sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code

s4-dsdb: allow system to remove deleted objects

Browse Source 
This will be used by a periodic job to remove tombstoned objects
This commit is contained in:
Andrew Tridgell 2009-12-30 18:47:51 +11:00
parent 1c5a268f34
commit 23eb9f49a7
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
source4/dsdb/samdb/ldb_modules/repl_meta_data.c
View File

@ -47,6 +47,7 @@
#include "lib/util/dlinklist.h"
#include "dsdb/samdb/ldb_modules/util.h"
#include "lib/util/binsearch.h"
#include "libcli/security/security.h"
#define W2K3_LINKED_ATTRIBUTES 1
@ -2208,6 +2209,10 @@ static int replmd_delete(struct ldb_module *module, struct ldb_request *req)
uint32_t el_count = 0;
int i;
if (ldb_dn_is_special(req->op.del.dn)) {
return ldb_next_request(module, req);
}
tmp_ctx = talloc_new(ldb);
old_dn = ldb_dn_copy(tmp_ctx, req->op.del.dn);
@ -2224,6 +2229,20 @@ static int replmd_delete(struct ldb_module *module, struct ldb_request *req)
}
old_msg = res->msgs[0];
if (ldb_msg_check_string_attribute(old_msg, "isDeleted", "TRUE")) {
struct auth_session_info *session_info =
(struct auth_session_info *)ldb_get_opaque(ldb, "sessionInfo");
if (security_session_user_level(session_info) != SECURITY_SYSTEM) {
ldb_asprintf_errstring(ldb, "Refusing to delete deleted object %s",
ldb_dn_get_linearized(old_msg->dn));
return LDB_ERR_UNWILLING_TO_PERFORM;
}
/* it is already deleted - really remove it this time */
talloc_free(tmp_ctx);
return ldb_next_request(module, req);
}
/* work out where we will be renaming this object to */
ret = dsdb_get_deleted_objects_dn(ldb, tmp_ctx, old_dn, &new_dn);
if (ret != LDB_SUCCESS) {