summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2011-07-13ldb: use base searches for @ special DNsAndrew Tridgell4-21/+20
subtree searches on these DNs don't work any more Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13dbcheck: only do the provision dbcheck if there are objects to checkAndrew Tridgell1-13/+14
when in FILL_DRS mode, there are no objects to check yet Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13s4-provision: fixed the GUIDs in the provision using dbcheckAndrew Tridgell1-0/+16
some DNs are are not setup with GUIDs during the provision because of circular dependencies between objects. This adds a dbcheck pass to the provision to fix those DNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13s4-dsdb: fixed modify of ACLs on deleted objectsAndrew Tridgell1-2/+4
this is needed for the dbcheck code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13dbcheck: only fix replPropertyMetaData if we included it in the searchAndrew Tridgell1-11/+14
if we didn't find a replPropertyMetaData attribute at all then don't try fixing it Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13dbcheck: added checks for missing and orphansed backlinksAndrew Tridgell1-19/+18
this checks for missing backlinks or backlinks without a forward link and optionally fixes them Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13s4-dsdb: raise debug level for backlink errorsAndrew Tridgell1-1/+1
when dbcheck is fixing missing backlinks we don't want a DEBUG 0 message Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13dbcheck: fixed ldap check with no database specifiedAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13dbcheck: added --reindex optionAndrew Tridgell2-3/+20
this allows you to force a reindex of the database Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13samba-tool: fixed ldapcmp to run as non-root Andrew Tridgell1-2/+9
this avoids the need for access to the secrets database Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13dbcheck: added checking of backlinksAndrew Tridgell1-54/+92
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13pydsdb: added get_backlink_from_lDAPDisplayName()Andrew Tridgell2-0/+50
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13s4-dsdb: moved checking of duplicate member entries to repl_meta_data.cAndrew Tridgell2-35/+20
the samldb checks failed to account for the possibility of a member being removed and added in the same modify operation. This happens (for example) when dbcheck is fixing a SID in a DN. The repl_meta_data.c code already has this check, it just wasn't giving the right specialised error code for the 'member' attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-12s4:libcli/raw: s/SMBchkpth/SMBcheckpathStefan Metzmacher3-3/+3
metze
2011-07-12s4:winsdb: place wins.ldb in "state dir" instead of "lock dir"Stefan Metzmacher1-1/+1
It's not only a cache as we also support static records. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jul 12 16:16:45 CEST 2011 on sn-devel-104
2011-07-12s4:provision: place the sysvol share under "state dir" instead of "lock dir"Stefan Metzmacher1-1/+1
metze
2011-07-12s4:param: add "state dir" and "cache dir" optionsStefan Metzmacher7-1/+93
metze
2011-07-12s4:libcli/raw: remove SMBkeepaliveStefan Metzmacher1-1/+0
metze
2011-07-12s4:smb_server: s/SMBkeepalive/NBSSkeepaliveStefan Metzmacher1-3/+3
metze
2011-07-11dbcheck: use get_lDAPDisplayName_by_attid()Andrew Tridgell1-11/+3
this is better than doing a schema search inside the dbcheck code Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Jul 11 07:43:18 CEST 2011 on sn-devel-104
2011-07-11dsdb: added get_lDAPDisplayName_by_attidAndrew Tridgell2-0/+37
this allows conversion from a DRS attribute ID to a LDAP display name Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-11dbcheck: improved error checking in fixup of missing metdataAndrew Tridgell1-26/+24
when fixing missing attributes in replPropertyMetaData, allow user to confirm changes, and check for exceptions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-provision: use samba.unix2nttime() instead of hard coding NTTIME offsetsAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-drs: do not return links pointed to unexistant objectsMatthieu Patou1-0/+24
When an object is deleted, link pointed to it are marked as inactive. When the same object is purged we do not remmove the link pointed to it (we can't know them) so they stay in the database, it turns to be a problem for Windows 2008. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dirsync: do not return linked attribute if the target object is no moreMatthieu Patou1-0/+29
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: allow objectsid to be specified in a modification operationMatthieu Patou1-3/+5
if we have the provision control, it's used by dbcheck Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-samba-tool: dbcheck, check and fix broken metadataMatthieu Patou1-0/+77
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-python: Add functions to get linkid and systemflags of an attributeMatthieu Patou2-0/+76
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: if the provision control is specified, update replication metadata ↵Matthieu Patou1-1/+7
even if the data hasn't change Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11upgradeprovision: reduce the number of attribute that we skipMatthieu Patou1-2/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-provision: fix the value of creation timestamp to be a MS timestampMatthieu Patou1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: when replacing linked attribute take always the new dn as the old ↵Matthieu Patou1-1/+1
dn might be broken The usual use case is that you have a not complete linked attribute (ie. without the SID) if we keep using the old dn, then the SID will never be added. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: check for single valued attribute in repl_meta_data moduleMatthieu Patou1-0/+11
This is needed because we can have more than 1 value in a single valued attribute as we store also deleted values. So we do the check in repl_meta_data and then indicate LDB to do the check. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11dbcheck: check all objects, including deleted objectsAndrew Tridgell2-17/+18
this makes dbcheck search over all objects, deleted or not. This matters because when another DC replicates from this DC it replicates the deleted objects as well, so invalid attributes in deleted objects can cause problems on the new DC (for example, windows can get stuck or even crash during the replication) Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-dsdb: deleted objects are expected to be missing mandatory attributesAndrew Tridgell1-1/+2
the objectclass_attrs validation that an object contains all mandatory attributes is incorrect for deleted objects, as they get stripped of some mandatory attributes when deleted (for example, objectCategory gets stripped) Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-dsdb: fixed crash bug in extended_dn_inAndrew Tridgell1-2/+4
when extended_dn_in fails to resolve a GUID extended DN component, the debug code assumed that it was a search operation, and accessed ac->req->op.search.base, which is not valid for non-search DN expansions. Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11dbcheck: added confirm_all support for remaining checksAndrew Tridgell1-5/+10
this allows the user to choose all/none for all the remaining database checks Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11dbcheck: use specified DB schema for non-LDAP URLsAndrew Tridgell1-2/+9
when connecting to a local database with -H we can use that databases schema Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-10s4:lib/socket: iface_list_wildcard() should only return "::" if we have ipv6 ↵Stefan Metzmacher1-1/+13
interfaces If glibc has IPv6 support, but it's not enabled in the running kernel we should not try to listen on "::". metze
2011-07-08lib/param: Merge struct loadparm_service into commonAndrew Bartlett3-33/+52
This is handled by a common header and a .c file that is included into both loadparm.c files. In the process, _lp functions were renamed to lp__ to allow the common function definition declarations to be used by source3 and source4 (which have different macro definitions). The only parameter to change type is 'strict_locking' which was a bool, and is now an int, to accommodate the 'Auto' value from source3. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jul 8 12:35:56 CEST 2011 on sn-devel-104
2011-07-08param: Move per-share parameters into a seperate file, to share with s3Andrew Bartlett2-37/+5
This will allow the struct loadparm_service to be in common between the two loadparm implementations in the tree. Andrew Bartlett
2011-07-08s4-param Remove offset != -1 checksAndrew Bartlett1-7/+2
No offset values are set to -1 in the parameter table Andrew Bartlett
2011-07-08s4-param change to struct bitmap to match s3-paramAndrew Bartlett2-16/+17
2011-07-08s4-param Also check the p_class matches when comparing offsetAndrew Bartlett1-1/+3
2011-07-08param: Add hooks to s3 parm_struct and the parameters void * pointerAndrew Bartlett4-18/+25
This is to that the pyparam hooks can use the hooks to connect with the s3 loadparm system. This now also includes per-service parameters. Andrew Bartlett
2011-07-07s4 provision: Add some of the AD-specific DNS records to the directoryKai Blin3-9/+236
Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Jul 7 02:29:53 CEST 2011 on sn-devel-104
2011-07-07s4 provision: split up DNS provisioning into generic and samba-specific ldifsKai Blin3-21/+31
Signed-off-by: Kai Blin <kai@samba.org>
2011-07-06s4:torture/smb2: s/smb2cli_unlock/test_smb2_unlockStefan Metzmacher1-3/+3
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jul 6 19:07:42 CEST 2011 on sn-devel-104
2011-07-06s4:torture/smb2: s/smb2cli_lock/test_smb2_lockStefan Metzmacher1-19/+19
metze
2011-07-06libcli/smb move FILE_TYPE constants in commonAndrew Bartlett1-8/+0
This allows us to remove another _SAMBA_BUILD_ conditional Andrew Bartlett