summaryrefslogtreecommitdiff
path: root/source4/lib/ldb
AgeCommit message (Collapse)AuthorFilesLines
2010-01-21s4: Fix a few warnings.Jelmer Vernooij1-0/+2
2010-01-17ldap: Fix test failure that seemed to go unreported previously.Jelmer Vernooij1-2/+1
2010-01-17ldap.py: Remove unused imports.Jelmer Vernooij1-18/+4
2010-01-16Import testtools as well, required for subunit.Jelmer Vernooij4-8/+4
2010-01-16s4-ldb: cope with bad ptr alignment in ldb_index.cAndrew Tridgell1-3/+3
We can't assume that a rec_ptr will come back from a tdb traverse with alignment sufficient for a pointer.
2010-01-13s4:ldb/tests: do a "schemaUpdateNow" after creating a new attribute in ↵Stefan Metzmacher1-0/+10
ldap_schema.py It seems that windows doesn't need that. And we should think about a check for reloading the schema at the start of each "write" operation. metze
2010-01-13s4:ldb_msg: first try to decode integers as signed and then fallback to unsignedStefan Metzmacher1-0/+18
LDAP only knowns about signed integers, so let ldb_msg_find_attr_as_uint() and ldb_msg_find_attr_as_uint64() cope with it. metze
2010-01-13s4:ldb: be more strict in parsing ldb time stringsStefan Metzmacher1-4/+4
metze
2010-01-10s4-ldb: display security descriptors with correct SDL for known SIDsAndrew Tridgell1-0/+6
This makes it much easier to compare SDs
2010-01-09s4-ldb: validate the type of the ldb argument to ldb_dn_new()Andrew Tridgell1-1/+7
It has been a common bug to get the first two arguments the wrong way around
2010-01-08s4-acl: fixed acl.py test to use correct ldifAndrew Tridgell1-1/+2
same problem as sec_descriptor.py
2010-01-08s4-secdesc: fixed the sec_descriptor.py testAndrew Tridgell1-42/+74
The test was using a "changetype: add" to try and add a member to a group, where it should use a "changetype: modify" with a "add: member" Also fixed the recovery when the test fails part way through (delete the test users at the start as well as the end) Nadya, please check!
2010-01-08s4-ldb: improve error handling in indexing codeAndrew Tridgell2-5/+34
When we get an indexing failure we want a clear error message
2010-01-05s4:ldap_schema.py - add an additional check for validity of ↵Matthias Dieter Wallnöfer1-0/+25
"defaultObjectCategory"
2010-01-05s4:ldap_schema.py - Move generated attributes checkMatthias Dieter Wallnöfer1-15/+15
Make more clear that they're created before the "schemaUpdateNow".
2010-01-04Fix the merged build. Probably not strictly correct but allows us to "make ↵Jeremy Allison1-1/+1
test". Jeremy.
2010-01-02ldb: Fix the standalone ldb build.Jelmer Vernooij1-14/+14
2010-01-02s4-ldb: fixed valgrind error: ares can be freed by callbackAndrew Tridgell1-4/+1
2010-01-02s4-ldaptest: need to use MessageElement for modify messagesAndrew Tridgell1-2/+4
Without MessageElement() the flags are not set, which is invalid
2010-01-02s4-ldb: show an error string, as well as error messageAndrew Tridgell1-3/+4
This makes it easier to track down error mismatches from the test suite
2010-01-02s4-ldbtest: fixed message element in modifyAndrew Tridgell1-1/+2
a flags value of zero is not valid
2010-01-02s4-ldb: allow modules to override error return valuesAndrew Tridgell1-2/+4
The samldb module overrides the error code for some returns when handling primaryGroupID. We need to take the error from the async callback to allow this to work reliably
2010-01-02s4-ldbmodify: show the error code as well as error stringAndrew Tridgell1-1/+2
2010-01-02s4-ldb: declate ldb_val_to_time()Andrew Tridgell1-0/+6
2010-01-02s4-ldb: use safe length limited conversions for int64 and timeAndrew Tridgell1-13/+48
2010-01-02s4-ldb: added ldb_val_to_time() Andrew Tridgell1-0/+27
This is intended as a replacement for ldb_string_to_time() for ldb_val inputs. This ensures it is length limited and includes additional validity checks
2010-01-02s4-ldb: show the error code as well as errstrAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-ldb: added ldb_module_get_ops()Andrew Tridgell2-0/+6
This is needed to support DSDB_FLAG_OWN_MODULE Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-ldb: use the RELAX control to disable single value checking on replaceAndrew Tridgell3-5/+16
When using w2k3 linked attributes we are allowed to have multiple values on a single valued attribute. This happens when the other values are deleted. Setting the RELAX control tell the ldb-tdb backend to not check for this on replace, which means the caller has to check for single valued violations.
2009-12-31pyldb: Add dom_sid.split in favor of less powerful dom_sid_to_rid().Jelmer Vernooij2-10/+10
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-23s4:ldb Fix declaration in the middle of the codeSimo Sorce1-2/+4
2009-12-23s4: Fix the buildSimo Sorce1-0/+1
2009-12-23s4: tests controls parsing and using for ldbadd/ldbedit/ldbmodifyMatthieu Patou4-1/+90
2009-12-23s4: make ldbadd/ldbmodify/ldbdelete really use the --controls switchMatthieu Patou6-9/+230
2009-12-22Samba4 and LDB requires talloc 2.0.1Andrew Bartlett1-1/+1
reported by ewoud@kohlvanwijngaarden.nl
2009-12-21provision/pyldb: Avoid linking in static python ldb module.Jelmer Vernooij2-2/+3
2009-12-21s4-tort: Tests for "msDS-IntId" attribute implementedKamen Mazdrashki1-2/+281
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-21s4-tort: Move Schema tests from ldap.py into separate moduleKamen Mazdrashki2-133/+221
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-18Added oid for AS_SYSTEM control, used to bypass access checks for system ↵Nadezhda Ivanova1-0/+6
operations.
2009-12-18s4-ldb: fixed a valgrind error in ldbtestAndrew Tridgell1-0/+2
we were using msg->dn after the ldb it contained had been freed Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-dsdb: declare ldb_dn_update_components()Andrew Tridgell1-0/+1
2009-12-18s4-dsdb: added ldb_dn_update_components()Andrew Tridgell1-0/+23
This is used to udpate just the DN components of a ldb_dn, leaving the other extended fields alone. It is needed to prevent linked attribute updates from removing other extended components. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-ldb: canonicalise the message on ldb_addAndrew Tridgell1-0/+9
This canonicalise avoids a problem with an add that has multiple elements with the same el->name. That is allowed by MS servers, and by ldb, but it breaks things like the tdb backend and the repl_meta_data RPMD handling. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-dsdb: Add a test for adding, deleting, and appending a posixAccount ↵Brendan Powers1-0/+30
objectClass to a user Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-17Fixed incorrect checking of PRINCIPAL_SELF permissions.Nadezhda Ivanova1-2/+41
If an ace has the PRINCIPAL_SELF as trustee, this sid has to be replaced with the onjectSid of the object being checked. PRINCIPAL_SELF is the way to grant rights to an account over itself.
2009-12-16s4-ldb: show the OID of any unhandled critical controlsAndrew Tridgell1-4/+9
It isn't very useful just saying that a control is not supported, without saying which one is the problem Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-16s4-ldb: fixed a transaction error on prepare_commitAndrew Tridgell1-2/+2
when a prepare commit fails, we need to give a cancel to all modules, not a commit! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-16s4-ldb: added --show-deactivated-link command line optionAndrew Tridgell1-1/+8
this adds the SHOW_DEACTIVATED_LINK control
2009-12-15Removed ldb_modify_ctrl from ldb, implemented as a static in ldap_backend.Nadezhda Ivanova2-31/+4
2009-12-14s4-ldb: added a function to filter extended components of a ldb_dnAndrew Tridgell1-0/+16
We need to be able to filter out components that should not be exposed to users