Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-06-11 | s4/test: libnet_user tests should use common test_user_cleanup | Kamen Mazdrashki | 1 | -129/+5 | |
implementation instead of not-so-informative test_cleanup() | |||||
2010-06-11 | s4/test: Refactor test_user_cleanup to be more robust | Kamen Mazdrashki | 1 | -12/+84 | |
We always call this function with user's account RDN while samr_LookupNames() searches for samAccountName. | |||||
2010-06-11 | s4/test: remove duplicated comment | Kamen Mazdrashki | 1 | -3/+0 | |
2010-06-10 | s4:ldap.py - add testcase which demonstrates the reset of the "primaryGroupID" | Matthias Dieter Wallnöfer | 1 | -0/+7 | |
2010-06-10 | s4:samldb LDB module - fix up the case when the old and new "primaryGroupID" ↵ | Matthias Dieter Wallnöfer | 1 | -7/+7 | |
are the same | |||||
2010-06-10 | s4:samldb LDB module - don't create multiple "ac" module contexts on modify ↵ | Matthias Dieter Wallnöfer | 1 | -12/+6 | |
operations Since we do now run sequentially through all checks we don't need multiple "ac" contexts anymore. | |||||
2010-06-10 | s4:dcesrv_samr_Add/DeleteAliasMember - provide better NTSTATUS return codes ↵ | Matthias Dieter Wallnöfer | 1 | -6/+19 | |
when something didn't work | |||||
2010-06-10 | s4:dcesrv_samr_GetAliasMembership - fix type of counter variables | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
2010-06-10 | s4:dcesrv_samr_DeleteAliasMember - add more braces to fit better the coding ↵ | Matthias Dieter Wallnöfer | 1 | -4/+6 | |
styles | |||||
2010-06-10 | s4:dcesrv_samr_AddAliasMembership - Merge the two error blocks into one | Matthias Dieter Wallnöfer | 1 | -6/+3 | |
2010-06-10 | s4:dcesrv_samr_Add/DelGroupMember - remove the account type check | Matthias Dieter Wallnöfer | 1 | -11/+10 | |
MS-SAMR 3.1.5.8 speaks from accounts which are not necessarely only users. | |||||
2010-06-10 | s4:dcesrv_samr_AddGroupMember - also the error code ↵ | Matthias Dieter Wallnöfer | 1 | -0/+1 | |
"LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS" is allowed This is returned when the group is the primary group of the specified entry. | |||||
2010-06-10 | s4:samba_dsdb LDB module - move the "objectclass_attrs" module back | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
I think it should be lower in order to control also the "instanceType" module. | |||||
2010-06-10 | s4:ldap.py - add a test to demonstrate the 'instanceType' behaviour | Matthias Dieter Wallnöfer | 1 | -0/+39 | |
2010-06-10 | s4:instancetype LDB module - prevent all types of "instanceType" manipulation | Matthias Dieter Wallnöfer | 1 | -0/+16 | |
Also on Windows Server you aren't able to change it. | |||||
2010-06-07 | ldb:pyldb.c - we cannot use "ldb_dn_compare" if both message DNs are NULL in ↵ | Matthias Dieter Wallnöfer | 1 | -3/+5 | |
"py_ldb_msg_compare" Discovered by the testcase. | |||||
2010-06-07 | s4 python: add more unit tests to verify the compare tests | Matthieu Patou | 1 | -0/+19 | |
2010-06-07 | s4:objectclass_attrs LDB module - move the single-valued attribute check ↵ | Matthias Dieter Wallnöfer | 2 | -45/+13 | |
into this module It seems to me more consistent (and also to keep the same behaviour on all backends). Also the DRS hack should therefore not be needed anymore since the "repl_meta_data" module launches requests behind "objectclass_attrs". | |||||
2010-06-07 | s4:rdn_name LDB module - move the "distinguishedName" write prevent check here | Matthias Dieter Wallnöfer | 2 | -7/+6 | |
In my eyes it fits better here than in the TDB backend code. | |||||
2010-06-07 | s4:samba_dsdb LDB module - fix typos | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-06-07 | s4:samba_dsdb LDB module - enhance/fix module rule comments | Matthias Dieter Wallnöfer | 1 | -3/+5 | |
2010-06-07 | s4:ldap.py - add some "objectclass" behaviour tests | Matthias Dieter Wallnöfer | 1 | -0/+190 | |
2010-06-07 | s4:objectclass LDB module - rework the code which handles the objectclasses ↵ | Matthias Dieter Wallnöfer | 1 | -149/+191 | |
modification Before it has been very incomplete. We try now to match the Windows Server behaviour as close as possible. | |||||
2010-06-07 | s4:ldap.py - enhance the attributes testcase to demonstrate how the ↵ | Matthias Dieter Wallnöfer | 1 | -2/+75 | |
attributes are checked against the schema and the specified objectclasses This demonstrates the bew "objectclass_attrs" LDB module behaviour. | |||||
2010-06-07 | s4:acl LDB module - LDB attribute names should be compared using ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
"ldb_attr_cmp" or "strcasecmp" | |||||
2010-06-07 | s4:acl LDB module - adaption for "objectclass_attrs" module | Matthias Dieter Wallnöfer | 1 | -5/+15 | |
Since the attribute schema checking code moved back we need to give here the "LDB_ERR_NO_SUCH_ATTRIBUTE" error. | |||||
2010-06-07 | s4:objectclass LDB module - remove "fix_check_attributes" | Matthias Dieter Wallnöfer | 1 | -62/+0 | |
Also this task is now performed by the "objectclass_attrs" LDB module. | |||||
2010-06-07 | s4:samldb LDB module - adjust the module to set always a ↵ | Matthias Dieter Wallnöfer | 1 | -35/+45 | |
"defaultObjectCategory" on objectclass add operations This is needed to make the "objectclass_attrs" LDB module happy. The search check and case adjustment are done as it was using a second modify operation. | |||||
2010-06-07 | s4:remove the "validate_update" LDB module - the task is now handled by the ↵ | Matthias Dieter Wallnöfer | 4 | -141/+0 | |
far more complete "objectclass_attrs" LDB module | |||||
2010-06-07 | s4:dsdb - introduce a new "objectclass_attrs" LDB module which performs the ↵ | Matthias Dieter Wallnöfer | 3 | -0/+401 | |
objectclass attributes checking Until now we had no real consistent mechanism which allowed us to check if attributes belong to the specified objectclasses. | |||||
2010-06-07 | s4:objectclass LDB module - instanciate the schema variable centrally on the ↵ | Matthias Dieter Wallnöfer | 1 | -28/+28 | |
"ac" context creation This unifies the position when the schema is read and prevents multiple instanciations (eg on a modification operation). | |||||
2010-06-07 | s4:samldb LDB module - finally we can remove the RDN check | Matthias Dieter Wallnöfer | 1 | -53/+0 | |
This is now dynamically always done by the objectclass LDB module | |||||
2010-06-07 | s4:ldap.py - enhance the rename tests to demonstrate the functionality | Matthias Dieter Wallnöfer | 1 | -0/+37 | |
2010-06-07 | s4:objectclass LDB module - finally implement the correct entry rename ↵ | Matthias Dieter Wallnöfer | 1 | -25/+130 | |
protections Only the "systemFlags" check is still missing. | |||||
2010-06-07 | s4:objectclass LDB module - cosmetic change | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
2010-06-07 | s4:objectclass LDB module - remove duplicated code | Matthias Dieter Wallnöfer | 1 | -13/+4 | |
2010-06-07 | s4:objectclass LDB module - fix counter variable types | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-06-07 | s4:objectclass LDB module - explain why the search can return with an empty ↵ | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
return | |||||
2010-06-07 | s4:objectclass LDB module - this "talloc_steal" is not necessary | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
The "parent_dn" was created on the "ac" context which lives anyway longer than this child request. | |||||
2010-06-07 | s4:objectclass LDB module - fix error result if an entry doesn't contain a ↵ | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
structural objectclass We need to return LDB_ERR_UNWILLING_TO_PERFORM (not LDB_ERR_NAMING_VIOLATION). | |||||
2010-06-07 | s4:objectclass LDB module - use "ldb_oom" for expressing out of memory | Matthias Dieter Wallnöfer | 1 | -2/+1 | |
2010-06-07 | s4:objectclass LDB module - fix header and add my copyright | Matthias Dieter Wallnöfer | 1 | -4/+6 | |
2010-06-07 | s4-smbtorture: test workstation auth as well in RPC-SPOOLSS-ACCESS. | Günther Deschner | 1 | -2/+34 | |
Guenther | |||||
2010-06-07 | s4:ldb python bindings - implement comparison on Python LDB Message objects | Matthieu Patou | 1 | -2/+38 | |
Coauthors: Jelmer Vernooij, Matthias Dieter Wallnöfer | |||||
2010-06-07 | s4: Remove an uselessly exposed control | Matthieu Patou | 1 | -1/+0 | |
2010-06-07 | s4-smbtorture: handle printservers w/o printers in RPC-SPOOLSS-ACCESS. | Günther Deschner | 1 | -2/+2 | |
Guenther | |||||
2010-06-06 | s4:password_hash LDB module - adapt the module to the new ↵ | Matthias Dieter Wallnöfer | 1 | -17/+6 | |
"ldb_msg_remove_attr" behaviour | |||||
2010-06-06 | ldb:ldb_msg_remove_attr - provide a better implementation | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
We can have some special (bad) messages which contain multiple message elements for the same attribute. The AD password change ones are such an example. | |||||
2010-06-06 | s4:samldb LDB module - this codepart isn't needed due to the objectclass LDB ↵ | Matthias Dieter Wallnöfer | 1 | -13/+0 | |
module When a "computer" entry will be added, also the inherited "user" objectclass is going to be specified. | |||||
2010-06-06 | s4:get_last_structural_class - only real structural classes can be ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
candidates for fetching the last one Classes with objectCategory = 1 are always structural, these with objectCategory = 0 also (as we can see in our Windows 2008 R2 schema file where class "Person" has 0 but is structural). Abstract classes and auxiliary ones cannot be considered (objectCategory = 2, 3) http://msdn.microsoft.com/en-us/library/ms677964(VS.85).aspx |