Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-03-16 | s4:dsdb Change dsdb_get_schema() callers to use new talloc argument | Andrew Bartlett | 1 | -2/+2 | |
This choses an appropriate talloc context to attach the schema too, long enough lived to ensure it does not go away before the operation compleates. Andrew Bartlett | |||||
2010-03-11 | s4/rpc_server Don't segfault over replPropertyMetaData contents | Andrew Bartlett | 1 | -0/+7 | |
The replPropertyMetaData may contain attrid values that we don't yet have in the local schema. We need to deal with this - it is a serious error, but we should not segfault. Andrew Bartlett | |||||
2010-03-05 | s4:drsuapi RPC - Change also here counters to "unsigned" | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
No need to have "signed" counters at those places. | |||||
2010-03-01 | s4/rodc: Implement samdb_rodc with ldb context | Anatoliy Atanasov | 1 | -1/+1 | |
2010-02-13 | s4: use LDB_TYPESAFE_QSORT() instead of ldb_qsort() | Andrew Tridgell | 1 | -3/+2 | |
2010-02-13 | s4-rpcserver: use TYPESAFE_QSORT() in rpc servers | Andrew Tridgell | 1 | -14/+12 | |
2010-01-18 | idl: switched to using the WSPP names for the 'neighbour' DRS options | Andrew Tridgell | 1 | -4/+4 | |
The documentation shows that all these functions in fact use the same flags variable type. To be consistent between functions, and to allow easy reference to the WSPP docs, it is better for us to also use this generic DrsOptions bitfield rather than one per operations. | |||||
2010-01-16 | s4-dsdb: take advantage of local cursor and sort | Andrew Tridgell | 1 | -34/+3 | |
in getncchanges and repl task we don't need the extra load and sort any more. | |||||
2010-01-16 | s4-drs: use dsdb_load_udv_v2() in getncchanges code | Andrew Tridgell | 1 | -52/+6 | |
2010-01-14 | s4-drs: switch the DRS server to the generic DRS options flags | Andrew Tridgell | 1 | -3/+3 | |
2010-01-09 | s4-drs: base is_nc_prefix on instanceType | Andrew Tridgell | 1 | -1/+3 | |
for extended operations comparing to the ncRoot_dn is not correct | |||||
2010-01-09 | s4-drs: need to set the getncchanges extended_ret on success too | Andrew Tridgell | 1 | -0/+3 | |
2010-01-09 | s4-drs: be less verbose when we filter objects by UDV | Andrew Tridgell | 1 | -5/+5 | |
2010-01-09 | s4-drs: added filtering by udv in getncchanges | Andrew Tridgell | 1 | -9/+57 | |
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs. | |||||
2010-01-09 | s4-drs: fixed the NC in the getncchanges RID alloc reply | Andrew Tridgell | 1 | -11/+13 | |
the search happens on a different DN to the NC of the request, but the reply is with the original NC | |||||
2010-01-09 | s4-drs: fixed usage of ldb_dn_new() | Andrew Tridgell | 1 | -1/+1 | |
2010-01-08 | s4-drs: we need to wrap extended operations in transactions | Andrew Tridgell | 1 | -5/+21 | |
2010-01-08 | s4-drs: added some debug messages | Andrew Tridgell | 1 | -0/+6 | |
It is nice to see when a RID Alloc is successful | |||||
2010-01-08 | s4-dsdb: added support for DRSUAPI_EXOP_FSMO_RID_ALLOC | Andrew Tridgell | 1 | -7/+103 | |
This allocates a RID pool for the client DC when we are the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNs | Andrew Tridgell | 1 | -1/+1 | |
This allows for more flags in the future | |||||
2010-01-02 | s4-drs: sort linked attributes | Andrew Tridgell | 1 | -0/+73 | |
See MS-DRSR section 4.1.10.5.17 for a description of the sorting comparison function | |||||
2010-01-02 | s4-drs: use dsdb linked attribute parse functions | Andrew Tridgell | 1 | -19/+1 | |
This makes the code considerably more readable | |||||
2010-01-02 | s4-drs: update highwatermark after successfully encoding the object | Andrew Tridgell | 1 | -8/+8 | |
2010-01-02 | s4-drs: send all linked attributes at the end of a replication cycle | Andrew Tridgell | 1 | -3/+7 | |
This ensures that a link is not seen before the object it points to | |||||
2010-01-02 | s4-drs: use the extended linearized form for DRS replication | Andrew Tridgell | 1 | -5/+4 | |
We were sending zero GUIDs. Not good! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: implemented sorting functions based on replication flags | Andrew Tridgell | 1 | -2/+43 | |
I think we probably have more work to do on the sort order, but this brings us a bit closer. | |||||
2010-01-02 | s4-drs: fixed the UDV return in getncchanges | Andrew Tridgell | 1 | -5/+17 | |
We should overwrite an existing entry if found | |||||
2010-01-02 | s4-drs: some useful debugging options for getncchanges | Andrew Tridgell | 1 | -11/+42 | |
Added two debugging parametric options drs:max object sync = drs:extra filter = | |||||
2010-01-02 | s4-drs: handle mixtures of old and new style links in getncchanges | Andrew Tridgell | 1 | -0/+17 | |
We need to send non-upgraded links using the old format | |||||
2010-01-02 | s4-drs: added linked attribute replication to getncchanges | Andrew Tridgell | 1 | -15/+203 | |
2009-12-16 | s4:drsuapi/getncchanges.c - Update the list of operational attributes | Matthias Dieter Wallnöfer | 1 | -7/+8 | |
- Reorder them as specified in "operational.c" - Add also the lan manager hash password attribute | |||||
2009-12-09 | s4-drs: ensure we fill in ncRoot_dn in getncchanges | Andrew Tridgell | 1 | -0/+7 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-12-09 | s4-drs: use parentGUID attribute in getncchanges | Andrew Tridgell | 1 | -34/+6 | |
Now that parentGUID is reliable again, use it instead of building our own Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-12-03 | s4-drs: fixed UDV and overlapping sync calls in DRS | Andrew Tridgell | 1 | -40/+42 | |
When windows abandons a DRS sync, it will sometimes re-use the same bind handle for a new sync. This means we need to check the DN of the sync and blank the getnc_state if the DN has changed. This also fixes the UDV to use the highest uSN for the partition, not for the whole SAM. | |||||
2009-11-20 | s4-dsdb: some more attribuutes that we should only give if asked for | Andrew Tridgell | 1 | -1/+8 | |
2009-11-20 | s4-drs: we need to specifically ask for ntSecurityDescriptor | Andrew Tridgell | 1 | -1/+1 | |
ntSecurityDescriptor is no longer included by default | |||||
2009-10-20 | s4: ran minimal_includes.pl on source4/rpc_server | Andrew Tridgell | 1 | -2/+0 | |
2009-10-15 | s4-drs: support DRSUAPI_DRS_ADD_REF flag | Andrew Tridgell | 1 | -5/+29 | |
The DRSUAPI_DRS_ADD_REF flag tells the DRS server to run an UpdateRefs call on behalf of the client after the DsGetNCChanges call. The lack of support for this option may explain why the repsTo attribute was not being created for w2k8-r2 replication partners. | |||||
2009-10-15 | drs: improved error checking | Andrew Tridgell | 1 | -16/+49 | |
Check the validity of the requested options in DsGetNCChanges | |||||
2009-10-13 | s4-repl: check that a DsGetNCChanges is a continuation, and fix sorting | Andrew Tridgell | 1 | -3/+16 | |
When we indicate that a getncchanges request is not complete, we set the more_data flag to true in the response. The client usually then asks for the next block of data. If the client decides it wants to skip that replication and do a different replication then we need to make sure that the next call is in fact a continuation of the existing call, and not a new call. This relies on returning the results sorted by uSNChanged, as the client uses the tmp_highest_usn in each result to see if progress is being made. | |||||
2009-10-06 | s4-drs: take advantage of system session auth in dsbind | Andrew Tridgell | 1 | -23/+10 | |
Now that the bind opens samdb with the right credentials, we no longer need the re-open in updaterefs and getncchanges | |||||
2009-09-28 | s4-drs: removed debug code that replicated a maximum of 10 objects at a time | Andrew Tridgell | 1 | -2/+1 | |
2009-09-28 | s4-dsruapi: plugfest updates | Andrew Tridgell | 1 | -77/+144 | |
- always fetch parentGUID from databases, don't rely on parentGUID in attributes - re-fetch nc root mesages to avoid the problem of dual messages for roots - support returning messages a chunk at a time, using max_object_count from request | |||||
2009-09-23 | s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_SPECIAL_SECRET_PROCESSING in ↵ | Anatoliy Atanasov | 1 | -3/+12 | |
getncchanges When this flag is specified in the request these attributes are treated as secret: currentValue, dBCSPwd, initialAuthIncoming, initialAuthOutgoing, lmPwdHistory, ntPwdHistory, priorValue, supplementalCredentials, trustAuthIncoming, trustAuthOutgoing, unicodePwd Their value is changed to NULL and the meta_data.originating_change_time to 0 | |||||
2009-09-23 | s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_ASYNC_REP in getncchanges | Anatoliy Atanasov | 1 | -1/+7 | |
When this flag is specified in the request we should return for ncRoot only and so scope of search is LDB_SCOPE_BASE. | |||||
2009-09-23 | s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_SYNC_PACKET in getncchanges | Anatoliy Atanasov | 1 | -0/+6 | |
When this flag is specified in the request we shouldn't use the uptodateness vector in the request. | |||||
2009-09-23 | s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_CRITICAL_ONLY req in getncchanges | Anatoliy Atanasov | 1 | -3/+13 | |
2009-09-23 | s4-drs: fill in more guids and SIDs, plus filter rDN | Andrew Tridgell | 1 | -3/+48 | |
In DsGetNCChanges we need to fill in the parentGUID and objectGUID of each object, plus we need to filter out the rDN from the meta data, and always send the instanceType | |||||
2009-09-22 | s4-drsserver: sort by DN to give tree order | Andrew Tridgell | 1 | -1/+2 | |
This might help the windows client with ordered requests. Later we need to support the "ancestors" mode flag. | |||||
2009-09-19 | Move replmd_drsuapi_DsReplicaCursor2_compare to a common place. | Anatoliy Atanasov | 1 | -7/+1 | |