r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
/*
Partitions ldb module
Copyright ( C ) Andrew Bartlett < abartlet @ samba . org > 2006
2007-01-07 19:11:27 +00:00
Copyright ( C ) Stefan Metzmacher < metze @ samba . org > 2007
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
* NOTICE : this module is NOT released under the GNU LGPL license as
2008-03-28 01:08:49 -05:00
* other ldb code . This module is release under the GNU GPL v3 or
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
* later license .
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
2007-07-10 02:07:03 +00:00
the Free Software Foundation ; either version 3 of the License , or
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
2007-07-10 02:07:03 +00:00
along with this program . If not , see < http : //www.gnu.org/licenses/>.
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
*/
/*
* Name : ldb
*
* Component : ldb partitions module
*
* Description : Implement LDAP partitions
*
* Author : Andrew Bartlett
2007-01-07 19:11:27 +00:00
* Author : Stefan Metzmacher
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
*/
# include "includes.h"
2007-05-05 18:50:56 +00:00
# include "ldb/include/ldb_includes.h"
2007-01-07 19:11:27 +00:00
# include "dsdb/samdb/samdb.h"
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
struct partition_private_data {
2007-01-15 17:53:53 +00:00
struct dsdb_control_current_partition * * partitions ;
2006-07-29 01:13:53 +00:00
struct ldb_dn * * replicate ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
} ;
2008-09-11 18:36:28 -04:00
struct part_request {
struct ldb_module * module ;
struct ldb_request * req ;
} ;
2006-07-22 16:56:33 +00:00
struct partition_context {
2006-07-17 22:36:04 +00:00
struct ldb_module * module ;
2008-09-11 18:36:28 -04:00
struct ldb_request * req ;
2006-07-17 22:36:04 +00:00
2008-09-11 18:36:28 -04:00
struct part_request * part_req ;
2006-07-29 01:13:53 +00:00
int num_requests ;
int finished_requests ;
2006-07-17 22:36:04 +00:00
} ;
2008-09-11 18:36:28 -04:00
static struct partition_context * partition_init_ctx ( struct ldb_module * module , struct ldb_request * req )
2006-07-17 22:36:04 +00:00
{
2006-07-22 16:56:33 +00:00
struct partition_context * ac ;
2006-07-17 22:36:04 +00:00
2008-09-11 18:36:28 -04:00
ac = talloc_zero ( req , struct partition_context ) ;
2006-07-17 22:36:04 +00:00
if ( ac = = NULL ) {
2006-08-13 07:33:57 +00:00
ldb_set_errstring ( module - > ldb , " Out of Memory " ) ;
2006-07-17 22:36:04 +00:00
return NULL ;
}
ac - > module = module ;
2008-09-11 18:36:28 -04:00
ac - > req = req ;
2007-01-11 09:38:21 +00:00
return ac ;
2006-07-17 22:36:04 +00:00
}
2008-09-11 18:36:28 -04:00
# define PARTITION_FIND_OP(module, op) do { \
struct ldb_context * ldbctx = module - > ldb ; \
while ( module & & module - > ops - > op = = NULL ) module = module - > next ; \
if ( module = = NULL ) { \
ldb_asprintf_errstring ( ldbctx , \
" Unable to find backend operation for " # op ) ; \
return LDB_ERR_OPERATIONS_ERROR ; \
} \
} while ( 0 )
/*
* helper functions to call the next module in chain
* */
int partition_request ( struct ldb_module * module , struct ldb_request * request )
2006-07-10 11:24:46 +00:00
{
2008-09-11 18:36:28 -04:00
int ret ;
switch ( request - > operation ) {
case LDB_SEARCH :
PARTITION_FIND_OP ( module , search ) ;
ret = module - > ops - > search ( module , request ) ;
break ;
case LDB_ADD :
PARTITION_FIND_OP ( module , add ) ;
ret = module - > ops - > add ( module , request ) ;
break ;
case LDB_MODIFY :
PARTITION_FIND_OP ( module , modify ) ;
ret = module - > ops - > modify ( module , request ) ;
break ;
case LDB_DELETE :
PARTITION_FIND_OP ( module , del ) ;
ret = module - > ops - > del ( module , request ) ;
break ;
case LDB_RENAME :
PARTITION_FIND_OP ( module , rename ) ;
ret = module - > ops - > rename ( module , request ) ;
break ;
case LDB_EXTENDED :
PARTITION_FIND_OP ( module , extended ) ;
ret = module - > ops - > extended ( module , request ) ;
break ;
case LDB_SEQUENCE_NUMBER :
PARTITION_FIND_OP ( module , sequence_number ) ;
ret = module - > ops - > sequence_number ( module , request ) ;
break ;
default :
PARTITION_FIND_OP ( module , request ) ;
ret = module - > ops - > request ( module , request ) ;
break ;
2006-07-10 11:24:46 +00:00
}
2008-09-11 18:36:28 -04:00
if ( ret = = LDB_SUCCESS ) {
return ret ;
}
if ( ! ldb_errstring ( module - > ldb ) ) {
/* Set a default error string, to place the blame somewhere */
ldb_asprintf_errstring ( module - > ldb ,
" error in module %s: %s (%d) " ,
module - > ops - > name ,
ldb_strerror ( ret ) , ret ) ;
}
return ret ;
2006-07-10 11:24:46 +00:00
}
2007-01-17 13:46:16 +00:00
static struct dsdb_control_current_partition * find_partition ( struct partition_private_data * data ,
struct ldb_dn * dn )
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
{
int i ;
2007-01-17 13:46:16 +00:00
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
/* Look at base DN */
/* Figure out which partition it is under */
/* Skip the lot if 'data' isn't here yet (initialistion) */
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2006-11-23 22:06:07 +00:00
if ( ldb_dn_compare_base ( data - > partitions [ i ] - > dn , dn ) = = 0 ) {
2007-01-17 13:46:16 +00:00
return data - > partitions [ i ] ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
}
2007-01-17 13:46:16 +00:00
return NULL ;
} ;
2007-12-17 04:22:44 +01:00
/**
* fire the caller ' s callback for every entry , but only send ' done ' once .
*/
2008-09-11 18:36:28 -04:00
static int partition_req_callback ( struct ldb_request * req ,
struct ldb_reply * ares )
2006-07-29 01:13:53 +00:00
{
struct partition_context * ac ;
2008-09-11 18:36:28 -04:00
struct ldb_module * module ;
struct ldb_request * nreq ;
int ret ;
2006-07-29 01:13:53 +00:00
2008-09-11 18:36:28 -04:00
ac = talloc_get_type ( req - > context , struct partition_context ) ;
2006-07-29 01:13:53 +00:00
2008-09-11 18:36:28 -04:00
if ( ! ares ) {
return ldb_module_done ( ac - > req , NULL , NULL ,
LDB_ERR_OPERATIONS_ERROR ) ;
}
if ( ares - > error ! = LDB_SUCCESS ) {
return ldb_module_done ( ac - > req , ares - > controls ,
ares - > response , ares - > error ) ;
2006-07-29 01:13:53 +00:00
}
2008-09-11 18:36:28 -04:00
switch ( ares - > type ) {
case LDB_REPLY_REFERRAL :
/* ignore referrals for now */
break ;
2006-07-29 01:13:53 +00:00
2008-09-11 18:36:28 -04:00
case LDB_REPLY_ENTRY :
if ( ac - > req - > operation ! = LDB_SEARCH ) {
ldb_set_errstring ( ac - > module - > ldb ,
" partition_req_callback: "
" Unsupported reply type for this request " ) ;
return ldb_module_done ( ac - > req , NULL , NULL ,
LDB_ERR_OPERATIONS_ERROR ) ;
}
return ldb_module_send_entry ( ac - > req , ares - > message ) ;
case LDB_REPLY_DONE :
if ( ac - > req - > operation = = LDB_EXTENDED ) {
/* FIXME: check for ares->response, replmd does not fill it ! */
if ( ares - > response ) {
if ( strcmp ( ares - > response - > oid , LDB_EXTENDED_START_TLS_OID ) ! = 0 ) {
ldb_set_errstring ( ac - > module - > ldb ,
" partition_req_callback: "
" Unknown extended reply, "
" only supports START_TLS " ) ;
talloc_free ( ares ) ;
return ldb_module_done ( ac - > req , NULL , NULL ,
LDB_ERR_OPERATIONS_ERROR ) ;
}
}
}
2006-07-29 02:00:33 +00:00
2006-07-29 01:13:53 +00:00
ac - > finished_requests + + ;
if ( ac - > finished_requests = = ac - > num_requests ) {
2008-09-11 18:36:28 -04:00
/* this was the last one, call callback */
return ldb_module_done ( ac - > req , ares - > controls ,
ares - > response , ares - > error ) ;
2006-07-29 01:13:53 +00:00
}
2008-09-11 18:36:28 -04:00
/* not the last, now call the next one */
module = ac - > part_req [ ac - > finished_requests ] . module ;
nreq = ac - > part_req [ ac - > finished_requests ] . req ;
ret = partition_request ( module , nreq ) ;
if ( ret ! = LDB_SUCCESS ) {
talloc_free ( ares ) ;
return ldb_module_done ( ac - > req , NULL , NULL , ret ) ;
}
break ;
2006-07-29 01:13:53 +00:00
}
2008-09-11 18:36:28 -04:00
2006-07-29 01:13:53 +00:00
talloc_free ( ares ) ;
2008-09-11 18:36:28 -04:00
return LDB_SUCCESS ;
2006-07-29 01:13:53 +00:00
}
2008-09-11 18:36:28 -04:00
static int partition_prep_request ( struct partition_context * ac ,
2007-03-13 00:59:06 +00:00
struct dsdb_control_current_partition * partition )
2006-07-17 22:36:04 +00:00
{
int ret ;
2006-09-14 03:15:30 +00:00
struct ldb_request * req ;
2007-01-17 16:55:37 +00:00
2008-09-11 18:36:28 -04:00
ac - > part_req = talloc_realloc ( ac , ac - > part_req ,
struct part_request ,
ac - > num_requests + 1 ) ;
if ( ac - > part_req = = NULL ) {
2007-02-22 01:54:40 +00:00
ldb_oom ( ac - > module - > ldb ) ;
2006-07-17 22:36:04 +00:00
return LDB_ERR_OPERATIONS_ERROR ;
}
2008-09-11 18:36:28 -04:00
switch ( ac - > req - > operation ) {
case LDB_SEARCH :
ret = ldb_build_search_req_ex ( & req , ac - > module - > ldb ,
ac - > part_req ,
ac - > req - > op . search . base ,
ac - > req - > op . search . scope ,
ac - > req - > op . search . tree ,
ac - > req - > op . search . attrs ,
ac - > req - > controls ,
ac , partition_req_callback ,
ac - > req ) ;
break ;
case LDB_ADD :
ret = ldb_build_add_req ( & req , ac - > module - > ldb , ac - > part_req ,
ac - > req - > op . add . message ,
ac - > req - > controls ,
ac , partition_req_callback ,
ac - > req ) ;
break ;
case LDB_MODIFY :
ret = ldb_build_mod_req ( & req , ac - > module - > ldb , ac - > part_req ,
ac - > req - > op . mod . message ,
ac - > req - > controls ,
ac , partition_req_callback ,
ac - > req ) ;
break ;
case LDB_DELETE :
ret = ldb_build_del_req ( & req , ac - > module - > ldb , ac - > part_req ,
ac - > req - > op . del . dn ,
ac - > req - > controls ,
ac , partition_req_callback ,
ac - > req ) ;
break ;
case LDB_RENAME :
ret = ldb_build_rename_req ( & req , ac - > module - > ldb , ac - > part_req ,
ac - > req - > op . rename . olddn ,
ac - > req - > op . rename . newdn ,
ac - > req - > controls ,
ac , partition_req_callback ,
ac - > req ) ;
break ;
case LDB_EXTENDED :
ret = ldb_build_extended_req ( & req , ac - > module - > ldb ,
ac - > part_req ,
ac - > req - > op . extended . oid ,
ac - > req - > op . extended . data ,
ac - > req - > controls ,
ac , partition_req_callback ,
ac - > req ) ;
break ;
default :
ldb_set_errstring ( ac - > module - > ldb ,
" Unsupported request type! " ) ;
ret = LDB_ERR_UNWILLING_TO_PERFORM ;
2006-07-17 22:36:04 +00:00
}
2007-02-22 01:54:40 +00:00
2008-09-11 18:36:28 -04:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
ac - > part_req [ ac - > num_requests ] . req = req ;
if ( ac - > req - > controls ) {
req - > controls = talloc_memdup ( req , ac - > req - > controls ,
talloc_get_size ( ac - > req - > controls ) ) ;
2007-02-22 01:54:40 +00:00
if ( req - > controls = = NULL ) {
ldb_oom ( ac - > module - > ldb ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
}
2006-09-14 03:15:30 +00:00
2007-01-17 16:55:37 +00:00
if ( partition ) {
2008-09-11 18:36:28 -04:00
ac - > part_req [ ac - > num_requests ] . module = partition - > module ;
ret = ldb_request_add_control ( req ,
DSDB_CONTROL_CURRENT_PARTITION_OID ,
false , partition ) ;
2007-01-17 16:55:37 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
2008-09-11 18:36:28 -04:00
if ( req - > operation = = LDB_SEARCH ) {
/* If the search is for 'more' than this partition,
* then change the basedn , so a remote LDAP server
* doesn ' t object */
if ( ldb_dn_compare_base ( partition - > dn ,
req - > op . search . base ) ! = 0 ) {
req - > op . search . base = partition - > dn ;
}
}
} else {
/* make sure you put the NEXT module here, or
* partition_request ( ) will simply loop forever on itself */
ac - > part_req [ ac - > num_requests ] . module = ac - > module - > next ;
2006-07-17 22:36:04 +00:00
}
2007-01-17 16:55:37 +00:00
2006-07-29 01:13:53 +00:00
ac - > num_requests + + ;
2008-09-11 18:36:28 -04:00
2006-07-17 22:36:04 +00:00
return LDB_SUCCESS ;
}
2008-09-11 18:36:28 -04:00
static int partition_call_first ( struct partition_context * ac )
{
return partition_request ( ac - > part_req [ 0 ] . module , ac - > part_req [ 0 ] . req ) ;
}
2007-12-17 04:22:44 +01:00
/**
* Send a request down to all the partitions
*/
2006-07-29 01:13:53 +00:00
static int partition_send_all ( struct ldb_module * module ,
2007-03-13 00:59:06 +00:00
struct partition_context * ac ,
struct ldb_request * req )
2006-07-29 01:13:53 +00:00
{
int i ;
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
2008-09-11 18:36:28 -04:00
int ret = partition_prep_request ( ac , NULL ) ;
2006-07-29 01:13:53 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-09-11 18:36:28 -04:00
ret = partition_prep_request ( ac , data - > partitions [ i ] ) ;
2006-07-29 01:13:53 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
}
2008-09-11 18:36:28 -04:00
/* fire the first one */
return partition_call_first ( ac ) ;
2006-07-29 01:13:53 +00:00
}
2007-12-17 04:22:44 +01:00
/**
* Figure out which backend a request needs to be aimed at . Some
* requests must be replicated to all backends
*/
2006-11-22 00:59:34 +00:00
static int partition_replicate ( struct ldb_module * module , struct ldb_request * req , struct ldb_dn * dn )
2006-07-29 01:13:53 +00:00
{
2008-09-11 18:36:28 -04:00
struct partition_context * ac ;
2007-01-17 16:11:46 +00:00
unsigned i ;
int ret ;
2007-01-17 14:19:06 +00:00
struct dsdb_control_current_partition * partition ;
2006-07-29 01:13:53 +00:00
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
2008-09-11 18:36:28 -04:00
if ( ! data | | ! data - > partitions ) {
return ldb_next_request ( module , req ) ;
}
2006-07-29 01:13:53 +00:00
2007-03-13 00:59:06 +00:00
if ( req - > operation ! = LDB_SEARCH ) {
/* Is this a special DN, we need to replicate to every backend? */
for ( i = 0 ; data - > replicate & & data - > replicate [ i ] ; i + + ) {
if ( ldb_dn_compare ( data - > replicate [ i ] ,
dn ) = = 0 ) {
2008-09-11 18:36:28 -04:00
ac = partition_init_ctx ( module , req ) ;
2007-03-13 00:59:06 +00:00
if ( ! ac ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
2008-01-16 08:49:54 +11:00
return partition_send_all ( module , ac , req ) ;
2006-07-29 01:13:53 +00:00
}
}
}
2007-01-17 14:19:06 +00:00
/* Otherwise, we need to find the partition to fire it to */
/* Find partition */
partition = find_partition ( data , dn ) ;
if ( ! partition ) {
/*
* if we haven ' t found a matching partition
* pass the request to the main ldb
*
* TODO : we should maybe return an error here
* if it ' s not a special dn
*/
2008-01-16 08:49:54 +11:00
2007-01-17 14:19:06 +00:00
return ldb_next_request ( module , req ) ;
}
2008-09-11 18:36:28 -04:00
ac = partition_init_ctx ( module , req ) ;
if ( ! ac ) {
2007-01-17 14:19:06 +00:00
return LDB_ERR_OPERATIONS_ERROR ;
}
2006-07-29 01:13:53 +00:00
2008-09-11 18:36:28 -04:00
/* we need to add a control but we never touch the original request */
ret = partition_prep_request ( ac , partition ) ;
2007-01-17 16:11:46 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
2008-09-11 18:36:28 -04:00
/* fire the first one */
return partition_call_first ( ac ) ;
2006-07-29 01:13:53 +00:00
}
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
/* search */
static int partition_search ( struct ldb_module * module , struct ldb_request * req )
{
2008-01-16 08:49:54 +11:00
struct ldb_control * * saved_controls ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
/* Find backend */
2006-07-17 22:36:04 +00:00
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
/* issue request */
/* (later) consider if we should be searching multiple
* partitions ( for ' invisible ' partition behaviour */
2008-09-11 18:36:28 -04:00
2007-02-22 01:54:40 +00:00
struct ldb_control * search_control = ldb_request_get_control ( req , LDB_CONTROL_SEARCH_OPTIONS_OID ) ;
2008-01-16 08:49:54 +11:00
struct ldb_control * domain_scope_control = ldb_request_get_control ( req , LDB_CONTROL_DOMAIN_SCOPE_OID ) ;
2007-02-22 01:54:40 +00:00
struct ldb_search_options_control * search_options = NULL ;
if ( search_control ) {
search_options = talloc_get_type ( search_control - > data , struct ldb_search_options_control ) ;
}
2008-01-16 08:49:54 +11:00
/* Remove the domain_scope control, so we don't confuse a backend server */
if ( domain_scope_control & & ! save_controls ( domain_scope_control , req , & saved_controls ) ) {
ldb_oom ( module - > ldb ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
/* TODO:
Generate referrals ( look for a partition under this DN ) if we don ' t have the above control specified
*/
2007-02-22 01:54:40 +00:00
if ( search_options & & ( search_options - > search_options & LDB_SEARCH_OPTION_PHANTOM_ROOT ) ) {
2006-07-17 22:36:04 +00:00
int ret , i ;
2006-07-22 16:56:33 +00:00
struct partition_context * ac ;
2007-03-13 00:59:06 +00:00
if ( ( search_options - > search_options & ~ LDB_SEARCH_OPTION_PHANTOM_ROOT ) = = 0 ) {
/* We have processed this flag, so we are done with this control now */
2008-01-16 08:49:54 +11:00
/* Remove search control, so we don't confuse a backend server */
if ( search_control & & ! save_controls ( search_control , req , & saved_controls ) ) {
ldb_oom ( module - > ldb ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
2007-03-13 00:59:06 +00:00
}
2008-09-11 18:36:28 -04:00
ac = partition_init_ctx ( module , req ) ;
2007-01-11 09:38:21 +00:00
if ( ! ac ) {
2006-07-17 22:36:04 +00:00
return LDB_ERR_OPERATIONS_ERROR ;
}
2007-01-11 09:38:21 +00:00
2006-09-14 03:15:30 +00:00
/* Search from the base DN */
2006-11-22 00:59:34 +00:00
if ( ! req - > op . search . base | | ldb_dn_is_null ( req - > op . search . base ) ) {
2008-01-16 08:49:54 +11:00
return partition_send_all ( module , ac , req ) ;
2006-09-14 03:15:30 +00:00
}
2006-07-17 22:36:04 +00:00
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
/* Find all partitions under the search base */
2008-10-02 21:58:46 -07:00
if ( ldb_dn_compare_base ( data - > partitions [ i ] - > dn , req - > op . search . base ) = = 0 ) {
2008-09-11 18:36:28 -04:00
ret = partition_prep_request ( ac , data - > partitions [ i ] ) ;
2006-07-17 22:36:04 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
}
}
2006-09-14 03:15:30 +00:00
/* Perhaps we didn't match any partitions. Try the main partition, only */
2006-07-29 01:13:53 +00:00
if ( ac - > num_requests = = 0 ) {
2007-01-11 09:38:21 +00:00
talloc_free ( ac ) ;
2006-09-14 03:15:30 +00:00
return ldb_next_request ( module , req ) ;
2006-07-17 22:36:04 +00:00
}
2008-09-11 18:36:28 -04:00
/* fire the first one */
return partition_call_first ( ac ) ;
2006-07-17 22:36:04 +00:00
} else {
2007-03-13 00:59:06 +00:00
/* Handle this like all other requests */
2008-01-16 08:49:54 +11:00
if ( search_control & & ( search_options - > search_options & ~ LDB_SEARCH_OPTION_PHANTOM_ROOT ) = = 0 ) {
/* We have processed this flag, so we are done with this control now */
/* Remove search control, so we don't confuse a backend server */
if ( search_control & & ! save_controls ( search_control , req , & saved_controls ) ) {
ldb_oom ( module - > ldb ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
}
2007-03-13 00:59:06 +00:00
return partition_replicate ( module , req , req - > op . search . base ) ;
2006-07-17 22:36:04 +00:00
}
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* add */
static int partition_add ( struct ldb_module * module , struct ldb_request * req )
{
2006-07-29 01:13:53 +00:00
return partition_replicate ( module , req , req - > op . add . message - > dn ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* modify */
static int partition_modify ( struct ldb_module * module , struct ldb_request * req )
{
2006-07-29 01:13:53 +00:00
return partition_replicate ( module , req , req - > op . mod . message - > dn ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* delete */
static int partition_delete ( struct ldb_module * module , struct ldb_request * req )
{
2006-07-29 01:13:53 +00:00
return partition_replicate ( module , req , req - > op . del . dn ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* rename */
static int partition_rename ( struct ldb_module * module , struct ldb_request * req )
{
2007-10-24 04:32:24 +02:00
int i , matched = - 1 ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
/* Find backend */
2007-07-09 12:31:35 +00:00
struct dsdb_control_current_partition * backend , * backend2 ;
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
2008-09-11 18:36:28 -04:00
/* Skip the lot if 'data' isn't here yet (initialization) */
2007-07-09 12:31:35 +00:00
if ( ! data ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
backend = find_partition ( data , req - > op . rename . olddn ) ;
backend2 = find_partition ( data , req - > op . rename . newdn ) ;
if ( ( backend & & ! backend2 ) | | ( ! backend & & backend2 ) ) {
return LDB_ERR_AFFECTS_MULTIPLE_DSAS ;
}
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
2007-07-09 12:31:35 +00:00
if ( backend ! = backend2 ) {
ldb_asprintf_errstring ( module - > ldb ,
" Cannot rename from %s in %s to %s in %s: %s " ,
ldb_dn_get_linearized ( req - > op . rename . olddn ) ,
ldb_dn_get_linearized ( backend - > dn ) ,
ldb_dn_get_linearized ( req - > op . rename . newdn ) ,
ldb_dn_get_linearized ( backend2 - > dn ) ,
ldb_strerror ( LDB_ERR_AFFECTS_MULTIPLE_DSAS ) ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_AFFECTS_MULTIPLE_DSAS ;
}
2007-10-24 04:32:24 +02:00
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-10-02 21:58:46 -07:00
if ( ldb_dn_compare_base ( data - > partitions [ i ] - > dn , req - > op . rename . olddn ) = = 0 ) {
2007-10-24 04:32:24 +02:00
matched = i ;
}
}
if ( matched > 0 ) {
ldb_asprintf_errstring ( module - > ldb ,
" Cannot rename from %s to %s, subtree rename would cross partition %s: %s " ,
ldb_dn_get_linearized ( req - > op . rename . olddn ) ,
ldb_dn_get_linearized ( req - > op . rename . newdn ) ,
ldb_dn_get_linearized ( data - > partitions [ matched ] - > dn ) ,
ldb_strerror ( LDB_ERR_AFFECTS_MULTIPLE_DSAS ) ) ;
return LDB_ERR_AFFECTS_MULTIPLE_DSAS ;
}
2006-07-29 01:13:53 +00:00
return partition_replicate ( module , req , req - > op . rename . olddn ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* start a transaction */
static int partition_start_trans ( struct ldb_module * module )
{
2006-07-10 11:24:46 +00:00
int i , ret ;
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
/* Look at base DN */
/* Figure out which partition it is under */
2008-09-11 18:36:28 -04:00
/* Skip the lot if 'data' isn't here yet (initialization) */
2006-07-10 11:24:46 +00:00
ret = ldb_next_start_trans ( module ) ;
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-09-11 18:36:28 -04:00
struct ldb_module * next = data - > partitions [ i ] - > module ;
PARTITION_FIND_OP ( next , start_transaction ) ;
2006-07-10 11:24:46 +00:00
2008-09-11 18:36:28 -04:00
ret = next - > ops - > start_transaction ( next ) ;
2006-07-10 11:24:46 +00:00
if ( ret ! = LDB_SUCCESS ) {
/* Back it out, if it fails on one */
for ( i - - ; i > = 0 ; i - - ) {
2008-09-11 18:36:28 -04:00
next = data - > partitions [ i ] - > module ;
PARTITION_FIND_OP ( next , del_transaction ) ;
next - > ops - > del_transaction ( next ) ;
2006-07-10 11:24:46 +00:00
}
2008-09-11 18:36:28 -04:00
ldb_next_del_trans ( module ) ;
2006-07-10 11:24:46 +00:00
return ret ;
}
}
return LDB_SUCCESS ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* end a transaction */
static int partition_end_trans ( struct ldb_module * module )
{
2008-09-11 18:36:28 -04:00
int i , ret ;
2006-07-10 11:24:46 +00:00
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
ret = ldb_next_end_trans ( module ) ;
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
/* Look at base DN */
/* Figure out which partition it is under */
/* Skip the lot if 'data' isn't here yet (initialistion) */
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-09-11 18:36:28 -04:00
struct ldb_module * next = data - > partitions [ i ] - > module ;
PARTITION_FIND_OP ( next , end_transaction ) ;
ret = next - > ops - > end_transaction ( next ) ;
2006-07-10 11:24:46 +00:00
if ( ret ! = LDB_SUCCESS ) {
2008-09-11 18:36:28 -04:00
/* Back it out, if it fails on one */
for ( i - - ; i > = 0 ; i - - ) {
next = data - > partitions [ i ] - > module ;
PARTITION_FIND_OP ( next , del_transaction ) ;
2006-07-10 11:24:46 +00:00
2008-09-11 18:36:28 -04:00
next - > ops - > del_transaction ( next ) ;
}
ldb_next_del_trans ( module ) ;
return ret ;
2006-07-10 11:24:46 +00:00
}
}
2008-09-11 18:36:28 -04:00
return LDB_SUCCESS ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
/* delete a transaction */
static int partition_del_trans ( struct ldb_module * module )
{
2006-07-10 11:24:46 +00:00
int i , ret , ret2 = LDB_SUCCESS ;
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
2006-07-11 02:04:43 +00:00
ret = ldb_next_del_trans ( module ) ;
if ( ret ! = LDB_SUCCESS ) {
ret2 = ret ;
}
2006-07-10 11:24:46 +00:00
/* Look at base DN */
/* Figure out which partition it is under */
/* Skip the lot if 'data' isn't here yet (initialistion) */
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-09-11 18:36:28 -04:00
struct ldb_module * next = data - > partitions [ i ] - > module ;
PARTITION_FIND_OP ( next , del_transaction ) ;
ret = next - > ops - > del_transaction ( next ) ;
2006-07-10 11:24:46 +00:00
if ( ret ! = LDB_SUCCESS ) {
ret2 = ret ;
}
}
return ret2 ;
}
2008-09-11 18:36:28 -04:00
/* NOTE: ldb_sequence_number is still a completely SYNCHRONOUS call
* implemented only in ldb_rdb . It does not require ldb_wait ( ) to be
* called after a request is made */
2006-07-10 11:24:46 +00:00
static int partition_sequence_number ( struct ldb_module * module , struct ldb_request * req )
{
int i , ret ;
uint64_t seq_number = 0 ;
2006-09-21 06:44:12 +00:00
uint64_t timestamp_sequence = 0 ;
uint64_t timestamp = 0 ;
2006-07-10 11:24:46 +00:00
struct partition_private_data * data = talloc_get_type ( module - > private_data ,
struct partition_private_data ) ;
2006-07-11 02:04:43 +00:00
2006-09-21 06:44:12 +00:00
switch ( req - > op . seq_num . type ) {
case LDB_SEQ_NEXT :
case LDB_SEQ_HIGHEST_SEQ :
ret = ldb_next_request ( module , req ) ;
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
if ( req - > op . seq_num . flags & LDB_SEQ_TIMESTAMP_SEQUENCE ) {
timestamp_sequence = req - > op . seq_num . seq_num ;
} else {
seq_number = seq_number + req - > op . seq_num . seq_num ;
}
2008-09-11 18:36:28 -04:00
/* gross hack part1 */
ret = ldb_request_add_control ( req ,
DSDB_CONTROL_CURRENT_PARTITION_OID ,
false , NULL ) ;
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
2006-09-21 06:44:12 +00:00
/* Look at base DN */
/* Figure out which partition it is under */
/* Skip the lot if 'data' isn't here yet (initialistion) */
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-09-11 18:36:28 -04:00
/* gross hack part2 */
int j ;
for ( j = 0 ; req - > controls [ j ] ; j + + ) {
if ( strcmp ( req - > controls [ j ] - > oid , DSDB_CONTROL_CURRENT_PARTITION_OID ) = = 0 ) {
req - > controls [ j ] - > data = data - > partitions [ i ] ;
break ;
}
2008-07-15 22:10:42 +10:00
}
2008-09-11 18:36:28 -04:00
ret = partition_request ( data - > partitions [ i ] - > module , req ) ;
2006-09-21 06:44:12 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
if ( req - > op . seq_num . flags & LDB_SEQ_TIMESTAMP_SEQUENCE ) {
timestamp_sequence = MAX ( timestamp_sequence , req - > op . seq_num . seq_num ) ;
} else {
seq_number = seq_number + req - > op . seq_num . seq_num ;
}
}
/* fall though */
case LDB_SEQ_HIGHEST_TIMESTAMP :
{
struct ldb_request * date_req = talloc ( req , struct ldb_request ) ;
if ( ! date_req ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
* date_req = * req ;
date_req - > op . seq_num . flags = LDB_SEQ_HIGHEST_TIMESTAMP ;
ret = ldb_next_request ( module , date_req ) ;
2006-07-10 11:24:46 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
2006-09-21 06:44:12 +00:00
timestamp = date_req - > op . seq_num . seq_num ;
2008-09-11 18:36:28 -04:00
2006-09-21 06:44:12 +00:00
/* Look at base DN */
/* Figure out which partition it is under */
/* Skip the lot if 'data' isn't here yet (initialistion) */
for ( i = 0 ; data & & data - > partitions & & data - > partitions [ i ] ; i + + ) {
2008-09-11 18:36:28 -04:00
ret = partition_request ( data - > partitions [ i ] - > module , req ) ;
2006-09-21 06:44:12 +00:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
timestamp = MAX ( timestamp , date_req - > op . seq_num . seq_num ) ;
}
break ;
}
}
switch ( req - > op . seq_num . flags ) {
case LDB_SEQ_NEXT :
case LDB_SEQ_HIGHEST_SEQ :
2008-09-11 18:36:28 -04:00
2006-09-21 06:44:12 +00:00
req - > op . seq_num . flags = 0 ;
/* Has someone above set a timebase sequence? */
if ( timestamp_sequence ) {
req - > op . seq_num . seq_num = ( ( ( unsigned long long ) timestamp < < 24 ) | ( seq_number & 0xFFFFFF ) ) ;
} else {
req - > op . seq_num . seq_num = seq_number ;
}
if ( timestamp_sequence > req - > op . seq_num . seq_num ) {
req - > op . seq_num . seq_num = timestamp_sequence ;
req - > op . seq_num . flags | = LDB_SEQ_TIMESTAMP_SEQUENCE ;
}
req - > op . seq_num . flags | = LDB_SEQ_GLOBAL_SEQUENCE ;
break ;
case LDB_SEQ_HIGHEST_TIMESTAMP :
req - > op . seq_num . seq_num = timestamp ;
break ;
}
switch ( req - > op . seq_num . flags ) {
case LDB_SEQ_NEXT :
req - > op . seq_num . seq_num + + ;
2006-07-10 11:24:46 +00:00
}
return LDB_SUCCESS ;
}
2007-01-07 19:11:27 +00:00
static int partition_extended_replicated_objects ( struct ldb_module * module , struct ldb_request * req )
{
struct dsdb_extended_replicated_objects * ext ;
ext = talloc_get_type ( req - > op . extended . data , struct dsdb_extended_replicated_objects ) ;
if ( ! ext ) {
2007-01-13 11:37:13 +00:00
ldb_debug ( module - > ldb , LDB_DEBUG_FATAL , " partition_extended_replicated_objects: invalid extended data \n " ) ;
return LDB_ERR_PROTOCOL_ERROR ;
}
if ( ext - > version ! = DSDB_EXTENDED_REPLICATED_OBJECTS_VERSION ) {
ldb_debug ( module - > ldb , LDB_DEBUG_FATAL , " partition_extended_replicated_objects: extended data invalid version [%u != %u] \n " ,
ext - > version , DSDB_EXTENDED_REPLICATED_OBJECTS_VERSION ) ;
return LDB_ERR_PROTOCOL_ERROR ;
2007-01-07 19:11:27 +00:00
}
return partition_replicate ( module , req , ext - > partition_dn ) ;
}
2008-07-23 09:59:17 +03:00
static int partition_extended_schema_update_now ( struct ldb_module * module , struct ldb_request * req )
{
struct dsdb_control_current_partition * partition ;
struct partition_private_data * data ;
struct ldb_dn * schema_dn ;
struct partition_context * ac ;
int ret ;
schema_dn = talloc_get_type ( req - > op . extended . data , struct ldb_dn ) ;
if ( ! schema_dn ) {
ldb_debug ( module - > ldb , LDB_DEBUG_FATAL , " partition_extended: invalid extended data \n " ) ;
return LDB_ERR_PROTOCOL_ERROR ;
}
data = talloc_get_type ( module - > private_data , struct partition_private_data ) ;
if ( ! data ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
partition = find_partition ( data , schema_dn ) ;
if ( ! partition ) {
return ldb_next_request ( module , req ) ;
}
2008-09-11 18:36:28 -04:00
ac = partition_init_ctx ( module , req ) ;
2008-07-23 09:59:17 +03:00
if ( ! ac ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
2008-09-11 18:36:28 -04:00
/* we need to add a control but we never touch the original request */
ret = partition_prep_request ( ac , partition ) ;
2008-07-23 09:59:17 +03:00
if ( ret ! = LDB_SUCCESS ) {
return ret ;
}
2008-09-11 18:36:28 -04:00
/* fire the first one */
return partition_call_first ( ac ) ;
2008-07-23 09:59:17 +03:00
}
2007-01-07 19:11:27 +00:00
/* extended */
static int partition_extended ( struct ldb_module * module , struct ldb_request * req )
{
2008-09-11 18:36:28 -04:00
struct partition_private_data * data ;
2007-01-07 19:11:27 +00:00
struct partition_context * ac ;
2008-09-11 18:36:28 -04:00
data = talloc_get_type ( module - > private_data , struct partition_private_data ) ;
if ( ! data | | ! data - > partitions ) {
return ldb_next_request ( module , req ) ;
}
2007-01-07 19:11:27 +00:00
if ( strcmp ( req - > op . extended . oid , DSDB_EXTENDED_REPLICATED_OBJECTS_OID ) = = 0 ) {
return partition_extended_replicated_objects ( module , req ) ;
}
2008-07-23 09:59:17 +03:00
/* forward schemaUpdateNow operation to schema_fsmo module*/
if ( strcmp ( req - > op . extended . oid , DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID ) = = 0 ) {
return partition_extended_schema_update_now ( module , req ) ;
}
2007-01-07 19:11:27 +00:00
/*
* as the extended operation has no dn
* we need to send it to all partitions
*/
2008-09-11 18:36:28 -04:00
ac = partition_init_ctx ( module , req ) ;
2007-01-11 09:38:21 +00:00
if ( ! ac ) {
2007-01-07 19:11:27 +00:00
return LDB_ERR_OPERATIONS_ERROR ;
}
2008-09-11 18:36:28 -04:00
2008-01-16 08:49:54 +11:00
return partition_send_all ( module , ac , req ) ;
2007-01-07 19:11:27 +00:00
}
2008-09-11 18:36:28 -04:00
static int partition_sort_compare ( const void * v1 , const void * v2 )
2006-07-10 11:24:46 +00:00
{
2008-09-11 18:36:28 -04:00
struct dsdb_control_current_partition * p1 ;
struct dsdb_control_current_partition * p2 ;
p1 = * ( ( struct dsdb_control_current_partition * * ) v1 ) ;
p2 = * ( ( struct dsdb_control_current_partition * * ) v2 ) ;
return ldb_dn_compare ( p1 - > dn , p2 - > dn ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
}
static int partition_init ( struct ldb_module * module )
{
int ret , i ;
TALLOC_CTX * mem_ctx = talloc_new ( module ) ;
2007-12-10 04:33:39 +01:00
const char * attrs [ ] = { " partition " , " replicateEntries " , " modules " , NULL } ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
struct ldb_result * res ;
struct ldb_message * msg ;
struct ldb_message_element * partition_attributes ;
2006-07-29 01:13:53 +00:00
struct ldb_message_element * replicate_attributes ;
2006-08-10 01:51:27 +00:00
struct ldb_message_element * modules_attributes ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
struct partition_private_data * data ;
if ( ! mem_ctx ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
data = talloc ( mem_ctx , struct partition_private_data ) ;
if ( data = = NULL ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
2008-09-23 14:30:06 -04:00
ret = ldb_search ( module - > ldb , mem_ctx , & res ,
ldb_dn_new ( mem_ctx , module - > ldb , " @PARTITION " ) ,
LDB_SCOPE_BASE , attrs , NULL ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
if ( ret ! = LDB_SUCCESS ) {
talloc_free ( mem_ctx ) ;
return ret ;
}
if ( res - > count = = 0 ) {
talloc_free ( mem_ctx ) ;
return ldb_next_init ( module ) ;
}
if ( res - > count > 1 ) {
talloc_free ( mem_ctx ) ;
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
msg = res - > msgs [ 0 ] ;
partition_attributes = ldb_msg_find_element ( msg , " partition " ) ;
if ( ! partition_attributes ) {
2006-08-13 07:33:57 +00:00
ldb_set_errstring ( module - > ldb , " partition_init: no partitions specified " ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
2007-01-15 17:53:53 +00:00
data - > partitions = talloc_array ( data , struct dsdb_control_current_partition * , partition_attributes - > num_values + 1 ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
if ( ! data - > partitions ) {
talloc_free ( mem_ctx ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
for ( i = 0 ; i < partition_attributes - > num_values ; i + + ) {
char * base = talloc_strdup ( data - > partitions , ( char * ) partition_attributes - > values [ i ] . data ) ;
char * p = strchr ( base , ' : ' ) ;
if ( ! p ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" invalid form for partition record (missing ':'): %s " , base ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
p [ 0 ] = ' \0 ' ;
p + + ;
if ( ! p [ 0 ] ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" invalid form for partition record (missing backend database): %s " , base ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
2007-01-15 17:53:53 +00:00
data - > partitions [ i ] = talloc ( data - > partitions , struct dsdb_control_current_partition ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
if ( ! data - > partitions [ i ] ) {
talloc_free ( mem_ctx ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
2007-01-16 10:57:55 +00:00
data - > partitions [ i ] - > version = DSDB_CONTROL_CURRENT_PARTITION_VERSION ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
2006-11-22 00:59:34 +00:00
data - > partitions [ i ] - > dn = ldb_dn_new ( data - > partitions [ i ] , module - > ldb , base ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
if ( ! data - > partitions [ i ] - > dn ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: invalid DN in partition record: %s " , base ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
2007-11-13 22:40:42 +01:00
data - > partitions [ i ] - > backend = samdb_relative_path ( module - > ldb ,
data - > partitions [ i ] ,
p ) ;
2007-08-27 00:31:14 +00:00
if ( ! data - > partitions [ i ] - > backend ) {
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: unable to determine an relative path for partition: %s " , base ) ;
talloc_free ( mem_ctx ) ;
}
2006-07-12 04:59:41 +00:00
ret = ldb_connect_backend ( module - > ldb , data - > partitions [ i ] - > backend , NULL , & data - > partitions [ i ] - > module ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
if ( ret ! = LDB_SUCCESS ) {
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return ret ;
}
2006-07-10 11:24:46 +00:00
}
data - > partitions [ i ] = NULL ;
2006-07-11 02:04:43 +00:00
/* sort these into order, most to least specific */
2008-09-11 18:36:28 -04:00
qsort ( data - > partitions , partition_attributes - > num_values ,
sizeof ( * data - > partitions ) , partition_sort_compare ) ;
2006-07-10 11:24:46 +00:00
for ( i = 0 ; data - > partitions [ i ] ; i + + ) {
struct ldb_request * req ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
req = talloc_zero ( mem_ctx , struct ldb_request ) ;
if ( req = = NULL ) {
ldb_debug ( module - > ldb , LDB_DEBUG_ERROR , " partition: Out of memory! \n " ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_OPERATIONS_ERROR ;
}
req - > operation = LDB_REQ_REGISTER_PARTITION ;
req - > op . reg_partition . dn = data - > partitions [ i ] - > dn ;
2008-09-11 18:36:28 -04:00
req - > callback = ldb_op_default_callback ;
ldb_set_timeout ( module - > ldb , req , 0 ) ;
req - > handle = ldb_handle_new ( req , module - > ldb ) ;
if ( req - > handle = = NULL ) {
return LDB_ERR_OPERATIONS_ERROR ;
}
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
ret = ldb_request ( module - > ldb , req ) ;
2008-09-11 18:36:28 -04:00
if ( ret = = LDB_SUCCESS ) {
ret = ldb_wait ( req - > handle , LDB_WAIT_ALL ) ;
}
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
if ( ret ! = LDB_SUCCESS ) {
ldb_debug ( module - > ldb , LDB_DEBUG_ERROR , " partition: Unable to register partition with rootdse! \n " ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
return LDB_ERR_OTHER ;
}
talloc_free ( req ) ;
}
2006-07-29 01:13:53 +00:00
replicate_attributes = ldb_msg_find_element ( msg , " replicateEntries " ) ;
if ( ! replicate_attributes ) {
data - > replicate = NULL ;
} else {
data - > replicate = talloc_array ( data , struct ldb_dn * , replicate_attributes - > num_values + 1 ) ;
if ( ! data - > replicate ) {
talloc_free ( mem_ctx ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
2008-09-11 18:36:28 -04:00
2006-07-29 01:13:53 +00:00
for ( i = 0 ; i < replicate_attributes - > num_values ; i + + ) {
2008-08-21 19:24:58 +10:00
data - > replicate [ i ] = ldb_dn_from_ldb_val ( data - > replicate , module - > ldb , & replicate_attributes - > values [ i ] ) ;
2006-11-22 00:59:34 +00:00
if ( ! ldb_dn_validate ( data - > replicate [ i ] ) ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" invalid DN in partition replicate record: %s " ,
replicate_attributes - > values [ i ] . data ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
2006-07-29 01:13:53 +00:00
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
}
data - > replicate [ i ] = NULL ;
}
2006-08-22 10:05:20 +00:00
/* Make the private data available to any searches the modules may trigger in initialisation */
module - > private_data = data ;
talloc_steal ( module , data ) ;
2006-08-10 01:51:27 +00:00
modules_attributes = ldb_msg_find_element ( msg , " modules " ) ;
if ( modules_attributes ) {
for ( i = 0 ; i < modules_attributes - > num_values ; i + + ) {
struct ldb_dn * base_dn ;
int partition_idx ;
2007-01-15 17:53:53 +00:00
struct dsdb_control_current_partition * partition = NULL ;
2006-08-10 01:51:27 +00:00
const char * * modules = NULL ;
char * base = talloc_strdup ( data - > partitions , ( char * ) modules_attributes - > values [ i ] . data ) ;
char * p = strchr ( base , ' : ' ) ;
if ( ! p ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" invalid form for partition module record (missing ':'): %s " , base ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
p [ 0 ] = ' \0 ' ;
p + + ;
if ( ! p [ 0 ] ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" invalid form for partition module record (missing backend database): %s " , base ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
modules = ldb_modules_list_from_string ( module - > ldb , mem_ctx ,
p ) ;
2006-11-22 00:59:34 +00:00
base_dn = ldb_dn_new ( mem_ctx , module - > ldb , base ) ;
if ( ! ldb_dn_validate ( base_dn ) ) {
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
return LDB_ERR_OPERATIONS_ERROR ;
}
for ( partition_idx = 0 ; data - > partitions [ partition_idx ] ; partition_idx + + ) {
2006-11-23 22:06:07 +00:00
if ( ldb_dn_compare ( data - > partitions [ partition_idx ] - > dn , base_dn ) = = 0 ) {
2006-08-10 01:51:27 +00:00
partition = data - > partitions [ partition_idx ] ;
break ;
}
}
if ( ! partition ) {
2006-08-13 07:33:57 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" invalid form for partition module record (no such partition): %s " , base ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
return LDB_ERR_CONSTRAINT_VIOLATION ;
}
ret = ldb_load_modules_list ( module - > ldb , modules , partition - > module , & partition - > module ) ;
if ( ret ! = LDB_SUCCESS ) {
2006-09-14 03:15:30 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" loading backend for %s failed: %s " ,
base , ldb_errstring ( module - > ldb ) ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
return ret ;
}
ret = ldb_init_module_chain ( module - > ldb , partition - > module ) ;
if ( ret ! = LDB_SUCCESS ) {
2006-09-14 03:15:30 +00:00
ldb_asprintf_errstring ( module - > ldb ,
" partition_init: "
" initialising backend for %s failed: %s " ,
base , ldb_errstring ( module - > ldb ) ) ;
2006-08-10 01:51:27 +00:00
talloc_free ( mem_ctx ) ;
return ret ;
}
}
}
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
talloc_free ( mem_ctx ) ;
return ldb_next_init ( module ) ;
}
2008-02-20 04:33:43 +01:00
_PUBLIC_ const struct ldb_module_ops ldb_partition_module_ops = {
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
. name = " partition " ,
. init_context = partition_init ,
. search = partition_search ,
. add = partition_add ,
. modify = partition_modify ,
. del = partition_delete ,
. rename = partition_rename ,
2007-01-07 19:11:27 +00:00
. extended = partition_extended ,
. sequence_number = partition_sequence_number ,
r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions. In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.
Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server. Then we perform a modify to add the
remaining attributes.
To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.
In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.
To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.
Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 18:04:24 +00:00
. start_transaction = partition_start_trans ,
. end_transaction = partition_end_trans ,
. del_transaction = partition_del_trans ,
} ;