1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-08 04:58:40 +03:00

364 Commits

Author SHA1 Message Date
Stefan Metzmacher
e869883d80 r21306: fix the RPC-LSA tests the admin couldn't no longer get the 'currentValue'
attribute...

this needs more works, but make it work again for now

metze
(This used to be commit 608d24f0016ff090b7de7fbd0bed85153bcc703d)
2007-10-10 14:48:07 -05:00
Andrew Bartlett
4aa1f83ca5 r21179: Anything more complex than this causes the keytab never to be updated...
Andrew Bartlett
(This used to be commit c3977b4bae1e1b5e4ff4a64c7146534536685e91)
2007-10-10 14:44:43 -05:00
Andrew Bartlett
744dddd75b r21135: Instead of having hooks to update keytabs as an explicit thing, update
them as a hook on ldb modify, via a module.

This should allow the secrets.ldb to be edited by the admin, and to
have things update in the on-disk keytab just as an in-memory keytab
would.

This isn't really a dsdb plugin, but I don't have any other good ideas
about where to put it.

Andrew Bartlett
(This used to be commit 6ce557a1aff4754d2622be8f1c6695d9ee788d54)
2007-10-10 14:44:31 -05:00
Stefan Metzmacher
c601a9ddcd r20975: - implement handling of meta data an on originating add
there're a few things TODO, but it's a good start

we need to research if an originating change causes the replUpToDateVector
attribute to change...(I assume it, but needs testing)

metze
(This used to be commit fde0aabd9ae79fcefbcba34e6f9143f93ffcf96c)
2007-10-10 14:44:06 -05:00
Stefan Metzmacher
6fda023f80 r20971: we don't need this check twice:-)
metze
(This used to be commit b7d48274a7341c5e4a3f103387f87fcc94853271)
2007-10-10 14:44:05 -05:00
Stefan Metzmacher
c84d8124b2 r20968: - add functions to sort the meta data and attribute arrays
- we should use them before we store records to disk

metze
(This used to be commit a5200ef0cae5e8b0cedf196c9d76afc46e08c316)
2007-10-10 14:44:04 -05:00
Stefan Metzmacher
a00bd47bfa r20957: a value of FF0000000000000000000000000000000000000000 isn't stored as schemaInfo
so we need to use it as value if nothing is stored

metze
(This used to be commit cd326134079375fc83640444d6323a5cbe7c02ee)
2007-10-10 14:44:02 -05:00
Stefan Metzmacher
bf86c27440 r20923: only allow extended operations for SYSTEM or administrators for now
metze
(This used to be commit f062f09fbf45dd6cd36d1bfd9abb301d850c19dc)
2007-10-10 14:43:53 -05:00
Stefan Metzmacher
21cf5c82a2 r20921: - only give password attributes to the SYSTEM account
- but SYSTEM and administrators can change them

metze
(This used to be commit fc5319e927d96b68d8bd90a01e10aa00a6ddf494)
2007-10-10 14:43:52 -05:00
Stefan Metzmacher
8309f2c35b r20909: add a module that implements the LDAP_CONTROL_SHOW_DELETED_OID control
it hides objects with isDeleted=TRUE by default, and let them through
if the control is present

metze
(This used to be commit 7108d62cb0360e734045eb39c03508d8528dc9cc)
2007-10-10 14:43:51 -05:00
Stefan Metzmacher
89278a1469 r20906: allow LDAP simple binds using the following syntaxes in the DN field:
CN=Administrator,CN=Users,DC=w2k3,DC=vmnet1,DC=vm,DC=base
Administrator@W2K3
W2K3\Administrator
w2k3.vmnet1.vm.base/Users/Administrator

w2k3 also allows this (and maybe more...?)

metze
(This used to be commit 40c27ef88df9021e9ef2a6c43aabab709ac9662f)
2007-10-10 14:43:50 -05:00
Stefan Metzmacher
c2e492ece3 r20902: don't crash if the object isn't there yet
metze
(This used to be commit 4588e2522b11f707e608488c782f6988fd97628a)
2007-10-10 14:43:50 -05:00
Stefan Metzmacher
3e523582ea r20871: implement the validFSMOs constructed attribute on the rootdse
for the schema, domain naming and pdc fsmo roles

infrastructure and rid manager will be added later,
when we have module for them

metze
(This used to be commit 308f9cf822a3a34dae28a5fa5aa850e2adbeb472)
2007-10-10 14:43:43 -05:00
Stefan Metzmacher
301129f6de r20870: implement the constructed attributes dsSchemaAttrCount,
dsSchemaClassCount and dsSchemaPrefixCount on the rootdse

having a loaded dsdb_schema make things so easy...:-)

metze
(This used to be commit 7862fcdbb5ce43e702512c1acdbb5843ef551293)
2007-10-10 14:43:43 -05:00
Stefan Metzmacher
cc6c3eb38c r20867: add modules to handle the domain naming and the pdc FSMO Roles
metze
(This used to be commit 341fae8e8465e67023ab0e82110835669a593577)
2007-10-10 14:43:42 -05:00
Stefan Metzmacher
aa2439da35 r20866: - fix debug messages missing new lines
- use LDB_DEBUG_WARNING in some places
- debug if we're the schema master

metze
(This used to be commit 63f46344437002202990bd34fb200d847fcfcf40)
2007-10-10 14:43:42 -05:00
Stefan Metzmacher
bd46898e69 r20864: move common stuff into an extra function
metze
(This used to be commit 3f441741a6ff00ba88d3134c97e597285afbfed7)
2007-10-10 14:43:41 -05:00
Stefan Metzmacher
2a7cbb2c53 r20863: check that there's a current partition control attached to the request
metze
(This used to be commit b1377a2e240dbe36277816452d33d6abaa486b9e)
2007-10-10 14:43:41 -05:00
Stefan Metzmacher
1500cd79d9 r20855: pass the DSDB_CONTROL_CURRENT_PARTITION_OID control also for the
send_all case

metze
(This used to be commit b3fce383d3824ee418cbb7343f5d06720f5d31df)
2007-10-10 14:43:40 -05:00
Stefan Metzmacher
f58e49ade8 r20853: attach the DSDB_CONTROL_CURRENT_PARTITION_OID control when requests
are passed to a specific partition

metze
(This used to be commit 06a46b1db46251989676fb04548f038930c83eb5)
2007-10-10 14:43:40 -05:00
Stefan Metzmacher
a35a071fc9 r20849: first step to move away from using find_backend() and use find_partition()
instead

metze
(This used to be commit 0d75cca6f37975a3855973468dc55520cb3b3fb7)
2007-10-10 14:43:39 -05:00
Stefan Metzmacher
7730ff44af r20847: - split some code out into a new function find_partition()
- make all functions static

metze
(This used to be commit 3d313f08c7d6b201011f3b4744c8e54b1d0640c7)
2007-10-10 14:43:39 -05:00
Stefan Metzmacher
21206f36c6 r20826: make the dsdb_control_current_partition struct public and allocate an oid for the
control

metze
(This used to be commit 684eee52e8812f6d104d8706ab059643ff4faa46)
2007-10-10 14:43:37 -05:00
Stefan Metzmacher
842e2804d8 r20809: rename struct partition into struct dsdb_control_current_partition
we'll soon pass this down as DSDB_CONTROL_CURRENT_PARTITION_OID control
so that the repl_meta_data module knows where to update the replUpToDateVector
attribute

metze
(This used to be commit e5de40f8c2377d6dce54109a8d8bf9c6b681b813)
2007-10-10 14:43:34 -05:00
Stefan Metzmacher
b15f4878e1 r20780: keep a dsdb_schema_fsmo struct as private data
and remember if we're the schema master

metze
(This used to be commit c42dab21fb275ca36a517f97922af21447671785)
2007-10-10 14:40:53 -05:00
Stefan Metzmacher
3b956f0779 r20779: fix compiler warnings
metze
(This used to be commit 0b98f11d3eeee3eaf862dc06468332a20e22c059)
2007-10-10 14:40:53 -05:00
Stefan Metzmacher
2fe86d1e42 r20778: we don't need a talloc_steal here
metze
(This used to be commit 0ef90769b49b93cb57e9a1ba2aea280ec70ae151)
2007-10-10 14:40:53 -05:00
Stefan Metzmacher
47523dbc6a r20776: require a loaded dsdb_schema for originating add and modify operations
(later we'll require it for all originating changes...)

metze
(This used to be commit fc1a836eccc0913fdab644341fa3e37a2f086de8)
2007-10-10 14:40:52 -05:00
Stefan Metzmacher
dd4b91f2f4 r20771: add an ldb module which will force the Schema FSMO Role Owner
constraints and it also loads the dsdb_schema at startup.

currently it only loads the dsdb_schema

metze
(This used to be commit d78de0fb68f8b4ef4c5372f3c3ed171e44cf2037)
2007-10-10 14:40:51 -05:00
Stefan Metzmacher
ee56bf2317 r20762: load the default dn's after the rootdse module is initialized,
so that following module can access the default dn's.

metze
(This used to be commit a934da4dcfeae49fcfc901a071da2d41507da69b)
2007-10-10 14:40:47 -05:00
Stefan Metzmacher
1687e73abe r20760: also handle the case where no private data is attached to the module
metze
(This used to be commit c8f5aad40af0741984ded2047931a77161f69ece)
2007-10-10 14:40:46 -05:00
Stefan Metzmacher
21729fff11 r20729: add a version number to struct dsdb_extended_replicated_objects
metze
(This used to be commit 2e79863d54030526841e5858e7be6a815c25593b)
2007-10-10 14:40:33 -05:00
Stefan Metzmacher
82b4069171 r20728: the DSDB_CONTROL_REPLICATED_OBJECT_OID control isn't used anymore
because we now use DSDB_EXTENDED_REPLICATED_OBJECTS_OID extended operation

metze
(This used to be commit 4380cc9ed6ac2e6c133b5a36f922b341474a8e7e)
2007-10-10 14:40:32 -05:00
Stefan Metzmacher
2cf643929c r20727: implement basic merging of replicated objects when it already exist
in the ldb

metze
(This used to be commit 262e42123d0bca77560fbb5a33c13a9c275ba3ec)
2007-10-10 14:40:32 -05:00
Stefan Metzmacher
7ff19c935d r20726: - only add the rdn attribute and it's meta_data when the 'name' attribute is there
- add the values for objectGUID and whenChanged inside the ldb module,
  so that the ldb module has only replicated attributes as input

metze
(This used to be commit 0ecb07e0526462529fb21cec30e789a9002b30a1)
2007-10-10 14:40:32 -05:00
Stefan Metzmacher
007c6f6e65 r20716: add a dsdb_cache ldb module which will load the dsdb_schema and other things
on startup into memory structures in future.

metze
(This used to be commit fbb1f85e320830f52bdf410ad61f2ec60e168d80)
2007-10-10 14:40:31 -05:00
Stefan Metzmacher
33f8946640 r20713: sort the cursors in replUpToDateVector by source_dsa_invocation_id,
w2k3 seems to do the same.

It's later useful, when we would have a large array
be could use a binary search

metze
(This used to be commit cd654f20e16c32f82ceb2b66453ce8d1be7020dd)
2007-10-10 14:40:30 -05:00
Stefan Metzmacher
ce87c63146 r20710: update or create the "repsFrom" values after applying replicated objects
metze
(This used to be commit 665d8f9626f8ef1c64f6fac79bdc40d14330f126)
2007-10-10 14:40:30 -05:00
Stefan Metzmacher
18f8180469 r20709: pass a repsFromTo1 struct down as it contains all needed info for the source dsa
and the highwater mark vector

metze
(This used to be commit a31e017e5388e5abd6ed9d09adcf26d2527954a6)
2007-10-10 14:40:29 -05:00
Stefan Metzmacher
ffa259f4a4 r20705: store the "replUpToDateVector" attribute in DSDB_EXTENDED_REPLICATED_OBJECTS
metze
(This used to be commit c9e7a58f6a16dfa28323fd0fd01ad6ee516c51b0)
2007-10-10 14:40:28 -05:00
Stefan Metzmacher
6976f704ba r20704: add functions to get and set the ntds objectGUID and invocationId
metze
(This used to be commit c271ad824f763ba10ee74517062c6283fa20be89)
2007-10-10 14:40:28 -05:00
Stefan Metzmacher
f8ce15a417 r20703: fix minor memory leak
metze
(This used to be commit 4012e54ef22fc9a18d4533f6b48530ddc9c67992)
2007-10-10 14:40:28 -05:00
Stefan Metzmacher
fbba1b39d4 r20682: make the dsdb_extended_replicated_objects_commit() interface a bit more useful,
so that we can apply the schema partition objects with one call

metze
(This used to be commit 165ff94b8a89ef4b9145405633ed11ab9567376b)
2007-10-10 14:40:21 -05:00
Stefan Metzmacher
f68dff9f81 r20681: implement the DSDB_EXTENDED_REPLICATED_OBJECTS operation.
the merging of existing objects is not implemented yet...

there are a few ifdef REPLMD_FULL_ASYNC because we need to workarouns
ldb's async infrastructure (which don't handle full async sub requests nicely)

metze
(This used to be commit da4ff0e7ccde47b3e092313ba22422350cf50f78)
2007-10-10 14:40:21 -05:00
Stefan Metzmacher
513a43fc23 r20680: prepare the helper functions for applying replicated objects
to pass all needed info to the repl_meta_data module

metze
(This used to be commit d5db31cde279cf05bd13bcf0da03767ab3498079)
2007-10-10 14:40:21 -05:00
Stefan Metzmacher
ee3c158602 r20679: make the init_handle stuff a bit easier and get rid of really ugly talloc_get_type()
usage

simo: if you change more modules, please include also this change

metze
(This used to be commit 88051a82c4918ba8183e0d6909161b2af2109446)
2007-10-10 14:40:20 -05:00
Stefan Metzmacher
eccb2d16df r20629: add a wrapper function for ldb_extended(ldb, DSDB_EXTENDED_REPLICATED_OBJECTS_OID, out, &ext_res);
which prepares the replicated objects, the repl_meta_data ldb module
will then add the uSNCreated, uSNChanged and some other things and will apply
the objects to the partition specific ldb

metze
(This used to be commit 48d568a75b8109807af29f5d9604240c20c1a116)
2007-10-10 14:37:17 -05:00
Andrew Bartlett
08439c72c4 r20622: Add in a hack to avoid permitting searches on the value of protected
attributes.

Andrew Bartlett
(This used to be commit 5aa2195ec26d9ddf82e51f2b242cdf7c8ab52f52)
2007-10-10 14:37:16 -05:00
Stefan Metzmacher
a04a3b8bc2 r20599: - forward extended operations in the partitions module
- by default the operations goes to all partitions
- but some wellkown ones will go to just one partition
  (DSDB_EXTENDED_REPLICATED_OBJECTS_OID for now)

I'll soon change the partitions module so that it'll attach a
DSDB_CONTROL_PARTITION_CONTEXT_OID control to give
the repl_meta_data or other partition specific modules a chance to
to know for which partition it should work.

metze
(This used to be commit 0ed53c6d0f4a4e43ff9c8943730eeb57c735201b)
2007-10-10 14:37:12 -05:00
Stefan Metzmacher
ac0c34a9a4 r20587: prepare the DSDB_EXTENDED_REPLICATED_OBJECTS_OID handling
metze
(This used to be commit ef3b325db060d43a7c2e058f6b8914b5867cd321)
2007-10-10 14:37:08 -05:00