summaryrefslogtreecommitdiff
path: root/source4/dsdb
AgeCommit message (Collapse)AuthorFilesLines
2011-03-10s4:extended_dn_store LDB module - use the new request as generic memory contextsMatthias Dieter Wallnöfer1-2/+2
To prevent memory leaks under valgrind.
2011-03-10s4:repl_meta_data LDB module - always ask manually for the current partition ↵Matthias Dieter Wallnöfer1-0/+46
control Otherwise the "partition" LDB module doesn't give it back anymore.
2011-03-10s4:partition LDB module - the current partition control should only be added ↵Matthias Dieter Wallnöfer1-6/+18
if requested That means if the informations before a request are unknown ("repl_meta_data" LDB module) then an empty control (no data) has to be sent.
2011-03-10s4:partition LDB module - extended operations - make the initialisation ↵Matthias Dieter Wallnöfer1-2/+4
check consistent To the other operations.
2011-03-10s4:partition LDB module - move the "data" check a bit higherMatthias Dieter Wallnöfer1-4/+5
It can be performed a bit earlier.
2011-03-10s4:partition LDB module - "partition_replicate" doesn't handle the search ↵Matthias Dieter Wallnöfer1-1/+1
requests That is done by "partition_search".
2011-03-10s4:partition LDB module - "partition_sequence_number" - remove meaningless "if"sMatthias Dieter Wallnöfer1-16/+12
These current partition controls are always added for the two EXOP operations.
2011-03-10s4:simple_ldap_map LDB module - enhance current partition control checksMatthias Dieter Wallnöfer1-3/+7
Don't stop the server if it hasn't been filled in correctly. An LDB error should be enough. Modified by request of tridge: errorcodes changed to ERR_PROTOCOL_ERROR
2011-03-10s4:repl_meta_data LDB module - don't remove the partition control twiceMatthias Dieter Wallnöfer1-2/+1
"controls" is already the controls list which has the partition control removed. It is generated by "ldb_controls_except_specified" in line 378.
2011-03-10s4:repl_meta_data LDB module - remove the current partition control unless ↵Matthias Dieter Wallnöfer1-2/+10
it was requested
2011-03-10s4:new_partition LDB module - splitting up an "if" operationMatthias Dieter Wallnöfer1-3/+3
- let the first "if" in place - uninstantiated partitions are handled by the second "if" (previously they have been handled twice) Has been corrected by request of tridge.
2011-03-10s4:instancetype LDB module - perform here only the "instanceType" constraint ↵Matthias Dieter Wallnöfer1-78/+16
checks The boilerplate entries (when this support has been implemented) should be provided by the "new_partition" LDB module. These are for example the deleted object and lost and found container.
2011-03-10s4:instancetype LDB module - don't impede control requestsMatthias Dieter Wallnöfer1-0/+7
2011-03-10s4:instancetype LDB module - use "ldb" pointer for referencing the LDB contextMatthias Dieter Wallnöfer1-1/+1
2011-03-10s4:partition LDB module - fill in parent requests for inheriting the flagsMatthias Dieter Wallnöfer1-3/+3
Probably it doesn't matter in this cases but just for consistency.
2011-03-10s4:partition LDB module - add some commentsMatthias Dieter Wallnöfer1-1/+4
2011-03-10s4:new_partition LDB module - fix commentsMatthias Dieter Wallnöfer1-3/+3
2011-03-10s4:partition_init LDB module - fix a typoMatthias Dieter Wallnöfer1-1/+1
2011-03-10s4:partition LDB module - fix typoMatthias Dieter Wallnöfer1-1/+1
2011-03-04s4:operational LDB module - fix attribute names to be right up/down-casedMatthias Dieter Wallnöfer2-10/+10
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Mar 4 23:56:07 CET 2011 on sn-devel-104
2011-03-04s4:ldap.py - rootdse tests should search for the rootDSE not the default DNMatthias Dieter Wallnöfer1-1/+1
Reviewed by: Tridge
2011-03-04s4:ldap.py - add a test in order to show the operational module fixedMatthias Dieter Wallnöfer1-0/+14
Reviewed by: Tridge
2011-03-04s4:operational LDB module - fix display of some constructed attributesMatthias Dieter Wallnöfer1-2/+2
"structuralObjectClass", "createTimestamp" and "modifyTimestamp" weren't displayed anymore. Reviewed by: Tridge
2011-03-04s4:operational LDB module - add "groupToken" as unsigned int (uint32_t)Matthias Dieter Wallnöfer1-1/+1
Reviewed by: Tridge
2011-03-04s4:operational LDB module - readd "structuralObjectClass" -> "objectClass" ↵Matthias Dieter Wallnöfer1-1/+1
mapping This has been removed accidentally by commit a093e10896a4768dba0cd793a04b7d5d1366fee2. Reviewed by: Tridge
2011-03-04s4:ldap.py - other important RDN check testcasesMatthias Dieter Wallnöfer1-0/+67
Reviewed by: Tridge
2011-03-04s4:ldap.py - remove a debug outputMatthias Dieter Wallnöfer1-1/+0
This has only been needed for developing this testcase and has been forgotten to be removed afterwards. Reviewed by: Tridge
2011-03-04s4/ldb - remove now superflous "ldb_dn_validate" checksMatthias Dieter Wallnöfer3-4/+4
If we immediately afterwards perform an LDB base operation then we don't need an explicit "ldb_dn_validate" check anymore (only OOM makes sense). Reviewed by: Tridge
2011-03-04s4:dsdb - we don't need to check if a DN != NULL if we call "ldb_dn_validate"Matthias Dieter Wallnöfer1-1/+1
"ldb_dn_validate" is NULL-safe and does the check implicitly. Reviewed by: Tridge
2011-03-04Revert "s4:objectclass LDB module - if we cannot find DN's parent then the ↵Matthias Dieter Wallnöfer1-3/+1
DN itself is invalid" This is not needed anymore with the new DN checking. This reverts commit 5896b7299331aedd065397d2078c62d85bcf68f6. Reviewed by: Tridge
2011-03-04s4:objectclass LDB module - fix a commentMatthias Dieter Wallnöfer1-1/+1
Reviewed by: Tridge
2011-03-04s4:waf-build fix disable-shared build for smbtortureChristian Ambach1-1/+1
building smbtorture4 with configure --disable-shared failed with an error that ldb.h could not be found Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Reviewed by: Tridge
2011-03-04s4:objectclass LDB module - if we cannot find DN's parent then the DN itself ↵Matthias Dieter Wallnöfer1-1/+3
is invalid ERR_INVALID_DN_SYNTAX fits better than ERR_OPERATION_ERROR in this case. This one gets triggered if we perform "add" requests without the LDAP server. Reviewed by: Tridge
2011-03-02s4-dsdb: Ensure we permit multi-valued backlinks on single-valued attributesAndrew Bartlett1-0/+7
This was already done in repl_meta_data, but it needs to be done here as well to cope with Windows 2000 level links. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Mar 2 02:03:58 CET 2011 on sn-devel-104
2011-03-01s4:dsdb - always handle the attribute "options" as 32bit unsigned integerMatthias Dieter Wallnöfer3-21/+23
It is defined as LDAP syntax 2.5.5.9 so no need at all to treat it as 64-bit integer. Reviewed by: Kamenim and Metze Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Mar 1 12:46:15 CET 2011 on sn-devel-104
2011-03-01s4:dsdb/common/util.c - remove "samdb_find_or_add_value"Matthias Dieter Wallnöfer1-8/+0
This isn't used anymore. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-03-01s4:dsdb/common/util.c - fully remove "samdb_msg_add_string"Matthias Dieter Wallnöfer1-18/+3
This isn't needed anymore and will be substituted by "ldb_msg_add_string". Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-03-01s4:remove many invocations of "samdb_msg_add_string"Matthias Dieter Wallnöfer3-12/+10
This call can be substituted by "ldb_msg_add_string". We only need to be careful on local objects or talloc'ed ones which live shorter than the message. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-03-01s4-repl/working_schema: Ignore some attributes when bulding working schema cacheKamen Mazdrashki1-0/+9
We don't need all object attributes resolved and converted for a working schema to be functional.
2011-03-01s4-replicated_objects: Implement a mechanism to relax some attributes conversionKamen Mazdrashki1-4/+31
during replicated object convert stage. The problem is that we may have loops in schema graph and we can't resolve those loops in just one pass. Ignoring some attributes conversion will allow us to have a functional schema cache that we can use later to resolve all attribute OIDs on another pass
2011-02-28Fix some typesJelmer Vernooij5-13/+13
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 28 23:30:06 CET 2011 on sn-devel-104
2011-02-27s4/dsdb-util: Use DS_NTDSDSA_OPT_IS_GC flag definitionKamen Mazdrashki1-1/+1
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Sun Feb 27 00:10:45 CET 2011 on sn-devel-104
2011-02-27s4-drepl: Schedule event to trigger replication rather than calling ↵Kamen Mazdrashki1-2/+5
run_pending_ops directly Executing dreplsrv_run_pending_ops() directly may cause a segfault as in case of failure, the _drepl_replica_sync_done_cb() callback gets called *before* drepl_replica_sync() returns. In such case, irpc message gets freed twice - once when irpc_send_reply() gets called and once when drepl_replica_sync() returns
2011-02-27s4-drepl: Fix replica sync callback to really store last error rather than ↵Kamen Mazdrashki1-1/+1
last success
2011-02-27s4-drepl: Refactor dreplsrv_run_pull_ops() toKamen Mazdrashki1-16/+33
1. Take into account DSA options - we should not send replication requests in case OUTBOUND_REPLICATION is disabled 2. Use replication flags for the operation to determine if a forced replication is requested 3. In case outbound replication is disabled and we don't have DRSUAPI_DRS_SYNC_FORCED flag set, then we should record WERR_DS_DRA_SINK_DISABLED error as a last replication result
2011-02-27s4-drepl: Pass replication options from DsReplicaSync callKamen Mazdrashki4-5/+12
2011-02-24build: moved libds/common/flag_mapping.c into a common subsystemAndrew Tridgell4-2/+6
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-22s4-descriptor: Fixed a typo in a comment and clarified it a bit.Nadezhda Ivanova1-2/+2
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Tue Feb 22 12:39:23 CET 2011 on sn-devel-104
2011-02-22s4-descriptor: Fixed some missing curly braces.Nadezhda Ivanova1-10/+13
2011-02-22s4-auth Move libcli/security/session.c to the top levelAndrew Bartlett5-6/+4
This code is now useful in common, as the elements of the auth_session_info structure have now been defined in common IDL. Andrew Bartlett