summaryrefslogtreecommitdiff
path: root/source4/lib
AgeCommit message (Collapse)AuthorFilesLines
2010-01-05s4:ldap_schema.py - add an additional check for validity of ↵Matthias Dieter Wallnöfer1-0/+25
"defaultObjectCategory"
2010-01-05s4:ldap_schema.py - Move generated attributes checkMatthias Dieter Wallnöfer1-15/+15
Make more clear that they're created before the "schemaUpdateNow".
2010-01-04Fix the merged build. Probably not strictly correct but allows us to "make ↵Jeremy Allison1-1/+1
test". Jeremy.
2010-01-02ldb: Fix the standalone ldb build.Jelmer Vernooij1-14/+14
2010-01-02s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNsAndrew Tridgell1-1/+1
This allows for more flags in the future
2010-01-02s4-ldb: fixed valgrind error: ares can be freed by callbackAndrew Tridgell1-4/+1
2010-01-02s4-ldaptest: need to use MessageElement for modify messagesAndrew Tridgell1-2/+4
Without MessageElement() the flags are not set, which is invalid
2010-01-02s4-ldb: show an error string, as well as error messageAndrew Tridgell1-3/+4
This makes it easier to track down error mismatches from the test suite
2010-01-02s4-ldbtest: fixed message element in modifyAndrew Tridgell1-1/+2
a flags value of zero is not valid
2010-01-02s4-ldb: allow modules to override error return valuesAndrew Tridgell1-2/+4
The samldb module overrides the error code for some returns when handling primaryGroupID. We need to take the error from the async callback to allow this to work reliably
2010-01-02s4-ldbmodify: show the error code as well as error stringAndrew Tridgell1-1/+2
2010-01-02s4-ldb: declate ldb_val_to_time()Andrew Tridgell1-0/+6
2010-01-02s4-ldb: use safe length limited conversions for int64 and timeAndrew Tridgell1-13/+48
2010-01-02s4-dsdb: use safe length limiting in string->integer conversionAndrew Tridgell1-11/+35
The ldap.py test suite could trigger a read past the end of the struct ldb_val buffer
2010-01-02s4-ldb: added ldb_val_to_time() Andrew Tridgell1-0/+27
This is intended as a replacement for ldb_string_to_time() for ldb_val inputs. This ensures it is length limited and includes additional validity checks
2010-01-02s4-ldb: show the error code as well as errstrAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-ldb: added ldb_module_get_ops()Andrew Tridgell2-0/+6
This is needed to support DSDB_FLAG_OWN_MODULE Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-ldb: use the RELAX control to disable single value checking on replaceAndrew Tridgell3-5/+16
When using w2k3 linked attributes we are allowed to have multiple values on a single valued attribute. This happens when the other values are deleted. Setting the RELAX control tell the ldb-tdb backend to not check for this on replace, which means the caller has to check for single valued violations.
2010-01-02s4-dsdb: split RMD_USN into RMD_LOCAL_USN and RMD_ORIGINATING_USNAndrew Tridgell1-1/+6
We need a separate RMD_LOCAL_USN to allow us to tell what attributes need to be sent in a getncchanges request. Thanks to Metze for pointing this out. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-31pyldb: Add dom_sid.split in favor of less powerful dom_sid_to_rid().Jelmer Vernooij2-10/+10
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-30s4:lib/registry/util.c - Reintroduce "FIXME"sMatthias Dieter Wallnöfer1-0/+2
Jelmer suggested to put them in again.
2009-12-24s4:lib/socket: add socket_get_{remote|local}_addr() to get a tsocket_address ↵Stefan Metzmacher2-0/+32
instead of a socket_address metze
2009-12-24s4:lib/socket: add helpers functions to convert between socket_address and ↵Stefan Metzmacher3-1/+48
tsocket_address metze
2009-12-23s4:ldb Fix declaration in the middle of the codeSimo Sorce1-2/+4
2009-12-23s4: Fix the buildSimo Sorce1-0/+1
2009-12-23s4: tests controls parsing and using for ldbadd/ldbedit/ldbmodifyMatthieu Patou4-1/+90
2009-12-23s4: make ldbadd/ldbmodify/ldbdelete really use the --controls switchMatthieu Patou6-9/+230
2009-12-22Samba4 and LDB requires talloc 2.0.1Andrew Bartlett1-1/+1
reported by ewoud@kohlvanwijngaarden.nl
2009-12-21provision/pyldb: Avoid linking in static python ldb module.Jelmer Vernooij2-2/+3
2009-12-21ldb_wrap: Fix compilation when using system ldb.Jelmer Vernooij1-1/+1
2009-12-21s4-tort: Tests for "msDS-IntId" attribute implementedKamen Mazdrashki1-2/+281
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-21s4-tort: Move Schema tests from ldap.py into separate moduleKamen Mazdrashki2-133/+221
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-18Added oid for AS_SYSTEM control, used to bypass access checks for system ↵Nadezhda Ivanova1-0/+6
operations.
2009-12-18s4-ldb: fixed a valgrind error in ldbtestAndrew Tridgell1-0/+2
we were using msg->dn after the ldb it contained had been freed Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-dsdb: declare ldb_dn_update_components()Andrew Tridgell1-0/+1
2009-12-18s4-dsdb: added ldb_dn_update_components()Andrew Tridgell1-0/+23
This is used to udpate just the DN components of a ldb_dn, leaving the other extended fields alone. It is needed to prevent linked attribute updates from removing other extended components. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-ldb: display msDS-OptionalFeatureGUID as a GUIDAndrew Tridgell1-0/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-ldb: canonicalise the message on ldb_addAndrew Tridgell1-0/+9
This canonicalise avoids a problem with an add that has multiple elements with the same el->name. That is allowed by MS servers, and by ldb, but it breaks things like the tdb backend and the repl_meta_data RPMD handling. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-dsdb: Add a test for adding, deleting, and appending a posixAccount ↵Brendan Powers1-0/+30
objectClass to a user Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-17Fixed incorrect checking of PRINCIPAL_SELF permissions.Nadezhda Ivanova1-2/+41
If an ace has the PRINCIPAL_SELF as trustee, this sid has to be replaced with the onjectSid of the object being checked. PRINCIPAL_SELF is the way to grant rights to an account over itself.
2009-12-16s4-ldb: show the OID of any unhandled critical controlsAndrew Tridgell1-4/+9
It isn't very useful just saying that a control is not supported, without saying which one is the problem Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-16s4-ldb: fixed a transaction error on prepare_commitAndrew Tridgell1-2/+2
when a prepare commit fails, we need to give a cancel to all modules, not a commit! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-16s4-ldb: added --show-deactivated-link command line optionAndrew Tridgell1-1/+8
this adds the SHOW_DEACTIVATED_LINK control
2009-12-15Removed ldb_modify_ctrl from ldb, implemented as a static in ldap_backend.Nadezhda Ivanova2-31/+4
2009-12-15s4:tls: fix the build on SolarisBrian Lu1-0/+3
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-12-14s4-ldb: added new ldb_dn extended components for linked attributesAndrew Tridgell1-0/+30
These will store linked attribute replication meta data
2009-12-14s4-ldb: added a function to filter extended components of a ldb_dnAndrew Tridgell1-0/+16
We need to be able to filter out components that should not be exposed to users
2009-12-14s4-ldb: added a new "reveal" controlAndrew Tridgell3-1/+43
This control will allow inspection of internal ldb values, which would normally be stripped before being presented to users. The first use will be stripping linked attribute meta data extended components.
2009-12-14s4-ldb: sort the linearized extended DN by component nameAndrew Tridgell1-0/+14
This will make life easier when handling deleted linked attributes
2009-12-10Implementation of sDRightsEffective, allowedAttributesEffective and ↵Nadezhda Ivanova1-1/+126
allowedChildClassesEffective. Behavior as documented in WSPP and tested. Needs optimisation though.