2 Unix SMB/CIFS mplementation.
5 Copyright (C) Stefan Metzmacher <metze@samba.org> 2006
6 Copyright (C) Simo Sorce 2005
7 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "dsdb/samdb/samdb.h"
25 #include "librpc/gen_ndr/ndr_drsuapi.h"
26 #include "librpc/gen_ndr/ndr_security.h"
27 #include "librpc/gen_ndr/ndr_misc.h"
28 #include "lib/ldb/include/ldb.h"
29 #include "lib/ldb/include/ldb_errors.h"
30 #include "system/time.h"
31 #include "../lib/util/charset/charset.h"
32 #include "librpc/ndr/libndr.h"
34 static WERROR
dsdb_syntax_FOOBAR_drsuapi_to_ldb(struct ldb_context
*ldb
,
35 const struct dsdb_schema
*schema
,
36 const struct dsdb_attribute
*attr
,
37 const struct drsuapi_DsReplicaAttribute
*in
,
39 struct ldb_message_element
*out
)
44 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
45 W_ERROR_HAVE_NO_MEMORY(out
->name
);
47 out
->num_values
= in
->value_ctr
.num_values
;
48 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
49 W_ERROR_HAVE_NO_MEMORY(out
->values
);
51 for (i
=0; i
< out
->num_values
; i
++) {
54 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
58 str
= talloc_asprintf(out
->values
, "%s: not implemented",
60 W_ERROR_HAVE_NO_MEMORY(str
);
62 out
->values
[i
] = data_blob_string_const(str
);
68 static WERROR
dsdb_syntax_FOOBAR_ldb_to_drsuapi(struct ldb_context
*ldb
,
69 const struct dsdb_schema
*schema
,
70 const struct dsdb_attribute
*attr
,
71 const struct ldb_message_element
*in
,
73 struct drsuapi_DsReplicaAttribute
*out
)
78 static WERROR
dsdb_syntax_BOOL_drsuapi_to_ldb(struct ldb_context
*ldb
,
79 const struct dsdb_schema
*schema
,
80 const struct dsdb_attribute
*attr
,
81 const struct drsuapi_DsReplicaAttribute
*in
,
83 struct ldb_message_element
*out
)
88 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
89 W_ERROR_HAVE_NO_MEMORY(out
->name
);
91 out
->num_values
= in
->value_ctr
.num_values
;
92 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
93 W_ERROR_HAVE_NO_MEMORY(out
->values
);
95 for (i
=0; i
< out
->num_values
; i
++) {
99 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
103 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
107 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
110 str
= talloc_strdup(out
->values
, "TRUE");
111 W_ERROR_HAVE_NO_MEMORY(str
);
113 str
= talloc_strdup(out
->values
, "FALSE");
114 W_ERROR_HAVE_NO_MEMORY(str
);
117 out
->values
[i
] = data_blob_string_const(str
);
123 static WERROR
dsdb_syntax_BOOL_ldb_to_drsuapi(struct ldb_context
*ldb
,
124 const struct dsdb_schema
*schema
,
125 const struct dsdb_attribute
*attr
,
126 const struct ldb_message_element
*in
,
128 struct drsuapi_DsReplicaAttribute
*out
)
133 if (attr
->attributeID_id
== 0xFFFFFFFF) {
137 out
->attid
= attr
->attributeID_id
;
138 out
->value_ctr
.num_values
= in
->num_values
;
139 out
->value_ctr
.values
= talloc_array(mem_ctx
,
140 struct drsuapi_DsAttributeValue
,
142 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
144 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
145 W_ERROR_HAVE_NO_MEMORY(blobs
);
147 for (i
=0; i
< in
->num_values
; i
++) {
148 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
150 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
151 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
153 if (strcmp("TRUE", (const char *)in
->values
[i
].data
) == 0) {
154 SIVAL(blobs
[i
].data
, 0, 0x00000001);
155 } else if (strcmp("FALSE", (const char *)in
->values
[i
].data
) == 0) {
156 SIVAL(blobs
[i
].data
, 0, 0x00000000);
165 static WERROR
dsdb_syntax_INT32_drsuapi_to_ldb(struct ldb_context
*ldb
,
166 const struct dsdb_schema
*schema
,
167 const struct dsdb_attribute
*attr
,
168 const struct drsuapi_DsReplicaAttribute
*in
,
170 struct ldb_message_element
*out
)
175 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
176 W_ERROR_HAVE_NO_MEMORY(out
->name
);
178 out
->num_values
= in
->value_ctr
.num_values
;
179 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
180 W_ERROR_HAVE_NO_MEMORY(out
->values
);
182 for (i
=0; i
< out
->num_values
; i
++) {
186 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
190 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
194 v
= IVALS(in
->value_ctr
.values
[i
].blob
->data
, 0);
196 str
= talloc_asprintf(out
->values
, "%d", v
);
197 W_ERROR_HAVE_NO_MEMORY(str
);
199 out
->values
[i
] = data_blob_string_const(str
);
205 static WERROR
dsdb_syntax_INT32_ldb_to_drsuapi(struct ldb_context
*ldb
,
206 const struct dsdb_schema
*schema
,
207 const struct dsdb_attribute
*attr
,
208 const struct ldb_message_element
*in
,
210 struct drsuapi_DsReplicaAttribute
*out
)
215 if (attr
->attributeID_id
== 0xFFFFFFFF) {
219 out
->attid
= attr
->attributeID_id
;
220 out
->value_ctr
.num_values
= in
->num_values
;
221 out
->value_ctr
.values
= talloc_array(mem_ctx
,
222 struct drsuapi_DsAttributeValue
,
224 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
226 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
227 W_ERROR_HAVE_NO_MEMORY(blobs
);
229 for (i
=0; i
< in
->num_values
; i
++) {
232 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
234 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
235 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
237 /* We've to use "strtoll" here to have the intended overflows.
238 * Otherwise we may get "LONG_MAX" and the conversion is wrong. */
239 v
= (int32_t) strtoll((char *)in
->values
[i
].data
, NULL
, 0);
241 SIVALS(blobs
[i
].data
, 0, v
);
247 static WERROR
dsdb_syntax_INT64_drsuapi_to_ldb(struct ldb_context
*ldb
,
248 const struct dsdb_schema
*schema
,
249 const struct dsdb_attribute
*attr
,
250 const struct drsuapi_DsReplicaAttribute
*in
,
252 struct ldb_message_element
*out
)
257 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
258 W_ERROR_HAVE_NO_MEMORY(out
->name
);
260 out
->num_values
= in
->value_ctr
.num_values
;
261 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
262 W_ERROR_HAVE_NO_MEMORY(out
->values
);
264 for (i
=0; i
< out
->num_values
; i
++) {
268 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
272 if (in
->value_ctr
.values
[i
].blob
->length
!= 8) {
276 v
= BVALS(in
->value_ctr
.values
[i
].blob
->data
, 0);
278 str
= talloc_asprintf(out
->values
, "%lld", (long long int)v
);
279 W_ERROR_HAVE_NO_MEMORY(str
);
281 out
->values
[i
] = data_blob_string_const(str
);
287 static WERROR
dsdb_syntax_INT64_ldb_to_drsuapi(struct ldb_context
*ldb
,
288 const struct dsdb_schema
*schema
,
289 const struct dsdb_attribute
*attr
,
290 const struct ldb_message_element
*in
,
292 struct drsuapi_DsReplicaAttribute
*out
)
297 if (attr
->attributeID_id
== 0xFFFFFFFF) {
301 out
->attid
= attr
->attributeID_id
;
302 out
->value_ctr
.num_values
= in
->num_values
;
303 out
->value_ctr
.values
= talloc_array(mem_ctx
,
304 struct drsuapi_DsAttributeValue
,
306 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
308 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
309 W_ERROR_HAVE_NO_MEMORY(blobs
);
311 for (i
=0; i
< in
->num_values
; i
++) {
314 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
316 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 8);
317 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
319 v
= strtoll((const char *)in
->values
[i
].data
, NULL
, 10);
321 SBVALS(blobs
[i
].data
, 0, v
);
327 static WERROR
dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb(struct ldb_context
*ldb
,
328 const struct dsdb_schema
*schema
,
329 const struct dsdb_attribute
*attr
,
330 const struct drsuapi_DsReplicaAttribute
*in
,
332 struct ldb_message_element
*out
)
337 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
338 W_ERROR_HAVE_NO_MEMORY(out
->name
);
340 out
->num_values
= in
->value_ctr
.num_values
;
341 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
342 W_ERROR_HAVE_NO_MEMORY(out
->values
);
344 for (i
=0; i
< out
->num_values
; i
++) {
349 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
353 if (in
->value_ctr
.values
[i
].blob
->length
!= 8) {
357 v
= BVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
359 t
= nt_time_to_unix(v
);
362 * NOTE: On a w2k3 server you can set a GeneralizedTime string
363 * via LDAP, but you get back an UTCTime string,
364 * but via DRSUAPI you get back the NTTIME_1sec value
365 * that represents the GeneralizedTime value!
367 * So if we store the UTCTime string in our ldb
368 * we'll loose information!
370 str
= ldb_timestring_utc(out
->values
, t
);
371 W_ERROR_HAVE_NO_MEMORY(str
);
372 out
->values
[i
] = data_blob_string_const(str
);
378 static WERROR
dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi(struct ldb_context
*ldb
,
379 const struct dsdb_schema
*schema
,
380 const struct dsdb_attribute
*attr
,
381 const struct ldb_message_element
*in
,
383 struct drsuapi_DsReplicaAttribute
*out
)
388 if (attr
->attributeID_id
== 0xFFFFFFFF) {
392 out
->attid
= attr
->attributeID_id
;
393 out
->value_ctr
.num_values
= in
->num_values
;
394 out
->value_ctr
.values
= talloc_array(mem_ctx
,
395 struct drsuapi_DsAttributeValue
,
397 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
399 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
400 W_ERROR_HAVE_NO_MEMORY(blobs
);
402 for (i
=0; i
< in
->num_values
; i
++) {
406 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
408 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 8);
409 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
411 t
= ldb_string_utc_to_time((const char *)in
->values
[i
].data
);
412 unix_to_nt_time(&v
, t
);
415 SBVAL(blobs
[i
].data
, 0, v
);
421 static WERROR
dsdb_syntax_NTTIME_drsuapi_to_ldb(struct ldb_context
*ldb
,
422 const struct dsdb_schema
*schema
,
423 const struct dsdb_attribute
*attr
,
424 const struct drsuapi_DsReplicaAttribute
*in
,
426 struct ldb_message_element
*out
)
431 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
432 W_ERROR_HAVE_NO_MEMORY(out
->name
);
434 out
->num_values
= in
->value_ctr
.num_values
;
435 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
436 W_ERROR_HAVE_NO_MEMORY(out
->values
);
438 for (i
=0; i
< out
->num_values
; i
++) {
443 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
447 if (in
->value_ctr
.values
[i
].blob
->length
!= 8) {
451 v
= BVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
453 t
= nt_time_to_unix(v
);
455 str
= ldb_timestring(out
->values
, t
);
456 W_ERROR_HAVE_NO_MEMORY(str
);
458 out
->values
[i
] = data_blob_string_const(str
);
464 static WERROR
dsdb_syntax_NTTIME_ldb_to_drsuapi(struct ldb_context
*ldb
,
465 const struct dsdb_schema
*schema
,
466 const struct dsdb_attribute
*attr
,
467 const struct ldb_message_element
*in
,
469 struct drsuapi_DsReplicaAttribute
*out
)
474 if (attr
->attributeID_id
== 0xFFFFFFFF) {
478 out
->attid
= attr
->attributeID_id
;
479 out
->value_ctr
.num_values
= in
->num_values
;
480 out
->value_ctr
.values
= talloc_array(mem_ctx
,
481 struct drsuapi_DsAttributeValue
,
483 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
485 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
486 W_ERROR_HAVE_NO_MEMORY(blobs
);
488 for (i
=0; i
< in
->num_values
; i
++) {
492 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
494 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 8);
495 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
497 t
= ldb_string_to_time((const char *)in
->values
[i
].data
);
498 unix_to_nt_time(&v
, t
);
501 SBVAL(blobs
[i
].data
, 0, v
);
507 static WERROR
dsdb_syntax_DATA_BLOB_drsuapi_to_ldb(struct ldb_context
*ldb
,
508 const struct dsdb_schema
*schema
,
509 const struct dsdb_attribute
*attr
,
510 const struct drsuapi_DsReplicaAttribute
*in
,
512 struct ldb_message_element
*out
)
517 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
518 W_ERROR_HAVE_NO_MEMORY(out
->name
);
520 out
->num_values
= in
->value_ctr
.num_values
;
521 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
522 W_ERROR_HAVE_NO_MEMORY(out
->values
);
524 for (i
=0; i
< out
->num_values
; i
++) {
525 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
529 if (in
->value_ctr
.values
[i
].blob
->length
== 0) {
533 out
->values
[i
] = data_blob_dup_talloc(out
->values
,
534 in
->value_ctr
.values
[i
].blob
);
535 W_ERROR_HAVE_NO_MEMORY(out
->values
[i
].data
);
541 static WERROR
dsdb_syntax_DATA_BLOB_ldb_to_drsuapi(struct ldb_context
*ldb
,
542 const struct dsdb_schema
*schema
,
543 const struct dsdb_attribute
*attr
,
544 const struct ldb_message_element
*in
,
546 struct drsuapi_DsReplicaAttribute
*out
)
551 if (attr
->attributeID_id
== 0xFFFFFFFF) {
555 out
->attid
= attr
->attributeID_id
;
556 out
->value_ctr
.num_values
= in
->num_values
;
557 out
->value_ctr
.values
= talloc_array(mem_ctx
,
558 struct drsuapi_DsAttributeValue
,
560 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
562 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
563 W_ERROR_HAVE_NO_MEMORY(blobs
);
565 for (i
=0; i
< in
->num_values
; i
++) {
566 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
568 blobs
[i
] = data_blob_dup_talloc(blobs
, &in
->values
[i
]);
569 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
575 static WERROR
_dsdb_syntax_OID_obj_drsuapi_to_ldb(struct ldb_context
*ldb
,
576 const struct dsdb_schema
*schema
,
577 const struct dsdb_attribute
*attr
,
578 const struct drsuapi_DsReplicaAttribute
*in
,
580 struct ldb_message_element
*out
)
585 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
586 W_ERROR_HAVE_NO_MEMORY(out
->name
);
588 out
->num_values
= in
->value_ctr
.num_values
;
589 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
590 W_ERROR_HAVE_NO_MEMORY(out
->values
);
592 for (i
=0; i
< out
->num_values
; i
++) {
594 const struct dsdb_class
*c
;
597 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
601 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
605 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
607 c
= dsdb_class_by_governsID_id(schema
, v
);
612 str
= talloc_strdup(out
->values
, c
->lDAPDisplayName
);
613 W_ERROR_HAVE_NO_MEMORY(str
);
615 /* the values need to be reversed */
616 out
->values
[out
->num_values
- (i
+ 1)] = data_blob_string_const(str
);
622 static WERROR
_dsdb_syntax_OID_attr_drsuapi_to_ldb(struct ldb_context
*ldb
,
623 const struct dsdb_schema
*schema
,
624 const struct dsdb_attribute
*attr
,
625 const struct drsuapi_DsReplicaAttribute
*in
,
627 struct ldb_message_element
*out
)
632 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
633 W_ERROR_HAVE_NO_MEMORY(out
->name
);
635 out
->num_values
= in
->value_ctr
.num_values
;
636 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
637 W_ERROR_HAVE_NO_MEMORY(out
->values
);
639 for (i
=0; i
< out
->num_values
; i
++) {
641 const struct dsdb_attribute
*a
;
644 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
648 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
652 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
654 a
= dsdb_attribute_by_attributeID_id(schema
, v
);
659 str
= talloc_strdup(out
->values
, a
->lDAPDisplayName
);
660 W_ERROR_HAVE_NO_MEMORY(str
);
662 /* the values need to be reversed */
663 out
->values
[out
->num_values
- (i
+ 1)] = data_blob_string_const(str
);
669 static WERROR
_dsdb_syntax_OID_oid_drsuapi_to_ldb(struct ldb_context
*ldb
,
670 const struct dsdb_schema
*schema
,
671 const struct dsdb_attribute
*attr
,
672 const struct drsuapi_DsReplicaAttribute
*in
,
674 struct ldb_message_element
*out
)
679 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
680 W_ERROR_HAVE_NO_MEMORY(out
->name
);
682 out
->num_values
= in
->value_ctr
.num_values
;
683 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
684 W_ERROR_HAVE_NO_MEMORY(out
->values
);
686 for (i
=0; i
< out
->num_values
; i
++) {
691 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
695 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
699 attid
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
701 status
= dsdb_schema_pfm_oid_from_attid(schema
->prefixmap
, attid
, out
->values
, &oid
);
702 W_ERROR_NOT_OK_RETURN(status
);
704 out
->values
[i
] = data_blob_string_const(oid
);
710 static WERROR
_dsdb_syntax_OID_obj_ldb_to_drsuapi(struct ldb_context
*ldb
,
711 const struct dsdb_schema
*schema
,
712 const struct dsdb_attribute
*attr
,
713 const struct ldb_message_element
*in
,
715 struct drsuapi_DsReplicaAttribute
*out
)
720 out
->attid
= attr
->attributeID_id
;
721 out
->value_ctr
.num_values
= in
->num_values
;
722 out
->value_ctr
.values
= talloc_array(mem_ctx
,
723 struct drsuapi_DsAttributeValue
,
725 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
727 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
728 W_ERROR_HAVE_NO_MEMORY(blobs
);
730 for (i
=0; i
< in
->num_values
; i
++) {
731 const struct dsdb_class
*obj_class
;
733 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
735 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
736 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
738 obj_class
= dsdb_class_by_lDAPDisplayName(schema
, (const char *)in
->values
[i
].data
);
742 SIVAL(blobs
[i
].data
, 0, obj_class
->governsID_id
);
749 static WERROR
_dsdb_syntax_OID_attr_ldb_to_drsuapi(struct ldb_context
*ldb
,
750 const struct dsdb_schema
*schema
,
751 const struct dsdb_attribute
*attr
,
752 const struct ldb_message_element
*in
,
754 struct drsuapi_DsReplicaAttribute
*out
)
759 out
->attid
= attr
->attributeID_id
;
760 out
->value_ctr
.num_values
= in
->num_values
;
761 out
->value_ctr
.values
= talloc_array(mem_ctx
,
762 struct drsuapi_DsAttributeValue
,
764 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
766 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
767 W_ERROR_HAVE_NO_MEMORY(blobs
);
769 for (i
=0; i
< in
->num_values
; i
++) {
770 const struct dsdb_attribute
*obj_attr
;
772 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
774 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
775 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
777 obj_attr
= dsdb_attribute_by_lDAPDisplayName(schema
, (const char *)in
->values
[i
].data
);
781 SIVAL(blobs
[i
].data
, 0, obj_attr
->attributeID_id
);
788 static WERROR
_dsdb_syntax_OID_oid_ldb_to_drsuapi(struct ldb_context
*ldb
,
789 const struct dsdb_schema
*schema
,
790 const struct dsdb_attribute
*attr
,
791 const struct ldb_message_element
*in
,
793 struct drsuapi_DsReplicaAttribute
*out
)
798 out
->attid
= attr
->attributeID_id
;
799 out
->value_ctr
.num_values
= in
->num_values
;
800 out
->value_ctr
.values
= talloc_array(mem_ctx
,
801 struct drsuapi_DsAttributeValue
,
803 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
805 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
806 W_ERROR_HAVE_NO_MEMORY(blobs
);
808 for (i
=0; i
< in
->num_values
; i
++) {
812 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
814 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
815 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
817 status
= dsdb_schema_pfm_make_attid(schema
->prefixmap
,
818 (const char *)in
->values
[i
].data
,
820 W_ERROR_NOT_OK_RETURN(status
);
822 SIVAL(blobs
[i
].data
, 0, attid
);
828 static WERROR
dsdb_syntax_OID_drsuapi_to_ldb(struct ldb_context
*ldb
,
829 const struct dsdb_schema
*schema
,
830 const struct dsdb_attribute
*attr
,
831 const struct drsuapi_DsReplicaAttribute
*in
,
833 struct ldb_message_element
*out
)
837 switch (attr
->attributeID_id
) {
838 case DRSUAPI_ATTRIBUTE_objectClass
:
839 case DRSUAPI_ATTRIBUTE_subClassOf
:
840 case DRSUAPI_ATTRIBUTE_auxiliaryClass
:
841 case DRSUAPI_ATTRIBUTE_systemPossSuperiors
:
842 case DRSUAPI_ATTRIBUTE_possSuperiors
:
843 return _dsdb_syntax_OID_obj_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
844 case DRSUAPI_ATTRIBUTE_systemMustContain
:
845 case DRSUAPI_ATTRIBUTE_systemMayContain
:
846 case DRSUAPI_ATTRIBUTE_mustContain
:
847 case DRSUAPI_ATTRIBUTE_mayContain
:
848 return _dsdb_syntax_OID_attr_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
849 case DRSUAPI_ATTRIBUTE_governsID
:
850 case DRSUAPI_ATTRIBUTE_attributeID
:
851 case DRSUAPI_ATTRIBUTE_attributeSyntax
:
852 return _dsdb_syntax_OID_oid_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
856 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
857 W_ERROR_HAVE_NO_MEMORY(out
->name
);
859 out
->num_values
= in
->value_ctr
.num_values
;
860 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
861 W_ERROR_HAVE_NO_MEMORY(out
->values
);
863 for (i
=0; i
< out
->num_values
; i
++) {
868 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
872 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
876 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
878 name
= dsdb_lDAPDisplayName_by_id(schema
, v
);
883 str
= talloc_strdup(out
->values
, name
);
884 W_ERROR_HAVE_NO_MEMORY(str
);
886 out
->values
[i
] = data_blob_string_const(str
);
892 static WERROR
dsdb_syntax_OID_ldb_to_drsuapi(struct ldb_context
*ldb
,
893 const struct dsdb_schema
*schema
,
894 const struct dsdb_attribute
*attr
,
895 const struct ldb_message_element
*in
,
897 struct drsuapi_DsReplicaAttribute
*out
)
902 if (attr
->attributeID_id
== 0xFFFFFFFF) {
906 switch (attr
->attributeID_id
) {
907 case DRSUAPI_ATTRIBUTE_objectClass
:
908 case DRSUAPI_ATTRIBUTE_subClassOf
:
909 case DRSUAPI_ATTRIBUTE_auxiliaryClass
:
910 case DRSUAPI_ATTRIBUTE_systemPossSuperiors
:
911 case DRSUAPI_ATTRIBUTE_possSuperiors
:
912 return _dsdb_syntax_OID_obj_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
913 case DRSUAPI_ATTRIBUTE_systemMustContain
:
914 case DRSUAPI_ATTRIBUTE_systemMayContain
:
915 case DRSUAPI_ATTRIBUTE_mustContain
:
916 case DRSUAPI_ATTRIBUTE_mayContain
:
917 return _dsdb_syntax_OID_attr_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
918 case DRSUAPI_ATTRIBUTE_governsID
:
919 case DRSUAPI_ATTRIBUTE_attributeID
:
920 case DRSUAPI_ATTRIBUTE_attributeSyntax
:
921 return _dsdb_syntax_OID_oid_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
924 out
->attid
= attr
->attributeID_id
;
925 out
->value_ctr
.num_values
= in
->num_values
;
926 out
->value_ctr
.values
= talloc_array(mem_ctx
,
927 struct drsuapi_DsAttributeValue
,
929 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
931 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
932 W_ERROR_HAVE_NO_MEMORY(blobs
);
934 for (i
=0; i
< in
->num_values
; i
++) {
937 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
939 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
940 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
942 v
= strtol((const char *)in
->values
[i
].data
, NULL
, 10);
944 SIVAL(blobs
[i
].data
, 0, v
);
950 static WERROR
dsdb_syntax_UNICODE_drsuapi_to_ldb(struct ldb_context
*ldb
,
951 const struct dsdb_schema
*schema
,
952 const struct dsdb_attribute
*attr
,
953 const struct drsuapi_DsReplicaAttribute
*in
,
955 struct ldb_message_element
*out
)
960 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
961 W_ERROR_HAVE_NO_MEMORY(out
->name
);
963 out
->num_values
= in
->value_ctr
.num_values
;
964 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
965 W_ERROR_HAVE_NO_MEMORY(out
->values
);
967 for (i
=0; i
< out
->num_values
; i
++) {
970 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
974 if (in
->value_ctr
.values
[i
].blob
->length
== 0) {
978 if (!convert_string_talloc_convenience(out
->values
,
979 schema
->iconv_convenience
,
981 in
->value_ctr
.values
[i
].blob
->data
,
982 in
->value_ctr
.values
[i
].blob
->length
,
983 (void **)&str
, NULL
, false)) {
987 out
->values
[i
] = data_blob_string_const(str
);
993 static WERROR
dsdb_syntax_UNICODE_ldb_to_drsuapi(struct ldb_context
*ldb
,
994 const struct dsdb_schema
*schema
,
995 const struct dsdb_attribute
*attr
,
996 const struct ldb_message_element
*in
,
998 struct drsuapi_DsReplicaAttribute
*out
)
1003 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1007 out
->attid
= attr
->attributeID_id
;
1008 out
->value_ctr
.num_values
= in
->num_values
;
1009 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1010 struct drsuapi_DsAttributeValue
,
1012 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1014 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1015 W_ERROR_HAVE_NO_MEMORY(blobs
);
1017 for (i
=0; i
< in
->num_values
; i
++) {
1018 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1020 if (!convert_string_talloc_convenience(blobs
,
1021 schema
->iconv_convenience
, CH_UNIX
, CH_UTF16
,
1022 in
->values
[i
].data
, in
->values
[i
].length
,
1023 (void **)&blobs
[i
].data
, &blobs
[i
].length
, false)) {
1032 WERROR
dsdb_syntax_one_DN_drsuapi_to_ldb(TALLOC_CTX
*mem_ctx
, struct ldb_context
*ldb
,
1033 const struct dsdb_syntax
*syntax
,
1034 struct smb_iconv_convenience
*iconv_convenience
,
1035 const DATA_BLOB
*in
, DATA_BLOB
*out
)
1037 struct drsuapi_DsReplicaObjectIdentifier3 id3
;
1038 enum ndr_err_code ndr_err
;
1039 DATA_BLOB guid_blob
;
1041 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1045 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1049 talloc_free(tmp_ctx
);
1053 if (in
->length
== 0) {
1054 talloc_free(tmp_ctx
);
1059 /* windows sometimes sends an extra two pad bytes here */
1060 ndr_err
= ndr_pull_struct_blob(in
,
1061 tmp_ctx
, iconv_convenience
, &id3
,
1062 (ndr_pull_flags_fn_t
)ndr_pull_drsuapi_DsReplicaObjectIdentifier3
);
1063 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1064 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1065 talloc_free(tmp_ctx
);
1066 return ntstatus_to_werror(status
);
1069 dn
= ldb_dn_new(tmp_ctx
, ldb
, id3
.dn
);
1071 talloc_free(tmp_ctx
);
1072 /* If this fails, it must be out of memory, as it does not do much parsing */
1073 W_ERROR_HAVE_NO_MEMORY(dn
);
1076 ndr_err
= ndr_push_struct_blob(&guid_blob
, tmp_ctx
, iconv_convenience
, &id3
.guid
,
1077 (ndr_push_flags_fn_t
)ndr_push_GUID
);
1078 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1079 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1080 talloc_free(tmp_ctx
);
1081 return ntstatus_to_werror(status
);
1084 ret
= ldb_dn_set_extended_component(dn
, "GUID", &guid_blob
);
1085 if (ret
!= LDB_SUCCESS
) {
1086 talloc_free(tmp_ctx
);
1090 talloc_free(guid_blob
.data
);
1092 if (id3
.__ndr_size_sid
) {
1094 ndr_err
= ndr_push_struct_blob(&sid_blob
, tmp_ctx
, iconv_convenience
, &id3
.sid
,
1095 (ndr_push_flags_fn_t
)ndr_push_dom_sid
);
1096 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1097 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1098 talloc_free(tmp_ctx
);
1099 return ntstatus_to_werror(status
);
1102 ret
= ldb_dn_set_extended_component(dn
, "SID", &sid_blob
);
1103 if (ret
!= LDB_SUCCESS
) {
1104 talloc_free(tmp_ctx
);
1109 *out
= data_blob_string_const(ldb_dn_get_extended_linearized(mem_ctx
, dn
, 1));
1110 talloc_free(tmp_ctx
);
1114 static WERROR
dsdb_syntax_DN_drsuapi_to_ldb(struct ldb_context
*ldb
,
1115 const struct dsdb_schema
*schema
,
1116 const struct dsdb_attribute
*attr
,
1117 const struct drsuapi_DsReplicaAttribute
*in
,
1118 TALLOC_CTX
*mem_ctx
,
1119 struct ldb_message_element
*out
)
1124 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1125 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1127 out
->num_values
= in
->value_ctr
.num_values
;
1128 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1129 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1131 for (i
=0; i
< out
->num_values
; i
++) {
1132 WERROR status
= dsdb_syntax_one_DN_drsuapi_to_ldb(out
->values
, ldb
, attr
->syntax
,
1133 schema
->iconv_convenience
,
1134 in
->value_ctr
.values
[i
].blob
,
1136 if (!W_ERROR_IS_OK(status
)) {
1145 static WERROR
dsdb_syntax_DN_ldb_to_drsuapi(struct ldb_context
*ldb
,
1146 const struct dsdb_schema
*schema
,
1147 const struct dsdb_attribute
*attr
,
1148 const struct ldb_message_element
*in
,
1149 TALLOC_CTX
*mem_ctx
,
1150 struct drsuapi_DsReplicaAttribute
*out
)
1155 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1159 out
->attid
= attr
->attributeID_id
;
1160 out
->value_ctr
.num_values
= in
->num_values
;
1161 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1162 struct drsuapi_DsAttributeValue
,
1164 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1166 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1167 W_ERROR_HAVE_NO_MEMORY(blobs
);
1169 for (i
=0; i
< in
->num_values
; i
++) {
1170 struct drsuapi_DsReplicaObjectIdentifier3 id3
;
1171 enum ndr_err_code ndr_err
;
1172 const DATA_BLOB
*guid_blob
, *sid_blob
;
1174 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1175 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1177 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1179 dn
= ldb_dn_from_ldb_val(tmp_ctx
, ldb
, &in
->values
[i
]);
1181 W_ERROR_HAVE_NO_MEMORY(dn
);
1183 guid_blob
= ldb_dn_get_extended_component(dn
, "GUID");
1188 ndr_err
= ndr_pull_struct_blob_all(guid_blob
,
1189 tmp_ctx
, schema
->iconv_convenience
, &id3
.guid
,
1190 (ndr_pull_flags_fn_t
)ndr_pull_GUID
);
1191 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1192 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1193 talloc_free(tmp_ctx
);
1194 return ntstatus_to_werror(status
);
1198 sid_blob
= ldb_dn_get_extended_component(dn
, "SID");
1201 ndr_err
= ndr_pull_struct_blob_all(sid_blob
,
1202 tmp_ctx
, schema
->iconv_convenience
, &id3
.sid
,
1203 (ndr_pull_flags_fn_t
)ndr_pull_dom_sid
);
1204 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1205 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1206 talloc_free(tmp_ctx
);
1207 return ntstatus_to_werror(status
);
1211 id3
.dn
= ldb_dn_get_linearized(dn
);
1213 ndr_err
= ndr_push_struct_blob(&blobs
[i
], blobs
, schema
->iconv_convenience
, &id3
, (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1214 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1215 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1216 talloc_free(tmp_ctx
);
1217 return ntstatus_to_werror(status
);
1219 talloc_free(tmp_ctx
);
1227 static WERROR
dsdb_syntax_DN_BINARY_drsuapi_to_ldb(struct ldb_context
*ldb
,
1228 const struct dsdb_schema
*schema
,
1229 const struct dsdb_attribute
*attr
,
1230 const struct drsuapi_DsReplicaAttribute
*in
,
1231 TALLOC_CTX
*mem_ctx
,
1232 struct ldb_message_element
*out
)
1238 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1239 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1241 out
->num_values
= in
->value_ctr
.num_values
;
1242 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1243 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1245 for (i
=0; i
< out
->num_values
; i
++) {
1246 struct drsuapi_DsReplicaObjectIdentifier3Binary id3
;
1247 enum ndr_err_code ndr_err
;
1248 DATA_BLOB guid_blob
;
1250 struct dsdb_dn
*dsdb_dn
;
1251 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1253 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1256 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
1257 talloc_free(tmp_ctx
);
1261 if (in
->value_ctr
.values
[i
].blob
->length
== 0) {
1262 talloc_free(tmp_ctx
);
1267 /* windows sometimes sends an extra two pad bytes here */
1268 ndr_err
= ndr_pull_struct_blob(in
->value_ctr
.values
[i
].blob
,
1269 tmp_ctx
, schema
->iconv_convenience
, &id3
,
1270 (ndr_pull_flags_fn_t
)ndr_pull_drsuapi_DsReplicaObjectIdentifier3Binary
);
1271 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1272 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1273 talloc_free(tmp_ctx
);
1274 return ntstatus_to_werror(status
);
1277 dn
= ldb_dn_new(tmp_ctx
, ldb
, id3
.dn
);
1279 talloc_free(tmp_ctx
);
1280 /* If this fails, it must be out of memory, as it does not do much parsing */
1281 W_ERROR_HAVE_NO_MEMORY(dn
);
1284 ndr_err
= ndr_push_struct_blob(&guid_blob
, tmp_ctx
, schema
->iconv_convenience
, &id3
.guid
,
1285 (ndr_push_flags_fn_t
)ndr_push_GUID
);
1286 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1287 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1288 talloc_free(tmp_ctx
);
1289 return ntstatus_to_werror(status
);
1292 ret
= ldb_dn_set_extended_component(dn
, "GUID", &guid_blob
);
1293 if (ret
!= LDB_SUCCESS
) {
1294 talloc_free(tmp_ctx
);
1298 talloc_free(guid_blob
.data
);
1300 if (id3
.__ndr_size_sid
) {
1302 ndr_err
= ndr_push_struct_blob(&sid_blob
, tmp_ctx
, schema
->iconv_convenience
, &id3
.sid
,
1303 (ndr_push_flags_fn_t
)ndr_push_dom_sid
);
1304 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1305 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1306 talloc_free(tmp_ctx
);
1307 return ntstatus_to_werror(status
);
1310 ret
= ldb_dn_set_extended_component(dn
, "SID", &sid_blob
);
1311 if (ret
!= LDB_SUCCESS
) {
1312 talloc_free(tmp_ctx
);
1317 /* set binary stuff */
1318 dsdb_dn
= dsdb_dn_construct(tmp_ctx
, dn
, id3
.binary
, attr
->syntax
->ldap_oid
);
1320 /* If this fails, it must be out of memory, we know the ldap_oid is valid */
1321 talloc_free(tmp_ctx
);
1322 W_ERROR_HAVE_NO_MEMORY(dsdb_dn
);
1324 out
->values
[i
] = data_blob_string_const(dsdb_dn_get_extended_linearized(out
->values
, dsdb_dn
, 1));
1325 talloc_free(tmp_ctx
);
1331 static WERROR
dsdb_syntax_DN_BINARY_ldb_to_drsuapi(struct ldb_context
*ldb
,
1332 const struct dsdb_schema
*schema
,
1333 const struct dsdb_attribute
*attr
,
1334 const struct ldb_message_element
*in
,
1335 TALLOC_CTX
*mem_ctx
,
1336 struct drsuapi_DsReplicaAttribute
*out
)
1341 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1345 out
->attid
= attr
->attributeID_id
;
1346 out
->value_ctr
.num_values
= in
->num_values
;
1347 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1348 struct drsuapi_DsAttributeValue
,
1350 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1352 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1353 W_ERROR_HAVE_NO_MEMORY(blobs
);
1355 for (i
=0; i
< in
->num_values
; i
++) {
1356 struct drsuapi_DsReplicaObjectIdentifier3Binary id3
;
1357 enum ndr_err_code ndr_err
;
1358 const DATA_BLOB
*guid_blob
, *sid_blob
;
1359 struct dsdb_dn
*dsdb_dn
;
1360 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1361 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1363 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1365 dsdb_dn
= dsdb_dn_parse(tmp_ctx
, ldb
, &in
->values
[i
], attr
->syntax
->ldap_oid
);
1368 talloc_free(tmp_ctx
);
1369 return ntstatus_to_werror(NT_STATUS_INVALID_PARAMETER
);
1372 guid_blob
= ldb_dn_get_extended_component(dsdb_dn
->dn
, "GUID");
1377 ndr_err
= ndr_pull_struct_blob_all(guid_blob
,
1378 tmp_ctx
, schema
->iconv_convenience
, &id3
.guid
,
1379 (ndr_pull_flags_fn_t
)ndr_pull_GUID
);
1380 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1381 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1382 talloc_free(tmp_ctx
);
1383 return ntstatus_to_werror(status
);
1387 sid_blob
= ldb_dn_get_extended_component(dsdb_dn
->dn
, "SID");
1390 ndr_err
= ndr_pull_struct_blob_all(sid_blob
,
1391 tmp_ctx
, schema
->iconv_convenience
, &id3
.sid
,
1392 (ndr_pull_flags_fn_t
)ndr_pull_dom_sid
);
1393 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1394 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1395 talloc_free(tmp_ctx
);
1396 return ntstatus_to_werror(status
);
1400 id3
.dn
= ldb_dn_get_linearized(dsdb_dn
->dn
);
1402 /* get binary stuff */
1403 id3
.binary
= dsdb_dn
->extra_part
;
1405 ndr_err
= ndr_push_struct_blob(&blobs
[i
], blobs
, schema
->iconv_convenience
, &id3
, (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3Binary
);
1406 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1407 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
1408 talloc_free(tmp_ctx
);
1409 return ntstatus_to_werror(status
);
1411 talloc_free(tmp_ctx
);
1419 static WERROR
dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb(struct ldb_context
*ldb
,
1420 const struct dsdb_schema
*schema
,
1421 const struct dsdb_attribute
*attr
,
1422 const struct drsuapi_DsReplicaAttribute
*in
,
1423 TALLOC_CTX
*mem_ctx
,
1424 struct ldb_message_element
*out
)
1429 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1430 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1432 out
->num_values
= in
->value_ctr
.num_values
;
1433 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1434 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1436 for (i
=0; i
< out
->num_values
; i
++) {
1440 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
1444 if (in
->value_ctr
.values
[i
].blob
->length
< 4) {
1448 len
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
1450 if (len
!= in
->value_ctr
.values
[i
].blob
->length
) {
1454 if (!convert_string_talloc_convenience(out
->values
, schema
->iconv_convenience
, CH_UTF16
, CH_UNIX
,
1455 in
->value_ctr
.values
[i
].blob
->data
+4,
1456 in
->value_ctr
.values
[i
].blob
->length
-4,
1457 (void **)&str
, NULL
, false)) {
1461 out
->values
[i
] = data_blob_string_const(str
);
1467 static WERROR
dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi(struct ldb_context
*ldb
,
1468 const struct dsdb_schema
*schema
,
1469 const struct dsdb_attribute
*attr
,
1470 const struct ldb_message_element
*in
,
1471 TALLOC_CTX
*mem_ctx
,
1472 struct drsuapi_DsReplicaAttribute
*out
)
1477 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1481 out
->attid
= attr
->attributeID_id
;
1482 out
->value_ctr
.num_values
= in
->num_values
;
1483 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1484 struct drsuapi_DsAttributeValue
,
1486 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1488 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1489 W_ERROR_HAVE_NO_MEMORY(blobs
);
1491 for (i
=0; i
< in
->num_values
; i
++) {
1495 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1497 if (!convert_string_talloc_convenience(blobs
, schema
->iconv_convenience
, CH_UNIX
, CH_UTF16
,
1499 in
->values
[i
].length
,
1500 (void **)&data
, &ret
, false)) {
1504 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4 + ret
);
1505 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
1507 SIVAL(blobs
[i
].data
, 0, 4 + ret
);
1510 memcpy(blobs
[i
].data
+ 4, data
, ret
);
1518 #define OMOBJECTCLASS(val) { .length = sizeof(val) - 1, .data = discard_const_p(uint8_t, val) }
1520 static const struct dsdb_syntax dsdb_syntaxes
[] = {
1523 .ldap_oid
= LDB_SYNTAX_BOOLEAN
,
1525 .attributeSyntax_oid
= "2.5.5.8",
1526 .drsuapi_to_ldb
= dsdb_syntax_BOOL_drsuapi_to_ldb
,
1527 .ldb_to_drsuapi
= dsdb_syntax_BOOL_ldb_to_drsuapi
,
1528 .equality
= "booleanMatch",
1529 .comment
= "Boolean"
1532 .ldap_oid
= LDB_SYNTAX_INTEGER
,
1534 .attributeSyntax_oid
= "2.5.5.9",
1535 .drsuapi_to_ldb
= dsdb_syntax_INT32_drsuapi_to_ldb
,
1536 .ldb_to_drsuapi
= dsdb_syntax_INT32_ldb_to_drsuapi
,
1537 .equality
= "integerMatch",
1538 .comment
= "Integer",
1539 .ldb_syntax
= LDB_SYNTAX_SAMBA_INT32
1541 .name
= "String(Octet)",
1542 .ldap_oid
= LDB_SYNTAX_OCTET_STRING
,
1544 .attributeSyntax_oid
= "2.5.5.10",
1545 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1546 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1547 .equality
= "octetStringMatch",
1548 .comment
= "Octet String",
1550 .name
= "String(Sid)",
1551 .ldap_oid
= LDB_SYNTAX_OCTET_STRING
,
1553 .attributeSyntax_oid
= "2.5.5.17",
1554 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1555 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1556 .equality
= "octetStringMatch",
1557 .comment
= "Octet String - Security Identifier (SID)",
1558 .ldb_syntax
= LDB_SYNTAX_SAMBA_SID
1560 .name
= "String(Object-Identifier)",
1561 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.38",
1563 .attributeSyntax_oid
= "2.5.5.2",
1564 .drsuapi_to_ldb
= dsdb_syntax_OID_drsuapi_to_ldb
,
1565 .ldb_to_drsuapi
= dsdb_syntax_OID_ldb_to_drsuapi
,
1566 .equality
= "caseIgnoreMatch", /* Would use "objectIdentifierMatch" but most are ldap attribute/class names */
1567 .comment
= "OID String",
1568 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
1570 .name
= "Enumeration",
1571 .ldap_oid
= LDB_SYNTAX_INTEGER
,
1573 .attributeSyntax_oid
= "2.5.5.9",
1574 .drsuapi_to_ldb
= dsdb_syntax_INT32_drsuapi_to_ldb
,
1575 .ldb_to_drsuapi
= dsdb_syntax_INT32_ldb_to_drsuapi
,
1576 .ldb_syntax
= LDB_SYNTAX_SAMBA_INT32
1578 /* not used in w2k3 forest */
1579 .name
= "String(Numeric)",
1580 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.36",
1582 .attributeSyntax_oid
= "2.5.5.6",
1583 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1584 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1585 .equality
= "numericStringMatch",
1586 .substring
= "numericStringSubstringsMatch",
1587 .comment
= "Numeric String",
1588 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
1590 .name
= "String(Printable)",
1591 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.44",
1593 .attributeSyntax_oid
= "2.5.5.5",
1594 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1595 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1596 .ldb_syntax
= LDB_SYNTAX_OCTET_STRING
,
1598 .name
= "String(Teletex)",
1599 .ldap_oid
= "1.2.840.113556.1.4.905",
1601 .attributeSyntax_oid
= "2.5.5.4",
1602 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1603 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1604 .equality
= "caseIgnoreMatch",
1605 .substring
= "caseIgnoreSubstringsMatch",
1606 .comment
= "Case Insensitive String",
1607 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
1609 .name
= "String(IA5)",
1610 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.26",
1612 .attributeSyntax_oid
= "2.5.5.5",
1613 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1614 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1615 .equality
= "caseExactIA5Match",
1616 .comment
= "Printable String",
1617 .ldb_syntax
= LDB_SYNTAX_OCTET_STRING
,
1619 .name
= "String(UTC-Time)",
1620 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.53",
1622 .attributeSyntax_oid
= "2.5.5.11",
1623 .drsuapi_to_ldb
= dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb
,
1624 .ldb_to_drsuapi
= dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi
,
1625 .equality
= "generalizedTimeMatch",
1626 .comment
= "UTC Time",
1628 .name
= "String(Generalized-Time)",
1629 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.24",
1631 .attributeSyntax_oid
= "2.5.5.11",
1632 .drsuapi_to_ldb
= dsdb_syntax_NTTIME_drsuapi_to_ldb
,
1633 .ldb_to_drsuapi
= dsdb_syntax_NTTIME_ldb_to_drsuapi
,
1634 .equality
= "generalizedTimeMatch",
1635 .comment
= "Generalized Time",
1636 .ldb_syntax
= LDB_SYNTAX_UTC_TIME
,
1638 /* not used in w2k3 schema */
1639 .name
= "String(Case Sensitive)",
1640 .ldap_oid
= "1.2.840.113556.1.4.1362",
1642 .attributeSyntax_oid
= "2.5.5.3",
1643 .drsuapi_to_ldb
= dsdb_syntax_FOOBAR_drsuapi_to_ldb
,
1644 .ldb_to_drsuapi
= dsdb_syntax_FOOBAR_ldb_to_drsuapi
,
1646 .name
= "String(Unicode)",
1647 .ldap_oid
= LDB_SYNTAX_DIRECTORY_STRING
,
1649 .attributeSyntax_oid
= "2.5.5.12",
1650 .drsuapi_to_ldb
= dsdb_syntax_UNICODE_drsuapi_to_ldb
,
1651 .ldb_to_drsuapi
= dsdb_syntax_UNICODE_ldb_to_drsuapi
,
1652 .equality
= "caseIgnoreMatch",
1653 .substring
= "caseIgnoreSubstringsMatch",
1654 .comment
= "Directory String",
1656 .name
= "Interval/LargeInteger",
1657 .ldap_oid
= "1.2.840.113556.1.4.906",
1659 .attributeSyntax_oid
= "2.5.5.16",
1660 .drsuapi_to_ldb
= dsdb_syntax_INT64_drsuapi_to_ldb
,
1661 .ldb_to_drsuapi
= dsdb_syntax_INT64_ldb_to_drsuapi
,
1662 .equality
= "integerMatch",
1663 .comment
= "Large Integer",
1664 .ldb_syntax
= LDB_SYNTAX_INTEGER
,
1666 .name
= "String(NT-Sec-Desc)",
1667 .ldap_oid
= LDB_SYNTAX_SAMBA_SECURITY_DESCRIPTOR
,
1669 .attributeSyntax_oid
= "2.5.5.15",
1670 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1671 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1673 .name
= "Object(DS-DN)",
1674 .ldap_oid
= LDB_SYNTAX_DN
,
1676 .oMObjectClass
= OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x4a"),
1677 .attributeSyntax_oid
= "2.5.5.1",
1678 .drsuapi_to_ldb
= dsdb_syntax_DN_drsuapi_to_ldb
,
1679 .ldb_to_drsuapi
= dsdb_syntax_DN_ldb_to_drsuapi
,
1680 .equality
= "distinguishedNameMatch",
1681 .comment
= "Object(DS-DN) == a DN",
1683 .name
= "Object(DN-Binary)",
1684 .ldap_oid
= DSDB_SYNTAX_BINARY_DN
,
1686 .oMObjectClass
= OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0b"),
1687 .attributeSyntax_oid
= "2.5.5.7",
1688 .drsuapi_to_ldb
= dsdb_syntax_DN_BINARY_drsuapi_to_ldb
,
1689 .ldb_to_drsuapi
= dsdb_syntax_DN_BINARY_ldb_to_drsuapi
,
1690 .equality
= "octetStringMatch",
1691 .comment
= "OctetString: Binary+DN",
1693 /* not used in w2k3 schema */
1694 .name
= "Object(OR-Name)",
1695 .ldap_oid
= "1.2.840.113556.1.4.1221",
1697 .oMObjectClass
= OMOBJECTCLASS("\x56\x06\x01\x02\x05\x0b\x1D"),
1698 .attributeSyntax_oid
= "2.5.5.7",
1699 .drsuapi_to_ldb
= dsdb_syntax_FOOBAR_drsuapi_to_ldb
,
1700 .ldb_to_drsuapi
= dsdb_syntax_FOOBAR_ldb_to_drsuapi
,
1703 * TODO: verify if DATA_BLOB is correct here...!
1705 * repsFrom and repsTo are the only attributes using
1706 * this attribute syntax, but they're not replicated...
1708 .name
= "Object(Replica-Link)",
1709 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.40",
1711 .oMObjectClass
= OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x06"),
1712 .attributeSyntax_oid
= "2.5.5.10",
1713 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
1714 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
1716 .name
= "Object(Presentation-Address)",
1717 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.43",
1719 .oMObjectClass
= OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x5c"),
1720 .attributeSyntax_oid
= "2.5.5.13",
1721 .drsuapi_to_ldb
= dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb
,
1722 .ldb_to_drsuapi
= dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi
,
1723 .comment
= "Presentation Address",
1724 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
1726 /* not used in w2k3 schema */
1727 .name
= "Object(Access-Point)",
1728 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.2",
1730 .oMObjectClass
= OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x3e"),
1731 .attributeSyntax_oid
= "2.5.5.14",
1732 .drsuapi_to_ldb
= dsdb_syntax_FOOBAR_drsuapi_to_ldb
,
1733 .ldb_to_drsuapi
= dsdb_syntax_FOOBAR_ldb_to_drsuapi
,
1734 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
1736 /* not used in w2k3 schema */
1737 .name
= "Object(DN-String)",
1738 .ldap_oid
= DSDB_SYNTAX_STRING_DN
,
1740 .oMObjectClass
= OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0c"),
1741 .attributeSyntax_oid
= "2.5.5.14",
1742 .drsuapi_to_ldb
= dsdb_syntax_DN_BINARY_drsuapi_to_ldb
,
1743 .ldb_to_drsuapi
= dsdb_syntax_DN_BINARY_ldb_to_drsuapi
,
1744 .equality
= "octetStringMatch",
1745 .comment
= "OctetString: String+DN",
1749 const struct dsdb_syntax
*find_syntax_map_by_ad_oid(const char *ad_oid
)
1752 for (i
=0; dsdb_syntaxes
[i
].ldap_oid
; i
++) {
1753 if (strcasecmp(ad_oid
, dsdb_syntaxes
[i
].attributeSyntax_oid
) == 0) {
1754 return &dsdb_syntaxes
[i
];
1760 const struct dsdb_syntax
*find_syntax_map_by_ad_syntax(int oMSyntax
)
1763 for (i
=0; dsdb_syntaxes
[i
].ldap_oid
; i
++) {
1764 if (oMSyntax
== dsdb_syntaxes
[i
].oMSyntax
) {
1765 return &dsdb_syntaxes
[i
];
1771 const struct dsdb_syntax
*find_syntax_map_by_standard_oid(const char *standard_oid
)
1774 for (i
=0; dsdb_syntaxes
[i
].ldap_oid
; i
++) {
1775 if (strcasecmp(standard_oid
, dsdb_syntaxes
[i
].ldap_oid
) == 0) {
1776 return &dsdb_syntaxes
[i
];
1781 const struct dsdb_syntax
*dsdb_syntax_for_attribute(const struct dsdb_attribute
*attr
)
1785 for (i
=0; i
< ARRAY_SIZE(dsdb_syntaxes
); i
++) {
1786 if (attr
->oMSyntax
!= dsdb_syntaxes
[i
].oMSyntax
) continue;
1788 if (attr
->oMObjectClass
.length
!= dsdb_syntaxes
[i
].oMObjectClass
.length
) continue;
1790 if (attr
->oMObjectClass
.length
) {
1792 ret
= memcmp(attr
->oMObjectClass
.data
,
1793 dsdb_syntaxes
[i
].oMObjectClass
.data
,
1794 attr
->oMObjectClass
.length
);
1795 if (ret
!= 0) continue;
1798 if (strcmp(attr
->attributeSyntax_oid
, dsdb_syntaxes
[i
].attributeSyntax_oid
) != 0) continue;
1800 return &dsdb_syntaxes
[i
];
1806 WERROR
dsdb_attribute_drsuapi_to_ldb(struct ldb_context
*ldb
,
1807 const struct dsdb_schema
*schema
,
1808 const struct drsuapi_DsReplicaAttribute
*in
,
1809 TALLOC_CTX
*mem_ctx
,
1810 struct ldb_message_element
*out
)
1812 const struct dsdb_attribute
*sa
;
1814 sa
= dsdb_attribute_by_attributeID_id(schema
, in
->attid
);
1819 return sa
->syntax
->drsuapi_to_ldb(ldb
, schema
, sa
, in
, mem_ctx
, out
);
1822 WERROR
dsdb_attribute_ldb_to_drsuapi(struct ldb_context
*ldb
,
1823 const struct dsdb_schema
*schema
,
1824 const struct ldb_message_element
*in
,
1825 TALLOC_CTX
*mem_ctx
,
1826 struct drsuapi_DsReplicaAttribute
*out
)
1828 const struct dsdb_attribute
*sa
;
1830 sa
= dsdb_attribute_by_lDAPDisplayName(schema
, in
->name
);
1835 return sa
->syntax
->ldb_to_drsuapi(ldb
, schema
, sa
, in
, mem_ctx
, out
);