summaryrefslogtreecommitdiff
path: root/source4/dsdb/samdb
AgeCommit message (Collapse)AuthorFilesLines
2008-03-29Fix more valgrind issues.Andrew Bartlett2-2/+44
This passes down the timeout more consistantly, and ensures that no matter how the modules screw up, we don't free() the memory we are going to write into the ASN1 packet until we actually write it out. Andrew Bartlett (This used to be commit eefd46289b90967ce6b4cd385fb1f7e1d6f9b343)
2008-03-29Fix some valgrind issues.Andrew Bartlett1-0/+6
These small changes seem to fix some of the early issues in 'make valgrindtest' Previously, the subtree_delete code didn't pass on the timeout, leaving it uninitialised. The ldap_server/ldap_backend.c change tidies up the talloc hierarchy a bit. Andrew Bartlett (This used to be commit 95314f29a9cf83db71d37e68728bfb5009fce60d)
2008-03-28Convert some more files to GPLv3.Andrew Kroeger5-8/+2
(This used to be commit ebe5e8399422eb7e2ff4deb546338823e2718907)
2008-03-20More kludge ACLs!Andrew Bartlett1-36/+9
Rather than killing off the nasty 'kludge ACLs' stuff, this patch extends it, to ensure that LSA secrets and the registry are also protected. Andrew Bartlett (This used to be commit 2f2b110fb870132099bad1d4c16ed8962affb3ce)
2008-03-19IndentAndrew Bartlett1-1/+2
Andrew Bartlett (This used to be commit d2b5f40d80008ca3269118915409333755b6eac3)
2008-03-14Allow more 'domain' objects when looking for a unqiue SID.Andrew Bartlett1-2/+2
Andrew Bartlett (This used to be commit db3b5f16ec8d9b83d8a82a535a4847dce5923663)
2008-03-13Don't use 'dn', this attribute does not exist with the LDAP backend,Andrew Bartlett1-1/+1
or in AD. Andrew Bartlett (This used to be commit a3e1f2830679a56366f0080115de504cdb0144f7)
2008-03-13Bail out, rather than segfault on no domain sid.Andrew Bartlett1-2/+3
Andrew Bartlett (This used to be commit 7e85f318b571d1a909dffad0ecd661468ed497ca)
2008-03-13Correctly normalise records against OpenLDAP.Andrew Bartlett1-1/+1
Fixing this simple typo allows more of the ldap.js test to pass. Andrew Bartlett (This used to be commit 7c80cd18d5cd9cbf32dac15a4734f5a3c67cd0e7)
2008-03-13Rework to have member server 'domains' be CN=NETBIOSNAMEAndrew Bartlett1-1/+1
This reworks quite a few parts of our provision system to use CN=NETBIOSNAME as the domain for member servers. This makes it clear that these domains are not in the DNS structure, while complying with our own schema (found by OpenLDAP's schema validation). Andrew Bartlett (This used to be commit bda6a38b055fed2394e65cdc0b308a1442116402)
2008-03-13Don't segfault on invalid objectClass input.Andrew Bartlett1-6/+13
If the objectClass found does not include a defaultSecurityDescriptor, then we should not segfault in the SDDL parser. Andrew Bartlett (This used to be commit 5a92771fb55149fcf24f21f30e4c6a622bef44f8)
2008-03-06Make Samba4 pass the NET-API-BECOMEDC test against Win2k3 (again).Andrew Bartlett1-1/+2
To make Samba4, using the python provision system, pass this test required some major rework. Untested code is broken code, and some of the refactoring for a seperate provision test (which also now passes) broke things. Similarly, the iconv work has compiled, but these codepaths have never been run (NULL pointer de-reference). In working to use a local, rather than global, loadparm context, and to support using a target directory, a few things needed to be reworked, particularly around path handling. Andrew Bartlett (This used to be commit 1169e8d7bee20477b0efbfea3534ac63c83fb3d6)
2008-03-04The DN in objectCategory should, if possible, be returned pretty...Andrew Bartlett2-2/+10
This avoids going via the canonicalise_fn(), which will upper case the DN Andrew Bartlett (This used to be commit cdff1b0802437d713652b89f4522d3cce97c30ec)
2008-02-28Users and computers now share the same template.Andrew Bartlett1-35/+100
Slowly work away at the samldb module again, it is clear that AD does not use much of a templating system. samAccountType is managed, as far as I can tell, when groupType or userAccountControl changes. Andrew Bartlett (This used to be commit 447d5a795441aa6beab2f057c5ac1bc3c04e08c4)
2008-02-20Fix use of some modules (needed _PUBLIC_).Jelmer Vernooij25-56/+53
(This used to be commit ce332130ea77159832da23bab760fa26921719e2)
2008-02-20Use struct-based rather than function-based initialization for ldb modules ↵Jelmer Vernooij27-205/+33
everywhere. (This used to be commit 85c96a325867f7bcdb412ebc53f8a47dbf7cd89b)
2008-02-19Explain that these OIDs are DNsAndrew Bartlett1-0/+1
Andrew Bartlett (This used to be commit 69af290c91c61cdaf821750d0d2dddf9cb1b8255)
2008-02-09Give a more useful error when the templates.ldb can't be found.Andrew Bartlett1-2/+4
Andrew Bartlett (This used to be commit 26108eb66b4b5d4b339dfc845e8a018190068e81)
2008-02-08Reset error stringsAndrew Bartlett1-0/+2
Avoid leaking error strings up to the application, when we are ignoring them. (This used to be commit 57b4b43b6548d1cd81cfaebc5ea8abc88aaca989)
2008-01-26ldb: Add ldb_oom() calls in a couple of places.Jelmer Vernooij4-2/+18
(This used to be commit 1163c2ad54b122487fa25960b8989f0f6d0b8c64)
2008-01-25repl_meta_data: add some TODOs to replmd_modify_originating()Stefan Metzmacher1-0/+17
metze (This used to be commit ba495f9d19e7c7cfc9135a5d40e1050dd8f9ebc6)
2008-01-24Use the repl_meta_data module by default.Andrew Bartlett1-0/+4
This means that, except when we back onto LDAP, when it will be replaced with the mapping backend, we will keep this codepath tested. Andrew Bartlett (This used to be commit e8fb5da5a18c1c3bd788b1ab3f814ffb847b00fd)
2008-01-23Fix DRSUAPI replication test - NET-API-BECOME-DC.Andrew Bartlett1-126/+14
The main change here is to work with the current module stack, replacing only the objectGUID module, rather than a number of modules. However, two changes were key: - Fixing a typo search_req->handle -> change_req->handle - Allowing an error of NO_SUCH_OBJECT - it is quite valid for the object not to exist when being replicated in. Other small changes were required to the ejs provision to match changes in that code. Andrew Bartlett (This used to be commit 7b87a58502a052de391f4e1c56ac78a8d35b4e34)
2008-01-23ranged_results: fix use of uninitialised variable (end)Andrew Bartlett1-2/+4
This matches the range parsing in the search and callback - end was uninitilaised, causing occasional failures in make test. Andrew Bartlett (This used to be commit 669f137f0ecad10248a51b337c8f115d14d55b05)
2008-01-18Only set showOnlyInAdvancedView: TRUE when adding default values.Andrew Bartlett1-2/+2
False is the default, so only set this when the schema requires the hiding behaviour. Andrew Bartlett (This used to be commit 45f6ccefda39e8f0a9820ba55b1924b7cfb12262)
2008-01-18Merge commit 'origin/v4-0-test' into 4-0-localAndrew Bartlett1-0/+1
(This used to be commit 51422414bed28f425197519298c6b04a9f4e2c4e)
2008-01-18Add showInAdvancedViewOnly to every new objectAndrew Bartlett1-0/+4
Unless already set, the default value for this comes from the defaultHidingValue in the schema. Andrew Bartlett (This used to be commit 673f1805006f879fa5302aab8411767a22488e64)
2008-01-18Search for memberOf when clients ask for a wildcard against OpenLDAPAndrew Bartlett1-0/+1
The memberOf module in OpenLDAP make this attribute operational, so we need to add it here or clients won't get it when using *. Andrew Bartlett (This used to be commit 35148fd51f22d81fe9f590b7d6f13285c35656a7)
2008-01-18Correct authorship of instanceType moduleAndrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit d427cf4fa67e84ccdece9a3fb31d8e89379a86e7)
2008-01-18Add in a new module to handle instanceTypeAndrew Bartlett2-0/+141
This code raided from the repl_meta_data module, which probably needs to be downsized to just handling the replication data. Andrew Bartlett (This used to be commit 2a418f33705a792d9d16cf1d4aa3dcda467e6e04)
2008-01-17ldb_map objectClass munging: Don't hard-code 'extensibleObject'.Andrew Bartlett2-3/+3
This allows objectClass munging to be removed, or modified to not include adding an objectClass, or for that objectClass to be something different. Andrew Bartlett (This used to be commit ee93b4e2ee1dd1cd38bcf14b2bb62556a13cec4a)
2008-01-16Rework linked_attributes module for the REPLACE case.Andrew Bartlett1-6/+86
This moves to a smarter 'find the delta' based operation of the linked attributes module, when the caller asks for a 'replace' of the link source. Previously we would spray operations all over the database, even if the net result was just to modify one record. This also means we need the transaction safety less, which may be useful for some LDAP backends that don't provide this functionality on the LDAP server. Andrew Bartlett (This used to be commit 8c88e4eb1c0a606e7899091525260e8d6558ffd0)
2008-01-16Rework control handling to remove the 'domain_scope' controlAndrew Bartlett1-17/+37
Also remove the search_options control earlier, before, rather than after duplicating the request. When we generate referalls in the partition module, the domain_scope control with suppress them. Andrew Bartlett (This used to be commit fc57a119f53a7bc0a0eb76b868bbd7386b3c5008)
2008-01-11Remove 'dn' from mapping, it isn't a valid attribute in AD, and causesAndrew Bartlett2-19/+1
problems with ldap.js test with OpenLDAP as the backend. Likewise, remove it from the template lookup (for consistancy). TODO: see if it can be removed from ldb Andrew Bartlett (This used to be commit 47a1b76f7fff30229d3f23c6723f047923faf196)
2008-01-11Add in new module to normalise DNs being returned from OpenLDAP. ThisAndrew Bartlett2-0/+179
fixes the case of the attribute in teh DN. Fix option spelling for example re-provision Andrew Bartlett (This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
2008-01-01r26642: samba3sam.py: Remove more EJS-specific code.Jelmer Vernooij1-261/+239
(This used to be commit 7d14b657b3d59924b15f4f84bbd5745cd7f759ef)
2008-01-01r26640: Janitorial: Remove some more uses of global_loadparm.Jelmer Vernooij2-5/+5
(This used to be commit c863f4ebde8efa1a695b4469142d6719e30bc419)
2008-01-01r26639: librpc: Pass iconv convenience on from RPC connection to NDR ↵Jelmer Vernooij4-9/+11
library, so it can be overridden by OpenChange. (This used to be commit 2f29f80e07adef1f020173f2cd6d947d0ef505ce)
2008-01-01r26638: libndr: Require explicitly specifying iconv_convenience for ↵Jelmer Vernooij7-18/+48
ndr_struct_push_blob(). (This used to be commit 61ad78ac98937ef7a9aa32075a91a1c95b7606b3)
2008-01-01r26637: More work converting to Python.Jelmer Vernooij1-16/+16
(This used to be commit 84f1e82d8fe5ecca75e2d7048d1b8b409abcb9b7)
2007-12-30r26630: Split up big tests into various smaller functions, making it easier ↵Jelmer Vernooij1-183/+185
to debug. (This used to be commit 4be116133724ac52f9df8adb3feeb93ea616a990)
2007-12-27r26612: Tests show that we don't need to use a callback.Andrew Bartlett1-3/+0
Andrew Bartlett (This used to be commit 66cb9601e75935c35fb432655e840a0d9022cbe1)
2007-12-26r26598: Simplify the way Python tests are run.Jelmer Vernooij1-3/+3
(This used to be commit d649f73431fc993e31522e7fc8e1e35e0a4421d8)
2007-12-26r26593: - More work on the python versions of samba3dump and the samba3sam ↵Jelmer Vernooij1-64/+63
tests. - Initial work converting the upgrade code to Python. - Removed the old EJS upgrade code because it has been broken for a long time. (This used to be commit 150cf39fbd4fe088546870fb0d8f20c0d9eb4aca)
2007-12-24r26573: Fix warnings.Jelmer Vernooij1-1/+1
(This used to be commit 874f0ac0561e38a8c0ceda983f6c88c75ee29e9c)
2007-12-24r26570: - Trim size of the swig-generated Python bindings by removing a ↵Jelmer Vernooij1-0/+1067
bunch of {}'s. - Start working on Python equivalents for various EJS tests. - Fix regression in argument order for reg_diff_apply() in EJS bindings. (This used to be commit c550c03372cb260b78f6a6c132e70571bc4cb852)
2007-12-21r26540: Revert my previous commit after concerns raised by Andrew.Jelmer Vernooij11-15/+15
(This used to be commit 6ac86f8be7d9a8c5ab396a93e6d1e6819e11f173)
2007-12-21r26539: Remove unnecessary statics.Jelmer Vernooij11-15/+15
(This used to be commit e53e79eebef3ece6978f0a2b4a1ee0a0814bb5d2)
2007-12-21r26521: Fix newlines.Jelmer Vernooij3-12/+12
(This used to be commit 174aa1583791a4c305bc49cf78f8f10d42701bc9)
2007-12-21r26488: Implement tests for the ranged_results module.Andrew Bartlett1-28/+34
Untested code is broken code, so rework the module until it passes... It turns out that AD puts search attributes onto the wire in the reverse order to what Samba does. This complicates exact value matching, so this is skipped for now. Andrew Bartlett (This used to be commit 91bcb60d31d54e52128d5bd107df4ceb87389889)