Age | Commit message (Collapse) | Author | Files | Lines |
|
The core ldb code for string matching assumed NULL terminated strings,
whereas the anr module used data_blob_const() to effectively truncate
a ldb_val by changing its length. The ldb code is supposed to be based
around length limited blobs, not NULL terminated strings, so the
correct fix was to change the string comparison functions to be length
limited
(This used to be commit 26c6aa5a80ffaf06fc33f30a6533f8f16ef538bc)
|
|
metze
(This used to be commit 0aa6d63ec571b0ca05fbfe14d2b4e9ba3e1082e9)
|
|
LDB does not know about nor process the AD schema, so it makes no
sense to have this tool there. I've been changing it anyway, to use a
common schema manipulation library, and will enhance these links in
the future.
Andrew Bartlett
(This used to be commit c7704805b9a3541e4c8768278c8289b0aa6ed5e3)
|
|
MS-ADTS 3.1.1.3.1.1.5 describes the behaviour of auxiliary classes.
In effect, these are additional MUST or MAY attributes that are
appeneded to the parent class (the auxiliary does not become listed in
the objectClass attribute), and so we do just that, and merge them
here, for export to OpenLDAP as it's schema.
Andrew Bartlett
(This used to be commit d674e92591ea90eb3b2117d8dd21f79f718d7730)
|
|
(This used to be commit a422c6c5ff47f36ef3376f54e707561c6a53ac23)
|
|
(This used to be commit 3b8eec7ca334528cad3cdcd5e3fc5ee555d8d0e0)
|
|
This commit broke the build, because not all files (libreplace, popt)
were updated.
Andrew Bartlett
(This used to be commit 3faacf4351d68a10aea78b53768571d2059772ae)
|
|
(This used to be commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6c)
|
|
(This used to be commit 48bfce0ea51b952baef5bfa667405e8742e5016f)
|
|
(This used to be commit 5f36a605a9accfba1125bbae0e79bb14b936173c)
|
|
(This used to be commit 5628d58990144463fd87f8c847c9384ac2193681)
|
|
(This used to be commit 36da52abf5be79e37bd495ec4265e01b27aa9da5)
|
|
(This used to be commit 1dd6bea507f1f5e26cccf89148280721260a4673)
|
|
(This used to be commit 92c1c0e9137f0845cac6cc96bf78711b6aaffe21)
|
|
referrals.
Andrew Bartlett
(This used to be commit 8099facff99dab4de27ea6f857d0e8f5eaa3db5a)
|
|
Andrew Bartlett
(This used to be commit c72c39326b263b3aacd178ddc2fc3b1a2906f3d3)
|
|
Andrew Bartlett
(This used to be commit 002ddc315fc03ea22083d9d8c87401073688fd29)
|
|
(This used to be commit e1d177c8c1101965479f7ade2270490cd6fae4f2)
|
|
(This used to be commit 5d589a0d94bd76a9b4c9fc748854e8098ea43c4d)
|
|
(This used to be commit 38fa08310ce573e9b46e76c840ddda6f18863573)
|
|
(This used to be commit 7280c1e9415daabb2712db1372e23f9846272ede)
|
|
up the call stack.
(This used to be commit ba75f1613a9aac69dd5df94dd8a2b37820acd166)
|
|
(This used to be commit 6cbce47a3eaef76a89db7cd0ab0d4f6441fc720d)
|
|
(This used to be commit 56dfcb4f2f8e74c9d8b2fe3a0df043781188a555)
|
|
(This used to be commit d41ed7ca8d3954bf586126edd7aba17acc6af8a1)
|
|
(This used to be commit 5e814287ba475e12f8cc934fdd09b199dcdfdb86)
|
|
(This used to be commit fd697d77c9fe67a00939a1f04b35c451316fff58)
|
|
works again.
(This used to be commit bcf5c9447435a826027626ac89a00eaa6739b12a)
|
|
means using the ldb library from the system - the custom command-line tools for Samba 4 will still be built even if they are already provided by the system.
(This used to be commit 8aab673df5200a4555777caf4ee58907cf6fe4cc)
|
|
(This used to be commit 917bd737cb07817664d9088860588d47525f5ff8)
|
|
number in more places.
(This used to be commit df9cebcb97e20564359097148665bd519f31bc6f)
|
|
(This used to be commit abe8349f9b4387961ff3665d8c589d61cd2edf31)
|
|
security mechanisms at the moment. I'll put this back when I
implement the functionality.
Andrew Bartlett
(This used to be commit 9a38ddc86fe8c68520622678eae81e4e90f427cf)
|
|
(This used to be commit 40c0919aaa9c1b14bbaebb95ecce53eb0380fdbb)
|
|
(This used to be commit 84b468b2f8f2dffda89593f816e8bc6a8b6d42ac)
|
|
OpenLDAP or Fedora DS backend.
This required a new mkdir() call in ejs.
We can now provision just the schema for ad2oLschema to operate on
(with provision_schema(), without performing the whole provision, just
to wipe it again (adjustments to 'make test' to come soon).
Andrew Bartlett
(This used to be commit 01d54d13dc66ef2127ac52c64ede53d0790738ec)
|
|
(This used to be commit 582e743e68a1dbfafe06e7e283ff998140149ae7)
|
|
(This used to be commit 532f28724dcc9e0fe7051e27d145469398041101)
|
|
(This used to be commit 1093875d59f1ea9b8bd82277d4f9d8366e584952)
|
|
Andrew Bartlett
(This used to be commit ddcca38c65c12a4e6a49151296ab36a458c53cb6)
|
|
OpenLDAP is fussy about operational attributes in user-supplied
schema.
Andrew Bartlett
(This used to be commit d7cd4b768a7f56ced8ed94b9a63d01865ba7d10a)
|
|
that contain attribute names and objectClasses. Make it a case
insensitive string for now.
Andrew Bartlett
(This used to be commit 9908a05ef70c748c699b5a18178e7948f7814d7a)
|
|
Andrew Bartlett
(This used to be commit e1536014a05645fd2300de5152e966aa1e067436)
|
|
'phantom_root' flag in the search_options control
- Add in support for LDB controls to the js layer
- Test the behaviour
- Implement support for the 'phantom_root' flag in the partitions module
- Make the LDAP server set the 'phantom_root' flag in the search_options control
- This replaces the global_catalog flag passed down as an opaque pointer
- Rework the string-format control parsing function into
ldb_parse_control_strings(), returning errors by ldb_errorstring()
method, rather than with printf to stderr
- Rework some of the ldb_control handling logic
Andrew Bartlett
(This used to be commit 2b3df7f38d7790358dbb4de1b8609bf794a351fb)
|
|
(This used to be commit c0276c373c51696b5168cdd1b048e1b9858baf62)
|
|
(This used to be commit 4f07542143ddf5066f0360d965f26a8470504047)
|
|
(This used to be commit 44e6d39e0ef17ed5a801f95edaa6fbf5efa21a26)
|
|
- ldb_dn_get_linearized
returns a const string
- ldb_dn_alloc_linearized
allocs astring with the linearized dn
(This used to be commit 3929c086d5d0b3f08b1c4f2f3f9602c3f4a9a4bd)
|
|
This patch changes a lot of the code in ldb_dn.c, and also
removes and add a number of manipulation functions around.
The aim is to avoid validating a dn if not necessary as the
validation code is necessarily slow. This is mainly to speed up
internal operations where input is not user generated and so we
can assume the DNs need no validation. The code is designed to
keep the data as a string if possible.
The code is not yet 100% perfect, but pass all the tests so far.
A memleak is certainly present, I'll work on that next.
Simo.
(This used to be commit a580c871d3784602a9cce32d33419e63c8236e63)
|
|
Break up auth/auth.h not to include the world.
Add credentials_krb5.h with the kerberos dependent prototypes.
Andrew Bartlett
(This used to be commit 2b569c42e0fbb596ea82484d0e1cb22e193037b9)
|