summaryrefslogtreecommitdiff
path: root/source4/dsdb
AgeCommit message (Collapse)AuthorFilesLines
2011-11-02dsdb: Handle the case when extended rights string is NULLAmitay Isaacs1-4/+7
Pair-Programmed-With: Andrew Tridgell <tridge@samba.org> Signed-off-by: Andrew Tridgell <tridge@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Nov 2 07:03:40 CET 2011 on sn-devel-104
2011-11-02s4-drepl: Search for application partitions in addition to main onesAmitay Isaacs1-3/+16
To replicate application partitions (e.g. DNS partitions) consult msDs-hasMasterNCs attribute as well. Also, make sure we don't add same partition twice in the list. hasMasterNCs and msDs-hasMasterNCs have domain, configuration and schema partitions common. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-01s4-dsdb Remove LDAP backend credentials supportAndrew Bartlett1-51/+3
The error message from this causes confusion, for a feature that we have never finished and have agreed to remove. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 1 06:32:52 CET 2011 on sn-devel-104
2011-10-27s4:repl_meta_data LDB module - don't intercept the partition LDB module ↵Matthias Dieter Wallnöfer1-17/+18
referrals Reviewed-by: abartlet
2011-10-27s4:repl_meta_data LDB module - rename operation - do not overwrite error ↵Matthias Dieter Wallnöfer1-3/+1
messages "ldb_error" could overwrite possibly useful error messages. Reviewed-by: abartlet
2011-10-27s4:repl_meta_data LDB module - remove pointless debug messagesMatthias Dieter Wallnöfer1-4/+0
These are displayed when an object just doesn't exist! Reviewed-by: abartlet
2011-10-27s4:repl_meta_data LDB module - always return the original LDB result codes ↵Matthias Dieter Wallnöfer1-5/+12
on failure And add "ldb_operr()" before the "return ret" to point out the position where it failed (for "add_time_element" and "add_uint64_element") Reworked after a suggestion by abartlet.
2011-10-27s4:repl_meta_data LDB module - "dsdb_search_module_dn" already checks if ↵Matthias Dieter Wallnöfer1-4/+4
len(res) == 1 No need to perform an additional check here. As a return value we should always give back the original error code and not generate a new one (to let the caller know what is going on). Reviewed-by: abartlet
2011-10-27s4:ldap.py - fix up the dSHeuristics test to check for the right behaviourMatthias Dieter Wallnöfer1-15/+27
Reviewed-by: abartlet
2011-10-27s4:objectclass_attrs LDB module - implement the dSHeuristics length checks ↵Matthias Dieter Wallnöfer1-5/+37
correctly Consider bug #8489 Reviewed-by: abartlet
2011-10-27s4:ldap.py - we test the creation of secrets already in the "systemOnly" ↵Matthias Dieter Wallnöfer1-9/+0
testcase Reviewed-by: abartlet
2011-10-27s4:ldap.py - enhance and fix up the object class testMatthias Dieter Wallnöfer1-6/+95
Also address the problem described in bug #8486. Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - objectclass modify op. - remove superflous ↵Matthias Dieter Wallnöfer1-8/+4
"talloc_strdup" We are adding strings embedded in the schema structure which is basically global and lives longer than the request - hence no duplication needed. Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - objectclass modify operationsMatthias Dieter Wallnöfer1-95/+32
According to bug #8486 the modification to direct related structural object classes is possible (equal, child, parent). Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - forbid to add unrelated objectclassesMatthias Dieter Wallnöfer1-0/+61
E.g. unsatisfied abstract objectclasses, additional top-most structural classes Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - "objectclass_add" - small optimisationMatthias Dieter Wallnöfer1-4/+2
This saves us from doing one "ldb_msg_find_element". Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - "check_rodc_ntdsdsa_add"Matthias Dieter Wallnöfer1-1/+1
For convention use "ldb_attr_cmp()". Reviewed-by: abartlet
2011-10-27s4:objectclass LDB module - update copyrightMatthias Dieter Wallnöfer1-1/+1
Reviewed-by: abartlet
2011-10-27s4:password_hash LDB module - fix compiler warning due to unsatisfied "switch"Matthias Dieter Wallnöfer1-0/+3
Bail out on other LDB request types (only add and modify allowed).
2011-10-27s4:ldap.py - fix up the UTF8 testsMatthias Dieter Wallnöfer1-7/+8
Reviewed-by: abartlet
2011-10-27s4:ldap.py - reactivate some assertions in "test_all"Matthias Dieter Wallnöfer1-2/+2
There should always be one result on both s4 and Windows. Reviewed-by: abartlet
2011-10-20dsdb: improve debug messageAndrew Tridgell4-5/+4
show the reply type in "Invalid reply type" messages Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 20 00:57:05 CEST 2011 on sn-devel-104
2011-10-13s4-messaging: Pass the loadparm context, not just the messaging pathAndrew Bartlett2-2/+2
This will allow the TDB layer to get at the lp_ctx for tdb options. Andrew Bartlett
2011-10-12s3:utils change data_blob_dup_talloc() to take a DATA_BLOB by valueGregor Beck3-5/+5
Signed-off-by: Michael Adam <obnox@samba.org>
2011-10-09Remove pointless exception catching in tests.Jelmer Vernooij2-10/+4
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 9 00:00:26 CEST 2011 on sn-devel-104
2011-10-07s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher2-1/+41
Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
2011-10-07s4:dsdb: fix the order of DSDB_CONTROL_* defines in samdb.hStefan Metzmacher1-10/+10
This makes clear that struct dsdb_control_password_change belongs to DSDB_CONTROL_PASSWORD_CHANGE_OID. metze
2011-10-07s4-dsdb: special case for deleted objects one way linkAndrew Tridgell1-4/+17
we show wellknown links to the deleted objects container Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Oct 7 07:58:08 CEST 2011 on sn-devel-104
2011-10-07s4-dsdb: don't display links to deleted objectsAndrew Tridgell1-9/+42
unless the user asks for the display of deactivated links, we should not display DNs that link to deleted objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-07s4-dsdb: fixed one_way_link calculationAndrew Tridgell1-1/+2
we need to check for the other end of the link, not the current linkID Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-07s4-dsdb: fixed behaviour of show_deleted and show_recycled controlAndrew Tridgell1-38/+71
to correctly implement the show_deleted and show_recycled control we need to know if the recyclebin is enabled. When not enabled, the isRecycled attribute is ignored, and only isDeleted is used. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-07s4-dsdb: fixed the check_optional_feature() callAndrew Tridgell1-19/+24
the dsdb_check_optional_feature() call should look on our own NTDS DN for the enabled feature. This should work for all features, not just for forest wide fetaures. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: allow deletion of backlinks if DSDB_CONTROL_DBCHECK givenAndrew Tridgell2-1/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell2-0/+4
this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: allow groupType update on deleted objectsAndrew Tridgell1-1/+2
this allows dbcheck to fix groupType on objects that have been deleted Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-rodc: use the rodc_replica flag on the partitionAndrew Tridgell1-2/+2
this sets DSDB_REPL_FLAG_PARTIAL_REPLICA when replicating a RODC partition, which tells the replication code to map instanceType to remove the INSTANCE_TYPE_WRITE bit Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-rodc: ensure we load replicated partitions for RODCsAndrew Tridgell2-46/+35
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-06s4-dsdb: Do not assume that all deleted objects have an objectCategory and ↵Andrew Bartlett1-2/+2
sAMAccountType Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Oct 6 03:43:13 CEST 2011 on sn-devel-104
2011-10-06dsdb: Do not attempt to resolve conflicts on an RODCAndrew Bartlett1-2/+26
2011-10-06dsdb: fix double-free in replication failure case on RODCAndrew Bartlett1-1/+1
2011-10-06s4-dsdb Allow repl server to start even when no master NCs are presentAndrew Bartlett1-7/+1
2011-10-04s4-dsdb: fixed re-join of subdomainAndrew Tridgell1-3/+4
if we repeat the join of a subdomain then we try to re-create the NC for the subdomain during a DsAddEntry(). This allows that re-creation to succeed if the NC already exists
2011-10-04s4-dns: add all forest DCs to named.conf.updateAndrew Tridgell1-12/+54
this allows all DCs to update DNS entries
2011-10-04s4-kcc: if we are a GC, auto-add partial replicasAndrew Tridgell1-3/+147
when we are a global catalog server, the KCC needs to add partial replicas for all domain partitions that we don't have copies of
2011-10-04s4-dsdb: simplify samdb_is_gc()Andrew Tridgell1-28/+2
we already have a function for returning the NTDS options
2011-10-04s4-dsdb: add the DSDB_CONTROL_PARTIAL_REPLICA when neededAndrew Tridgell1-0/+9
when we are adding an object via DRS, we need to add the DSDB_CONTROL_PARTIAL_REPLICA control if we are replicating a partial replica, so ensure the partition module creates new NCs as partial replicas
2011-10-04s4-repl: try harder to find the right SPN in replication serverAndrew Tridgell1-23/+72
when doing DRS between domains, using the right SPN is essential so the KDC can generate referrals to point us at the right DC. We prefer the GC/hostname/DNSDOMAIN form if possible, but if we can't find the hostname then this changes the code that generates the target principal name to use either the msDS-HasDomainNCs or hasMasterNCs attributes to try to find the target DC domainname so we can use the E3514235-4B06-11D1-AB04-00C04FC2DCD2/GUID/DNSDOMAIN SPN form. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-04s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell6-60/+97
this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-04s4-dsdb: added DSDB_REPL_FLAG_ADD_NCNAME flagAndrew Tridgell1-0/+1
2011-10-04s4-dsdb: fixed formatting of a debug messageAndrew Tridgell1-1/+1
another missing newline
generated by cgit (git 2.34.1) at 2024-11-16 23:04:21 +0000