Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-07-19 | [SAMBA 4] Some cosmetic changes for the LDB modules | Matthias Dieter Wallnöfer | 2 | -12/+12 | |
Some corrections which make the code a bit more readable (no functional changes here) | |||||
2009-07-16 | s4:dsdb Handle dc/domain/forest functional levels properly | Andrew Bartlett | 2 | -8/+139 | |
Rather than have the functional levels scattered in 4 different, unconnected locations, the provision script now sets it, and the rootdse module maintains it's copy only as a cached view onto the original values. We also use the functional level to determine if we should store AES Kerberos keys. Andrew Bartlett | |||||
2009-07-13 | libds: merge the UF<->ACB flag mapping functions. | Günther Deschner | 5 | -155/+10 | |
Guenther | |||||
2009-07-13 | libds: share UF_ flags between samba3 and 4. | Günther Deschner | 9 | -145/+8 | |
Guenther | |||||
2009-07-09 | s4:dsdb Allow unicodePwd to be set when adding a user | Andrew Bartlett | 1 | -85/+84 | |
Windows 7 sets it's join password using the unicodePwd attribute (as a quoted, utf16 string), and does so during the LDAPAdd of the object. Previously, this code only handled unicodePwd for modifies. Andrew Bartlett | |||||
2009-07-09 | Add const | Andrew Bartlett | 1 | -2/+2 | |
2009-07-08 | Fix for schemaUpdateNow command | Anatoliy Atanasov | 5 | -6/+14 | |
2009-07-05 | Fix some nonempty blank lines | Volker Lendecke | 1 | -78/+76 | |
2009-07-02 | we can't use the unique index code for samAccountName | Andrew Tridgell | 2 | -8/+75 | |
Using ldb unique indexes for samAccountName doesn't work with DRS as the other DC may send us a deleted record (tombstone record), which has the same samAccountName as an existing record. That would then create two records in the same partition with the same samAccountName. So we needed to put back the logic in samldb.c which explicitly checked whether a samAccountName already exists on add | |||||
2009-07-02 | decrypt all objects in a DRS record, not just the first one | Andrew Tridgell | 1 | -2/+5 | |
We found this as an object came across from w2k3 with zero values, which caused a segv when we tried to decrypt the first value | |||||
2009-07-02 | fixed the pull of drs schema elements | Andrew Tridgell | 3 | -33/+108 | |
The previous code incorrectly assumed that attributes such as subClassOf come over the wire as strings. In fact they come over as 32 bit integers which refer to goversIDs. We have to post-process these as it sometimes happens that a governsID comes over the wire before the record that defines what it means. | |||||
2009-07-01 | fixed the reference to the global_schema | Andrew Tridgell | 1 | -2/+3 | |
2009-06-30 | s4:ldb Allow rootdse module to build without ldb_private.h | Andrew Bartlett | 1 | -1/+2 | |
It seems quite reasonable to allow modules to re-initialise the set of cached DNs on the ldb context. Andrew Bartlett | |||||
2009-06-30 | s4: dsdb Avoid using the internal ldb_private.h header | Andrew Bartlett | 4 | -117/+120 | |
This job is not complete (the partition module remains a unfinished task), but now we do use the private ldb headers much less. Andrew Bartlett | |||||
2009-06-30 | s4:dsdb Explain the parsing steps for userPrincipalName cracknames calls | Andrew Bartlett | 1 | -0/+4 | |
2009-06-29 | Correct some typos in the LDB partition module | Matthias Dieter Wallnöfer | 1 | -5/+5 | |
2009-06-29 | SAMDB: Don't check for "sAMAccountName" twice | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
2009-06-29 | Enhancement of "simple ldap map" with "systemFlags" attribute | Matthias Dieter Wallnöfer | 1 | -0/+22 | |
Enhance the simple ldap map to support also the "systemFlags" attribute in the correct way. | |||||
2009-06-19 | Fixed some uninitialised variables | Matthias Dieter Wallnöfer | 1 | -8/+5 | |
I tried hard to not change the program logic. Should fix bug #6439. | |||||
2009-06-19 | Correct handling of 32-bit integer attributes in SAMBA 4 | Matthias Dieter Wallnöfer | 2 | -13/+28 | |
- LDB handles now all 32-bit integer attributes correctly (also with overflows) according to the schema - LDAP backends handle the attributes "groupType", "userAccountControl" and "sAMAccountType" correctly. This handling doesn't yet use the schema but the conversion file "simple_ldap.map.c" which contains them hardcoded. Did also a refactoring of the conversion function there. - Bug #6136 should be gone | |||||
2009-06-18 | dsdb: Fix build against system ldb. | Jelmer Vernooij | 3 | -3/+3 | |
2009-06-18 | Fix build with system LDB. | Jelmer Vernooij | 1 | -1/+1 | |
2009-06-12 | s4:heimdal: import lorikeet-heimdal-200906080040 (commit ↵ | Andrew Bartlett | 1 | -9/+9 | |
904d0124b46eed7a8ad6e5b73e892ff34b6865ba) Also including the supporting changes required to pass make test A number of heimdal functions and constants have changed since we last imported a tree (for the better, but inconvenient for us). Andrew Bartlett | |||||
2009-06-06 | Fix some nonempty blank lines | Volker Lendecke | 1 | -41/+37 | |
2009-06-02 | Fix more unresolved symbols. | Jelmer Vernooij | 2 | -10/+11 | |
2009-06-02 | Fix dependencies when using shared libraries. | Jelmer Vernooij | 1 | -1/+1 | |
2009-06-01 | we don't need the unique checks in the samldb code now | Andrew Tridgell | 1 | -162/+2 | |
These attributes now use the unique indexing flag | |||||
2009-06-01 | mark samAccountName, objectGUID and objectSID as unique indexed | Andrew Tridgell | 1 | -0/+20 | |
2009-05-28 | Merge branch 'master' of ssh://git.samba.org/data/git/samba | Andrew Tridgell | 2 | -2/+2 | |
2009-05-28 | enable one-level indexing in sam.ldb | Andrew Tridgell | 1 | -0/+5 | |
2009-05-26 | s4:ldb_modules: Correct typos. | Andrew Kroeger | 2 | -2/+2 | |
2009-05-25 | fixed interpretation of ACB_PWNOTREQ | Andrew Tridgell | 1 | -1/+6 | |
This bit actually means that we should ignore the minimum password length field for this user. It doesn't mean that the password should be seen as empty | |||||
2009-05-14 | dsdb:schema Use str_list_make_empty() to create an empty list | Andrew Bartlett | 1 | -5/+5 | |
2009-04-22 | s4:ldb: fix extrasemi compile warning | Björn Jacke | 1 | -1/+1 | |
2009-04-22 | s4:ldb: do talloc_free and return NULL when we have no matches to return | Björn Jacke | 1 | -0/+4 | |
2009-04-14 | Move DRSUAPI per-attribute decryption into a common file | Andrew Bartlett | 2 | -159/+4 | |
This file (contining metze's decryption routines) is now also be used by Samba3's DRSUAPI implementation Andrew Bartlett | |||||
2009-04-09 | make the memory usage of possibleInferiors much more efficient | Andrew Tridgell | 1 | -20/+31 | |
2009-04-09 | fixed the possibleInferiors calculation so it now passes the test | Andrew Tridgell | 2 | -27/+28 | |
We are probably still using more memory here than we need to. That needs to be looked at. | |||||
2009-04-09 | slightly nicer output in our possibleInferiors test code | Andrew Tridgell | 1 | -2/+2 | |
2009-04-09 | hook the new possibleInferiors calculation into the schema | Andrew Tridgell | 1 | -14/+77 | |
We now generate possibleInferiors at startup, and return it when requested | |||||
2009-04-08 | Make the schema_inferiors generation code to compile | Andrew Bartlett | 4 | -70/+101 | |
Sadly it still segfaults at this stage Andrew Bartlett | |||||
2009-04-07 | first cut at a C version of the possible inferiors code | Andrew Tridgell | 1 | -0/+172 | |
2009-04-03 | s4:schema Don't free mem_ctx before it is initilised | Andrew Bartlett | 1 | -1/+0 | |
2009-04-02 | major upgrade to the ldb attribute handling | Andrew Tridgell | 5 | -115/+325 | |
This is all working towards supporting the full WSPP schema without a major performance penalty. We now use binary searches when looking up classes and attributes. We also avoid the loop loading the attributes into ldb, by adding a hook to override the ldb attribute search function in a module. The attributes can thus be loaded once, and then saved as part of the global schema. Also added support for a few more key attribute syntaxes, as needed for the full schema. | |||||
2009-03-31 | possibleInferiors is a generated attribute - we can't pull it over DRS | Andrew Tridgell | 1 | -2/+0 | |
or from ldb | |||||
2009-03-31 | Merge branch 'master' into wspp-schema | Andrew Tridgell | 1 | -14/+49 | |
2009-03-31 | use the prepare_commit op in the partition code | Andrew Tridgell | 1 | -14/+49 | |
This makes multi-partition ldb's much safer | |||||
2009-03-31 | Merge branch 'master' into wspp-schema | Andrew Tridgell | 1 | -0/+246 | |
2009-03-27 | added a --wspp option | Andrew Tridgell | 1 | -4/+7 | |
Adding --wspp to possibleInferiors.py forces it to use the WSPP documented algorithm, which doesn't match windows behaviour | |||||
2009-03-26 | fixed possibleinferiors.py so it matches windows behaviour | Andrew Tridgell | 1 | -39/+127 | |
This test code builds the possibleInferiors for every class in the schema on a target machine, and compares it to the servers possibleInferiors attribute. The MS-ADTS spec describes how to calculate possibleInferiors for a object, but it seems to have some bugs. The spec says that we need to use AUXCLASSES, and it does not mention the use of the SUBCLASS tree. In trying to match windows behaviour, I found that I needed to ignore the AUXCLASSES and build a SUBCLASSES tree. |