEQ_HIGHEST_TIMESTAMP sequence number supportAmitay Isaacs2-140/+13
This was a hack for LDAP backends to store a sequence number as a timestamp. It is still supported in standalone ldb tdb backend. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-26s4:update_keytab LDB module - no need to filter for the DNMatthias Dieter Wallnöfer1-2/+2
We launch a search request with base scope on exactly the same DN (see downwards). Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-19s4-dsdb: Modify the repl_meta_data behavior to allow Metadata change on ↵Matthieu Patou1-2/+8
attribute interSiteTopologyGenerator even if the value didn't change Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Nov 19 16:47:53 CET 2011 on sn-devel-104
2011-11-17s4-dsdb: Remove unsed variableAmitay Isaacs1-2/+0
2011-11-16s4-dsdb: rework the NC detection for the descriptor calculationMatthieu Patou1-12/+31
This checks if instanceType attribute is available, and if INSTANCE_TYPE_IS_NC_HEAD bit is set. If the bit is set, then the DN is NC root and security descriptor is not inherited from parent SD. Signed-off-by: Amitay Isaacs <amitay@gmail.com>
2011-11-15s4:partition LDB module - fix handling regarding special DNs on searchesMatthias Dieter Wallnöfer1-0/+5
Normally they should always be passed to the main backend unless something different has been specified. Reviewed-by: abartlet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 15 22:43:06 CET 2011 on sn-devel-104
2011-11-15s4:dsdb/schema_data: reject schema update unless they're allowedStefan Metzmacher1-0/+12
"dsdb:schema update allowed = yes" is now needed in smb.conf to enable schema updates, as schema updates are a currenty a good way to prevent samba from startup again, because of errors in the schema definition. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 15 13:00:07 CET 2011 on sn-devel-104
2011-11-15s4:dsdb/schema_data: reject changes to schemaInfo, msDs-Schema-Extensions, ↵Stefan Metzmacher1-0/+28
msDS-IntId As windows we return CONSTRAINT_VIOLATION now. metze
2011-11-15s4:dsdb/schema_data: make sure we reject schema changes if we're not the ↵Stefan Metzmacher1-0/+101
schema master metze
2011-11-15s4:dsdb/schema_data: make sure we only allow objects one level below the ↵Stefan Metzmacher1-1/+33
schema base The objectclass module should also check for this, but make sure we also reject it on things like provision. metze
2011-11-15s4:dsdb/samldb: use DSDB_FLAG_AS_SYSTEM in samldb_schema_info_update()Stefan Metzmacher1-1/+3
We should only be able to update the schemaInfo internaly. metze
2011-11-13s4-dsdb: initialize correctly the value of originating_change_time for the ↵Matthieu Patou1-2/+52
Deleted Object Container
2011-10-27s4:repl_meta_data LDB module - don't intercept the partition LDB module ↵Matthias Dieter Wallnöfer1-17/+18
referrals Reviewed-by: abartlet
2011-10-27s4:repl_meta_data LDB module - rename operation - do not overwrite error ↵Matthias Dieter Wallnöfer1-3/+1
messages "ldb_error" could overwrite possibly useful error messages. Reviewed-by: abartlet
2011-10-27s4:repl_meta_data LDB module - remove pointless debug messagesMatthias Dieter Wallnöfer1-4/+0
These are displayed when an object just doesn't exist! Reviewed-by: abartlet
2011-10-27s4:repl_meta_data LDB module - always return the original LDB result codes ↵Matthias Dieter Wallnöfer1-5/+12
on failure And add "ldb_operr()" before the "return ret" to point out the position where it failed (for "add_time_element" and "add_uint64_element") Reworked after a suggestion by abartlet.
2011-10-27s4:repl_meta_data LDB module - "dsdb_search_module_dn" already checks if ↵Matthias Dieter Wallnöfer1-4/+4
len(res) == 1 No need to perform an additional check here. As a return value we should always give back the original error code and not generate a new one (to let the caller know what is going on). Reviewed-by: abartlet
2011-10-27s4:objectclass_attrs LDB module - implement the dSHeuristics length checks ↵Matthias Dieter Wallnöfer1-5/+37
correctly Consider bug #8489 Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - objectclass modify op. - remove superflous ↵Matthias Dieter Wallnöfer1-8/+4
"talloc_strdup" We are adding strings embedded in the schema structure which is basically global and lives longer than the request - hence no duplication needed. Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - objectclass modify operationsMatthias Dieter Wallnöfer1-95/+32
According to bug #8486 the modification to direct related structural object classes is possible (equal, child, parent). Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - forbid to add unrelated objectclassesMatthias Dieter Wallnöfer1-0/+61
E.g. unsatisfied abstract objectclasses, additional top-most structural classes Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - "objectclass_add" - small optimisationMatthias Dieter Wallnöfer1-4/+2
This saves us from doing one "ldb_msg_find_element". Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - "check_rodc_ntdsdsa_add"Matthias Dieter Wallnöfer1-1/+1
For convention use "ldb_attr_cmp()". Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - update copyrightMatthias Dieter Wallnöfer1-1/+1
Reviewed-by: abartlet
2011-10-27s4:password_hash LDB module - fix compiler warning due to unsatisfied "switch"Matthias Dieter Wallnöfer1-0/+3
Bail out on other LDB request types (only add and modify allowed).
2011-10-20dsdb: improve debug messageAndrew Tridgell4-5/+4
show the reply type in "Invalid reply type" messages Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 20 00:57:05 CEST 2011 on sn-devel-104
2011-10-13s4-messaging: Pass the loadparm context, not just the messaging pathAndrew Bartlett2-2/+2
This will allow the TDB layer to get at the lp_ctx for tdb options. Andrew Bartlett
2011-10-12s3:utils change data_blob_dup_talloc() to take a DATA_BLOB by valueGregor Beck1-1/+1
Signed-off-by: Michael Adam <obnox@samba.org>
2011-10-07s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher1-0/+38
Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
2011-10-07s4-dsdb: special case for deleted objects one way linkAndrew Tridgell1-4/+17
we show wellknown links to the deleted objects container Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Oct 7 07:58:08 CEST 2011 on sn-devel-104
2011-10-07s4-dsdb: don't display links to deleted objectsAndrew Tridgell1-9/+42
unless the user asks for the display of deactivated links, we should not display DNs that link to deleted objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-07s4-dsdb: fixed behaviour of show_deleted and show_recycled controlAndrew Tridgell1-38/+71
to correctly implement the show_deleted and show_recycled control we need to know if the recyclebin is enabled. When not enabled, the isRecycled attribute is ignored, and only isDeleted is used. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-07s4-dsdb: fixed the check_optional_feature() callAndrew Tridgell1-19/+24
the dsdb_check_optional_feature() call should look on our own NTDS DN for the enabled feature. This should work for all features, not just for forest wide fetaures. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: allow deletion of backlinks if DSDB_CONTROL_DBCHECK givenAndrew Tridgell2-1/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: allow groupType update on deleted objectsAndrew Tridgell1-1/+2
this allows dbcheck to fix groupType on objects that have been deleted Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: Do not assume that all deleted objects have an objectCategory and ↵Andrew Bartlett1-2/+2
sAMAccountType Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Oct 6 03:43:13 CEST 2011 on sn-devel-104
2011-10-06dsdb: Do not attempt to resolve conflicts on an RODCAndrew Bartlett1-2/+26
2011-10-06dsdb: fix double-free in replication failure case on RODCAndrew Bartlett1-1/+1
2011-10-04s4-dsdb: add the DSDB_CONTROL_PARTIAL_REPLICA when neededAndrew Tridgell1-0/+9
when we are adding an object via DRS, we need to add the DSDB_CONTROL_PARTIAL_REPLICA control if we are replicating a partial replica, so ensure the partition module creates new NCs as partial replicas
2011-10-04s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell2-0/+24
this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-04s4-dsdb: fixed formatting of a debug messageAndrew Tridgell1-1/+1
another missing newline
2011-10-04s4-partition: allow creation of uninstantiated partitionsAndrew Tridgell1-6/+0
this is needed for a subdomain join by a new NC. The NC is initially uninstantiated
2011-10-04s4-dsdb: allow uninstantiated NC headsAndrew Tridgell1-2/+4
this allows INSTANCE_TYPE_WRITE to be not set if INSTANCE_TYPE_UNINSTANT is set
2011-10-04s4-dsdb: implement DSDB_REPL_FLAG_PRIORITISE_INCOMINGAndrew Tridgell1-4/+22
With this set, we accept changes even if they have the same tuple as the local copy. This can be used by a FULL_SYNC replication to recover a replica that is corrupt
2011-10-04s4-dsdb: disallow changes based on instanceTypeAndrew Tridgell1-4/+13
if instanceType does not include INSTANCE_TYPE_WRITE, then disallow changes to any replicated attributes. This ensures partial replicates are not alterered
2011-09-23build: avoid util.h as a public header name due to conflict with MacOSAndrew Bartlett8-8/+8
2011-09-22s4-dsdb: load the partialReplica attribute in the @PARTITION objectAndrew Tridgell3-2/+27
this modifies the partition module to honor a partialReplica attribute on the @PARTITION module, marking partiations as partial replicas so the NO_GLOBAL_CATALOG control can be honoured
2011-09-19s4-dsdb: cope with out of sync replication attributes in partition moduleAndrew Tridgell1-1/+68
if the @ATTRIBUTES or other objects which are replicated between partions become out of sync, then the ldb would fail to open. This changes ensures that we can always fix those records, by running the operation in the top level partition, and replicating the result to the other partitions Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 04:31:48 CEST 2011 on sn-devel-104
generated by cgit (git 2.34.1) at 2024-10-01 09:32:19 +0000