Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-02-13 | s4-rpcserver: use TYPESAFE_QSORT() in rpc servers | Andrew Tridgell | 3 | -24/+19 | |
2010-02-11 | s4: Switch to S3-style id mapping data types. | Kai Blin | 1 | -12/+12 | |
2010-02-05 | s4/drs: propagate DRS_ extension flags in code base | Kamen Mazdrashki | 1 | -1/+1 | |
2010-01-21 | s4:rpc-server:samr: fix setting of lockout duration < lockout window | Michael Adam | 1 | -1/+22 | |
This should return NT_STATUS_INVALID_PARAMETER. This makes samba pass the first part of the samr-lockout test. This constraint is documented here for the samr server: http://msdn.microsoft.com/en-us/library/cc245667%28PROT.10%29.aspx MS-SAMR 3.1.1.6 Attribute Constraints for Originating Updates and here for the ldap backend: http://msdn.microsoft.com/en-us/library/cc223462(PROT.10).aspx MS-ADTS 3.1.1.5.3.2 Constraints So the check should actually be moved down into the backend, i.e. under dsdb/samdb/ldb_modules - TODO.. Michael | |||||
2010-01-18 | idl: switched to using the WSPP names for the 'neighbour' DRS options | Andrew Tridgell | 1 | -4/+4 | |
The documentation shows that all these functions in fact use the same flags variable type. To be consistent between functions, and to allow easy reference to the WSPP docs, it is better for us to also use this generic DrsOptions bitfield rather than one per operations. | |||||
2010-01-17 | s4-drs: allow for security bypass for DsReplicaGetInfo | Andrew Tridgell | 1 | -5/+9 | |
Use --option=drs:disable_sec_check=true until the group membership bug with the PAC is fixed. | |||||
2010-01-16 | s4-dsdb: take advantage of local cursor and sort | Andrew Tridgell | 1 | -34/+3 | |
in getncchanges and repl task we don't need the extra load and sort any more. | |||||
2010-01-16 | s4-drs: use dsdb_load_udv_v2() in getncchanges code | Andrew Tridgell | 1 | -52/+6 | |
2010-01-16 | s4-drs: better debug info when security checks fail | Andrew Tridgell | 1 | -3/+8 | |
show the security token of the user at debug level 2 | |||||
2010-01-16 | s4-dsdb: require admin access for DsReplicaGetInfo | Andrew Tridgell | 1 | -5/+7 | |
2010-01-16 | s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS ↵ | Andrew Tridgell | 1 | -1/+11 | |
infoType. This patch includes the framework for the implementation of all infoTypes of the DsGetReplInfo() call, and includes the implementation for the first one, the DS_REPL_INFO_NEIGHBORS. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-01-16 | s4-drs: give better debug info on unsupported DRS calls | Andrew Tridgell | 1 | -14/+20 | |
2010-01-14 | s4:SAMR RPC - Fix the criteria for group searches | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
This should match the MS-SAMR documentation (section 3.1.5.5.1.1) | |||||
2010-01-14 | s4-drs: switch the DRS server to the generic DRS options flags | Andrew Tridgell | 2 | -8/+8 | |
2010-01-09 | s4-debug: lower the verbosity of a couple of common log messages | Andrew Tridgell | 1 | -1/+1 | |
2010-01-09 | s4-drs: base is_nc_prefix on instanceType | Andrew Tridgell | 1 | -1/+3 | |
for extended operations comparing to the ncRoot_dn is not correct | |||||
2010-01-09 | s4-drs: having no SPNs to change is not an error | Andrew Tridgell | 1 | -0/+7 | |
2010-01-09 | s4-drs: fixed writespn to ignore add/delete errors | Andrew Tridgell | 1 | -3/+40 | |
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored. | |||||
2010-01-09 | s4-drs: moved the DsWriteAccountSpn call to its own file | Andrew Tridgell | 4 | -75/+104 | |
2010-01-09 | s4-drs: need to set the getncchanges extended_ret on success too | Andrew Tridgell | 1 | -0/+3 | |
2010-01-09 | s4-drs: be less verbose when we filter objects by UDV | Andrew Tridgell | 1 | -5/+5 | |
2010-01-09 | s4-drs: added filtering by udv in getncchanges | Andrew Tridgell | 1 | -9/+57 | |
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs. | |||||
2010-01-09 | s4-drs: fixed the NC in the getncchanges RID alloc reply | Andrew Tridgell | 1 | -11/+13 | |
the search happens on a different DN to the NC of the request, but the reply is with the original NC | |||||
2010-01-09 | s4-drs: fixed usage of ldb_dn_new() | Andrew Tridgell | 1 | -1/+1 | |
2010-01-08 | s4-drs: added two more SPNs in addentry | Andrew Tridgell | 1 | -13/+32 | |
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-08 | s4-drs: we need to wrap extended operations in transactions | Andrew Tridgell | 1 | -5/+21 | |
2010-01-08 | s4-drs: added some debug messages | Andrew Tridgell | 1 | -0/+6 | |
It is nice to see when a RID Alloc is successful | |||||
2010-01-08 | s4-dsdb: added support for DRSUAPI_EXOP_FSMO_RID_ALLOC | Andrew Tridgell | 1 | -7/+103 | |
This allocates a RID pool for the client DC when we are the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: don't give an error on repsTo delete if add is also specified | Andrew Tridgell | 1 | -1/+3 | |
w2k8-r2 in dcpromo asks for a delete+add during its initial join. | |||||
2010-01-02 | s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNs | Andrew Tridgell | 1 | -1/+1 | |
This allows for more flags in the future | |||||
2010-01-02 | s4-drs: sort linked attributes | Andrew Tridgell | 1 | -0/+73 | |
See MS-DRSR section 4.1.10.5.17 for a description of the sorting comparison function | |||||
2010-01-02 | s4-drs: use dsdb linked attribute parse functions | Andrew Tridgell | 1 | -19/+1 | |
This makes the code considerably more readable | |||||
2010-01-02 | s4-drs: set flag to indicate that we do support linked attributes | Andrew Tridgell | 1 | -4/+1 | |
2010-01-02 | s4-drs: update highwatermark after successfully encoding the object | Andrew Tridgell | 1 | -8/+8 | |
2010-01-02 | s4-drs: send all linked attributes at the end of a replication cycle | Andrew Tridgell | 1 | -3/+7 | |
This ensures that a link is not seen before the object it points to | |||||
2010-01-02 | s4-drs: use the extended linearized form for DRS replication | Andrew Tridgell | 1 | -5/+4 | |
We were sending zero GUIDs. Not good! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: implemented sorting functions based on replication flags | Andrew Tridgell | 1 | -2/+43 | |
I think we probably have more work to do on the sort order, but this brings us a bit closer. | |||||
2010-01-02 | s4-drs: we are doing the sorting for getncchanges in the app code now | Andrew Tridgell | 2 | -22/+0 | |
the sorting is quite delicate, and easier to get right in the getncchanges code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: give a reason when an AddEntry commit fails | Andrew Tridgell | 1 | -1/+2 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: fixed the UDV return in getncchanges | Andrew Tridgell | 1 | -5/+17 | |
We should overwrite an existing entry if found | |||||
2010-01-02 | s4-drs: some useful debugging options for getncchanges | Andrew Tridgell | 1 | -11/+42 | |
Added two debugging parametric options drs:max object sync = drs:extra filter = | |||||
2010-01-02 | s4-drs: handle mixtures of old and new style links in getncchanges | Andrew Tridgell | 1 | -0/+17 | |
We need to send non-upgraded links using the old format | |||||
2010-01-02 | s4-drs: added linked attribute replication to getncchanges | Andrew Tridgell | 1 | -15/+203 | |
2010-01-02 | s4-dsdb: ask for REVEAL_INTERNALS in getncchanges | Andrew Tridgell | 1 | -0/+5 | |
We need this for the linked attribute meta data | |||||
2009-12-16 | s4:drsuapi/getncchanges.c - Update the list of operational attributes | Matthias Dieter Wallnöfer | 1 | -7/+8 | |
- Reorder them as specified in "operational.c" - Add also the lan manager hash password attribute | |||||
2009-12-09 | s4-drs: ensure we fill in ncRoot_dn in getncchanges | Andrew Tridgell | 1 | -0/+7 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-12-09 | s4-drs: use parentGUID attribute in getncchanges | Andrew Tridgell | 1 | -34/+6 | |
Now that parentGUID is reliable again, use it instead of building our own Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2009-12-04 | s4-drsutil: fixed a memory leak in samdb_search_count | Andrew Tridgell | 1 | -3/+3 | |
In general functions that don't return any memory should not take a memory context. Otherwise it is too easy to have a bug like this where memory is leaked | |||||
2009-12-03 | s4-drs: fixed UDV and overlapping sync calls in DRS | Andrew Tridgell | 1 | -40/+42 | |
When windows abandons a DRS sync, it will sometimes re-use the same bind handle for a new sync. This means we need to check the DN of the sync and blank the getnc_state if the DN has changed. This also fixes the UDV to use the highest uSN for the partition, not for the whole SAM. | |||||
2009-11-27 | s4:WINREG RPC server - add another "talloc_unlink" in "DeleteKey" | Matthias Dieter Wallnöfer | 1 | -1/+5 | |
Also here we waste memory - therefore free the pointless handle after the delete. |