sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-06-21 03:17:08 +03:00
Code
96,413 Commits 62 Branches 1,161 Tags
Commit Graph

77 Commits

Author SHA1 Message Date
Anatoliy Atanasov
d3081741c9 s4/rodc: Implement msDS-isRODC constructed attr 2010-05-03 18:28:00 +02:00
Andrew Bartlett
5ebeab3794 s4:dsdb Don't return operational attributes on special DNs 2010-04-10 21:41:02 +10:00
Andrew Bartlett
c874b9f42e s4:dsdb Don't error out if we can't get the Aggregate schema DN yet 
It's easier to just set it up when we can, then to deal with the
ordering issues in ldb startup.  As long as we have it ready if a real
client ever asks for it, then we should be happy.

Andrew Bartlett
 2010-03-16 19:25:14 +11:00
Matthias Dieter Wallnöfer
8297302e98 s4:operational LDB - don't accidentally "ate" search helper attributes if we need them for more constructed attributes 
With this patch we delete the helper attributes at the end where all constructed
attributes have already been computed.
 2010-03-04 18:16:24 +01:00
Matthias Dieter Wallnöfer
ffa03820f1 s4:operational LDB module - make the counters unsigned 
No need to have signed counters here.
 2010-03-04 18:16:23 +01:00
Matthias Dieter Wallnöfer
bf94d68df8 s4:operational LDB - implement the "tokenGroups" constructed attribute 
It contains the transitive SID closure (expand member/memberOf attributes) of a
certain SAM object. The "tokenGroups" attribute never contains the SID of the
object itself.

References: http://msdn.microsoft.com/en-us/library/ms680275(VS.85).aspx,
http://support.microsoft.com/kb/301916,
MS-ADTS 3.1.1.4.5.19.
 2010-03-04 18:16:23 +01:00
Matthias Dieter Wallnöfer
e34ee26169 s4:operational LDB module - use right memory context int "construct_primary_group_token" 
Use the "msg" as temporary context and not "ldb" which lives much longer.
 2010-03-04 18:16:21 +01:00
Matthias Dieter Wallnöfer
280a8a70fd s4:operational LDB module - enable support for passing referrals through it 2010-02-21 21:44:39 +01:00
Andrew Tridgell
41e403adb0 s4-dsdb: when the SD_FLAGS control is set, don't remove nTSecurityDescriptor 2009-12-16 20:56:24 +11:00
Matthias Dieter Wallnöfer
1788abba14 s4:operational LDB module - cosmetic - reorder an attribute list 
This matches the default handling order in the "password_hash" module (it's nice
to have this consistent).
 2009-12-12 17:59:05 +01:00
Andrew Tridgell
707cd30cda s4-dsdb: fixed steal of parentGUID for empty msg 
msg->elements could be NULL before we add parentGUID
 2009-12-09 18:18:25 +11:00
Andrew Bartlett
9b0780cf00 s4:dsdb Use ldb_match_msg_objectclass in operational.c 
This avoids not only a possibly non-portable compiler expression, but
also the need to look up the schema each time.

Andrew Bartlett
 2009-12-07 15:28:51 +11:00
Andrew Bartlett
354b80b3ae s4:dsdb Make primaryGroupToken calculation more efficient and correct 
The original code here would do a subtree search under each object,
attempting to determine if it was a group.  This was incorrect, and
inefficient - we just need to ask for the objectClass attribute, and
check that value before returning the group's RID.

(Much of this patch reworks operational.c to allow a search for 2
attributes for this calculation).

Andrew Bartlett
 2009-12-07 13:07:56 +11:00
Andrew Bartlett
45cd4c93fb s4:dsdb Make parentGUID handler use dsdb_module_search_dn() 
This avoids doing a new search from the top of the module stack.

This also removes the helper function dsdb_find_parentguid_by_dn()
which is now unused.

Andrew Bartlett
 2009-12-07 13:07:03 +11:00
Andrew Bartlett
972ee4b97b s4:dsdb Hide the LM password by default too 2009-12-07 13:07:03 +11:00
Andrew Tridgell
ced3eef776 s4-drsutil: fixed a memory leak in samdb_search_count 
In general functions that don't return any memory should not take a memory context.
Otherwise it is too easy to have a bug like this where memory is leaked
 2009-12-04 17:49:19 +11:00
Matthias Dieter Wallnöfer
80e066112c s4:operational LDB module - Fix usage of LDB constants 2009-12-03 12:51:16 +01:00
Matthias Dieter Wallnöfer
393b83979d s4:operational LDB module - Don't do the write checks here 
Let this perform the schema in the "objectclass" module.
 2009-11-26 11:21:01 +01:00
Andrew Bartlett
dcee196f3e s4:operational LDB module - Prevent the modification of operational attributes 
(merged by Andrew Bartlett)

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2009-11-24 10:41:15 +11:00
Andrew Bartlett
e0b1edf013 s4:dsdb Return the subSchemaSubEntry operational attribute on every object 2009-11-24 10:39:09 +11:00
Nadezhda Ivanova
4abd85898d Cosmetic patch - fixed case of attribute name. 2009-11-20 14:55:31 +02:00
Andrew Tridgell
92eff41ca5 s4-dsdb: some more attribuutes that we should only give if asked for 2009-11-20 15:19:35 +11:00
Andrew Tridgell
f3f0c8e2ce s4-dsdb: removed attributes that should not be displayed by default 
Some attributes (like ntSecurityDescriptor) are stored in our db, but
should only be displayed if asked for. This also applied to parentGUID
from old installs, which is now generated.
 2009-11-20 14:19:18 +11:00
Fernando J V da Silva
70d8db86b9 s4-drs: Synchronous Implementation of generated parentGUID 
This generated parentGUID on demand, rather than getting it from the
database

Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2009-11-20 13:56:50 +11:00
Andrew Tridgell
733fa19bc1 s4-samdb: internal s4 ldb modules should be GPL not LGPL 
I think these modules ended up LGPL because someone based the module
on an existing LGPL module in the core ldb, and it spread from
there. Certainly there is no reason for the ldb modules that are not
distributed as part of ldb to be LGPL.
 2009-09-12 11:21:21 +10:00
Matthias Dieter Wallnöfer
e96338bf2b s4:operational - Remove some outdated comments 2009-08-11 11:08:05 +02:00
Matthias Dieter Wallnöfer
b255a41dca s4:operational module - move and enhancements 
This moves the "operational" LDB module to the right place under "dsdb/samdb/ldb_modules"
(suggested by abartlet) and enhances it for supporting dynamic generated
"primaryGroupToken" for AD groups. This should fix bug #6466.
 2009-08-11 12:59:15 +02:00