Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-12-06 | s4-repl_meta_data: Remove duplicated check | Kamen Mazdrashki | 1 | -2/+0 | |
2010-12-06 | s4-schema_load: Strip a pointless check | Kamen Mazdrashki | 1 | -3/+1 | |
If *schema is NULL, then dsdb_schema_from_ldb_results() call should have failed | |||||
2010-12-05 | s4:dsdb/samdb/ldb_modules/util.h - fix a gcc 3.4 compile warning | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-12-04 | s4:dsdb/samdb/cracknames.c - fix another memory leak | Matthias Dieter Wallnöfer | 1 | -0/+1 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Dec 4 17:26:39 CET 2010 on sn-devel-104 | |||||
2010-12-02 | s4-dsdb/descriptor: comment typo | Kamen Mazdrashki | 1 | -1/+1 | |
2010-12-02 | s4:dsdb/samdb/cracknames.c - fix various KRB5 memory leaks | Matthias Dieter Wallnöfer | 1 | -7/+13 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Dec 2 12:35:03 CET 2010 on sn-devel-104 | |||||
2010-12-02 | s4:password_hash LDB module - allow empty ("") passwords | Matthias Dieter Wallnöfer | 1 | -22/+31 | |
This seems to have been broken some time ago - till someone on the mailing list noticed it. I've also added a testsuite (and some additional SamDB python helpers) which should prove this. | |||||
2010-12-01 | s4:ranged results LDB module - cosmetic - fix some indentation | Matthias Dieter Wallnöfer | 1 | -1/+3 | |
2010-12-01 | s4:ranged results LDB module - "rr_search_callback" - change some memory context | Matthias Dieter Wallnöfer | 1 | -1/+3 | |
"el->values" could under some circumstances be NULL (see "if" above). | |||||
2010-12-01 | s4-ranged_result.c: Fix memory context for ranged attributes handling | Kamen Mazdrashki | 1 | -4/+15 | |
Pair-Programmed-With: Zahari Zahariev <zahari.zahariev@postpath.com> Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Wed Dec 1 11:45:48 CET 2010 on sn-devel-104 | |||||
2010-11-29 | s4-dsdb: give full error message for operational failures | Andrew Tridgell | 1 | -2/+2 | |
2010-11-27 | s4:param/secrets.h - fix "enum netr_SchannelType" include correctly | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
2010-11-27 | s4:dsdb/samdb/samdb.h - fix include ordering in order to prevent warnings on ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Tru64 | |||||
2010-11-27 | s4:role transfer - use always type "enum drepl_role_master" for role ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
specifications Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 27 16:03:43 CET 2010 on sn-devel-104 | |||||
2010-11-27 | s4:samba3sam LDB module - correctly print out an unsigned value | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
Here we can print it out as unsigned since we are generating a string attribute. | |||||
2010-11-27 | s4:samba3sam LDB module - make the "pw_uid"/"pw_gid" conversion a bit clearer | Matthias Dieter Wallnöfer | 1 | -2/+6 | |
And remove the "long" specifier since at least on the major platforms (Linux, BSD and Solaris) these types are defined as "uint32_t". | |||||
2010-11-26 | s4:rootdse LDB module - remove unused variable | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Nov 26 13:58:27 CET 2010 on sn-devel-104 | |||||
2010-11-26 | s4:objectclass LDB module - simply use "msg" when requesting the message | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-11-26 | s4:objectclass LDB module - move the "mem_ctx" allocation to a better place | Matthias Dieter Wallnöfer | 1 | -7/+6 | |
It's only needed if we've a schema around. | |||||
2010-11-26 | s4-dsdb Reorganise and clarify the LSA objectClass check (forbidden on LDAP) | Andrew Bartlett | 1 | -15/+28 | |
This arranged the check to avoid talloc_strdup() (the schema pointers are constant, and can be relied upon), and checks the untrusted bit first (it is faster), before the ldb_attr_cmp(). The strcmp() here was valid, if unusual, because the ldapDisplayName values are already in the correct case, but strcasecmp() is more correct, as for the small extra cost, we avoid a difficult to diagnose bug later. Andrew Bartlett Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2010-11-26 | s4-objectclass Use a specific local variable name, not 'value' | Andrew Bartlett | 1 | -4/+5 | |
This makes it clearer what the local variable in use here does. Andrew Bartlett Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2010-11-26 | s4-dsdb Remove rootDSE and anonymous checks from acl_read | Andrew Bartlett | 1 | -15/+0 | |
The rootdse module handles rootDSE requests, and blocks anonymous access, so we on't need to do it again here. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Nov 26 00:36:19 CET 2010 on sn-devel-104 | |||||
2010-11-26 | s4-dsdb Add 'block anonymous' checks to the rootdse module | Andrew Bartlett | 1 | -0/+100 | |
This ensures that one single point checks for and blocks anonymous read access to the database over LDAP. Andrew Bartlett | |||||
2010-11-26 | s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics(). | Andrew Bartlett | 2 | -4/+3 | |
A function that does not return memory should not take a memory context. Andrew Bartlett | |||||
2010-11-25 | s4:lsa RPC server / objectclass LDB module - fix the creation of trusted ↵ | Matthias Dieter Wallnöfer | 1 | -7/+1 | |
domain objects Tridge pointed out that it is to dangerous to allow them to be created with SYSTEM permissions. The solution using the "untrusted" flag should be much more viable. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Nov 25 13:05:56 CET 2010 on sn-devel-104 | |||||
2010-11-24 | s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control ↵ | Matthias Dieter Wallnöfer | 1 | -3/+7 | |
is specified This fits better than the RELAX one. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 24 18:23:01 CET 2010 on sn-devel-104 | |||||
2010-11-24 | s4:objectclass LDB module - move one checks into the "objectclass derivation ↵ | Matthias Dieter Wallnöfer | 1 | -11/+17 | |
loop" This denies objects created from possible derivated classes from the prohibited ones. Also small cosmetic improvements for another check. | |||||
2010-11-24 | s4:objectclass LDB module - some more or less cosmetic return value macro ↵ | Matthias Dieter Wallnöfer | 1 | -14/+22 | |
changes Sometimes "ldb_module_oom" fits better than "ldb_operr" or "ldb_oom". | |||||
2010-11-20 | s4:repl_meta_data LDB module - fix a counter type | Matthias Dieter Wallnöfer | 1 | -2/+4 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 20 22:32:06 CET 2010 on sn-devel-104 | |||||
2010-11-20 | s4:repl_meta_data LDB module - move the "objectGUID" checks a bit higher | Matthias Dieter Wallnöfer | 1 | -29/+29 | |
- they don't need the allocated "ac" context - some small code cleanups | |||||
2010-11-20 | s4:objectclass_attrs LDB module - add more delete protected attributes | Matthias Dieter Wallnöfer | 1 | -1/+4 | |
And enhance the testsuite | |||||
2010-11-20 | s4:samldb LDB module - objectclass trigger - reorder template attributes | Matthias Dieter Wallnöfer | 1 | -9/+10 | |
2010-11-20 | s4:acl LDB module - it's more correct to count the password attributes using ↵ | Matthias Dieter Wallnöfer | 1 | -3/+6 | |
"unsigned int" Since these are derived from a LDB result. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 20 11:29:07 CET 2010 on sn-devel-104 | |||||
2010-11-18 | s4/operational: Fix swapped parameters for ldb_msg_copy_attr | Anatoliy Atanasov | 1 | -2/+2 | |
Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> Autobuild-Date: Thu Nov 18 17:02:07 UTC 2010 on sn-devel-104 | |||||
2010-11-18 | s4:password_hash LDB module - remove unused headers | Matthias Dieter Wallnöfer | 1 | -3/+0 | |
2010-11-18 | s4:repl_meta_data LDB module - allow also special DNs to be renamed correctly | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Do always escape RDN values - this fixes bug #7794 Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Nov 18 10:43:40 UTC 2010 on sn-devel-104 | |||||
2010-11-17 | s4-repl: save the result of the last replication in repsFrom/repsTo | Andrew Tridgell | 1 | -5/+0 | |
when a replication fails, we should add the failure to repsFrom when a notify fails, we need to save it to repsTo this ensures showrepl always shows the latest status | |||||
2010-11-16 | s4:acl LDB module - use also here "dsdb_find_nc_root" to implement the ↵ | Matthias Dieter Wallnöfer | 1 | -28/+57 | |
NC-specific checks Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 16 15:12:13 UTC 2010 on sn-devel-104 | |||||
2010-11-16 | s4:descriptor LDB module - also "get_default_ag" should make use of ↵ | Matthias Dieter Wallnöfer | 1 | -12/+12 | |
"dsdb_find_nc_root" | |||||
2010-11-16 | s4:descriptor LDB module - handle the NCs in a more generic way by using ↵ | Matthias Dieter Wallnöfer | 1 | -10/+22 | |
"dsdb_find_nc_root" | |||||
2010-11-16 | s4:descriptor LDB module - make more clear that special control entries ↵ | Matthias Dieter Wallnöfer | 1 | -0/+7 | |
never should be handled by modules | |||||
2010-11-16 | s4:objectclass LDB module - the "olddn" is the special DN for rename requests | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-11-16 | s4-schema_load: Don't clean in_transaction flag until transaction is really ↵ | Kamen Mazdrashki | 1 | -7/+6 | |
finished Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Tue Nov 16 11:00:35 UTC 2010 on sn-devel-104 | |||||
2010-11-16 | s4:subtree_rename LDB module - make use of "dsdb_find_nc_root" | Matthias Dieter Wallnöfer | 1 | -22/+27 | |
This is exactly what's needed there. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 16 08:42:07 UTC 2010 on sn-devel-104 | |||||
2010-11-16 | s4:objectclass LDB module - free "nc_root" after name context comparisons | Matthias Dieter Wallnöfer | 1 | -0/+2 | |
2010-11-15 | s4:objectclass LDB module - improve the default name context checking on ↵ | Matthias Dieter Wallnöfer | 1 | -16/+12 | |
modifications Pointed out by abartlet | |||||
2010-11-15 | s4:objectclass LDB module - implement the "objectClass" change restrictions ↵ | Matthias Dieter Wallnöfer | 1 | -0/+25 | |
on Windows 2000 forest function level Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 15 13:10:05 UTC 2010 on sn-devel-104 | |||||
2010-11-13 | s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password ↵ | Matthias Dieter Wallnöfer | 1 | -6/+9 | |
conversion errors This errors can happen also on a regular basis - then we shouldn't return ERR_OPERATIONS_ERROR (this error code is reserved for very serious failures). Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 13 12:37:36 UTC 2010 on sn-devel-104 | |||||
2010-11-13 | s4:objectclass LDB module - multiple "objectClass" change elements are ↵ | Matthias Dieter Wallnöfer | 1 | -161/+169 | |
unfortunately still allowed The test message has been compressed - therefore I've now used "modify_ldif". | |||||
2010-11-12 | samldb: relax groupType modification checks | Matthieu Patou | 1 | -27/+32 | |
Allow programs with the PROVISION control to bypass groupType checks. This is needed by upgradeprovision for older alpha (11, 10 ...) |