summaryrefslogtreecommitdiff
path: root/source4/rpc_server/drsuapi
AgeCommit message (Collapse)AuthorFilesLines
2010-04-22s4-drs: samdb_is_rodc() function and new samdb_rodc() functionFernando J V da Silva1-1/+13
This patch creates the samdb_is_rodc() function, which looks for the NTDSDSA object for a DC that has a specific invocationId and if msDS-isRODC is present on such object and it is TRUE, then consider the DC as a RODC. The new samdb_rodc() function uses the samdb_is_rodc() function for the local server. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-13Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions"Matthias Dieter Wallnöfer1-2/+2
We should use the "ldb_get_*_basedn" calls since they are available in the LDB library.
2010-03-24s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source codeKamen Mazdrashki1-4/+4
2010-03-16s4:dsdb Change dsdb_get_schema() callers to use new talloc argumentAndrew Bartlett1-2/+2
This choses an appropriate talloc context to attach the schema too, long enough lived to ensure it does not go away before the operation compleates. Andrew Bartlett
2010-03-11s4:rpc_server/drsuapi: don't reset [out,ref] pointer to NULL in ↵Stefan Metzmacher1-1/+0
dcesrv_drsuapi_DsRemoveDSServer() metze
2010-03-11s4/rpc_server Don't segfault over replPropertyMetaData contentsAndrew Bartlett1-0/+7
The replPropertyMetaData may contain attrid values that we don't yet have in the local schema. We need to deal with this - it is a serious error, but we should not segfault. Andrew Bartlett
2010-03-05s4:drsuapi RPC - Change also here counters to "unsigned"Matthias Dieter Wallnöfer3-7/+8
No need to have "signed" counters at those places.
2010-03-01s4/rodc: Implement samdb_rodc with ldb contextAnatoliy Atanasov1-1/+1
2010-02-16s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flagsAndrew Tridgell2-2/+4
2010-02-15s4-drs: replace manual checks with dsdb_modify_permissive()Andrew Tridgell1-32/+1
Much simpler to use the permissive control instead of manually munging the SPN list.
2010-02-15s4-drs: use a permissive modify in addentryAndrew Tridgell1-1/+1
It is not an error if entries already exist.
2010-02-13s4: use LDB_TYPESAFE_QSORT() instead of ldb_qsort()Andrew Tridgell1-3/+2
2010-02-13s4-rpcserver: use TYPESAFE_QSORT() in rpc serversAndrew Tridgell1-14/+12
2010-02-05s4/drs: propagate DRS_ extension flags in code baseKamen Mazdrashki1-1/+1
2010-01-18idl: switched to using the WSPP names for the 'neighbour' DRS optionsAndrew Tridgell1-4/+4
The documentation shows that all these functions in fact use the same flags variable type. To be consistent between functions, and to allow easy reference to the WSPP docs, it is better for us to also use this generic DrsOptions bitfield rather than one per operations.
2010-01-17s4-drs: allow for security bypass for DsReplicaGetInfoAndrew Tridgell1-5/+9
Use --option=drs:disable_sec_check=true until the group membership bug with the PAC is fixed.
2010-01-16s4-dsdb: take advantage of local cursor and sortAndrew Tridgell1-34/+3
in getncchanges and repl task we don't need the extra load and sort any more.
2010-01-16s4-drs: use dsdb_load_udv_v2() in getncchanges codeAndrew Tridgell1-52/+6
2010-01-16s4-drs: better debug info when security checks failAndrew Tridgell1-3/+8
show the security token of the user at debug level 2
2010-01-16s4-dsdb: require admin access for DsReplicaGetInfoAndrew Tridgell1-5/+7
2010-01-16s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS ↵Andrew Tridgell1-1/+11
infoType. This patch includes the framework for the implementation of all infoTypes of the DsGetReplInfo() call, and includes the implementation for the first one, the DS_REPL_INFO_NEIGHBORS. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-16s4-drs: give better debug info on unsupported DRS callsAndrew Tridgell1-14/+20
2010-01-14s4-drs: switch the DRS server to the generic DRS options flagsAndrew Tridgell2-8/+8
2010-01-09s4-debug: lower the verbosity of a couple of common log messagesAndrew Tridgell1-1/+1
2010-01-09s4-drs: base is_nc_prefix on instanceTypeAndrew Tridgell1-1/+3
for extended operations comparing to the ncRoot_dn is not correct
2010-01-09s4-drs: having no SPNs to change is not an errorAndrew Tridgell1-0/+7
2010-01-09s4-drs: fixed writespn to ignore add/delete errorsAndrew Tridgell1-3/+40
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored.
2010-01-09s4-drs: moved the DsWriteAccountSpn call to its own fileAndrew Tridgell3-75/+103
2010-01-09s4-drs: need to set the getncchanges extended_ret on success tooAndrew Tridgell1-0/+3
2010-01-09s4-drs: be less verbose when we filter objects by UDVAndrew Tridgell1-5/+5
2010-01-09s4-drs: added filtering by udv in getncchangesAndrew Tridgell1-9/+57
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs.
2010-01-09s4-drs: fixed the NC in the getncchanges RID alloc replyAndrew Tridgell1-11/+13
the search happens on a different DN to the NC of the request, but the reply is with the original NC
2010-01-09s4-drs: fixed usage of ldb_dn_new()Andrew Tridgell1-1/+1
2010-01-08s4-drs: added two more SPNs in addentryAndrew Tridgell1-13/+32
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-drs: we need to wrap extended operations in transactionsAndrew Tridgell1-5/+21
2010-01-08s4-drs: added some debug messagesAndrew Tridgell1-0/+6
It is nice to see when a RID Alloc is successful
2010-01-08s4-dsdb: added support for DRSUAPI_EXOP_FSMO_RID_ALLOCAndrew Tridgell1-7/+103
This allocates a RID pool for the client DC when we are the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: don't give an error on repsTo delete if add is also specifiedAndrew Tridgell1-1/+3
w2k8-r2 in dcpromo asks for a delete+add during its initial join.
2010-01-02s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNsAndrew Tridgell1-1/+1
This allows for more flags in the future
2010-01-02s4-drs: sort linked attributesAndrew Tridgell1-0/+73
See MS-DRSR section 4.1.10.5.17 for a description of the sorting comparison function
2010-01-02s4-drs: use dsdb linked attribute parse functionsAndrew Tridgell1-19/+1
This makes the code considerably more readable
2010-01-02s4-drs: set flag to indicate that we do support linked attributesAndrew Tridgell1-4/+1
2010-01-02s4-drs: update highwatermark after successfully encoding the objectAndrew Tridgell1-8/+8
2010-01-02s4-drs: send all linked attributes at the end of a replication cycleAndrew Tridgell1-3/+7
This ensures that a link is not seen before the object it points to
2010-01-02s4-drs: use the extended linearized form for DRS replicationAndrew Tridgell1-5/+4
We were sending zero GUIDs. Not good! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: implemented sorting functions based on replication flagsAndrew Tridgell1-2/+43
I think we probably have more work to do on the sort order, but this brings us a bit closer.
2010-01-02s4-drs: we are doing the sorting for getncchanges in the app code nowAndrew Tridgell2-22/+0
the sorting is quite delicate, and easier to get right in the getncchanges code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: give a reason when an AddEntry commit failsAndrew Tridgell1-1/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02s4-drs: fixed the UDV return in getncchangesAndrew Tridgell1-5/+17
We should overwrite an existing entry if found
2010-01-02s4-drs: some useful debugging options for getncchangesAndrew Tridgell1-11/+42
Added two debugging parametric options drs:max object sync = drs:extra filter =