1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

2421 Commits

Author SHA1 Message Date
Andrew Tridgell
4a08b2d172 s4-dsdb: removed the use of ldb_private.h from s4
this will allow s4 to use a system version of ldb
2010-11-03 07:43:57 +11:00
Matthias Dieter Wallnöfer
8770c8fe2f s4:samldb LDB module - the "sAMAccountName" cannot be substituted by nothing
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov  1 14:36:24 UTC 2010 on sn-devel-104
2010-11-01 14:36:24 +00:00
Matthias Dieter Wallnöfer
2f9480407d s4:sam.py - additional testing for "servicePrincipalName" updates 2010-11-01 14:53:25 +01:00
Matthias Dieter Wallnöfer
1b2f4c11a0 s4:samldb LDB module - support now the full "servicePrincipalName" update trigger
With "dNSHostName" and/or "sAMAccountName" updates
2010-11-01 14:53:25 +01:00
Matthias Dieter Wallnöfer
3eb0311aa6 s4:samldb LDB module - "sAMAccountName" checker
We need a "talloc_steal" for the retrieved "sAMAccountName" since the
memory is afterwards freed using the "talloc_free" call.
2010-11-01 14:53:25 +01:00
Andrew Tridgell
9103047782 s4-ldb: enable version checking in dsdb ldb modules 2010-11-01 13:05:04 +00:00
Matthias Dieter Wallnöfer
02547de5f9 s4:ldap.py/sam.py - simplify the objectclass specifications
- For user accounts we only need to specify "user" ("person" is an inherited
  objectclass)
- Don't use the brackets when we have only one objectclass specified
2010-11-01 12:34:51 +01:00
Matthias Dieter Wallnöfer
6f2001efa5 s4:sam.py - test "objectSid" modification lockdown 2010-11-01 12:34:51 +01:00
Matthias Dieter Wallnöfer
7da84bc7b6 s4:samldb LDB module - unify objectSid assignment error messages 2010-11-01 12:34:48 +01:00
Matthias Dieter Wallnöfer
7ca6b3ee6d s4:samldb LDB module - deny "objectSid" modifications
The same as with Windows
2010-11-01 12:34:21 +01:00
Andrew Tridgell
7eb2eed156 s4-dsdb: convert the rest of the ldb modules to the new module type 2010-11-01 18:55:19 +11:00
Andrew Tridgell
014a90f6ef s4-dsdb: convert the simple_ldap_map module to the new module style 2010-11-01 18:55:19 +11:00
Andrew Tridgell
cea4bdb467 s4-dsdb: convert the extended_dn_out module to the new ldb module style 2010-11-01 18:55:19 +11:00
Kamen Mazdrashki
a2d787d95d s4-dsdb_schema: Use DRSUAPI_ATTID_INVALID instead of 0xFFFFFFFF magic value
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Mon Nov  1 00:36:20 UTC 2010 on sn-devel-104
2010-11-01 00:36:20 +00:00
Kamen Mazdrashki
717b1158a6 idl: Use DRSUAPI_ATTID_ prefix instead of DRSUAPI_ATTRIBUTE_ for ATTID values
Those values are actually ATTID values and such, they are used
for ATTIDs for Attributes, Classes and Syntaxes.
2010-10-31 23:54:04 +00:00
Matthias Dieter Wallnöfer
dac6f1662e s4:sam.py - test the "sAMAccountName" attribute
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Oct 31 21:02:48 UTC 2010 on sn-devel-104
2010-10-31 21:02:48 +00:00
Matthias Dieter Wallnöfer
51f4de8fc8 s4:samldb LDB module - validate "sAMAccountName" modifications
Also the "sAMAccountName" attribute is protected against corruption (e.g. two
accounts with the same name).
2010-10-31 21:04:26 +01:00
Matthias Dieter Wallnöfer
5f8adf0efd s4:dsdb/dns/dns_update.c - increase the timeout for the SPN and DNS update scripts
Sometimes it can take longer than 10 sec.
2010-10-31 18:44:06 +00:00
Matthias Dieter Wallnöfer
11687316b4 s4:sam.py - add a test for the "dNSHostName" - "servicePrincipalName" update mechanism 2010-10-31 18:44:06 +00:00
Matthias Dieter Wallnöfer
3f66608da4 s4:samldb LDB module - implement the "dNSHostName" - "servicePrincipalName" change trigger
When the "dNSHostName" changes then also the "servicePrincipalName"s are
changed as well.
2010-10-31 18:44:06 +00:00
Matthias Dieter Wallnöfer
771b10a421 s4:samldb LDB module - check for the number of results after a search operation
Should always be done.
2010-10-31 18:44:06 +00:00
Jelmer Vernooij
3deece5591 s4: Remove the old perl/m4/make/mk-based build system.
The new waf-based build system now has all the same functionality, and
the old build system has been broken for quite some time.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-31 02:01:44 +00:00
Matthias Dieter Wallnöfer
9401189d54 s4:samldb LDB module - make the "userAccountControl" and "groupType" modify handlers separate functions
It's easier to maintain afterwards

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Oct 30 19:07:20 UTC 2010 on sn-devel-104
2010-10-30 19:07:20 +00:00
Matthias Dieter Wallnöfer
098ea71728 s4:samldb LDB module - add a new function which handles special cases for single-valued attribute on SAM modifications
This saves quiet some work.
2010-10-30 20:23:31 +02:00
Matthias Dieter Wallnöfer
095c8b2078 s4:samldb LDB module - primary group change - free temporary messages to save memory 2010-10-30 20:23:31 +02:00
Matthias Dieter Wallnöfer
c0ebf5d743 s4:sam.py - add a short double swap "primaryGroupID" test
It's not really meaningful but can happen.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Oct 30 18:15:31 UTC 2010 on sn-devel-104
2010-10-30 18:15:31 +00:00
Matthias Dieter Wallnöfer
98fefa8a01 s4:samldb LDB module - adapt the "samldb_prim_group_change" trigger to support multiple "primaryGroupID" modification entries 2010-10-30 17:32:17 +00:00
Matthias Dieter Wallnöfer
c664f010d3 s4:sam.py - enhance "member" tests 2010-10-30 17:32:17 +00:00
Matthias Dieter Wallnöfer
4987467b78 s4:samldb LDB module - "member" trigger
- adapt the "samldb_member_check" trigger to support multiple "member"
  modification entries. There can exist special modification messages which
  delete and add members in one operation
- support the right error codes when modifications do fail
  (ERR_ENTRY_ALREADY_EXISTS, ERR_UNWILLING_TO_PERFORM)
2010-10-30 17:32:17 +00:00
Matthias Dieter Wallnöfer
16206974e6 s4:local_password LDB module - fix typos
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Oct 30 15:41:46 UTC 2010 on sn-devel-104
2010-10-30 15:41:45 +00:00
Matthias Dieter Wallnöfer
2c0a9e9f21 s4:resolve_oids LDB module - fix counter types 2010-10-30 15:00:04 +00:00
Matthias Dieter Wallnöfer
45ee4e9a6b s4:partition_init LDB module - fix counter type 2010-10-30 15:00:04 +00:00
Matthias Dieter Wallnöfer
5ab8e4f7e1 s4:extended_dn_store LDB module - fix counter types 2010-10-30 15:00:04 +00:00
Andrew Tridgell
679eba61ea s4-build: removed some unnecessary dependencies
based on running waf --symbol-check
2010-10-30 23:49:01 +11:00
Andrew Tridgell
88fd7e0920 s4-dns: make the dns update task an external module
this simplifies some dependencies
2010-10-30 23:49:01 +11:00
Andrew Tridgell
045e3445a0 s4-auth: make KERBEROS subsystem into authkrb5 private library
this fixes some double linking. The name 'KERBEROS' was also a bit
confusing, as it sounded like a base kerberos library, when it is in
fact part of auth
2010-10-30 23:49:01 +11:00
Andrew Tridgell
04574d5738 s4-ldbwrap: split ldb-wrap out from the LDBSAMBA subsystem
ldb-wrap and the ldif-handlers are not really related, and this allows
us to remove another dependency loop

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-30 23:49:01 +11:00
Matthias Dieter Wallnöfer
45cd2e445d s4:samr RPC server - remove wrong implementation of ReplicaSourceNodeName
This should represent a replication partner - never the DC iself
2010-10-29 09:55:18 +00:00
Kamen Mazdrashki
07240e97f8 s4-resolve_oids: Remove redundant check - resolve_oids_need_value() handle this 2010-10-29 02:31:17 +03:00
Kamen Mazdrashki
6b188fbad4 s4-schema_init: we should be able to resolve Syntax OIDs with prefixMap we have
If Syntax OID is not in the prefixMap then we are getting
an unknown Attribute Syntax (which we can't handle anyway)
2010-10-29 02:31:17 +03:00
Nadezhda Ivanova
5bc2b8f0a4 s4-ldb: Added the correct extended check for read access to nTSecurityDescriptor
It does not depend on READ_PROPERTY, but on SECURITY_PRIVILEGE and READ_CONTROL

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Wed Oct 27 13:18:50 UTC 2010 on sn-devel-104
2010-10-27 13:18:50 +00:00
Nadezhda Ivanova
3003bd4037 s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to determine the source of the request
The aclread module used to use a control to make sure the request comes from the ldap server,
but now the rootdse filters out any unregistered controls comming from ldap, so the control is
lost. Using the LDB_HANDLE_FLAG_UNTRUSTED is a much more elegant solution.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Wed Oct 27 11:55:11 UTC 2010 on sn-devel-104
2010-10-27 11:55:11 +00:00
Kamen Mazdrashki
e5ebc48697 s4-dsdb_syntax: *_OID_oid_ldb_to_drsuapi() functions should use
dsdb_schema_pfm_attid_from_oid() instead of
dsdb_schema_pfm_make_attid() as those functions are
supposed to return ATTIDs only for OIDs we already know about
(i.e. are in prefixMap)

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Oct 26 22:44:36 UTC 2010 on sn-devel-104
2010-10-26 22:44:36 +00:00
Kamen Mazdrashki
0fc2427224 s4-prefixMap: split dsdb_schema_make_attid() function into read-only and
read-write functions.
dsdb_schema_make_attid() may change prefixMap implicitly
and this is not always desired behavior.
The problem was that
(1) callers had no control on this behavior
(2) callers had no way to know wheter prefixMap has been
    changed which can lead to hard to find bugs like
    prefixMap is changed in read operation
2010-10-26 22:17:41 +03:00
Kamen Mazdrashki
5e108fc5f9 s4-prefixmap: Use WERR_NOT_FOUND when OID is not found in current prefixMap
rather than WERR_DS_NO_MSDS_INTID.
WERR_DS_NO_MSDS_INTID is intended to be used for msDsIntId
attribute values handling
2010-10-26 22:17:40 +03:00
Matthias Dieter Wallnöfer
1b68910d65 s4:ldap.py - add a test for attribute ranges - still very basic
And partially outcommented.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Oct 26 18:53:12 UTC 2010 on sn-devel-104
2010-10-26 18:53:12 +00:00
Matthias Dieter Wallnöfer
dd25f4b83b s4:sam.py - enhance users and groups test 2010-10-26 18:12:00 +00:00
Matthias Dieter Wallnöfer
802e3b4e1f s4:samldb LDB module - enhance the "member"-check trigger
- Also multi-valued "member" attributes are allowed
- When you try to delete a member from a group which has it primary group set
  exactly to this group you get "UNWILLING_TO_PERFORM"
2010-10-26 18:12:00 +00:00
Matthias Dieter Wallnöfer
a839422fc5 s4:ldap.py - enhance and activate the "description" attribute test
It tests only the "description" attribute in particular since it behaves
differently from all others.
2010-10-26 18:12:00 +00:00
Matthias Dieter Wallnöfer
4f25eec5a5 s4:objectclass_attrs.c - rework to support these special "description" constraints
Only the "description" attribute has this special restrictions.
2010-10-26 18:12:00 +00:00