Age | Commit message (Collapse) | Author | Files | Lines |
|
better handle the Samba3 backend.
I've refactored the password format patch to use the routines in
lib/samba3/smbpasswd.c, which has required me to move this into a
seperate subsystem, due to recursive dependencies.
Andrew Bartlett
(This used to be commit 14e2c877a82d1fcf060455f9b46de5767b71438d)
|
|
the ldb_to_drsuapi version need to be completed, but it's
currently not used...
metze
(This used to be commit 9b31e8c1f73aaf71522e33174c8c5415a95ac626)
|
|
TODO: we need to implement linked attributes here,
and keep the guid and sid
metze
(This used to be commit 72d059e8ca5e0b4708e2a62688592813d0482c82)
|
|
metze
(This used to be commit 6383e56be88898bf533cc2476ab9e533b2cb0eec)
|
|
metze
(This used to be commit 44d09e37082a4584040d0acf36109f221a96b184)
|
|
metze
(This used to be commit 0ce5a3471a6a4e7dfc2eab1ae69964a8c5bb0aea)
|
|
metze
(This used to be commit 1313b4774542fe5a0013d501225d5b4e8d585128)
|
|
metze
(This used to be commit 76ae50389d9bd2e8fc58ec5914544a865b1b8969)
|
|
attribute syntaxes
metze
(This used to be commit d704c3fca819b042cec50141d25dd2d6a8356418)
|
|
using the following attribute syntaxes by default:
String(Numeric)
String(Printable)
String(Teletex)
String(IA5)
String(UTC-Time)
String(Case Sensitive)
Object(OR-Name)
Object(Access-Point)
Object(DN-String)
metze
(This used to be commit c10e1487708003d5a6c06b1547ce46ed4e4b0fe7)
|
|
metze
(This used to be commit 17c52ed27613051beecd5bbf72c6e6e749a21d27)
|
|
metze
(This used to be commit bfb0c04dffdff62a6535aa31b888db636ac2f8d5)
|
|
or attribute
metze
(This used to be commit 437db390795be8d6a375f2d44240b66d4406e148)
|
|
uint32_id or ldap name
they will be optimized uing binary searches later...
metze
(This used to be commit e6a24c2172009b0225fa189b7107217838d286d3)
|
|
metze
(This used to be commit d042aac3f72ab2022479bee48e49a0ab289315f5)
|
|
metze
(This used to be commit af78a86d2cf0f05a048c5dfd86ea21c92a9d75b0)
|
|
metze
(This used to be commit f860dd2dca391edf55975d582dda0c1d01ddb6e3)
|
|
metze
(This used to be commit 1a21eb700003db1d7853c9be330b2583db9bff03)
|
|
farm test.
The interaction of the samldb.c module and this function is complex...
Andrew Bartlett
(This used to be commit bf7ab75875f722cc8499d24d455a94dd83b986ad)
|
|
Try to pass more of the CrackNames test. Make the test quieter.
Andrew Bartlett
(This used to be commit a6bbfebf52f53f99b0edf52d3c23b72785b97469)
|
|
metze
(This used to be commit 5440c0a99fd8dced9020a47af4dbee74df504219)
|
|
- add a function to verify the incoming mapping and schema info
metze
(This used to be commit 5f0da4a3ae4eae8a6f14f813a65583cef78e73e4)
|
|
cases.
Adjust our 'look for this value in this attribute, of the result'
function samdb_find_attribute() to use the correct comparison
function, no matter what that may be.
Andrew Bartlett
(This used to be commit 3c5ff4e68748cce0bb93d7d141083922d92c3845)
|
|
We now correctly handle the canonical name as a CrackNames source, for
more than just the DNS domain object.
Andrew Bartlett
(This used to be commit 629c72f0c27333cc9ede158e3525e8b03dd295d3)
|
|
is the content of the schemaInfo attribute of the schema head object
metze
(This used to be commit bfb7756bb0f1bbd9a7a17c9689cf2ea351247116)
|
|
to use the new samdb_config_dn() call.
also add samdb_ wrappers for samdb_schema_dn() and samdb_config_dn()
metze
(This used to be commit 80b8a968243aadeef7512c03278dbb0d4e88a9f2)
|
|
supprisingly complex call...
It turns out that the in/out parameter 'level' is not in/out, but set
seperatly by the server-side code from r->req.req1.level.
This commit also breaks out some common code from samldb into samdb.
Andrew Bartlett
(This used to be commit 2eb9e6445c64840399171f4f56b1e43786dbcfa7)
|
|
metze
(This used to be commit 0352b7bbc659f3683355b793630fe44e9fd5b8cb)
|
|
and attach the table to the dsdb_schema
metze
(This used to be commit df63995ec5f322d17145664c1f174783861e1723)
|
|
a drsuapi_DsReplicaObject
metze
(This used to be commit 9168236ddd3d8ed9daa1e47be1e6b12d2bc348b6)
|
|
there're a view elements where both values doesn't match
LDAP-SCHEMA now successful loads the schema
metze
(This used to be commit 5d7827f45ec05acaca28c94fd6a5d25f148d011c)
|
|
- handle the case where mappings for 1.2.3.4. and 1.2.3.4.5. prefixes
exist
- extend test suite for the mappings
metze
(This used to be commit 3af0a9b2c490ed1e4cd0af7faf814823bc60c264)
|
|
soon
metze
(This used to be commit e5b67046c255c7dec07acf3ddc158278997502e3)
|
|
"msDs-Schema-Extensions"
doesn't match so we need to pass 2 parameters to the GET_BLOB() macro
metze
(This used to be commit e50cf96fea1318853a8cfc0061afcad9cbad7e2c)
|
|
metze
(This used to be commit 66c4b42f5f4c48e9c288781208ecdd4849c2f939)
|
|
a generic location
- this struct should be also used by the dsdb/samdb/ldb_modules/schema.c
module later
- add functions to map from LDAP OID values to uint32_t values
- add torture test for the OID => uint32 mapping code
metze
(This used to be commit 58ba6ec195ce3a5e2352866809f6cb57f8d8260a)
|
|
to a ldb_schema_syntax struct.
the default attribute handler is now registered dynamicly as "*"
attribute, instead of having its own code path.
ldb_schema_attribute's can be added to the ldb_schema given a
ldb_schema_syntax struct or the syntax name
we may also need to introduce a ldb_schema_matching_rule,
and add a pointer to a default ldb_schema_matching_rule
in the ldb_schema_syntax.
metze
(This used to be commit b97b8f5dcbce006f005e53ca79df3330e62f117b)
|
|
way to setup a Samba4 DC is to set 'server role = domain controller'.
We use the fSMORoleOwner attribute in the base DN to determine the PDC.
This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.
Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.
We also now use the ldb database to determine if we should run the
global catalog service.
In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.
Andrew Bartlett
(This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
|
|
(This used to be commit 4f07542143ddf5066f0360d965f26a8470504047)
|
|
metze
(This used to be commit 72f5e0f7ee327933acf3148fbc72d31d7ad1b040)
|
|
http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_4_0/source/dsdb/common/flags.h?p1=branches%2FSAMBA_4_0%2Fsource%2Finclude%2Fads.h&rev=17930&r1=15511&r2=17930
metze
(This used to be commit 5da9dedece20ca21c0395fdcdffddff5948f7dc5)
|
|
(This used to be commit 3a662a2d985bf801284c5dc1123dec6705e6d092)
|
|
- ldb_dn_get_linearized
returns a const string
- ldb_dn_alloc_linearized
allocs astring with the linearized dn
(This used to be commit 3929c086d5d0b3f08b1c4f2f3f9602c3f4a9a4bd)
|
|
This patch changes a lot of the code in ldb_dn.c, and also
removes and add a number of manipulation functions around.
The aim is to avoid validating a dn if not necessary as the
validation code is necessarily slow. This is mainly to speed up
internal operations where input is not user generated and so we
can assume the DNs need no validation. The code is designed to
keep the data as a string if possible.
The code is not yet 100% perfect, but pass all the tests so far.
A memleak is certainly present, I'll work on that next.
Simo.
(This used to be commit a580c871d3784602a9cce32d33419e63c8236e63)
|
|
Andrew Bartlett
(This used to be commit c4bf9cc09b36d8dcc465608b55bbf5dc07aed9e4)
|
|
This seems to show up (as an abort() from talloc) particularly under
ldb_ildap.
Andrew Bartlett
(This used to be commit 9890af534d845d471d2a98268c408a907b29e016)
|
|
attributes to backend (remote) attributes.
We can't do a reverse mapping safely where the remote attribute may be
a source for multiple local attributes. (We end up with the wrong
attributes returned).
In doing this, I've modified the samba3sam.js test to be more
realistic, and fixed some failures in the handling of primaryGroupID.
I've added a new (private) helper function ldb_msg_remove_element() to
avoid a double lookup of the element name.
I've also re-formatted many of the function headers, to fit into
standard editor widths.
Andrew Bartlett
(This used to be commit 186766e3095e71ba716c69e681592e217a3bc420)
|
|
the result entry is skipped!
metze
(This used to be commit 62aa73f3d56596780fc82fecbc99c688ecbf5b08)
|
|
This merges Samba4 with lorikeet-heimdal, which itself has been
tracking Heimdal CVS for the past couple of weeks.
This is such a big change because Heimdal reorganised it's internal
structures, with the mechglue merge, and because many of our 'wishes' have been granted: we now have DCE_STYLE GSSAPI, send_to_kdc hooks and many other features merged into the mainline code. We have adapted to upstream's choice of API in these cases.
In gensec_gssapi and gensec_krb5, we either expect a valid PAC, or NO
PAC. This matches windows behavour. We also have an option to
require the PAC to be present (which allows us to automate the testing
of this code).
This also includes a restructure of how the kerberos dependencies are
handled, due to the fallout of the merge.
Andrew Bartlett
(This used to be commit 4826f1735197c2a471d771495e6d4c1051b4c471)
|
|
Break up auth/auth.h not to include the world.
Add credentials_krb5.h with the kerberos dependent prototypes.
Andrew Bartlett
(This used to be commit 2b569c42e0fbb596ea82484d0e1cb22e193037b9)
|