summaryrefslogtreecommitdiff
path: root/source4/rpc_server/drsuapi
AgeCommit message (Collapse)AuthorFilesLines
2010-02-05s4/drs: propagate DRS_ extension flags in code baseKamen Mazdrashki1-1/+1
2010-01-18idl: switched to using the WSPP names for the 'neighbour' DRS optionsAndrew Tridgell1-4/+4
The documentation shows that all these functions in fact use the same flags variable type. To be consistent between functions, and to allow easy reference to the WSPP docs, it is better for us to also use this generic DrsOptions bitfield rather than one per operations.
2010-01-17s4-drs: allow for security bypass for DsReplicaGetInfoAndrew Tridgell1-5/+9
Use --option=drs:disable_sec_check=true until the group membership bug with the PAC is fixed.
2010-01-16s4-dsdb: take advantage of local cursor and sortAndrew Tridgell1-34/+3
in getncchanges and repl task we don't need the extra load and sort any more.
2010-01-16s4-drs: use dsdb_load_udv_v2() in getncchanges codeAndrew Tridgell1-52/+6
2010-01-16s4-drs: better debug info when security checks failAndrew Tridgell1-3/+8
show the security token of the user at debug level 2
2010-01-16s4-dsdb: require admin access for DsReplicaGetInfoAndrew Tridgell1-5/+7
2010-01-16s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS ↵Andrew Tridgell1-1/+11
infoType. This patch includes the framework for the implementation of all infoTypes of the DsGetReplInfo() call, and includes the implementation for the first one, the DS_REPL_INFO_NEIGHBORS. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-16s4-drs: give better debug info on unsupported DRS callsAndrew Tridgell1-14/+20
2010-01-14s4-drs: switch the DRS server to the generic DRS options flagsAndrew Tridgell2-8/+8
2010-01-09s4-debug: lower the verbosity of a couple of common log messagesAndrew Tridgell1-1/+1
2010-01-09s4-drs: base is_nc_prefix on instanceTypeAndrew Tridgell1-1/+3
for extended operations comparing to the ncRoot_dn is not correct
2010-01-09s4-drs: having no SPNs to change is not an errorAndrew Tridgell1-0/+7
2010-01-09s4-drs: fixed writespn to ignore add/delete errorsAndrew Tridgell1-3/+40
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored.
2010-01-09s4-drs: moved the DsWriteAccountSpn call to its own fileAndrew Tridgell3-75/+103
2010-01-09s4-drs: need to set the getncchanges extended_ret on success tooAndrew Tridgell1-0/+3
2010-01-09s4-drs: be less verbose when we filter objects by UDVAndrew Tridgell1-5/+5
2010-01-09s4-drs: added filtering by udv in getncchangesAndrew Tridgell1-9/+57
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs.
2010-01-09s4-drs: fixed the NC in the getncchanges RID alloc replyAndrew Tridgell1-11/+13
the search happens on a different DN to the NC of the request, but the reply is with the original NC
2010-01-09s4-drs: fixed usage of ldb_dn_new()Andrew Tridgell1-1/+1
2010-01-08s4-drs: added two more SPNs in addentryAndrew Tridgell1-13/+32
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-drs: we need to wrap extended operations in transactionsAndrew Tridgell1-5/+21
2010-01-08s4-drs: added some debug messagesAndrew Tridgell1-0/+6
It is nice to see when a RID Alloc is successful
2010-01-08s4-dsdb: added support for DRSUAPI_EXOP_FSMO_RID_ALLOCAndrew Tridgell1-7/+103
This allocates a RID pool for the client DC when we are the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: don't give an error on repsTo delete if add is also specifiedAndrew Tridgell1-1/+3
w2k8-r2 in dcpromo asks for a delete+add during its initial join.
2010-01-02s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNsAndrew Tridgell1-1/+1
This allows for more flags in the future
2010-01-02s4-drs: sort linked attributesAndrew Tridgell1-0/+73
See MS-DRSR section 4.1.10.5.17 for a description of the sorting comparison function
2010-01-02s4-drs: use dsdb linked attribute parse functionsAndrew Tridgell1-19/+1
This makes the code considerably more readable
2010-01-02s4-drs: set flag to indicate that we do support linked attributesAndrew Tridgell1-4/+1
2010-01-02s4-drs: update highwatermark after successfully encoding the objectAndrew Tridgell1-8/+8
2010-01-02s4-drs: send all linked attributes at the end of a replication cycleAndrew Tridgell1-3/+7
This ensures that a link is not seen before the object it points to
2010-01-02s4-drs: use the extended linearized form for DRS replicationAndrew Tridgell1-5/+4
We were sending zero GUIDs. Not good! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: implemented sorting functions based on replication flagsAndrew Tridgell1-2/+43
I think we probably have more work to do on the sort order, but this brings us a bit closer.
2010-01-02s4-drs: we are doing the sorting for getncchanges in the app code nowAndrew Tridgell2-22/+0
the sorting is quite delicate, and easier to get right in the getncchanges code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: give a reason when an AddEntry commit failsAndrew Tridgell1-1/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: fixed the UDV return in getncchangesAndrew Tridgell1-5/+17
We should overwrite an existing entry if found
2010-01-02s4-drs: some useful debugging options for getncchangesAndrew Tridgell1-11/+42
Added two debugging parametric options drs:max object sync = drs:extra filter =
2010-01-02s4-drs: handle mixtures of old and new style links in getncchangesAndrew Tridgell1-0/+17
We need to send non-upgraded links using the old format
2010-01-02s4-drs: added linked attribute replication to getncchangesAndrew Tridgell1-15/+203
2010-01-02s4-dsdb: ask for REVEAL_INTERNALS in getncchangesAndrew Tridgell1-0/+5
We need this for the linked attribute meta data
2009-12-16s4:drsuapi/getncchanges.c - Update the list of operational attributesMatthias Dieter Wallnöfer1-7/+8
- Reorder them as specified in "operational.c" - Add also the lan manager hash password attribute
2009-12-09s4-drs: ensure we fill in ncRoot_dn in getncchangesAndrew Tridgell1-0/+7
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-09s4-drs: use parentGUID attribute in getncchangesAndrew Tridgell1-34/+6
Now that parentGUID is reliable again, use it instead of building our own Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-03s4-drs: fixed UDV and overlapping sync calls in DRSAndrew Tridgell1-40/+42
When windows abandons a DRS sync, it will sometimes re-use the same bind handle for a new sync. This means we need to check the DN of the sync and blank the getnc_state if the DN has changed. This also fixes the UDV to use the highest uSN for the partition, not for the whole SAM.
2009-11-20s4-dsdb: some more attribuutes that we should only give if asked forAndrew Tridgell1-1/+8
2009-11-20s4-drs: we need to specifically ask for ntSecurityDescriptorAndrew Tridgell1-1/+1
ntSecurityDescriptor is no longer included by default
2009-11-14s4-drs: DsExecuteKCC() implementationErick Nascimento1-1/+10
I implemented the DsExecuteKCC() handling code on kccsrv_execute_kcc(). Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-10-23s4-dsdb: create a static system_session contextAndrew Tridgell1-1/+1
This patch adds a system_session cache, preventing us from having to recreate it on every ldb open, and allowing us to detect when the same session is being used in ldb_wrap
2009-10-20s4: ran minimal_includes.pl on source4/rpc_serverAndrew Tridgell4-12/+0
2009-10-15s4-drs: support DRSUAPI_DRS_ADD_REF flagAndrew Tridgell1-5/+29
The DRSUAPI_DRS_ADD_REF flag tells the DRS server to run an UpdateRefs call on behalf of the client after the DsGetNCChanges call. The lack of support for this option may explain why the repsTo attribute was not being created for w2k8-r2 replication partners.