Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-11-08 | s4:password_hash LDB module - deleting password attributes is a little more ↵ | Matthias Dieter Wallnöfer | 1 | -6/+6 | |
complicated | |||||
2010-11-08 | s4:samdb_msg_find_old_and_new_ldb_val - rework | Matthias Dieter Wallnöfer | 1 | -4/+11 | |
- don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation | |||||
2010-11-08 | s4:password_hash LDB module - clear the fact that a delete of password ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
attributes isn't possible | |||||
2010-11-08 | s4:acl LDB module - define the delete passwords special case a bit better | Matthias Dieter Wallnöfer | 1 | -3/+4 | |
2010-11-08 | s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updates | Matthias Dieter Wallnöfer | 2 | -0/+17 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 10:36:50 UTC 2010 on sn-devel-104 | |||||
2010-11-08 | s4:objectclass LDB module - no idea why we'd need the "objectGUID" here | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-11-08 | s4:objectguid LDB module - make use of "dsdb_next_callback" | Matthias Dieter Wallnöfer | 2 | -30/+6 | |
2010-11-07 | s4:objectguid LDB module - fix typo in output message | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-11-07 | s4:objectguid LDB module - objectGUIDs cannot be specified on add operations | Matthias Dieter Wallnöfer | 1 | -2/+6 | |
2010-11-07 | s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully ↵ | Matthias Dieter Wallnöfer | 1 | -47/+61 | |
behave as in AD - fix crash when provided "nTSecurityDescriptor" attribute is empty - print out the correct error codes if it's provided multi-valued - simplify the "recalculate_sd" control handling | |||||
2010-11-07 | s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the ↵ | Matthias Dieter Wallnöfer | 2 | -10/+20 | |
attribute fetch also on LDB add operations We've to completely ignore the flags in that case. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 11:10:23 UTC 2010 on sn-devel-104 | |||||
2010-11-07 | s4:descriptor LDB module - save a pointer to the request message on the ↵ | Matthias Dieter Wallnöfer | 1 | -33/+33 | |
temporary "ac" context This prevents two calls of "ldb_msg_copy_shallow". | |||||
2010-11-07 | s4:descriptor LDB module - by "dsdb_next_callback" we don't need anymore the ↵ | Matthias Dieter Wallnöfer | 1 | -33/+2 | |
default operation callback implementations Only customised ones still need to remain. | |||||
2010-11-07 | s4:descriptor LDB module - remove a bit pointless memory context | Matthias Dieter Wallnöfer | 1 | -9/+1 | |
For only one operation we do not need an additional "mem_ctx". "ac" should be enough (see for example the samldb LDB module). | |||||
2010-11-07 | s4:descriptor LDB module - remove a "ldb_msg_sanity_check" call | Matthias Dieter Wallnöfer | 1 | -7/+0 | |
This check (the structural objectclass) is performed in the objectclass LDB module. | |||||
2010-11-07 | s4:descriptor LDB module - don't ignore referrals if we are executing an ↵ | Matthias Dieter Wallnöfer | 1 | -4/+2 | |
ordinary external search operation Referrals are valid results. | |||||
2010-11-07 | credentials: Lowercase library name, | Jelmer Vernooij | 1 | -1/+1 | |
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104 | |||||
2010-11-07 | ldbsamba: Lowercase library name. | Jelmer Vernooij | 1 | -2/+2 | |
2010-11-07 | samdb: Lowercase library name. | Jelmer Vernooij | 1 | -75/+75 | |
2010-11-06 | s4:update_keytab LDB module - we don't need to search for the ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
"distinguishedName" attribute Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 6 20:08:28 UTC 2010 on sn-devel-104 | |||||
2010-11-06 | s4:operational LDB module - "canonicalName" doesn't make use of the ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
"distinguishedName" attribute It uses the DN from the returned message | |||||
2010-11-05 | s4:password_hash LDB module - fix indentation | Matthias Dieter Wallnöfer | 1 | -10/+10 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Nov 5 12:31:28 UTC 2010 on sn-devel-104 | |||||
2010-11-04 | s4:dsdb/objectclass_attrs: not all objects have delete protected attributes ↵ | Stefan Metzmacher | 1 | -0/+14 | |
as must contain Before we got the following error, while starting samba after a 'samba-tool vampire': Failed to store repsFrom - objectclass_attrs: delete protected attribute 'objectSid' on entry 'DC=ForestDnsZones,DC=alpha,DC=sz,DC=salzgitter-ag,DC=lab' missing! metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Nov 4 17:01:59 UTC 2010 on sn-devel-104 | |||||
2010-11-04 | s4:dsdb/samdb: optimize samldb_prim_group_change() | Stefan Metzmacher | 1 | -60/+60 | |
We should only do searches when we have to. metze | |||||
2010-11-04 | s4-dsdb: use LDB_FLAG_MOD_REPLACE for isDeleted | Andrew Tridgell | 1 | -1/+1 | |
isDeleted could have been set to FALSE previously Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Nov 4 10:18:10 UTC 2010 on sn-devel-104 | |||||
2010-11-04 | s4-dsdb: use LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK in dsdb | Andrew Tridgell | 2 | -2/+8 | |
when we are creating linked attributes with multiple values (some deleted), use LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK to disable that checking. | |||||
2010-11-04 | Move the checking of single valued attributes back into the tdb backend. | Andrew Tridgell | 1 | -12/+0 | |
The backend is the only place that can do this properly. It makes no sense to do it anywhere else. As a result of it moving out of the backend we ended up with some bugs causing multiple values in single valued attributes (eg. isDeleted), which can really damage the inregrity of the database. For the override of single valued values needed for deleted linked attributes we should use attribute flags. This reverts commit 1949864417f3d10fb8996df7db259649eb777271. | |||||
2010-11-03 | possibleinferiors: Report subunit. | Jelmer Vernooij | 1 | -4/+8 | |
2010-11-03 | possibleinferiors: Fix formatting. | Jelmer Vernooij | 1 | -15/+14 | |
2010-11-03 | s4:dsdb/samldb: avoid nested unindexed searches in samldb_member_check() | Stefan Metzmacher | 1 | -14/+31 | |
With 20000 objects in the database it's no fun to add members... metze | |||||
2010-11-03 | s4:descriptor LDB module - a bit cleanup | Matthias Dieter Wallnöfer | 1 | -13/+34 | |
- add more OOM checks where needed - remove message of an error which cannot happen anymore (since now the structural objectclass is always checked by the objectclass LDB module) Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 3 18:30:52 UTC 2010 on sn-devel-104 | |||||
2010-11-03 | s4:samldb LDB module - improve the "get_single_valued_attr" call and move it ↵ | Matthias Dieter Wallnöfer | 2 | -84/+36 | |
into "ldb_modules/util.c" It will be used by other LDB modules as well. | |||||
2010-11-03 | s4:objectclass_attrs LDB module - introduce the hardcoded delete-protected ↵ | Matthias Dieter Wallnöfer | 1 | -1/+19 | |
attributes list This is a hardcoded list in AD of attributes, which can never be deleted. | |||||
2010-11-03 | s4:objectclass LDB module - the structural objectclass has always to be ↵ | Matthias Dieter Wallnöfer | 1 | -0/+6 | |
specified Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 3 16:20:55 UTC 2010 on sn-devel-104 | |||||
2010-11-03 | s4:objectclass_attrs LDB module - refactor the "dSHeuristics" checker | Matthias Dieter Wallnöfer | 1 | -12/+9 | |
The checks are done when there are more than 0 values. The other checks should be performed by the other parts of the module. | |||||
2010-11-03 | s4:objectclass_attrs LDB module - simplify the invoke of the "dSHeuristics" ↵ | Matthias Dieter Wallnöfer | 1 | -3/+4 | |
checker It's always invoked on add and modify operations. | |||||
2010-11-03 | s4-dsdb: Implemented value restrictions for the dSHeuristics attribute | Nadezhda Ivanova | 1 | -1/+27 | |
2010-11-03 | s4:objectguid LDB module - remove "objectguid_find_attribute" | Matthias Dieter Wallnöfer | 1 | -17/+1 | |
It's exactly the same as "ldb_msg_find_element". In addition remove a comment which points out a "fixme" for a semi-async call since we started to permit them again. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 3 09:29:46 UTC 2010 on sn-devel-104 | |||||
2010-11-03 | s4-dsdb: removed the use of ldb_private.h from s4 | Andrew Tridgell | 9 | -121/+55 | |
this will allow s4 to use a system version of ldb | |||||
2010-11-01 | s4:samldb LDB module - the "sAMAccountName" cannot be substituted by nothing | Matthias Dieter Wallnöfer | 1 | -2/+8 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 1 14:36:24 UTC 2010 on sn-devel-104 | |||||
2010-11-01 | s4:samldb LDB module - support now the full "servicePrincipalName" update ↵ | Matthias Dieter Wallnöfer | 1 | -30/+96 | |
trigger With "dNSHostName" and/or "sAMAccountName" updates | |||||
2010-11-01 | s4:samldb LDB module - "sAMAccountName" checker | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
We need a "talloc_steal" for the retrieved "sAMAccountName" since the memory is afterwards freed using the "talloc_free" call. | |||||
2010-11-01 | s4-ldb: enable version checking in dsdb ldb modules | Andrew Tridgell | 39 | -2/+42 | |
2010-11-01 | s4:samldb LDB module - unify objectSid assignment error messages | Matthias Dieter Wallnöfer | 1 | -3/+2 | |
2010-11-01 | s4:samldb LDB module - deny "objectSid" modifications | Matthias Dieter Wallnöfer | 1 | -0/+7 | |
The same as with Windows | |||||
2010-11-01 | s4-dsdb: convert the rest of the ldb modules to the new module type | Andrew Tridgell | 40 | -77/+298 | |
2010-11-01 | s4-dsdb: convert the simple_ldap_map module to the new module style | Andrew Tridgell | 2 | -9/+26 | |
2010-11-01 | s4-dsdb: convert the extended_dn_out module to the new ldb module style | Andrew Tridgell | 2 | -10/+31 | |
2010-10-31 | idl: Use DRSUAPI_ATTID_ prefix instead of DRSUAPI_ATTRIBUTE_ for ATTID values | Kamen Mazdrashki | 3 | -29/+29 | |
Those values are actually ATTID values and such, they are used for ATTIDs for Attributes, Classes and Syntaxes. | |||||
2010-10-31 | s4:samldb LDB module - validate "sAMAccountName" modifications | Matthias Dieter Wallnöfer | 1 | -0/+74 | |
Also the "sAMAccountName" attribute is protected against corruption (e.g. two accounts with the same name). |