Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-02-15 | s4-drs: replace manual checks with dsdb_modify_permissive() | Andrew Tridgell | 1 | -32/+1 | |
Much simpler to use the permissive control instead of manually munging the SPN list. | |||||
2010-02-15 | s4-drs: use a permissive modify in addentry | Andrew Tridgell | 1 | -1/+1 | |
It is not an error if entries already exist. | |||||
2010-02-13 | s4: use LDB_TYPESAFE_QSORT() instead of ldb_qsort() | Andrew Tridgell | 1 | -3/+2 | |
2010-02-13 | s4-rpcserver: use TYPESAFE_QSORT() in rpc servers | Andrew Tridgell | 1 | -14/+12 | |
2010-02-05 | s4/drs: propagate DRS_ extension flags in code base | Kamen Mazdrashki | 1 | -1/+1 | |
2010-01-18 | idl: switched to using the WSPP names for the 'neighbour' DRS options | Andrew Tridgell | 1 | -4/+4 | |
The documentation shows that all these functions in fact use the same flags variable type. To be consistent between functions, and to allow easy reference to the WSPP docs, it is better for us to also use this generic DrsOptions bitfield rather than one per operations. | |||||
2010-01-17 | s4-drs: allow for security bypass for DsReplicaGetInfo | Andrew Tridgell | 1 | -5/+9 | |
Use --option=drs:disable_sec_check=true until the group membership bug with the PAC is fixed. | |||||
2010-01-16 | s4-dsdb: take advantage of local cursor and sort | Andrew Tridgell | 1 | -34/+3 | |
in getncchanges and repl task we don't need the extra load and sort any more. | |||||
2010-01-16 | s4-drs: use dsdb_load_udv_v2() in getncchanges code | Andrew Tridgell | 1 | -52/+6 | |
2010-01-16 | s4-drs: better debug info when security checks fail | Andrew Tridgell | 1 | -3/+8 | |
show the security token of the user at debug level 2 | |||||
2010-01-16 | s4-dsdb: require admin access for DsReplicaGetInfo | Andrew Tridgell | 1 | -5/+7 | |
2010-01-16 | s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS ↵ | Andrew Tridgell | 1 | -1/+11 | |
infoType. This patch includes the framework for the implementation of all infoTypes of the DsGetReplInfo() call, and includes the implementation for the first one, the DS_REPL_INFO_NEIGHBORS. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-01-16 | s4-drs: give better debug info on unsupported DRS calls | Andrew Tridgell | 1 | -14/+20 | |
2010-01-14 | s4-drs: switch the DRS server to the generic DRS options flags | Andrew Tridgell | 2 | -8/+8 | |
2010-01-09 | s4-debug: lower the verbosity of a couple of common log messages | Andrew Tridgell | 1 | -1/+1 | |
2010-01-09 | s4-drs: base is_nc_prefix on instanceType | Andrew Tridgell | 1 | -1/+3 | |
for extended operations comparing to the ncRoot_dn is not correct | |||||
2010-01-09 | s4-drs: having no SPNs to change is not an error | Andrew Tridgell | 1 | -0/+7 | |
2010-01-09 | s4-drs: fixed writespn to ignore add/delete errors | Andrew Tridgell | 1 | -3/+40 | |
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored. | |||||
2010-01-09 | s4-drs: moved the DsWriteAccountSpn call to its own file | Andrew Tridgell | 3 | -75/+103 | |
2010-01-09 | s4-drs: need to set the getncchanges extended_ret on success too | Andrew Tridgell | 1 | -0/+3 | |
2010-01-09 | s4-drs: be less verbose when we filter objects by UDV | Andrew Tridgell | 1 | -5/+5 | |
2010-01-09 | s4-drs: added filtering by udv in getncchanges | Andrew Tridgell | 1 | -9/+57 | |
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs. | |||||
2010-01-09 | s4-drs: fixed the NC in the getncchanges RID alloc reply | Andrew Tridgell | 1 | -11/+13 | |
the search happens on a different DN to the NC of the request, but the reply is with the original NC | |||||
2010-01-09 | s4-drs: fixed usage of ldb_dn_new() | Andrew Tridgell | 1 | -1/+1 | |
2010-01-08 | s4-drs: added two more SPNs in addentry | Andrew Tridgell | 1 | -13/+32 | |
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-08 | s4-drs: we need to wrap extended operations in transactions | Andrew Tridgell | 1 | -5/+21 | |
2010-01-08 | s4-drs: added some debug messages | Andrew Tridgell | 1 | -0/+6 | |
It is nice to see when a RID Alloc is successful | |||||
2010-01-08 | s4-dsdb: added support for DRSUAPI_EXOP_FSMO_RID_ALLOC | Andrew Tridgell | 1 | -7/+103 | |
This allocates a RID pool for the client DC when we are the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: don't give an error on repsTo delete if add is also specified | Andrew Tridgell | 1 | -1/+3 | |
w2k8-r2 in dcpromo asks for a delete+add during its initial join. | |||||
2010-01-02 | s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNs | Andrew Tridgell | 1 | -1/+1 | |
This allows for more flags in the future | |||||
2010-01-02 | s4-drs: sort linked attributes | Andrew Tridgell | 1 | -0/+73 | |
See MS-DRSR section 4.1.10.5.17 for a description of the sorting comparison function | |||||
2010-01-02 | s4-drs: use dsdb linked attribute parse functions | Andrew Tridgell | 1 | -19/+1 | |
This makes the code considerably more readable | |||||
2010-01-02 | s4-drs: set flag to indicate that we do support linked attributes | Andrew Tridgell | 1 | -4/+1 | |
2010-01-02 | s4-drs: update highwatermark after successfully encoding the object | Andrew Tridgell | 1 | -8/+8 | |
2010-01-02 | s4-drs: send all linked attributes at the end of a replication cycle | Andrew Tridgell | 1 | -3/+7 | |
This ensures that a link is not seen before the object it points to | |||||
2010-01-02 | s4-drs: use the extended linearized form for DRS replication | Andrew Tridgell | 1 | -5/+4 | |
We were sending zero GUIDs. Not good! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: implemented sorting functions based on replication flags | Andrew Tridgell | 1 | -2/+43 | |
I think we probably have more work to do on the sort order, but this brings us a bit closer. | |||||
2010-01-02 | s4-drs: we are doing the sorting for getncchanges in the app code now | Andrew Tridgell | 2 | -22/+0 | |
the sorting is quite delicate, and easier to get right in the getncchanges code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: give a reason when an AddEntry commit fails | Andrew Tridgell | 1 | -1/+2 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: fixed the UDV return in getncchanges | Andrew Tridgell | 1 | -5/+17 | |
We should overwrite an existing entry if found | |||||
2010-01-02 | s4-drs: some useful debugging options for getncchanges | Andrew Tridgell | 1 | -11/+42 | |
Added two debugging parametric options drs:max object sync = drs:extra filter = | |||||
2010-01-02 | s4-drs: handle mixtures of old and new style links in getncchanges | Andrew Tridgell | 1 | -0/+17 | |
We need to send non-upgraded links using the old format | |||||
2010-01-02 | s4-drs: added linked attribute replication to getncchanges | Andrew Tridgell | 1 | -15/+203 | |
2010-01-02 | s4-dsdb: ask for REVEAL_INTERNALS in getncchanges | Andrew Tridgell | 1 | -0/+5 | |
We need this for the linked attribute meta data | |||||
2009-12-16 | s4:drsuapi/getncchanges.c - Update the list of operational attributes | Matthias Dieter Wallnöfer | 1 | -7/+8 | |
- Reorder them as specified in "operational.c" - Add also the lan manager hash password attribute | |||||
2009-12-09 | s4-drs: ensure we fill in ncRoot_dn in getncchanges | Andrew Tridgell | 1 | -0/+7 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-12-09 | s4-drs: use parentGUID attribute in getncchanges | Andrew Tridgell | 1 | -34/+6 | |
Now that parentGUID is reliable again, use it instead of building our own Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-12-03 | s4-drs: fixed UDV and overlapping sync calls in DRS | Andrew Tridgell | 1 | -40/+42 | |
When windows abandons a DRS sync, it will sometimes re-use the same bind handle for a new sync. This means we need to check the DN of the sync and blank the getnc_state if the DN has changed. This also fixes the UDV to use the highest uSN for the partition, not for the whole SAM. | |||||
2009-11-20 | s4-dsdb: some more attribuutes that we should only give if asked for | Andrew Tridgell | 1 | -1/+8 | |
2009-11-20 | s4-drs: we need to specifically ask for ntSecurityDescriptor | Andrew Tridgell | 1 | -1/+1 | |
ntSecurityDescriptor is no longer included by default |