Andrew Tridgell
00b39c70f5
s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNs
...
This allows for more flags in the future
2010-01-02 08:16:57 +11:00
Andrew Tridgell
cced567364
s4-kcc: added a preiodic task to remove deleted objects
...
we check for deleted objects in each partition every 10 minutes, using
onelevel searches
2010-01-02 08:16:56 +11:00
Andrew Tridgell
08bad38035
s4-dsdb: fixed several memory leaks
...
need to be careful with those temporary contexts
2010-01-02 08:16:56 +11:00
Andrew Tridgell
031460b8a2
s4-dsdb: fixed samdb_create_foreign_security_principal() to use the wellknown GUID
...
This also fixes a memory leak
2010-01-02 08:16:56 +11:00
Andrew Tridgell
335af02218
s4-ldb: fixed valgrind error: ares can be freed by callback
2010-01-02 08:16:56 +11:00
Andrew Tridgell
8eaed073a7
s4-dsdb: make sure 'whenChanged' is set on modify
...
We also should preserve (and then replace) whenChanged on delete
2010-01-02 08:16:56 +11:00
Andrew Tridgell
9819d280d6
s4-dsdb: added dsdb_tombstone_lifetime()
2010-01-02 08:16:56 +11:00
Andrew Tridgell
23eb9f49a7
s4-dsdb: allow system to remove deleted objects
...
This will be used by a periodic job to remove tombstoned objects
2010-01-02 08:16:56 +11:00
Andrew Tridgell
1c5a268f34
s4-ldaptest: need to use MessageElement for modify messages
...
Without MessageElement() the flags are not set, which is invalid
2010-01-02 08:16:56 +11:00
Andrew Tridgell
e410a91ff4
s4-ldb: show an error string, as well as error message
...
This makes it easier to track down error mismatches from the test
suite
2010-01-02 08:16:56 +11:00
Andrew Tridgell
4eecfc80bc
s4-drs: make sure the DNs we put in the db have a extended GUID
2010-01-02 08:16:56 +11:00
Andrew Tridgell
6628588dfb
s4-dsdb: added dsdb_set_extended_dn_guid()
2010-01-02 08:16:55 +11:00
Andrew Tridgell
98d94cca6f
s4-ldbtest: fixed message element in modify
...
a flags value of zero is not valid
2010-01-02 08:16:55 +11:00
Andrew Tridgell
81e8a18181
s4-ldb: allow modules to override error return values
...
The samldb module overrides the error code for some returns when
handling primaryGroupID. We need to take the error from the async
callback to allow this to work reliably
2010-01-02 08:16:55 +11:00
Andrew Tridgell
302dcd0226
s4-ldbmodify: show the error code as well as error string
2010-01-02 08:16:55 +11:00
Andrew Tridgell
1ab5020ef2
s4-ldb: declate ldb_val_to_time()
2010-01-02 08:16:55 +11:00
Andrew Tridgell
53e86ac5b2
s4-ldb: use safe length limited conversions for int64 and time
2010-01-02 08:16:55 +11:00
Andrew Tridgell
708ad42b0b
s4-dsdb: use safe length limiting in string->integer conversion
...
The ldap.py test suite could trigger a read past the end of the struct
ldb_val buffer
2010-01-02 08:16:55 +11:00
Andrew Tridgell
c3061794ef
s4-dsdb: use ldb_val_to_time() instead of ldb_string_to_time()
2010-01-02 08:16:55 +11:00
Andrew Tridgell
baae6ef9d2
s4-ldb: added ldb_val_to_time()
...
This is intended as a replacement for ldb_string_to_time() for ldb_val
inputs. This ensures it is length limited and includes additional
validity checks
2010-01-02 08:16:55 +11:00
Andrew Tridgell
e3cf818c27
s4-drs: sort linked attributes
...
See MS-DRSR section 4.1.10.5.17 for a description of the sorting
comparison function
2010-01-02 08:16:55 +11:00
Andrew Tridgell
d48237d547
s4-drs: re-resolve the DN in linked attribute processing
...
w2k8-r2 sometimes sends the DN with an old target
2010-01-02 08:16:54 +11:00
Andrew Tridgell
5dd6e089f1
s4-drs: use dsdb_module_rename()
...
Use the new dsdb_module_rename() for DRS rename handling, instead of
ldb_rename(). This stops us going to the top of the module stack on a
rename.
2010-01-02 08:16:54 +11:00
Andrew Tridgell
38160deac4
s4-drs: use dsdb linked attribute parse functions
...
This makes the code considerably more readable
2010-01-02 08:16:54 +11:00
Andrew Tridgell
5e52c7149f
s4-dsdb: added parse functions for DRS linked attribute blobs
2010-01-02 08:16:54 +11:00
Andrew Tridgell
a81dd03917
s4-drs: set flag to indicate that we do support linked attributes
2010-01-02 08:16:54 +11:00
Andrew Tridgell
36f8ece9de
s4-ldb: show the error code as well as errstr
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:54 +11:00
Andrew Tridgell
db3f0e8ec1
s4-dsdb: fixed valgrind error in replmd modify
...
We are using the values from a search result, so we need to steal them
onto the msg before we free the search results
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:54 +11:00
Andrew Tridgell
9f053d43de
s4-drs: don't try to remove backlinks directly
...
backlinks need to be removed as a side effect of removing the forward
link
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
0bf7f95273
s4-drs: isRecycled only exists in FL W2K8-R2
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
530503290d
s4-drs: use DSDB_FLAG_OWN_MODULE
...
We need DRS driven replication changes to update replPropertyMetaData,
so it needs to call into the repl_meta_data module logic
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
9572535940
s4-drs: update comment to refect only forward link in this fn
...
This function only update forward links
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
5b31cb20dd
s4-drs: fixed typo for uSNCreated
...
This broke DRS replication from samba to windows
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
7a39340c8e
s4-drs: use dsdb_module_guid_by_dn()
...
We should not be going to the top of the module stack
2010-01-02 08:16:53 +11:00
Andrew Tridgell
e3054ce0fe
s4-drs: cope better with NULL GUIDS from DRS
...
It is valid to get a NULL GUID over DRS for a deleted forward link. We
need to match by DN if possible when seeing if we should update an
existing link.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
2e114484e5
s4-drs: give an error message in repl_meta_data if we don't get a partition control
2010-01-02 08:16:53 +11:00
Andrew Tridgell
0d5d7f5847
s4-drs: treat a zero GUID as not present in replmd_add_fix_la
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:53 +11:00
Andrew Tridgell
0c2afdd5a9
s4-drs: update highwatermark after successfully encoding the object
2010-01-02 08:16:52 +11:00
Andrew Tridgell
ff6dd4a67f
s4-drs: send all linked attributes at the end of a replication cycle
...
This ensures that a link is not seen before the object it points to
2010-01-02 08:16:52 +11:00
Andrew Tridgell
5bf257fa9b
s4-drs: use the extended linearized form for DRS replication
...
We were sending zero GUIDs. Not good!
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:52 +11:00
Andrew Tridgell
7653f56bd4
s4-drs: implemented sorting functions based on replication flags
...
I think we probably have more work to do on the sort order, but this
brings us a bit closer.
2010-01-02 08:16:52 +11:00
Andrew Tridgell
701148bbe9
s4-drs: we are doing the sorting for getncchanges in the app code now
...
the sorting is quite delicate, and easier to get right in the
getncchanges code
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:52 +11:00
Andrew Tridgell
cb00e443a3
s4-drs: give a reason when an AddEntry commit fails
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:52 +11:00
Andrew Tridgell
9f02898080
s4-schema: don't fill in the extended DN with a zero GUID
...
sometimes windows sends us a zero GUID in a DRS DN.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:52 +11:00
Andrew Tridgell
d4853fed00
sd-schema: order DRS classes on the wire in reverse order
...
windows sends objectclasses in DRS in the opposite order to what LDAP
uses
2010-01-02 08:16:52 +11:00
Andrew Tridgell
ca5c3a0a02
s4-dsdb: added DSDB_FLAG_OWN_MODULE
...
This allows you to call dsdb_module_*() functions while including the
current module in the module stack to be used
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:52 +11:00
Andrew Tridgell
e1ffcfc783
s4-ldb: added ldb_module_get_ops()
...
This is needed to support DSDB_FLAG_OWN_MODULE
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-02 08:16:51 +11:00
Andrew Tridgell
dd33a22f1d
s4-dsdb: use a common method for finding a link pair
...
Use ^1 everywhere, to ensure it works for both forward and backward
links
2010-01-02 08:16:51 +11:00
Andrew Tridgell
340d7e807b
s4-drs: fixed the UDV return in getncchanges
...
We should overwrite an existing entry if found
2010-01-02 08:16:51 +11:00
Andrew Tridgell
bcc952d19d
s4-drs: some useful debugging options for getncchanges
...
Added two debugging parametric options
drs:max object sync =
drs:extra filter =
2010-01-02 08:16:51 +11:00