Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-12 | s4:samldb LDB module - refactor the "primaryGroupID" check on user creation | Matthias Dieter Wallnöfer | 1 | -137/+39 | |
This looks more straight-forward now. | |||||
2010-09-12 | s4:samldb LDB module - get rid of the SID context variable | Matthias Dieter Wallnöfer | 1 | -20/+17 | |
Since we get more and more rid of async stuff we don't need this in the context anymore. | |||||
2010-09-12 | s4:samldb LDB module - use also here the real attribute denomination ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
"sAMAccountName" Purely cosmetic - but nicer to read | |||||
2010-09-12 | s4:samldb LDB module - rename "check_SamAccountType" into "check_sAMAccountType" | Matthias Dieter Wallnöfer | 1 | -5/+4 | |
And a small cosmetic change. I like to have the real attribute names in the function denominations | |||||
2010-09-12 | s4:samldb LDB module - make "samldb_check_sAMAccountName" synchronous again | Matthias Dieter Wallnöfer | 1 | -71/+19 | |
To make it more understandable | |||||
2010-09-11 | s4:ldb_register_samba_handlers - fix up and convert result codes to LDB/LDAP ↵ | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
results | |||||
2010-09-11 | libcli/security Use talloc_zero when making a struct security_token | Andrew Bartlett | 1 | -2/+0 | |
2010-09-11 | s4-privs Seperate rights and privileges | Andrew Bartlett | 1 | -2/+6 | |
These are related, but slightly different concepts. The biggest difference is that rights are not enumerated as a system-wide list. This moves the rights to security.idl due to dependencies. Andrew Bartlett | |||||
2010-09-11 | libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure. | Andrew Bartlett | 1 | -1/+1 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-10 | s4/fsmo: Change return type from NTSTATUS to WERROR for drepl_takeFSMOrole | Anatoliy Atanasov | 2 | -3/+4 | |
This removed an unnecessary conversion of the return type in drepl_take_FSMO_role. | |||||
2010-09-10 | s4/fsmo: Fix callback declaration | Anatoliy Atanasov | 1 | -1/+2 | |
2010-09-10 | s4-dreplsrv: fix 'dn' for partition object being created | Kamen Mazdrashki | 1 | -1/+9 | |
2010-09-10 | s4-drs-fsmo: try to dispatch ops in queue as soon as possible | Kamen Mazdrashki | 1 | -1/+9 | |
In most cases this will transfer of schema master role to look like a synchronous operation. | |||||
2010-09-10 | s4-fsmo: update FSMO changes for recent IRPC work | Andrew Tridgell | 2 | -7/+13 | |
the IRPC API has changed Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-10 | s4/drs: update repsFrom only when we are not in getncchanges extended op | Anatoliy Atanasov | 1 | -4/+4 | |
2010-09-10 | s4-ldap: Added support for FSMO role transfer via LDAP by modify on rootDSE | Nadezhda Ivanova | 1 | -1/+46 | |
GetNCChanges with the corresponding extended operation is initiated and added to the queue when a modify request is received on becomeSchemaMaster, becomeRidMaster, becomeNamingMaster, becomeInfrastructureMaster and becomePDC attributes in rootDSE. | |||||
2010-09-10 | s4-irpc: Added internal rpc call DREPL_TAKEFSMOROLE | Nadezhda Ivanova | 1 | -1/+10 | |
It schedules a getncchanges with extended op 6, to be used when a modify request on becomeROLEMaster atteibute on rootDSE is received. | |||||
2010-09-10 | s4-drs: Implementation of GetNCChanges extended op 6 - fsmo role transfer | Nadezhda Ivanova | 3 | -2/+154 | |
Basically the candidate owner makes a getncchanges call with extended op 6 when they want to become the new owner. The current owner then updates the corresponding fSMORoleOwner attribute in its database with the new owner, and replicates the change to the candidate, who then becomes the owner. The patch was made in cooperation with Anatoliy Atanasov <anatoliy.atanasov@postpath.com> who kindly helped to debug it. | |||||
2010-09-10 | s4-drs: Refactored drepl_service and send_ridalloc_request so that the ↵ | Nadezhda Ivanova | 2 | -27/+48 | |
structures can be used for other extended ops | |||||
2010-09-09 | s4-dreplsrv: Do allocations on long-living context so that callback gets called | Kamen Mazdrashki | 1 | -1/+1 | |
2010-09-09 | s4-dreplsrv: Call dreplsrv_out_operation::callback in case we fail to even ↵ | Kamen Mazdrashki | 1 | -0/+8 | |
run the operation Operation was scheduled already, so we need to call the callback function for it to be able to do its job. For instance, if we are blocking an rpc call until an operation is completed and there is no memory, then client will be blocked without knowing what is going on with the server. | |||||
2010-09-09 | s4-dsdb/repl/drepl_out_pull.c: Remove unused code | Kamen Mazdrashki | 1 | -43/+0 | |
2010-09-09 | s4-drepl_service.c: Update (C) | Kamen Mazdrashki | 1 | -9/+10 | |
and remove few trailing white spaces | |||||
2010-09-09 | s4-drepsrv: Dump more info when drepl_replica_sync() fails | Kamen Mazdrashki | 1 | -24/+28 | |
There are many spots where this function may fail and I find it very useful to know where exactly function fails and what are the input parameters during testing. REPLICA_SYNC_FAIL() macro now dumps an error message so we may remove extra DEBUG() dump in implementation. | |||||
2010-09-09 | s4-dsdb Change debug levels for startup messages | Andrew Bartlett | 2 | -10/+10 | |
We should make the 'common' error not show up, but the unusal case fatal. Andrew Bartlett | |||||
2010-09-09 | s4-pydsdb: expose samdb_partitions_dn() as get_partitions_dn() in python | Andrew Tridgell | 1 | -0/+30 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-07 | s4-dreplsrv: Run NC replication synchronously if requested | Kamen Mazdrashki | 1 | -30/+119 | |
2010-09-05 | s4-idl: redefine dreplsrv_refresh() to be alike other RPC function definitions | Kamen Mazdrashki | 1 | -1/+1 | |
Sorry for the 'custom' definition first time | |||||
2010-09-05 | dsdb: make the ATTRIBUTE NOT FOUND more clear | Matthieu Patou | 2 | -0/+5 | |
2010-09-04 | dsdb: Add missing dependencies for dsdb ldb modules. | Jelmer Vernooij | 1 | -2/+2 | |
2010-09-03 | s4:dsdb/kcc: use irpc_binding_handle_by_name() | Stefan Metzmacher | 2 | -7/+40 | |
metze | |||||
2010-09-03 | s4-dreplsrv: Refactor drepl_replica_sync() to behave as described in MS-DRSR | Kamen Mazdrashki | 1 | -8/+111 | |
see: MS-DRSR - 4.1.23.2 Note: Synchronious replication not implemented yet. | |||||
2010-09-03 | s4-dreplsrv: Helpers to locate source DSA in a partition by GUID or DNS name | Kamen Mazdrashki | 1 | -0/+40 | |
2010-09-03 | s4-dreplsrv: Helper to find NC by DN or GUID or SID | Kamen Mazdrashki | 1 | -0/+33 | |
2010-09-03 | s4-dreplsrv: Add caller-specific data parameter for dreplsrv_fsmo_callback_t | Kamen Mazdrashki | 3 | -7/+14 | |
It is to be used when we need to preserve a state to be used in tha callback when dreplsrv_out_operation is completed | |||||
2010-09-02 | s4:dsdb Fix attribute being searched for in dereference against Fedora DS | Andrew Bartlett | 1 | -1/+1 | |
The problem here is that these attributes are not mapped in the simple_ldap_map, and they were changed a while back. Andrew Bartlett | |||||
2010-09-02 | s4:dsdb Make the dereference control critical if input is critical | Andrew Bartlett | 1 | -1/+3 | |
This helps us ensure that the backend knows about and respects the dereference control if our caller has asked that the extended DN control be considered critical. Andrew Bartlett | |||||
2010-09-02 | s4:dsdb Don't reload the schema against OpenLDAP backend | Andrew Bartlett | 2 | -3/+13 | |
The schema should be considered read-only when we are using the OL backend, as we can't update the backend schema in real time anyway. Andrew Bartlett | |||||
2010-08-28 | s4-kcc: Notify dreplsrv that Topology has changed | Kamen Mazdrashki | 1 | -0/+29 | |
2010-08-28 | s4-dreplsrv: Implement irpc stub to be used to force dreplsrv to update ↵ | Kamen Mazdrashki | 1 | -0/+20 | |
internal cache This IRPC calls is to be used whenever repsFrom/repsTo are changed by administrative tool or KCC (i.e. Topology changes). At present, only KCC may change topology. | |||||
2010-08-28 | s4-dreplsrv: Move partition cache update before scheduling another set of ↵ | Kamen Mazdrashki | 1 | -3/+7 | |
replications | |||||
2010-08-28 | s4-kcc: Assert when unexpected repsFromToBlob version is passed | Kamen Mazdrashki | 1 | -2/+4 | |
At present we only support v1 structures (Win2k3 and earlier), so it is good to make it obvious. In case we start supporting v2 we will be able to notice this function should be refactored right away | |||||
2010-08-27 | s4-dsdb: Fixed a compiler warning. | Nadezhda Ivanova | 1 | -1/+0 | |
2010-08-26 | s4:dsdb_module_find_dsheuristics - free the "DN" also on other exit cases | Matthias Dieter Wallnöfer | 1 | -0/+2 | |
2010-08-26 | s4-dsdb: Removed an unnecessary space in dsdb_module_find_dsheuristics() | Nadezhda Ivanova | 1 | -1/+1 | |
2010-08-26 | s4-dsdb: Added utility functions for retrieving dSHeuristics from the module ↵ | Nadezhda Ivanova | 1 | -0/+47 | |
stack Also a function to check dsHeuristics value to determine of anonymous access should be blocked | |||||
2010-08-25 | s4-repl: load RODC partitions using msDS-hasFullReplicaNCs | Andrew Tridgell | 2 | -4/+28 | |
we mark these as incoming_only Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-25 | s4-dsdb: make more of the UF_* flags available on pydsdb | Andrew Tridgell | 1 | -0/+28 | |
this really should be moved to IDL | |||||
2010-08-25 | s4-dsdb: add more DS flags to the dsdb module | Andrew Tridgell | 1 | -0/+15 | |
These are from libds/common/flags.h Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-25 | s4-dsdb: added get_attid_from_lDAPDisplayName() on samdb | Andrew Tridgell | 1 | -0/+46 | |
This can be used to form the partial_attribute_set list for GetNCChanges Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> |