summaryrefslogtreecommitdiff
path: root/source4/dsdb/samdb/ldb_modules
AgeCommit message (Collapse)AuthorFilesLines
2008-11-04Give a better error when ldb_dn_from_ldb_val failsAndrew Bartlett1-1/+3
2008-11-04Use ldb_dn_from_ldb_val to avoid possible over-run of the value.Andrew Bartlett2-9/+9
The ldb_val is length-limited, and while normally NULL terminated, this avoids the chance that this particular value might not be, as well as avoiding a cast. Andrew Bartlett
2008-11-04Fix use of wrong union arm in linked_attributes moduleAndrew Bartlett1-1/+1
This bug occours frequenetly in ldb users because the union so happens to be layed out that this works. However, it is still incorrect usage... Andrew Bartlett
2008-10-31use the new CH_UTF16_MUNGED charset for utf16 password buffersAndrew Tridgell1-1/+1
now to work out how to test this ...
2008-10-24Remove unused include param/param.h.Jelmer Vernooij2-2/+0
2008-10-24Remove iconv_convenience argument from convert_string{,talloc}() butJelmer Vernooij1-3/+3
make them wrappers around convert_string{,talloc}_convenience().
2008-10-23Clarify the linked attribute module behaviour with commentsAndrew Bartlett1-1/+9
2008-10-20Make sure prototypes are always included, make some functions static andJelmer Vernooij4-7/+7
remove some unused functions.
2008-10-18Add TALLOC_CTX pointer to strhex_to_data_blob for consistency with SambaJelmer Vernooij2-6/+4
3.
2008-10-17Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-develAndrew Bartlett3-76/+240
2008-10-16Transform the sequence_number operation into a normal extended operation as ↵Simo Sorce3-76/+240
it should always have been. Make it also async so that it is not a special case.
2008-10-16Create a 'straight paper path' for UTF16 passwords.Andrew Bartlett2-66/+141
This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett
2008-10-14The ldb async merge broke all MMC management utiltiesMatthias Dieter Wallnöfer1-4/+4
Commit 51baa8deec00244cc0a6e3d29c53932427800610 included a copy-and-paste bug which caused all MMC mangement utilities to break. Because of the typo Samba4 would no longer include the magic 'you may write to these attributes/create these classes' attributes, these tools would display all fields greyed out or 'read only', and not allow the creation of child objects. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2008-10-13DSDB cosmetic patches: Some enhancementsMatthias Dieter Wallnöfer2-6/+6
Also, use the constants more in the "ldif_handlers" module.
2008-10-13Cosmetic corrections for the DSDB moduleMatthias Dieter Wallnöfer4-13/+13
This commit applies some cosmetic corrections for the DSDB (Directory Server Database).
2008-10-11Fix include paths to new location of libutil.Jelmer Vernooij5-5/+5
2008-10-06Remove compleatly bogus rename test in partitions module.Andrew Bartlett1-17/+0
2008-10-03Merge commit 'master/master'Andrew Tridgell5-48/+424
2008-10-03fixed the partition module and the GC handlingAndrew Tridgell1-4/+38
- when multiple partitions are searched, consider the search a success if any of the partitions return success - only search the right subset of partitions, looking at the scope and basedn of the search This fixes several errors with GC searches
2008-10-02fixed the sense of ldb base dn comparisons in two places, and use aAndrew Tridgell2-4/+4
direct comparison instead of a sub-tree comparison in another this fixes basedn searches on the global catalog port
2008-10-02Fix crash bugs in error paths: ac is not yet initialized here, and we don'tSimo Sorce1-27/+18
need to call ldb_module_done in the main module functions, we can directly return an error. ldb_module_done() is for callbacks
2008-10-02s4:rootdse: for now don't pass down controls for the rootdse searchStefan Metzmacher1-1/+1
metze
2008-10-02s4:partition: register DOMAIN_SCOPE and SEARCH_OPTIONS controlsStefan Metzmacher1-0/+14
metze
2008-10-02s4:partition: pass down the SEARCH_OPTIONS control as uncriticalStefan Metzmacher1-0/+8
metze
2008-10-02s4:linked_attributes: fix a crash bug when the definition of a target ↵Stefan Metzmacher1-3/+35
attribute is missing Windows 2003 has a broken schema where the definition of msDS-IsDomainFor is missing (which is supposed to be the backlink of the msDS-HasDomainNCs attribute. Our schema is extracted from windows 2003, so we have the problem. As the NET-API-BECOME-DC test triggers this bug, windows 2003 seems to just skip creating a backlink. metze
2008-10-02s4:kludge_acl: just fake support for the SD_FLAGS controlStefan Metzmacher1-0/+20
metze
2008-10-02s4:extended_dn: add support for <GUID=...>, <SID=...> or <WKGUID=...,DC=...> ↵Stefan Metzmacher1-44/+355
as basedn We resolve them into the real basedn before do the real search. metze
2008-09-30Compare sids in samba3sam tests.Jelmer Vernooij1-11/+21
2008-09-29s4:samldb: use the code path with async ldbStefan Metzmacher1-43/+4
This removes the event_context leak that caused NT_STATUS_TOO_MANY_OPENED_FILES in the server, because of all the epool fds metze
2008-09-29LDB ASYNC: samba4 modulesSimo Sorce22-4333/+4946
2008-09-29s4:dsdb: passdown DSDB_CONTROL_REPLICATED_UPDATE_OID for replicated updatesStefan Metzmacher2-3/+34
We need to make sure replicated updates are handled differently in some situations, e.g. we should bypass the schema checks. metze
2008-09-25Revert LDB return code patches from Matthias.Jelmer Vernooij4-16/+16
2008-09-24Cosmetic corrections for the DSDB moduleMatthias Dieter Wallnöfer4-16/+16
This commit applies some cosmetic corrections for the DSDB (Directory Server Database).
2008-09-24Use loadparm since it's required by some modules.Jelmer Vernooij1-6/+6
2008-09-24Move source4/lib/crypto to lib/crypto.Jelmer Vernooij1-1/+1
2008-09-23Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.Simo Sorce7-28/+20
The previous ldb_search() interface made it way too easy to leak results, and being able to use a printf-like expression turns to be really useful.
2008-09-21Fix last samba3sam.py test.Jelmer Vernooij1-24/+28
2008-09-21Fix DNs - only one more samba3sam test failing now.Jelmer Vernooij1-80/+72
2008-09-20More code simplifications.Jelmer Vernooij1-24/+25
2008-09-19Fix formatting.Jelmer Vernooij1-35/+63
2008-09-19Simplify code, remove print statements.Jelmer Vernooij1-29/+42
2008-09-19Fix objectclass tests.Jelmer Vernooij1-4/+3
2008-09-18Improve formatting.Jelmer Vernooij1-66/+54
2008-09-18Fix tests, be less verbose.Jelmer Vernooij1-35/+35
2008-09-18Fix some tests.Jelmer Vernooij1-4/+16
2008-09-12Remove ancient remains of first experimentations aboutSimo Sorce4-1781/+0
supporting a schema (This used to be commit 53b57300c799a079b4d64815243fe6120e0a9fa2)
2008-09-08Try to implement the right logic for systemFlagsAndrew Bartlett1-0/+37
The MS-ADTS document has quite detailed instrucitons on how these flags should be processed. This change also causes the correct sign-wrapping to occour, as these are declared as signed integers. Andrew Bartlett (This used to be commit 5c3d237a6d721dc75166bdc5ac0c6e76a4495bf7)
2008-09-08Don't expose passwords, even to the administrator.Andrew Bartlett1-1/+14
This ensures they don't leak over LDAP, but does not prevent access, as ldbsearch locally still bypasses these controls. Andrew Bartlett (This used to be commit fa3f3bab33001770a9d7e33875bf212636f6c128)
2008-08-22fixed error handling in ANR code Andrew Tridgell1-18/+24
when we can't process an ANR request we need to continue with the parse tree we were given, not a NULL tree (This used to be commit ed66feb80aac7432049fe9fd86a9232984587e17)
2008-08-21Don't walk past the end of ldb values.Andrew Bartlett5-8/+8
This is a partial fix towards bugs due to us walking past the end of what we think are strings in ldb. There is much more work to do in this area. Andrew Bartlett (This used to be commit 5805a9a8f35fd90fa4f718f73534817fa3bbdfd2)