| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2010-10-27 | s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to ↵ | Nadezhda Ivanova | 1 | -1/+0 | |
| determine the source of the request The aclread module used to use a control to make sure the request comes from the ldap server, but now the rootdse filters out any unregistered controls comming from ldap, so the control is lost. Using the LDB_HANDLE_FLAG_UNTRUSTED is a much more elegant solution. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Wed Oct 27 11:55:11 UTC 2010 on sn-devel-104 | |||||
| 2010-10-26 | waf: Stop automaticaly changing dashes to underscores in library names. | Jelmer Vernooij | 1 | -1/+1 | |
| 2010-10-26 | waf: Remove lib prefix from libraries manually. | Jelmer Vernooij | 1 | -1/+1 | |
| 2010-10-24 | s4: Rename LIBCLI_LDAP to libcli_ldap. | Jelmer Vernooij | 1 | -1/+1 | |
| 2010-10-24 | s4: Rename LIBSAMBA-* to libsamba-* | Jelmer Vernooij | 1 | -1/+1 | |
| 2010-10-19 | s4-ldap: mark all ldap:// requests as untrusted | Andrew Tridgell | 1 | -0/+21 | |
| this allows the rootdse module to filter unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
| 2010-10-18 | s4:ldap_server - use error code constant | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Oct 18 20:32:40 UTC 2010 on sn-devel-104 | |||||
| 2010-10-11 | ldap_server: Add missing dependency on gensec_server_start. | Jelmer Vernooij | 1 | -1/+1 | |
| 2010-10-10 | samdb: Add flags argument to samdb_connect(). | Jelmer Vernooij | 2 | -4/+2 | |
| 2010-10-08 | s4:ldap_server: rewrite to socket layer to use tstream | Stefan Metzmacher | 4 | -305/+690 | |
| This should make our sasl and tls handling much more robust against partial sent pdus. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 8 11:55:26 UTC 2010 on sn-devel-104 | |||||
| 2010-10-07 | Revert "s4:ldap_server: rewrite to socket layer to use tstream" | Stefan Metzmacher | 4 | -694/+305 | |
| This reverts commit b53fbc75acc525f2e2450370e704a62791271788. There are problems with problems with broken gnutls versions. We can readd this once we have the needed configure checks to detect the bug in gnutls. See https://bugzilla.samba.org/show_bug.cgi?id=7218. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Oct 7 10:31:18 UTC 2010 on sn-devel-104 | |||||
| 2010-10-04 | s4:ldap_server: rewrite to socket layer to use tstream | Stefan Metzmacher | 4 | -308/+697 | |
| This should make our sasl and tls handling much more robust against partial sent pdus. metze | |||||
| 2010-09-26 | s4-ldap: Added a control to apply the access checks on read via LDAP | Nadezhda Ivanova | 1 | -0/+1 | |
| 2010-09-07 | s4-ldapserver: serialise ldap server operations | Andrew Tridgell | 2 | -0/+60 | |
| This ensures that two ldap server operations cannot happen in parallel by using packet_recv_disable() and packet_recv_enable() to disable other interfaces during ldap calls. This prevents problems caused by parallel ldap operations where transactions could overlap. | |||||
| 2010-08-18 | s4:ldap_server use talloc_unlink() to avoid talloc_free() with references | Andrew Bartlett | 1 | -4/+4 | |
| Both the session_info and the ldb can have references. Andrew Bartlett | |||||
| 2010-08-17 | s4-ldapserver: support controls on ldap add and rename | Andrew Tridgell | 1 | -10/+12 | |
| we need to pass the controls down to the add and rename ldb operations Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
| 2010-08-15 | s4:ldap_backend.c - Windows returns WERROR codes in majuscule HEX format | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| 2010-08-15 | s4:ldap_backend.c - map error codes - add a change which allows custom ↵ | Matthias Dieter Wallnöfer | 1 | -0/+13 | |
| WERROR codes This is strictly needed by my recent passwords work, since I want to remove most of the password change stuff in "samr_password.c". Since AD gives us CONSTRAINT_VIOLATION on all change problems I cannot distinguish on the SAMR level which the real cause was about. Therefore I need the extended WERROR codes here. | |||||
| 2010-08-14 | s4:ldap_backend.c - fix a DS error code after WERROR change | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| 2010-07-16 | s4-loadparm: 2nd half of lp_ to lpcfg_ conversion | Andrew Tridgell | 2 | -15/+15 | |
| this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
| 2010-07-02 | s4-dsdb: fixed use after free of sasl mechanisms opaque | Andrew Tridgell | 1 | -0/+6 | |
| the supportedSASLMechanisms opaque must live for at least as long as the ldb, or we can crash when the first connection is torn down Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
| 2010-07-02 | s4-dsdb: fixed spelling of supportedSASLMechanisms | Andrew Tridgell | 1 | -1/+1 | |
| Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
| 2010-06-28 | s4:ldap_server: don't start if we can't bind to port 389 | Stefan Metzmacher | 1 | -1/+4 | |
| metze | |||||
| 2010-06-20 | s4:ldap_backend.c - now also the LDAP server supports controls on delete ↵ | Matthias Dieter Wallnöfer | 1 | -5/+7 | |
| operations | |||||
| 2010-06-20 | s4:ldap_backend.c - move function "ldb_mod_req_with_controls" to a better ↵ | Matthias Dieter Wallnöfer | 1 | -51/+52 | |
| place in the code Under the "add" and over the "delete" function. | |||||
| 2010-06-20 | s4:ldap_backend.c - add some newlines to make logs easier to read | Matthias Dieter Wallnöfer | 1 | -5/+5 | |
| 2010-06-19 | s4:ldap_backend.c - more customisations to match Windows Server error ↵ | Matthias Dieter Wallnöfer | 1 | -13/+16 | |
| behaviour on renames | |||||
| 2010-06-18 | s4:ldap_backend.c - fix crash bugs when we got in error situations with ↵ | Matthias Dieter Wallnöfer | 1 | -5/+4 | |
| "res" still set to "NULL" | |||||
| 2010-06-18 | s4:ldap_backend.c - fix a small error (use "ModifyResponse" rather than ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| "AddResponse") | |||||
| 2010-06-16 | s4:lib: merge LDB_WRAP and LDBSAMBA and make LDBSAMBA a library. | Stefan Metzmacher | 1 | -1/+1 | |
| This is needed to remove samba specifc symbols from the bundled ldb, in order to get the ABI right. metze Signed-off-by: Andreas Schneider <asn@samba.org> | |||||
| 2010-06-06 | s4:ldap_server/ldap_backend.c - send back also the extended error message if ↵ | Matthias Dieter Wallnöfer | 1 | -18/+39 | |
| it exists This message often contains suggestions how to fix issues. | |||||
| 2010-05-21 | s4:libcli/ldap Rename ldap.h to libcli_ldap.h | Andrew Bartlett | 5 | -5/+1 | |
| It is a problem if a samba header is called ldap.h if we also want to use OpenLDAP's ldap.h Andrew Bartlett | |||||
| 2010-05-04 | s4/rodc: Support read-only database | Anatoliy Atanasov | 1 | -20/+174 | |
| Check on modify if we are RODC and return referral. On the ldap backend side now we pass context and ldb_modify_default_callback to propagate the referral error to the client. | |||||
| 2010-04-11 | s4:auth Remove event context from anonymous_session() | Andrew Bartlett | 1 | -1/+1 | |
| This should always return a simple structure with no need to consult a DB, so remove the event context, and simplfy to call helper functions that don't look at privilages. Andrew Bartlett | |||||
| 2010-04-06 | s4-waf: removed the AUTOGENERATED markers | Andrew Tridgell | 1 | -3/+0 | |
| we won't be using the mk -> wscript generator again | |||||
| 2010-04-06 | s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵ | Andrew Tridgell | 1 | -0/+2 | |
| them | |||||
| 2010-04-06 | build: commit all the waf build files in the tree | Andrew Tridgell | 1 | -0/+12 | |
| 2010-02-25 | s4:ldap_server - make it "signed-safe" | Matthias Dieter Wallnöfer | 3 | -7/+8 | |
| Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
| 2010-02-25 | s4:LDAP server - Enable support for returning referrals through it | Matthias Dieter Wallnöfer | 1 | -0/+22 | |
| This is needed for my work regarding the referrals when the domain scope control isn't specified. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
| 2009-12-18 | Added freeing a successful req so it doesnt croud the ldb context | Nadezhda Ivanova | 1 | -2/+4 | |
| 2009-12-15 | Removed ldb_modify_ctrl from ldb, implemented as a static in ldap_backend. | Nadezhda Ivanova | 1 | -1/+43 | |
| 2009-11-20 | Some changes to allow processing of ldap controls on modify requests. | Nadezhda Ivanova | 1 | -1/+1 | |
| ldap_backend used to filter out ldap controls on modify. Also, modified python binding for ldap_modify to allow writing tests for such controls. | |||||
| 2009-10-25 | s4-samdb: reduce the number of samdb opens at startup | Andrew Tridgell | 1 | -4/+2 | |
| Using common parameters means that the ldb_wrap code can return a reference rather than a new database | |||||
| 2009-10-23 | s4-ldbwrap: added re-use of ldb contexts in ldb_wrap_connect() | Andrew Tridgell | 1 | -1/+1 | |
| This allows us to reuse a ldb context if it is open twice, instead of going through the expensive process of a full ldb open. We can reuse it if all of the parameters are the same. The change relies on callers using talloc_unlink() or free of a parent to close a ldb context. | |||||
| 2009-10-23 | s4-dsdb: add a static samdb_credentials | Andrew Tridgell | 1 | -2/+2 | |
| Similarly to system_session(), this creates a static samdb_credentials() | |||||
| 2009-10-23 | s4-dsdb: create a static system_session context | Andrew Tridgell | 1 | -1/+1 | |
| This patch adds a system_session cache, preventing us from having to recreate it on every ldb open, and allowing us to detect when the same session is being used in ldb_wrap | |||||
| 2009-10-08 | s4:ldap server - remove unused error handlings | Matthias Dieter Wallnöfer | 1 | -35/+0 | |
| Those error cases should be handled by LDB itself to be available on all connection methods and not only over LDAP. | |||||
| 2009-10-02 | s4:LDB/LDAP - Re-allow renames | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| The main problem is that the "rdn_name" module launches on a rename request also a modification one with the "special attributes" which can't be changed directly. An introduced flag helps to bypass the restriction. | |||||
| 2009-10-02 | s4:ldap_server Ensure we don't segfault when sent a NULL new RDN | Andrew Bartlett | 1 | -4/+7 | |
| The Microsoft testsuite tried to rename cn=administrator,cn=users,... into "",cn=users... which didn't go so well. Andrew Bartlett | |||||
| 2009-09-28 | s4-ldap: fixed spelling | Andrew Tridgell | 1 | -1/+1 | |
 |
index : samba | |
| Unnamed repository; edit this file 'description' to name the repository. | ben |
| summaryrefslogtreecommitdiff |