5 Commits

Author	SHA1	Message	Date
Andrew Tridgell	bdee131f30	r7860: switch our ldb storage format to use a NDR encoded objectSid. This is ... quite a large change as we had lots of code that assumed that objectSid was a string in S- format. metze and simo tried to convince me to use NDR format months ago, but I didn't listen, so its fair that I have the pain of fixing all the code now :-) This builds on the ldb_register_samba_handlers() and ldif handlers code I did earlier this week. There are still three parts of this conversion I have not finished: - the ltdb index records need to use the string form of the objectSid (to keep the DNs sane). Until that it done I have disabled indexing on objectSid, which is a big performance hit, but allows us to pass all our tests while I rejig the indexing system to use a externally supplied conversion function - I haven't yet put in place the code that allows client to use the "S-xxx-yyy" form for objectSid in ldap search expressions. w2k3 supports this, presumably by looking for the "S-" prefix to determine what type of objectSid form is being used by the client. I have been working on ways to handle this, but am not happy with them yet so they aren't part of this patch - I need to change pidl to generate push functions that take a "const void *" instead of a "void*" for the data pointer. That will fix the couple of new warnings this code generates. Luckily it many places the conversion to NDR formatted records actually simplified the code, as it means we no longer need as many calls to dom_sid_parse_talloc(). In some places it got more complex, but not many. (This used to be commit d40bc2fa8ddd43560315688eebdbe98bdd02756c)	2007-10-10 13:18:44 -05:00
Andrew Tridgell	49bc2672f8	r7598: take advantage of struct data_blob and struct ldb_val being the same ... structure in a couple of places (This used to be commit bcd4671acae2be51958cbae23a0ab2dd2b194a5e)	2007-10-10 13:18:13 -05:00
Andrew Tridgell	816f4f7c4a	r7519: rip the copy of the ldap expression parser out of libcli/ldap/ and use ... the original one in lib/ldb/ instead. Having two copies of this code is silly. (This used to be commit 0e9f18c44858b692c724c004f362de9e3dc15db5)	2007-10-10 13:18:04 -05:00
Andrew Tridgell	9469051d5b	r6817: - fixed empty ldap search elements in filters ... - added support for guids in cldap netlogon searches. the cldap server now passes the LDAP-CLDAP torture test (This used to be commit eb7979d9def389942fa1c54693d2dfcb8828f544)	2007-10-10 13:16:47 -05:00
Andrew Tridgell	4029df5e60	r6763: added functions in libcli/ldap/ to binary encode some NDR structures into ... ldap friendly filter strings (This used to be commit 8890dd3ac331cffe83226a356c52df89c917c2b0)	2007-10-10 13:16:42 -05:00