summaryrefslogtreecommitdiff
path: root/source4/dsdb
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r20439: this should be const pointersStefan Metzmacher1-2/+2
metze (This used to be commit 1313b4774542fe5a0013d501225d5b4e8d585128)
2007-10-10r20437: add conversation function for OID'sStefan Metzmacher1-2/+94
metze (This used to be commit 76ae50389d9bd2e8fc58ec5914544a865b1b8969)
2007-10-10r20435: implement the syntax conversation functions for most of the ↵Stefan Metzmacher1-19/+460
attribute syntaxes metze (This used to be commit d704c3fca819b042cec50141d25dd2d6a8356418)
2007-10-10r20425: a w2k3 forest doesn't have objects with attribute valuesStefan Metzmacher1-0/+10
using the following attribute syntaxes by default: String(Numeric) String(Printable) String(Teletex) String(IA5) String(UTC-Time) String(Case Sensitive) Object(OR-Name) Object(Access-Point) Object(DN-String) metze (This used to be commit c10e1487708003d5a6c06b1547ce46ed4e4b0fe7)
2007-10-10r20420: create infrastructure to convert attribute values from drsuapi to ldbStefan Metzmacher3-0/+111
metze (This used to be commit 17c52ed27613051beecd5bbf72c6e6e749a21d27)
2007-10-10r20416: fix compiler warningsStefan Metzmacher1-2/+2
metze (This used to be commit bfb0c04dffdff62a6535aa31b888db636ac2f8d5)
2007-10-10r20415: add a function to get the lDAPDisplayName for an objectClassStefan Metzmacher1-0/+20
or attribute metze (This used to be commit 437db390795be8d6a375f2d44240b66d4406e148)
2007-10-10r20410: add functions to access dsdb_attributes and dsdb_classes by oid, ↵Stefan Metzmacher1-0/+110
uint32_id or ldap name they will be optimized uing binary searches later... metze (This used to be commit e6a24c2172009b0225fa189b7107217838d286d3)
2007-10-10r20409: load the attribute syntax for the attributeStefan Metzmacher1-0/+10
metze (This used to be commit d042aac3f72ab2022479bee48e49a0ab289315f5)
2007-10-10r20408: fix cut'n'paste errorStefan Metzmacher1-1/+1
metze (This used to be commit af78a86d2cf0f05a048c5dfd86ea21c92a9d75b0)
2007-10-10r20407: the oMObjectClass values are not padded to 10 bytes!Stefan Metzmacher1-14/+9
metze (This used to be commit f860dd2dca391edf55975d582dda0c1d01ddb6e3)
2007-10-10r20405: add an array with attribute syntexesStefan Metzmacher3-1/+194
metze (This used to be commit 1a21eb700003db1d7853c9be330b2583db9bff03)
2007-10-10r20398: Revert this patch, which caused failures in the samba3sam.js build ↵Andrew Bartlett1-12/+6
farm test. The interaction of the samldb.c module and this function is complex... Andrew Bartlett (This used to be commit bf7ab75875f722cc8499d24d455a94dd83b986ad)
2007-10-10r20395: Decode more unknowns in the IDL. These are language and codepage IDs!Andrew Bartlett1-0/+1
Try to pass more of the CrackNames test. Make the test quieter. Andrew Bartlett (This used to be commit a6bbfebf52f53f99b0edf52d3c23b72785b97469)
2007-10-10r20382: systemAuxiliaryClass and auxiliaryClass are also multivalued attributesStefan Metzmacher2-18/+18
metze (This used to be commit 5440c0a99fd8dced9020a47af4dbee74df504219)
2007-10-10r20379: - make sure the schema info blob is 21 bytes longStefan Metzmacher1-0/+64
- add a function to verify the incoming mapping and schema info metze (This used to be commit 5f0da4a3ae4eae8a6f14f813a65583cef78e73e4)
2007-10-10r20377: Rework the CrackNames implementation to handle some of the BUILTIN sidAndrew Bartlett2-32/+44
cases. Adjust our 'look for this value in this attribute, of the result' function samdb_find_attribute() to use the correct comparison function, no matter what that may be. Andrew Bartlett (This used to be commit 3c5ff4e68748cce0bb93d7d141083922d92c3845)
2007-10-10r20375: Work to improve our CrackNames implementation.Andrew Bartlett2-25/+144
We now correctly handle the canonical name as a CrackNames source, for more than just the DNS domain object. Andrew Bartlett (This used to be commit 629c72f0c27333cc9ede158e3525e8b03dd295d3)
2007-10-10r20331: the last entry in the oid mapping array which starts with 0xFFStefan Metzmacher2-4/+7
is the content of the schemaInfo attribute of the schema head object metze (This used to be commit bfb7756bb0f1bbd9a7a17c9689cf2ea351247116)
2007-10-10r20321: fix the samdb_partitions_dn() and samdb_sites_dn() calls,Stefan Metzmacher1-4/+18
to use the new samdb_config_dn() call. also add samdb_ wrappers for samdb_schema_dn() and samdb_config_dn() metze (This used to be commit 80b8a968243aadeef7512c03278dbb0d4e88a9f2)
2007-10-10r20315: Implement the server side of DsGetDomainControllerInfo. This is aAndrew Bartlett2-45/+81
supprisingly complex call... It turns out that the in/out parameter 'level' is not in/out, but set seperatly by the server-side code from r->req.req1.level. This commit also breaks out some common code from samldb into samdb. Andrew Bartlett (This used to be commit 2eb9e6445c64840399171f4f56b1e43786dbcfa7)
2007-10-10r20307: remove unused varsStefan Metzmacher1-4/+0
metze (This used to be commit 0352b7bbc659f3683355b793630fe44e9fd5b8cb)
2007-10-10r20306: remove the static oid mapping tableStefan Metzmacher3-119/+144
and attach the table to the dsdb_schema metze (This used to be commit df63995ec5f322d17145664c1f174783861e1723)
2007-10-10r20233: add functions to create a dsdb_attribute and dsdb_class fromStefan Metzmacher2-1/+264
a drsuapi_DsReplicaObject metze (This used to be commit 9168236ddd3d8ed9daa1e47be1e6b12d2bc348b6)
2007-10-10r20232: specify attribute name and structure element name always togetherStefan Metzmacher1-66/+81
there're a view elements where both values doesn't match LDAP-SCHEMA now successful loads the schema metze (This used to be commit 5d7827f45ec05acaca28c94fd6a5d25f148d011c)
2007-10-10r20231: - add more oid => uint32 id mappingsStefan Metzmacher1-1/+16
- handle the case where mappings for 1.2.3.4. and 1.2.3.4.5. prefixes exist - extend test suite for the mappings metze (This used to be commit 3af0a9b2c490ed1e4cd0af7faf814823bc60c264)
2007-10-10r20226: rename macros with a _LDB at the end, because I'll add macros with _DSStefan Metzmacher1-52/+52
soon metze (This used to be commit e5b67046c255c7dec07acf3ddc158278997502e3)
2007-10-10r20224: the struct element msDs_Schema_Extensions and the attribute name ↵Stefan Metzmacher1-5/+5
"msDs-Schema-Extensions" doesn't match so we need to pass 2 parameters to the GET_BLOB() macro metze (This used to be commit e50cf96fea1318853a8cfc0061afcad9cbad7e2c)
2007-10-10r20223: this function is in the torture test nowStefan Metzmacher1-54/+0
metze (This used to be commit 66c4b42f5f4c48e9c288781208ecdd4849c2f939)
2007-10-10r20221: - move the dsdb_schema, dsdb_attribute, dsdb_class structs intoStefan Metzmacher4-1/+406
a generic location - this struct should be also used by the dsdb/samdb/ldb_modules/schema.c module later - add functions to map from LDAP OID values to uint32_t values - add torture test for the OID => uint32 mapping code metze (This used to be commit 58ba6ec195ce3a5e2352866809f6cb57f8d8260a)
2007-10-10r20184: change ldb_attrib_handler into ldb_schema_attribute, which has a pointerStefan Metzmacher1-3/+3
to a ldb_schema_syntax struct. the default attribute handler is now registered dynamicly as "*" attribute, instead of having its own code path. ldb_schema_attribute's can be added to the ldb_schema given a ldb_schema_syntax struct or the syntax name we may also need to introduce a ldb_schema_matching_rule, and add a pointer to a default ldb_schema_matching_rule in the ldb_schema_syntax. metze (This used to be commit b97b8f5dcbce006f005e53ca79df3330e62f117b)
2007-10-10r20149: Remove the smb.conf distinction between PDC and BDC. Now the correctAndrew Bartlett1-24/+133
way to setup a Samba4 DC is to set 'server role = domain controller'. We use the fSMORoleOwner attribute in the base DN to determine the PDC. This patch is quite large, as I have corrected a number of places that assumed taht we are always the PDC, or that used the smb.conf lp_server_role() to determine that. Also included is a warning fix in the SAMR code, where the IDL has seperated a couple of types for group display enumeration. We also now use the ldb database to determine if we should run the global catalog service. In the near future, I will complete the DRSUAPI DsGetDomainControllerInfo server-side on the same basis. Andrew Bartlett (This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
2007-10-10r20034: Start using ldb_search_exp_fmt()Simo Sorce1-11/+6
(This used to be commit 4f07542143ddf5066f0360d965f26a8470504047)
2007-10-10r20028: fix typosStefan Metzmacher1-1/+1
metze (This used to be commit 72f5e0f7ee327933acf3148fbc72d31d7ad1b040)
2007-10-10r20027: restore instanceType and systemFlags values, which got lost inStefan Metzmacher1-0/+22
http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_4_0/source/dsdb/common/flags.h?p1=branches%2FSAMBA_4_0%2Fsource%2Finclude%2Fads.h&rev=17930&r1=15511&r2=17930 metze (This used to be commit 5da9dedece20ca21c0395fdcdffddff5948f7dc5)
2007-10-10r19869: fix memleaksSimo Sorce1-6/+3
(This used to be commit 3a662a2d985bf801284c5dc1123dec6705e6d092)
2007-10-10r19832: better prototypes for the linearization functions:Simo Sorce9-30/+28
- ldb_dn_get_linearized returns a const string - ldb_dn_alloc_linearized allocs astring with the linearized dn (This used to be commit 3929c086d5d0b3f08b1c4f2f3f9602c3f4a9a4bd)
2007-10-10r19831: Big ldb_dn optimization and interfaces enhancement patchSimo Sorce14-151/+149
This patch changes a lot of the code in ldb_dn.c, and also removes and add a number of manipulation functions around. The aim is to avoid validating a dn if not necessary as the validation code is necessarily slow. This is mainly to speed up internal operations where input is not user generated and so we can assume the DNs need no validation. The code is designed to keep the data as a string if possible. The code is not yet 100% perfect, but pass all the tests so far. A memleak is certainly present, I'll work on that next. Simo. (This used to be commit a580c871d3784602a9cce32d33419e63c8236e63)
2007-10-10r19757: Don't do the strrchr twice. Pointed out by Martin Kuhl.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit c4bf9cc09b36d8dcc465608b55bbf5dc07aed9e4)
2007-10-10r19732: The 'res' from ldb_search is only valid if the call returns LDB_SUCCESS.Andrew Bartlett1-3/+6
This seems to show up (as an abort() from talloc) particularly under ldb_ildap. Andrew Bartlett (This used to be commit 9890af534d845d471d2a98268c408a907b29e016)
2007-10-10r19731: Modify the ldb_map infrustructure to always map from requestedAndrew Bartlett1-5/+9
attributes to backend (remote) attributes. We can't do a reverse mapping safely where the remote attribute may be a source for multiple local attributes. (We end up with the wrong attributes returned). In doing this, I've modified the samba3sam.js test to be more realistic, and fixed some failures in the handling of primaryGroupID. I've added a new (private) helper function ldb_msg_remove_element() to avoid a double lookup of the element name. I've also re-formatted many of the function headers, to fit into standard editor widths. Andrew Bartlett (This used to be commit 186766e3095e71ba716c69e681592e217a3bc420)
2007-10-10r19726: when a client explicit asks for the 'netlogon' attriubute on LDAPStefan Metzmacher1-0/+9
the result entry is skipped! metze (This used to be commit 62aa73f3d56596780fc82fecbc99c688ecbf5b08)
2007-10-10r19604: This is a massive commit, and I appologise in advance for it's size.Andrew Bartlett1-8/+14
This merges Samba4 with lorikeet-heimdal, which itself has been tracking Heimdal CVS for the past couple of weeks. This is such a big change because Heimdal reorganised it's internal structures, with the mechglue merge, and because many of our 'wishes' have been granted: we now have DCE_STYLE GSSAPI, send_to_kdc hooks and many other features merged into the mainline code. We have adapted to upstream's choice of API in these cases. In gensec_gssapi and gensec_krb5, we either expect a valid PAC, or NO PAC. This matches windows behavour. We also have an option to require the PAC to be present (which allows us to automate the testing of this code). This also includes a restructure of how the kerberos dependencies are handled, due to the fallout of the merge. Andrew Bartlett (This used to be commit 4826f1735197c2a471d771495e6d4c1051b4c471)
2007-10-10r19598: Ahead of a merge to current lorikeet-heimdal:Andrew Bartlett1-2/+1
Break up auth/auth.h not to include the world. Add credentials_krb5.h with the kerberos dependent prototypes. Andrew Bartlett (This used to be commit 2b569c42e0fbb596ea82484d0e1cb22e193037b9)
2007-10-10r19531: Make struct ldb_dn opaque and local to ldb_dn.cSimo Sorce3-15/+15
(This used to be commit 889fb983ba1cf8a11424a8b3dc3a5ef76e780082)
2007-10-10r19522: Remove gensec and credentials dependency from the rootdse module (lessAndrew Bartlett1-20/+12
dependency loops). This moves the evaluation of the SASL mechansim list to display in the rootDSE to the ldap server. Andrew Bartlett (This used to be commit 379da475e224d93c05d91b37902c121eb4007d97)
2007-10-10r19507: Merge my DSO fixes branch. Building Samba's libraries as shared ↵Jelmer Vernooij1-1/+1
libraries works again now, by specifying --enable-dso to configure. (This used to be commit 7a01235067a4800b07b8919a6a475954bfb0b04c)
2007-10-10r19489: Change ldb_msg_add_value and ldb_msg_add_empty to take a foruth ↵Simo Sorce6-23/+21
argument. This is a pointer to an element pointer. If it is not null it will be filled with the pointer of the manipulated element. Will avoid double searches on the elements list in some cases. (This used to be commit 0fa5d4bc225b83e9f63ac6d75bffc4c08eb6b620)
2007-10-10r19464: Reject passwords that cannot be converted into UCS2.Andrew Bartlett1-1/+7
Andrew Bartlett (This used to be commit c843fce7a0e9b91c4d2de44e7a9ad9599b33ec5c)
2007-10-10r19441: work in progress support for NFS4 ACLs in Samba4 on Linux. Still workAndrew Tridgell1-0/+41
to do, particularly with getting the detailed bit mappings right, and on sid mapping. Does not pass RAW-ACLS yet (This used to be commit b92553481b534d0ef5277dbfe8c0d64a03f819eb)