Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-22 | s4:ldap-backend Fix LSA test failures with OpenLDAP backend - convert SIDs | Andrew Bartlett | 1 | -0/+24 | |
The SIDs in some queries were not being passed as binary, but as strings in comparison with the securityIdentifer object. We need to recognise that these are SIDs in the simple_ldap_map. Andrew Bartlett | |||||
2010-04-22 | s4:OpenLDAP-backend Use the new rdnval module in OpenLDAP | Andrew Bartlett | 2 | -3/+8 | |
This is rather than rdn_name, which tries to do the job on the client side. We need to leave this module in the stack for Fedora DS (and of course the LDB backend). Andrew Bartlett | |||||
2010-04-22 | s4:dsdb Revert accidentilly commited change for LDAP backends | Andrew Bartlett | 1 | -1/+1 | |
In the future, LDAP backends will be resposible for maintaining the 'name' attributes. Andrew Bartlett | |||||
2010-04-20 | s4:provision Pass in the invoication ID and NTDS Settings DN to Schema() | Andrew Bartlett | 1 | -1/+1 | |
By putting these values into the cache on the LDB, this reduces some of the noise in provision, particularly with the LDAP backend. Andrew Bartlett | |||||
2010-04-16 | s4:Replaced dsdb_get_dom_sid_from_ldb_message() with samdb_result_dom_sid() | Nadezhda Ivanova | 1 | -24/+5 | |
2010-04-15 | s4:rootdse: only return "tokenGroups", when the client asked for them | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2010-04-13 | s4:acl/descriptor LDB module - distinguish between root and default basedn | Matthias Dieter Wallnöfer | 2 | -0/+12 | |
The first is the forest base DN, the second the domain base DN. At the moment we assume that they are both the same but it hasn't to be so. Nadia, I would invite you to fix the outstanding parts regarding this (I added comments). | |||||
2010-04-13 | Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions" | Matthias Dieter Wallnöfer | 5 | -7/+8 | |
We should use the "ldb_get_*_basedn" calls since they are available in the LDB library. | |||||
2010-04-13 | s4:objectclass LDB module - remove a unneeded newline | Matthias Dieter Wallnöfer | 1 | -2/+1 | |
2010-04-11 | subunit: Remove more test output that could be interpreted by subunit. | Jelmer Vernooij | 1 | -1/+1 | |
2010-04-10 | s4:dsdb Don't return operational attributes on special DNs | Andrew Bartlett | 1 | -0/+5 | |
2010-04-10 | s4:rootdse Implement "tokenGroups" in the rootDSE | Andrew Bartlett | 1 | -0/+18 | |
This returns the currently connected user's full token. This is very useful for debugging, and should be used in ACL tests. Andrew Bartlett | |||||
2010-04-10 | s4:dsdb Improve error message in extended_dn_in | Andrew Bartlett | 1 | -1/+1 | |
This error occours when an extended DN cannot be resolved, so it's most helpful to print the problematic extended DN. Andrew Bartlett | |||||
2010-04-10 | s4:schema Try to fix OpenLDAP backend after schema reload support. | Andrew Bartlett | 1 | -4/+2 | |
If we can't get @REPLCHANGED, default to a value of 0. Andrew Bartlett | |||||
2010-04-09 | s4/samldb: schemaInfo attribute must be updated when adding new Schema object | Kamen Mazdrashki | 1 | -0/+50 | |
2010-04-08 | s4:dsdb - Handle INVALID_DN_SYNTAX from OpenLDAP in ↵ | Endi S. Dewata | 1 | -1/+1 | |
dsdb_module_load_partition_usn(). Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> | |||||
2010-04-06 | s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵ | Andrew Tridgell | 1 | -0/+2 | |
them | |||||
2010-04-06 | build: waf quicktest nearly works | Andrew Tridgell | 1 | -45/+41 | |
Rewrote wafsamba using a new dependency handling system, and started adding the waf test code | |||||
2010-04-06 | build: commit all the waf build files in the tree | Andrew Tridgell | 1 | -0/+309 | |
2010-03-26 | s4-drs: replmd_delete with the 3 stage deletion recycle bin | Eduardo Lima | 2 | -105/+204 | |
2010-03-23 | s4:ldb_modules/util.c - fix two counter variables to be "unsigned" | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-03-22 | s4:dsdb Add a shortcut sequence number for schema reloads | Andrew Bartlett | 1 | -14/+79 | |
This uses the ldb sequence number, in a hope to detect an unchanged schema quicker. Andrew Bartlett | |||||
2010-03-22 | s4:dsdb Rework schema loading and add schema reloading | Andrew Bartlett | 1 | -105/+126 | |
This commit reworks Samba4's schema loading code to detect when it needs to reload the schema. This is done by watching the @REPLCHANGED special DN. The reload happens by means of a callback, which is only set when the schema is loaded from the ldb - not when loaded from an LDIF file or DRS. We also rework the global schema handling - instead of storing the pointer to the global schema in each ldb, we store a flag indicating that the global schema should be returned at run time. This makes it much easier to switch to a new global schema. Andrew Bartlett | |||||
2010-03-22 | s4:dsdb Move dsdb_save_partition_usn() to be a module helper function | Andrew Bartlett | 2 | -4/+178 | |
This function should not traverse the module stack again, but instead run from this point. Also add a matching dsdb_module_load_partition_usn() and change repl_meta_data to match. Andrew Bartlett | |||||
2010-03-22 | s4:dsdb Add 'const' to some struct dsdb_schema variables | Andrew Bartlett | 2 | -9/+9 | |
We don't currently require this, but we may move this way in future. | |||||
2010-03-22 | s4:dsdb Don't load the schema unconditionally | Andrew Bartlett | 2 | -3/+19 | |
Schema loads now come at a price, so avoid doing them if we don't have to (such as when doing an @REPLCHANGED or other special DN based search). Andrew Bartlett | |||||
2010-03-18 | s4:dsdb Move rdn_name down the stack | Andrew Bartlett | 1 | -1/+1 | |
This is done so that it can be (in future) removed when the OpenLDAP backend is in use and the rdn_val module is used, while keeping as similar semantics as possible between the module stacks. Andrew Bartlett | |||||
2010-03-16 | s4:resolve_oids LDB module - not really a change but a nicer method to call ↵ | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
"talloc_reference" | |||||
2010-03-16 | s4:dsdb - fix up warnings | Matthias Dieter Wallnöfer | 2 | -4/+8 | |
2010-03-16 | s4:dsdb Show more detail in failure to compute the aggregate DN. | Andrew Bartlett | 1 | -1/+1 | |
Andrew Bartlett | |||||
2010-03-16 | s4:dsdb Change dsdb_get_schema() callers to use new talloc argument | Andrew Bartlett | 12 | -28/+85 | |
This choses an appropriate talloc context to attach the schema too, long enough lived to ensure it does not go away before the operation compleates. Andrew Bartlett | |||||
2010-03-16 | s4:dsdb Fix warnings in DEBUG() by casting to unsigned long int | Andrew Bartlett | 1 | -4/+4 | |
2010-03-16 | s4:dsdb/acl Reduce calls to dsdb_get_schema() and add memory context | Andrew Bartlett | 1 | -24/+46 | |
dsdb_get_schema() isn't a very cheap call, due to the use of LDB opaque pointers. We need to call it less, and instead pass it as a parameter where possible. This also changes to the new API with a talloc context. Andrew Bartlett | |||||
2010-03-16 | s4:dsdb Don't error out if we can't get the Aggregate schema DN yet | Andrew Bartlett | 1 | -9/+16 | |
It's easier to just set it up when we can, then to deal with the ordering issues in ldb startup. As long as we have it ready if a real client ever asks for it, then we should be happy. Andrew Bartlett | |||||
2010-03-12 | s4:util.c - "dsdb_check_optional_feature" - counter should be "unsigned" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-03-12 | s4-drs: check if an optional feature is enabled | Eduardo Lima | 1 | -0/+59 | |
2010-03-12 | Split the dsdb_access_check_on_dn. | Nadezhda Ivanova | 1 | -5/+44 | |
Split the dsdb_access_check_on_dn so it can be reused for checks from both within the module stack and outside it. | |||||
2010-03-12 | Fixed ACL module to use dsdb_module_* API. | Nadezhda Ivanova | 1 | -9/+9 | |
2010-03-12 | Moved access_check_on_dn from acl module as an utility. | Nadezhda Ivanova | 1 | -156/+19 | |
Made this an utility function so it can be used for access checking outside of the acl ldb module, such as checking validated writes and control access rights in other protocols (e. g drs) | |||||
2010-03-09 | Added a check for permissions to modify the RDN attribute on rename. | Nadezhda Ivanova | 1 | -0/+12 | |
Necessary because rdn module will be moved lower than acl in the stack. | |||||
2010-03-07 | s4:extended_dn_out LDB module - change counter variables to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -8/+11 | |
appropriate | |||||
2010-03-07 | s4:repl_meta_data LDB module - change counter variables to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -20/+24 | |
appropriate I used "unsigned int" counters where we count LDB objects (LDB specification prescribes to use "unsigned" index variables). But on DSDB replication object counters I used "uint32_t" typed variables as it is suggested. If a counter variable counts both types of objects I used "unsigned int" since size(unsigned int) >= size(uint32_t), but on most platforms equal. | |||||
2010-03-07 | s4:local_password LDB module - change counter variables to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
appropriate | |||||
2010-03-07 | s4:ranged_results LDB module - change counter variables to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
appropriate | |||||
2010-03-07 | s4:objectguid LDB module - change counter variables to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
appropriate | |||||
2010-03-07 | s4:objectclass LDB module - change counter variabls to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
appropriate | |||||
2010-03-07 | s4:anr LDB module - change counter variable to "unsigned" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-03-07 | s4:acl LDB module - change counter variable to "unsigned" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-03-07 | s4:linked_attributes LDB module - change counter variables to "unsigned" ↵ | Matthias Dieter Wallnöfer | 1 | -3/+5 | |
where appropriate | |||||
2010-03-07 | s4:kludge_acl LDB module - change counter variables to "unsigned" where ↵ | Matthias Dieter Wallnöfer | 1 | -5/+10 | |
appropriate |