source4/dsdb/schema/schema_prefixmap.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    DRS::prefixMap implementation
   5
   6    Copyright (C) Kamen Mazdrashki <kamen.mazdrashki@postpath.com> 2009
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22 #include "includes.h"
  23 #include "dsdb/samdb/samdb.h"
  24 #include "librpc/gen_ndr/ndr_drsuapi.h"
  25 #include "librpc/gen_ndr/ndr_drsblobs.h"
  26 #include "../lib/util/asn1.h"
  27
  28
  29 /**
  30  * Determine range type for supplied ATTID
  31  */
  32 enum dsdb_attid_type dsdb_pfm_get_attid_type(uint32_t attid)
  33 {
  34         if (attid <= 0x7FFFFFFF) {
  35                 return dsdb_attid_type_pfm;
  36         }
  37         else if (attid <= 0xBFFFFFFF) {
  38                 return dsdb_attid_type_intid;
  39         }
  40         else if (attid <= 0xFFFEFFFF) {
  41                 return dsdb_attid_type_reserved;
  42         }
  43         else {
  44                 return dsdb_attid_type_internal;
  45         }
  46 }
  47
  48 /**
  49  * Allocates schema_prefixMap object in supplied memory context
  50  */
  51 static struct dsdb_schema_prefixmap *_dsdb_schema_prefixmap_talloc(TALLOC_CTX *mem_ctx,
  52                                                                    uint32_t length)
  53 {
  54         struct dsdb_schema_prefixmap *pfm;
  55
  56         pfm = talloc_zero(mem_ctx, struct dsdb_schema_prefixmap);
  57         if (!pfm) {
  58                 return NULL;
  59         }
  60
  61         pfm->length = length;
  62         pfm->prefixes = talloc_zero_array(pfm, struct dsdb_schema_prefixmap_oid,
  63                                           pfm->length);
  64         if (!pfm->prefixes) {
  65                 talloc_free(pfm);
  66                 return NULL;
  67         }
  68
  69         return pfm;
  70 }
  71
  72 /**
  73  * Initial prefixMap creation according to:
  74  * [MS-DRSR] section 5.12.2
  75  */
  76 WERROR dsdb_schema_pfm_new(TALLOC_CTX *mem_ctx, struct dsdb_schema_prefixmap **_pfm)
  77 {
  78         uint32_t i;
  79         struct dsdb_schema_prefixmap *pfm;
  80         const struct {
  81                 uint32_t        id;
  82                 const char      *oid_prefix;
  83         } pfm_init_data[] = {
  84                 {.id=0x00000000, .oid_prefix="2.5.4"},
  85                 {.id=0x00000001, .oid_prefix="2.5.6"},
  86                 {.id=0x00000002, .oid_prefix="1.2.840.113556.1.2"},
  87                 {.id=0x00000003, .oid_prefix="1.2.840.113556.1.3"},
  88                 {.id=0x00000004, .oid_prefix="2.16.840.1.101.2.2.1"},
  89                 {.id=0x00000005, .oid_prefix="2.16.840.1.101.2.2.3"},
  90                 {.id=0x00000006, .oid_prefix="2.16.840.1.101.2.1.5"},
  91                 {.id=0x00000007, .oid_prefix="2.16.840.1.101.2.1.4"},
  92                 {.id=0x00000008, .oid_prefix="2.5.5"},
  93                 {.id=0x00000009, .oid_prefix="1.2.840.113556.1.4"},
  94                 {.id=0x0000000A, .oid_prefix="1.2.840.113556.1.5"},
  95                 {.id=0x00000013, .oid_prefix="0.9.2342.19200300.100"},
  96                 {.id=0x00000014, .oid_prefix="2.16.840.1.113730.3"},
  97                 {.id=0x00000015, .oid_prefix="0.9.2342.19200300.100.1"},
  98                 {.id=0x00000016, .oid_prefix="2.16.840.1.113730.3.1"},
  99                 {.id=0x00000017, .oid_prefix="1.2.840.113556.1.5.7000"},
 100                 {.id=0x00000018, .oid_prefix="2.5.21"},
 101                 {.id=0x00000019, .oid_prefix="2.5.18"},
 102                 {.id=0x0000001A, .oid_prefix="2.5.20"},
 103         };
 104
 105         /* allocate mem for prefix map */
 106         pfm = _dsdb_schema_prefixmap_talloc(mem_ctx, ARRAY_SIZE(pfm_init_data));
 107         W_ERROR_HAVE_NO_MEMORY(pfm);
 108
 109         /* build prefixes */
 110         for (i = 0; i < pfm->length; i++) {
 111                 if (!ber_write_partial_OID_String(pfm, &pfm->prefixes[i].bin_oid, pfm_init_data[i].oid_prefix)) {
 112                         talloc_free(pfm);
 113                         return WERR_INTERNAL_ERROR;
 114                 }
 115                 pfm->prefixes[i].id = pfm_init_data[i].id;
 116         }
 117
 118         *_pfm = pfm;
 119
 120         return WERR_OK;
 121 }
 122
 123
 124 /**
 125  * Adds oid to prefix map.
 126  * On success returns ID for newly added index
 127  * or ID of existing entry that matches oid
 128  * Reference: [MS-DRSR] section 5.12.2
 129  *
 130  * \param pfm prefixMap
 131  * \param bin_oid OID prefix to be added to prefixMap
 132  * \param pfm_id Location where to store prefixMap entry ID
 133  */
 134 static WERROR _dsdb_schema_pfm_add_entry(struct dsdb_schema_prefixmap *pfm, DATA_BLOB bin_oid, uint32_t *_idx)
 135 {
 136         uint32_t i;
 137         struct dsdb_schema_prefixmap_oid * pfm_entry;
 138         struct dsdb_schema_prefixmap_oid * prefixes_new;
 139
 140         /* dup memory for bin-oid prefix to be added */
 141         bin_oid = data_blob_dup_talloc(pfm, &bin_oid);
 142         W_ERROR_HAVE_NO_MEMORY(bin_oid.data);
 143
 144         /* make room for new entry */
 145         prefixes_new = talloc_realloc(pfm, pfm->prefixes, struct dsdb_schema_prefixmap_oid, pfm->length + 1);
 146         if (!prefixes_new) {
 147                 talloc_free(bin_oid.data);
 148                 return WERR_NOMEM;
 149         }
 150         pfm->prefixes = prefixes_new;
 151
 152         /* make new unique ID in prefixMap */
 153         pfm_entry = &pfm->prefixes[pfm->length];
 154         pfm_entry->id = 0;
 155         for (i = 0; i < pfm->length; i++) {
 156                 if (pfm_entry->id < pfm->prefixes[i].id)
 157                         pfm_entry->id = pfm->prefixes[i].id;
 158         }
 159
 160         /* add new bin-oid prefix */
 161         pfm_entry->id++;
 162         pfm_entry->bin_oid = bin_oid;
 163
 164         *_idx = pfm->length;
 165         pfm->length++;
 166
 167         return WERR_OK;
 168 }
 169
 170
 171 /**
 172  * Make partial binary OID for supplied OID.
 173  * Reference: [MS-DRSR] section 5.12.2
 174  */
 175 static WERROR _dsdb_pfm_make_binary_oid(const char *full_oid, TALLOC_CTX *mem_ctx,
 176                                         DATA_BLOB *_bin_oid, uint32_t *_last_subid)
 177 {
 178         uint32_t last_subid;
 179         const char *oid_subid;
 180
 181         /* make last sub-identifier value */
 182         oid_subid = strrchr(full_oid, '.');
 183         if (!oid_subid) {
 184                 return WERR_INVALID_PARAMETER;
 185         }
 186         oid_subid++;
 187         last_subid = strtoul(oid_subid, NULL, 10);
 188
 189         /* encode oid in BER format */
 190         if (!ber_write_OID_String(mem_ctx, _bin_oid, full_oid)) {
 191                 return WERR_INTERNAL_ERROR;
 192         }
 193
 194         /* get the prefix of the OID */
 195         if (last_subid < 128) {
 196                 _bin_oid->length -= 1;
 197         } else {
 198                 _bin_oid->length -= 2;
 199         }
 200
 201         /* return last_value if requested */
 202         if (_last_subid) {
 203                 *_last_subid = last_subid;
 204         }
 205
 206         return WERR_OK;
 207 }
 208
 209 /**
 210  * Lookup partial-binary-oid in prefixMap
 211  */
 212 WERROR dsdb_schema_pfm_find_binary_oid(const struct dsdb_schema_prefixmap *pfm,
 213                                        DATA_BLOB bin_oid,
 214                                        uint32_t *_idx)
 215 {
 216         uint32_t i;
 217
 218         for (i = 0; i < pfm->length; i++) {
 219                 if (pfm->prefixes[i].bin_oid.length != bin_oid.length) {
 220                         continue;
 221                 }
 222
 223                 if (memcmp(pfm->prefixes[i].bin_oid.data, bin_oid.data, bin_oid.length) == 0) {
 224                         if (_idx) {
 225                                 *_idx = i;
 226                         }
 227                         return WERR_OK;
 228                 }
 229         }
 230
 231         return WERR_DS_NO_MSDS_INTID;
 232 }
 233
 234 /**
 235  * Lookup full-oid in prefixMap
 236  * Note: this may be slow.
 237  */
 238 WERROR dsdb_schema_pfm_find_oid(const struct dsdb_schema_prefixmap *pfm,
 239                                 const char *full_oid,
 240                                 uint32_t *_idx)
 241 {
 242         WERROR werr;
 243         DATA_BLOB bin_oid;
 244
 245         ZERO_STRUCT(bin_oid);
 246
 247         /* make partial-binary-oid to look for */
 248         werr = _dsdb_pfm_make_binary_oid(full_oid, NULL, &bin_oid, NULL);
 249         W_ERROR_NOT_OK_RETURN(werr);
 250
 251         /* lookup the partial-oid */
 252         werr = dsdb_schema_pfm_find_binary_oid(pfm, bin_oid, _idx);
 253
 254         data_blob_free(&bin_oid);
 255
 256         return werr;
 257 }
 258
 259 /**
 260  * Make ATTID for given OID
 261  * Reference: [MS-DRSR] section 5.12.2
 262  */
 263 WERROR dsdb_schema_pfm_make_attid(struct dsdb_schema_prefixmap *pfm, const char *oid, uint32_t *attid)
 264 {
 265         WERROR werr;
 266         uint32_t idx;
 267         uint32_t lo_word, hi_word;
 268         uint32_t last_subid;
 269         DATA_BLOB bin_oid;
 270
 271         if (!pfm) {
 272                 return WERR_INVALID_PARAMETER;
 273         }
 274         if (!oid) {
 275                 return WERR_INVALID_PARAMETER;
 276         }
 277
 278         werr = _dsdb_pfm_make_binary_oid(oid, pfm, &bin_oid, &last_subid);
 279         W_ERROR_NOT_OK_RETURN(werr);
 280
 281         /* search the prefix in the prefix table, if none found, add
 282          * one entry for new prefix.
 283          */
 284         werr = dsdb_schema_pfm_find_binary_oid(pfm, bin_oid, &idx);
 285         if (W_ERROR_IS_OK(werr)) {
 286                 /* free memory allocated for bin_oid */
 287                 data_blob_free(&bin_oid);
 288         } else {
 289                 /* entry does not exists, add it */
 290                 werr = _dsdb_schema_pfm_add_entry(pfm, bin_oid, &idx);
 291                 W_ERROR_NOT_OK_RETURN(werr);
 292         }
 293
 294         /* compose the attid */
 295         lo_word = last_subid % 16384;   /* actually get lower 14 bits: lo_word & 0x3FFF */
 296         if (last_subid >= 16384) {
 297                 /* mark it so that it is known to not be the whole lastValue
 298                  * This will raise 16-th bit*/
 299                 lo_word += 32768;
 300         }
 301         hi_word = pfm->prefixes[idx].id;
 302
 303         /* make ATTID:
 304          * HIWORD is prefixMap id
 305          * LOWORD is truncated binary-oid */
 306         *attid = (hi_word * 65536) + lo_word;
 307
 308         return WERR_OK;
 309 }
 310
 311
 312 /**
 313  * Make OID for given ATTID.
 314  * Reference: [MS-DRSR] section 5.12.2
 315  */
 316 WERROR dsdb_schema_pfm_oid_from_attid(struct dsdb_schema_prefixmap *pfm, uint32_t attid,
 317                                       TALLOC_CTX *mem_ctx, const char **_oid)
 318 {
 319         uint32_t i;
 320         uint32_t hi_word, lo_word;
 321         DATA_BLOB bin_oid = {NULL, 0};
 322         struct dsdb_schema_prefixmap_oid *pfm_entry;
 323         WERROR werr = WERR_OK;
 324
 325         /* sanity check for attid requested */
 326         if (dsdb_pfm_get_attid_type(attid) != dsdb_attid_type_pfm) {
 327                 return WERR_INVALID_PARAMETER;
 328         }
 329
 330         /* crack attid value */
 331         hi_word = attid >> 16;
 332         lo_word = attid & 0xFFFF;
 333
 334         /* locate corRespoNding prefixMap entry */
 335         pfm_entry = NULL;
 336         for (i = 0; i < pfm->length; i++) {
 337                 if (hi_word == pfm->prefixes[i].id) {
 338                         pfm_entry = &pfm->prefixes[i];
 339                         break;
 340                 }
 341         }
 342
 343         if (!pfm_entry) {
 344                 return WERR_INTERNAL_ERROR;
 345         }
 346
 347         /* copy oid prefix making enough room */
 348         bin_oid.length = pfm_entry->bin_oid.length + 2;
 349         bin_oid.data = talloc_array(mem_ctx, uint8_t, bin_oid.length);
 350         W_ERROR_HAVE_NO_MEMORY(bin_oid.data);
 351         memcpy(bin_oid.data, pfm_entry->bin_oid.data, pfm_entry->bin_oid.length);
 352
 353         if (lo_word < 128) {
 354                 bin_oid.length = bin_oid.length - 1;
 355                 bin_oid.data[bin_oid.length-1] = lo_word;
 356         }
 357         else {
 358                 if (lo_word >= 32768) {
 359                         lo_word -= 32768;
 360                 }
 361                 bin_oid.data[bin_oid.length-2] = (0x80 | ((lo_word>>7) & 0x7f));
 362                 bin_oid.data[bin_oid.length-1] = lo_word & 0x7f;
 363         }
 364
 365         if (!ber_read_OID_String(mem_ctx, bin_oid, _oid)) {
 366                 werr = WERR_INTERNAL_ERROR;
 367         }
 368
 369         /* free locally allocated memory */
 370         talloc_free(bin_oid.data);
 371
 372         return werr;
 373 }
 374
 375
 376 /**
 377  * Verifies drsuapi mappings.
 378  */
 379 static WERROR _dsdb_drsuapi_pfm_verify(const struct drsuapi_DsReplicaOIDMapping_Ctr *ctr,
 380                                        bool have_schema_info)
 381 {
 382         uint32_t i;
 383         uint32_t num_mappings;
 384         struct drsuapi_DsReplicaOIDMapping *mapping;
 385
 386         /* check input params */
 387         if (!ctr) {
 388                 return WERR_INVALID_PARAMETER;
 389         }
 390         if (!ctr->mappings) {
 391                 return WERR_INVALID_PARAMETER;
 392         }
 393         num_mappings = ctr->num_mappings;
 394
 395         if (have_schema_info) {
 396                 if (ctr->num_mappings < 2) {
 397                         return WERR_INVALID_PARAMETER;
 398                 }
 399
 400                 /* check last entry for being special */
 401                 mapping = &ctr->mappings[ctr->num_mappings - 1];
 402                 if (!mapping->oid.binary_oid) {
 403                         return WERR_INVALID_PARAMETER;
 404                 }
 405                 if (mapping->id_prefix != 0) {
 406                         return WERR_INVALID_PARAMETER;
 407                 }
 408                 if (mapping->oid.length != 21) {
 409                         return WERR_INVALID_PARAMETER;
 410                 }
 411                 if (*mapping->oid.binary_oid != 0xFF) {
 412                         return WERR_INVALID_PARAMETER;
 413                 }
 414
 415                 /* get number of read mappings in the map */
 416                 num_mappings--;
 417         }
 418
 419         /* now, verify rest of entries for being at least not null */
 420         for (i = 0; i < num_mappings; i++) {
 421                 mapping = &ctr->mappings[i];
 422                 if (!mapping->oid.length) {
 423                         return WERR_INVALID_PARAMETER;
 424                 }
 425                 if (!mapping->oid.binary_oid) {
 426                         return WERR_INVALID_PARAMETER;
 427                 }
 428                 /* check it is not the special entry */
 429                 if (*mapping->oid.binary_oid == 0xFF) {
 430                         return WERR_INVALID_PARAMETER;
 431                 }
 432         }
 433
 434         return WERR_OK;
 435 }
 436
 437 /**
 438  * Convert drsuapi_ prefix map to prefixMap internal presentation.
 439  *
 440  * \param ctr Pointer to drsuapi_DsReplicaOIDMapping_Ctr which represents drsuapi_ prefixMap
 441  * \param have_schema_info if drsuapi_prefixMap have schem_info in it or not
 442  * \param mem_ctx TALLOC_CTX to make allocations in
 443  * \param _pfm Out pointer to hold newly created prefixMap
 444  * \param _schema_info Out param to store schema_info to. If NULL, schema_info is not decoded
 445  */
 446 WERROR dsdb_schema_pfm_from_drsuapi_pfm(const struct drsuapi_DsReplicaOIDMapping_Ctr *ctr,
 447                                         bool have_schema_info,
 448                                         TALLOC_CTX *mem_ctx,
 449                                         struct dsdb_schema_prefixmap **_pfm,
 450                                         const char **_schema_info)
 451 {
 452         WERROR werr;
 453         uint32_t i;
 454         DATA_BLOB blob;
 455         uint32_t num_mappings;
 456         struct dsdb_schema_prefixmap *pfm;
 457
 458         if (!_pfm) {
 459                 return WERR_INVALID_PARAMETER;
 460         }
 461
 462         /*
 463          * error out if schema_info is requested
 464          * but it is not in the drsuapi_prefixMap
 465          */
 466         if (_schema_info && !have_schema_info) {
 467                 return WERR_INVALID_PARAMETER;
 468         }
 469
 470         /* verify drsuapi_pefixMap */
 471         werr =_dsdb_drsuapi_pfm_verify(ctr, have_schema_info);
 472         W_ERROR_NOT_OK_RETURN(werr);
 473
 474         /* allocate mem for prefix map */
 475         num_mappings = ctr->num_mappings;
 476         if (have_schema_info) {
 477                 num_mappings--;
 478         }
 479         pfm = _dsdb_schema_prefixmap_talloc(mem_ctx, num_mappings);
 480         W_ERROR_HAVE_NO_MEMORY(pfm);
 481
 482         /* copy entries from drsuapi_prefixMap */
 483         for (i = 0; i < pfm->length; i++) {
 484                 blob = data_blob_talloc(pfm,
 485                                         ctr->mappings[i].oid.binary_oid,
 486                                         ctr->mappings[i].oid.length);
 487                 if (!blob.data) {
 488                         talloc_free(pfm);
 489                         return WERR_NOMEM;
 490                 }
 491                 pfm->prefixes[i].id = ctr->mappings[i].id_prefix;
 492                 pfm->prefixes[i].bin_oid = blob;
 493         }
 494
 495         /* fetch schema_info if requested */
 496         if (_schema_info) {
 497                 /* by this time, i should have this value,
 498                  *  but set it here for clarity */
 499                 i = ctr->num_mappings - 1;
 500
 501                 *_schema_info = hex_encode_talloc(mem_ctx,
 502                                                   ctr->mappings[i].oid.binary_oid,
 503                                                   ctr->mappings[i].oid.length);
 504                 if (!*_schema_info) {
 505                         talloc_free(pfm);
 506                         return WERR_NOMEM;
 507                 }
 508         }
 509
 510         /* schema_prefixMap created successfully */
 511         *_pfm = pfm;
 512
 513         return WERR_OK;
 514 }
 515
 516 /**
 517  * Convert drsuapi_ prefix map to prefixMap internal presentation.
 518  *
 519  * \param pfm Schema prefixMap to be converted
 520  * \param schema_info schema_info string - if NULL, we don't need it
 521  * \param mem_ctx TALLOC_CTX to make allocations in
 522  * \param _ctr Out pointer to drsuapi_DsReplicaOIDMapping_Ctr prefix map structure
 523  */
 524 WERROR dsdb_drsuapi_pfm_from_schema_pfm(const struct dsdb_schema_prefixmap *pfm,
 525                                         const char *schema_info,
 526                                         TALLOC_CTX *mem_ctx,
 527                                         struct drsuapi_DsReplicaOIDMapping_Ctr **_ctr)
 528 {
 529         uint32_t i;
 530         DATA_BLOB blob;
 531         struct drsuapi_DsReplicaOIDMapping_Ctr *ctr;
 532
 533         if (!_ctr) {
 534                 return WERR_INVALID_PARAMETER;
 535         }
 536         if (!pfm) {
 537                 return WERR_INVALID_PARAMETER;
 538         }
 539         if (pfm->length == 0) {
 540                 return WERR_INVALID_PARAMETER;
 541         }
 542
 543         /* allocate memory for the structure */
 544         ctr = talloc_zero(mem_ctx, struct drsuapi_DsReplicaOIDMapping_Ctr);
 545         W_ERROR_HAVE_NO_MEMORY(ctr);
 546
 547         ctr->num_mappings = (schema_info ? pfm->length + 1 : pfm->length);
 548         ctr->mappings = talloc_array(ctr, struct drsuapi_DsReplicaOIDMapping, ctr->num_mappings);
 549         if (!ctr->mappings) {
 550                 talloc_free(ctr);
 551                 return WERR_NOMEM;
 552         }
 553
 554         /* copy entries from schema_prefixMap */
 555         for (i = 0; i < pfm->length; i++) {
 556                 blob = data_blob_dup_talloc(ctr, &pfm->prefixes[i].bin_oid);
 557                 if (!blob.data) {
 558                         talloc_free(ctr);
 559                         return WERR_NOMEM;
 560                 }
 561                 ctr->mappings[i].id_prefix = pfm->prefixes[i].id;
 562                 ctr->mappings[i].oid.length = blob.length;
 563                 ctr->mappings[i].oid.binary_oid = blob.data;
 564         }
 565
 566         /* make schema_info entry if needed */
 567         if (schema_info) {
 568                 /* by this time, i should have this value,
 569                  *  but set it here for clarity */
 570                 i = ctr->num_mappings - 1;
 571
 572                 blob = strhex_to_data_blob(ctr, schema_info);
 573                 if (!blob.data) {
 574                         talloc_free(ctr);
 575                         return WERR_NOMEM;
 576                 }
 577
 578                 ctr->mappings[i].id_prefix = 0;
 579                 ctr->mappings[i].oid.length = blob.length;
 580                 ctr->mappings[i].oid.binary_oid = blob.data;
 581         }
 582
 583         /* drsuapi_prefixMap constructed successfully */
 584         *_ctr = ctr;
 585
 586         return WERR_OK;
 587 }
 588
 589 /**
 590  * Verifies schema prefixMap and drsuapi prefixMap are same.
 591  * Note that we just need to verify pfm contains prefixes
 592  * from ctr, not that those prefixes has same id_prefix.
 593  */
 594 WERROR dsdb_schema_pfm_contains_drsuapi_pfm(const struct dsdb_schema_prefixmap *pfm,
 595                                             const struct drsuapi_DsReplicaOIDMapping_Ctr *ctr)
 596 {
 597         WERROR werr;
 598         uint32_t i;
 599         uint32_t idx;
 600         DATA_BLOB bin_oid;
 601
 602         /* verify drsuapi_pefixMap */
 603         werr = _dsdb_drsuapi_pfm_verify(ctr, true);
 604         W_ERROR_NOT_OK_RETURN(werr);
 605
 606         /* check pfm contains every entry from ctr, except the last one */
 607         for (i = 0; i < ctr->num_mappings - 1; i++) {
 608                 bin_oid.length = ctr->mappings[i].oid.length;
 609                 bin_oid.data   = ctr->mappings[i].oid.binary_oid;
 610
 611                 werr = dsdb_schema_pfm_find_binary_oid(pfm, bin_oid, &idx);
 612                 if (!W_ERROR_IS_OK(werr)) {
 613                         return WERR_DS_DRA_SCHEMA_MISMATCH;
 614                 }
 615         }
 616
 617         return WERR_OK;
 618 }