1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Commit Graph

824 Commits

Author SHA1 Message Date
Andrew Bartlett
8256717c76 Implement 'type unknown' names in the CrackNames code.
This guesses the type by running each of the possible options.

Andrew Bartlett
2008-10-06 14:28:24 -07:00
Andrew Bartlett
c0240d7835 Remove compleatly bogus rename test in partitions module. 2008-10-06 14:16:30 -07:00
Andrew Bartlett
7d9f18609b Remove DESCRIPTION from generated schema lines.
This is not permitted in the AD aggregate schema, and more trouble
than it is worth in the OpenLDAP schema due to escaping issues.

Andrew Bartlett
2008-10-06 14:16:30 -07:00
Andrew Bartlett
c412a930ad Fix Domain Trust creation with Windows 2008 (and many other tools)
A dITConentRules attribute (unlike objectClasses) must not contain a
'SUP'.

The ADSI layer in Windows would download the whole schema, and
validate it.  Thanks to the team at Microsoft for very long debugging
session to find this.

Andrew Bartlett
2008-10-06 14:16:29 -07:00
Andrew Tridgell
23ec448f83 Merge commit 'master/master' 2008-10-03 12:23:00 -07:00
Andrew Tridgell
163fa1d25a fixed the partition module and the GC handling
- when multiple partitions are searched, consider the search a
   success if any of the partitions return success
 
 - only search the right subset of partitions, looking at the scope
   and basedn of the search

This fixes several errors with GC searches
2008-10-03 12:21:53 -07:00
Andrew Tridgell
c5fdb82d32 fixed the sense of ldb base dn comparisons in two places, and use a
direct comparison instead of a sub-tree comparison in another

this fixes basedn searches on the global catalog port
2008-10-02 21:58:46 -07:00
Simo Sorce
b174765d54 Fix crash bugs in error paths: ac is not yet initialized here, and we don't
need to call ldb_module_done in the main module functions, we can directly
return an error. ldb_module_done() is for callbacks
2008-10-02 17:15:00 -04:00
Stefan Metzmacher
1e24fd3ba2 s4:rootdse: for now don't pass down controls for the rootdse search
metze
2008-10-02 12:20:58 +02:00
Stefan Metzmacher
81b3358f2a s4:partition: register DOMAIN_SCOPE and SEARCH_OPTIONS controls
metze
2008-10-02 12:20:58 +02:00
Stefan Metzmacher
551bbd853c s4:partition: pass down the SEARCH_OPTIONS control as uncritical
metze
2008-10-02 12:20:58 +02:00
Stefan Metzmacher
3ebf3f316b s4:linked_attributes: fix a crash bug when the definition of a target attribute is missing
Windows 2003 has a broken schema where the definition of msDS-IsDomainFor
is missing (which is supposed to be the backlink of the msDS-HasDomainNCs
attribute.

Our schema is extracted from windows 2003, so we have the problem.

As the NET-API-BECOME-DC test triggers this bug, windows 2003
seems to just skip creating a backlink.

metze
2008-10-02 12:20:57 +02:00
Stefan Metzmacher
8aff443030 s4:kludge_acl: just fake support for the SD_FLAGS control
metze
2008-10-02 12:20:57 +02:00
Stefan Metzmacher
aec5a08774 s4:extended_dn: add support for <GUID=...>, <SID=...> or <WKGUID=...,DC=...> as basedn
We resolve them into the real basedn before do the real search.

metze
2008-10-02 12:20:40 +02:00
Jelmer Vernooij
3d8323fbff Compare sids in samba3sam tests. 2008-09-30 16:02:21 +02:00
Stefan Metzmacher
59c3df814a s4:samldb: use the code path with async ldb
This removes the event_context leak that caused
NT_STATUS_TOO_MANY_OPENED_FILES in the server,
because of all the epool fds

metze
2008-09-29 08:42:03 +02:00
Simo Sorce
b2901da479 LDB ASYNC: misc changes 2008-09-29 04:22:20 +02:00
Simo Sorce
51baa8deec LDB ASYNC: samba4 modules 2008-09-29 04:22:20 +02:00
Stefan Metzmacher
ee2bcfacdf s4:dsdb: passdown DSDB_CONTROL_REPLICATED_UPDATE_OID for replicated updates
We need to make sure replicated updates are handled differently
in some situations, e.g. we should bypass the schema checks.

metze
2008-09-29 04:15:11 +02:00
Jelmer Vernooij
b0a95ad2f6 Revert LDB return code patches from Matthias. 2008-09-25 00:01:05 +02:00
Matthias Dieter Wallnöfer
cf1935817f Cosmetic corrections for the DSDB module
This commit applies some cosmetic corrections for the DSDB (Directory Server Database).
2008-09-24 19:40:03 +02:00
Jelmer Vernooij
291ca93843 Use loadparm since it's required by some modules. 2008-09-24 19:27:09 +02:00
Jelmer Vernooij
6925202bde Move source4/lib/crypto to lib/crypto. 2008-09-24 15:30:23 +02:00
Jelmer Vernooij
6a689c23e8 Rename smbd -> samba.
This reverts commit 05ea5e23cf.

Conflicts:

	source4/smbd/server.c
2008-09-24 03:16:15 +02:00
Simo Sorce
508527890a Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.
The previous ldb_search() interface made it way too easy to leak results,
and being able to use a printf-like expression turns to be really useful.
2008-09-23 18:17:46 -04:00
Jelmer Vernooij
05ea5e23cf Revert "Rename smbd -> samba."
This reverts commit 0e9008be35.
2008-09-21 21:32:40 +02:00
Jelmer Vernooij
0e9008be35 Rename smbd -> samba. 2008-09-21 21:26:40 +02:00
Jelmer Vernooij
9f178f5b67 Fix last samba3sam.py test. 2008-09-21 05:21:56 +02:00
Jelmer Vernooij
db6bd2a3d6 Fix DNs - only one more samba3sam test failing now. 2008-09-21 03:42:27 +02:00
Jelmer Vernooij
f63c83deef More code simplifications. 2008-09-20 14:35:21 +02:00
Jelmer Vernooij
3fbcc2149e Fix formatting. 2008-09-19 12:44:00 +02:00
Jelmer Vernooij
0c193b7a10 Simplify code, remove print statements. 2008-09-19 12:04:13 +02:00
Jelmer Vernooij
714669f172 Fix objectclass tests. 2008-09-19 01:43:04 +02:00
Jelmer Vernooij
21897a0539 Improve formatting. 2008-09-18 23:46:58 +02:00
Jelmer Vernooij
41c645bde2 Fix tests, be less verbose. 2008-09-18 22:56:58 +02:00
Jelmer Vernooij
deba4e8ded Fix some tests. 2008-09-18 21:53:08 +02:00
Simo Sorce
e4412a0470 Remove ancient remains of first experimentations about
supporting a schema
(This used to be commit 53b57300c7)
2008-09-12 13:57:50 -04:00
Andrew Bartlett
acf11ddd5f Fix failure to load the schema on read-only DB.
This also tries to simplify the logic in the schema -> @ATTRIBUTES and
@INDEXES code.

Andrew Bartlett
(This used to be commit a383b8bf88)
2008-09-12 07:45:28 +10:00
Andrew Bartlett
ab555eb199 Remove the complexity of transactions from the attributes-setting code.
I think it is just too complex and error prone to init and cancel
transactions during the module init code.  Instead, this isn't prone
to races as it will always achieve a steady state (eventually), and
most cases will never do the write.

Andrew Bartlett
(This used to be commit d60977cc7f)
2008-09-11 20:51:26 +10:00
Andrew Bartlett
d30caa011c Make cn=aggregate output less pretty, by more like Win2008.
I'm not sure if this fixes bug #5713, as this is not consistantly
reproducably on my equipment.

Andrew Bartlett
(This used to be commit 02d6645efc)
2008-09-11 12:36:58 +10:00
Andrew Bartlett
ffc9f85bfb Fix reversed test trying to fix bug #5713
(It instead ensured that only 'top' had a SUP keyword)

This clearly shows that 937b466266 was
not a full or correct fix, but despite this I can no longer reproduce
the issue.  Further investigation is required.

Andrew Bartlett
(This used to be commit 95a9e9b6b8)
2008-09-09 18:02:05 +10:00
Andrew Bartlett
e7cc705efb Fix bug #5713 by correcting the generated schema.
This bug is entitled 'Schema patch breaks interoperability with
Microsoft MMC consoles.', and it does so very spectacularly.

The issue is that we would include an entry:
objectClasses: ( 2.5.6.0 NAME 'top' SUP top ABSTRACT..

The MMC Active Directory Users and Computers snap in presumably
objected to the 'loop' this would present. The fixed entry is:

objectClasses: ( 2.5.6.0 NAME 'top' ABSTRACT

Thanks to Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> for his
persistance in getting me to look at this.

Andrew Bartlett
(This used to be commit 937b466266)
2008-09-09 16:21:22 +10:00
Andrew Bartlett
a33eaf564f Add definition for SYSTEM_FLAG_ATTR_IS_RDN
(This used to be commit 36f727c4a7)
2008-09-08 14:33:05 +10:00
Andrew Bartlett
c222f8196a Try to implement the right logic for systemFlags
The MS-ADTS document has quite detailed instrucitons on how these
flags should be processed.  This change also causes the correct
sign-wrapping to occour, as these are declared as signed integers.

Andrew Bartlett
(This used to be commit 5c3d237a6d)
2008-09-08 11:10:24 +10:00
Andrew Bartlett
4c386ce366 Don't expose passwords, even to the administrator.
This ensures they don't leak over LDAP, but does not prevent access,
as ldbsearch locally still bypasses these controls.

Andrew Bartlett
(This used to be commit fa3f3bab33)
2008-09-08 11:09:02 +10:00
Andrew Tridgell
0a27ff953e Merge branch 'abartlet-4-0-local' into v4-0-test
(This used to be commit 469fac2669)
2008-08-22 17:37:43 +10:00
Andrew Tridgell
a83bb07016 fixed error handling in ANR code
when we can't process an ANR request we need to continue with the
parse tree we were given, not a NULL tree
(This used to be commit ed66feb80a)
2008-08-22 14:32:27 +10:00
Andrew Bartlett
4ad97a1d05 Don't walk past the end of ldb values.
This is a partial fix towards bugs due to us walking past the end of
what we think are strings in ldb.  There is much more work to do in
this area.

Andrew Bartlett
(This used to be commit 5805a9a8f3)
2008-08-21 19:24:58 +10:00
Andrew Bartlett
3d3fc7bdaa Stop every ldb startup doing a write to the database.
Something in the search stack adds a distinguisedName record, which
isn't in the message we generate.  So we compare, fail and rewrite the
record - every time ldb starts up...

Andrew Bartlett
(This used to be commit 44775d1ed4)
2008-08-21 16:42:03 +10:00
Andrew Bartlett
fa3f3bee83 Set both attributes and indexes into the database on schema load.
This ensures that a rudementary schema is always present (for
bootstrapping), and that the indexes are maintained equal to the
schema (rather than hard-coded).

Andrew Bartlett
(This used to be commit 747d683b0d)
2008-08-21 12:58:00 +10:00