Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-12-16 | s4-dsdb: it is a better pattern to mark a control as done than remove it | Andrew Tridgell | 3 | -21/+7 | |
removing a control means it can't be seen by any other modules, which is usually not what is wanted. Better to just mark it non-critical, which means anyone else who wants to look at it can, but if nobody does its not an error. | |||||
2009-12-16 | s4-dsdb: when the SD_FLAGS control is set, don't remove nTSecurityDescriptor | Andrew Tridgell | 1 | -10/+19 | |
2009-12-16 | s4-dsdb: don't actually remove the sd_flags control, just mark it non-critical | Andrew Tridgell | 1 | -14/+10 | |
For controls that need to be seen by more than one module, it is best to just mark them non-critical when handled, instead of removing them. Otherwise lower modules can't see them. In this case we want the operational module to see the SD_FLAGS control | |||||
2009-12-16 | s4-dsdb: added a dsdb_module_rename() call | Andrew Tridgell | 1 | -0/+43 | |
This will be used by the replmd_delete() code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2009-12-16 | s4-dsdb: added dsdb_module_modify() | Andrew Tridgell | 1 | -0/+40 | |
This is used to do a sync modify in a module Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2009-12-16 | s4-dsdb: fixed dsdb_module_dn_by_guid() | Andrew Tridgell | 1 | -3/+7 | |
needs to ask for the DN in storage format, plus fix compilation errors | |||||
2009-12-16 | s4-dsdb: dsdb_flags should be unsigned | Andrew Tridgell | 1 | -1/+1 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2009-12-16 | s4-dsdb: rename dsdb_module_search_handle_flags to dsdb_request_add_controls | Andrew Tridgell | 3 | -6/+10 | |
This function will be used for non-search controls, like relax | |||||
2009-12-16 | s4-dsdb: added dsdb_module_dn_by_guid() | Andrew Tridgell | 1 | -0/+41 | |
This finds a DN given a GUID, searching below the current module in the module stack. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2009-12-16 | s4-dsdb: use dsdb_dn_is_deleted_val() | Andrew Tridgell | 1 | -25/+22 | |
This also moves the check to before we parse the DN, which saves some unnecessary work Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2009-12-15 | Fixed a problem with duplicate values of allowedAttributesEffective. | Nadezhda Ivanova | 1 | -1/+3 | |
2009-12-14 | s4-dsdb: added REVEAL_INTERNALS flag to dsdb_module_search_handle_flags() | Andrew Tridgell | 2 | -0/+8 | |
2009-12-14 | s4-dsdb: use the reveal control to hide/show extended DN components | Andrew Tridgell | 1 | -1/+44 | |
When reveal is set, then we show deleted linked attributes and all linkked attribute components. When not set we show a normal extended DN. | |||||
2009-12-12 | s4:operational LDB module - cosmetic - reorder an attribute list | Matthias Dieter Wallnöfer | 1 | -8/+8 | |
This matches the default handling order in the "password_hash" module (it's nice to have this consistent). | |||||
2009-12-10 | Implementation of sDRightsEffective, allowedAttributesEffective and ↵ | Nadezhda Ivanova | 2 | -43/+612 | |
allowedChildClassesEffective. Behavior as documented in WSPP and tested. Needs optimisation though. | |||||
2009-12-10 | s4-dsdb: use GUID_to_ndr_blob() | Andrew Tridgell | 2 | -20/+10 | |
2009-12-10 | s4-dsdb: simplify linked attributes code using GUID functions | Andrew Tridgell | 1 | -18/+16 | |
2009-12-09 | s4-dsdb: added dsdb_functional_level() helper function | Andrew Tridgell | 3 | -15/+4 | |
2009-12-09 | s4-dsdb: use dsdb_module_search_dn in repl_meta_data | Andrew Tridgell | 1 | -1/+4 | |
This allows us to search below the current module. That will be important when we start using the results of this search to get the linked attributes meta data right | |||||
2009-12-09 | s4-dsdb: fixed steal of parentGUID for empty msg | Andrew Tridgell | 1 | -4/+10 | |
msg->elements could be NULL before we add parentGUID | |||||
2009-12-07 | s4:dsdb Use ldb_match_msg_objectclass in operational.c | Andrew Bartlett | 1 | -6/+1 | |
This avoids not only a possibly non-portable compiler expression, but also the need to look up the schema each time. Andrew Bartlett | |||||
2009-12-07 | s4:dsdb Make primaryGroupToken calculation more efficient and correct | Andrew Bartlett | 1 | -20/+46 | |
The original code here would do a subtree search under each object, attempting to determine if it was a group. This was incorrect, and inefficient - we just need to ask for the objectClass attribute, and check that value before returning the group's RID. (Much of this patch reworks operational.c to allow a search for 2 attributes for this calculation). Andrew Bartlett | |||||
2009-12-07 | s4:dsdb Make parentGUID handler use dsdb_module_search_dn() | Andrew Bartlett | 1 | -18/+29 | |
This avoids doing a new search from the top of the module stack. This also removes the helper function dsdb_find_parentguid_by_dn() which is now unused. Andrew Bartlett | |||||
2009-12-07 | s4:dsdb Hide the LM password by default too | Andrew Bartlett | 1 | -1/+2 | |
2009-12-04 | s4-ldb: fixed show_deleted module not to corrupt parse trees | Andrew Tridgell | 1 | -23/+26 | |
The show_deleted module was using a static private ptr in the module to hold a parse tree to save on parsing. The code caused this static ptr to change with each search, which caused incorrect searches and numerous valgrind errors. This patch replaces it with a hand-built parse tree. | |||||
2009-12-04 | s4-drsutil: fixed a memory leak in samdb_search_count | Andrew Tridgell | 1 | -1/+4 | |
In general functions that don't return any memory should not take a memory context. Otherwise it is too easy to have a bug like this where memory is leaked | |||||
2009-12-03 | s4:operational LDB module - Fix usage of LDB constants | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
2009-12-03 | s4-drs: fixed updating of uSNChanged in replmd_modify | Andrew Tridgell | 1 | -3/+2 | |
Updating of uSNChanged broke in a recent change | |||||
2009-11-30 | s4-drs: Using dsdb_msg_add_guid() utility function | Fernando J V da Silva | 3 | -46/+5 | |
Uses the dsdb_msg_add_guid() to add any kind of GUID attribute to a ldb_message in several places of samba4 code. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-11-30 | s4-ldb: changed ldb_msg_add_dn() to ldb_msg_add_linearized_dn() | Crístian Deives | 1 | -3/+3 | |
this makes the usage clearer Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-11-30 | s4-dsdb: don't call ldb_next_init() twice in objectclass module | Andrew Tridgell | 1 | -1/+1 | |
2009-11-28 | s4: fix SD update and password change in upgrade script | Matthieu Patou | 1 | -4/+11 | |
- reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-11-27 | s4:dsdb Don't segfault with ldb_transaction_prepare_commit() without begin() | Andrew Bartlett | 1 | -0/+4 | |
It is up to other modules to complain if ldb_transaction_prepare_commit() is called before ldb_transaction_begin_transaction() Andrew Bartlett | |||||
2009-11-26 | s4:objectclass LDB module - Prevent write operations on constructed attributes | Matthias Dieter Wallnöfer | 1 | -6/+19 | |
2009-11-26 | s4:operational LDB module - Don't do the write checks here | Matthias Dieter Wallnöfer | 1 | -16/+0 | |
Let this perform the schema in the "objectclass" module. | |||||
2009-11-25 | s4:dsdb Make samba_dsdb easier to use in upgrades - assume default values | Andrew Bartlett | 1 | -4/+7 | |
2009-11-24 | s4:dsdb Handle LDAP backends correctly with new samba_dsdb system | Andrew Bartlett | 1 | -5/+5 | |
The original code had the wrong module names, and use strcasecmp() incorrectly. Andrew Bartlett | |||||
2009-11-24 | s4:provision Move secrets.ldb over to .c file module lists, like sam.ldb | Andrew Bartlett | 2 | -0/+111 | |
2009-11-24 | s4:operational LDB module - Prevent the modification of operational attributes | Andrew Bartlett | 1 | -0/+16 | |
(merged by Andrew Bartlett) Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2009-11-24 | s4:dsdb Use new helper function to obtain CN=Aggregate schema DN in schema_data | Andrew Bartlett | 1 | -6/+6 | |
2009-11-24 | s4:dsdb Return the subSchemaSubEntry operational attribute on every object | Andrew Bartlett | 1 | -4/+40 | |
2009-11-23 | s4:dsdb Move module configuration from each ldb into samba_dsdb.c | Andrew Bartlett | 5 | -5/+397 | |
This makes getting the module order correct, the obligation of Samba4 developers, and not system administrators. In particular, once an ldb is updated to use only the 'samba_dsdb' module, no further changes to the ldb should be required when upgrading to later Samba4 versions. (thanks to metze for the suggestion of samba_dsdb as a long-term stable name for the module) Andrew Bartlett | |||||
2009-11-23 | s4/schema: Handle Object(OR-Name) syntax in extended_dn_out module | Kamen Mazdrashki | 1 | -4/+12 | |
Windows displays attribute values with Object(OR-Name) syntax in plain DN format when queried through LDAP. Hence, we need to post-process such values specially in extended_dn_out.c module so they are always shown as plain DN, no matter what controls are passed for search request. | |||||
2009-11-22 | Fixed incorrect indentation. | Nadezhda Ivanova | 1 | -7/+6 | |
2009-11-21 | Implemented LDAP_SERVER_SD_FLAGS_OID on search requests. | Nadezhda Ivanova | 2 | -22/+165 | |
2009-11-20 | Cosmetic patch - fixed case of attribute name. | Nadezhda Ivanova | 1 | -1/+1 | |
2009-11-20 | Implementation of LDAP_SERVER_SD_FLAGS_OID on modify requests. | Nadezhda Ivanova | 1 | -16/+133 | |
2009-11-20 | s4-dsdb: some more attribuutes that we should only give if asked for | Andrew Tridgell | 1 | -1/+6 | |
2009-11-20 | added new function "ldb_msg_add_dn" | Crístian Deives | 1 | -2/+3 | |
a helper function to a DN element to an ldb_msg using ldb_msg_add_string. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-11-20 | s4-dsdb: removed attributes that should not be displayed by default | Andrew Tridgell | 1 | -0/+37 | |
Some attributes (like ntSecurityDescriptor) are stored in our db, but should only be displayed if asked for. This also applied to parentGUID from old installs, which is now generated. |