2 Unix SMB/CIFS mplementation.
5 Copyright (C) Stefan Metzmacher <metze@samba.org> 2006
6 Copyright (C) Simo Sorce 2005
7 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "dsdb/samdb/samdb.h"
25 #include "librpc/gen_ndr/ndr_drsuapi.h"
26 #include "librpc/gen_ndr/ndr_security.h"
27 #include "librpc/gen_ndr/ndr_misc.h"
28 #include "lib/ldb/include/ldb.h"
29 #include "lib/ldb/include/ldb_errors.h"
30 #include "system/time.h"
31 #include "../lib/util/charset/charset.h"
32 #include "librpc/ndr/libndr.h"
34 static WERROR
dsdb_syntax_FOOBAR_drsuapi_to_ldb(struct ldb_context
*ldb
,
35 const struct dsdb_schema
*schema
,
36 const struct dsdb_attribute
*attr
,
37 const struct drsuapi_DsReplicaAttribute
*in
,
39 struct ldb_message_element
*out
)
44 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
45 W_ERROR_HAVE_NO_MEMORY(out
->name
);
47 out
->num_values
= in
->value_ctr
.num_values
;
48 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
49 W_ERROR_HAVE_NO_MEMORY(out
->values
);
51 for (i
=0; i
< out
->num_values
; i
++) {
54 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
58 str
= talloc_asprintf(out
->values
, "%s: not implemented",
60 W_ERROR_HAVE_NO_MEMORY(str
);
62 out
->values
[i
] = data_blob_string_const(str
);
68 static WERROR
dsdb_syntax_FOOBAR_ldb_to_drsuapi(struct ldb_context
*ldb
,
69 const struct dsdb_schema
*schema
,
70 const struct dsdb_attribute
*attr
,
71 const struct ldb_message_element
*in
,
73 struct drsuapi_DsReplicaAttribute
*out
)
78 static WERROR
dsdb_syntax_FOOBAR_validate_ldb(struct ldb_context
*ldb
,
79 const struct dsdb_schema
*schema
,
80 const struct dsdb_attribute
*attr
,
81 const struct ldb_message_element
*in
)
86 static WERROR
dsdb_syntax_BOOL_drsuapi_to_ldb(struct ldb_context
*ldb
,
87 const struct dsdb_schema
*schema
,
88 const struct dsdb_attribute
*attr
,
89 const struct drsuapi_DsReplicaAttribute
*in
,
91 struct ldb_message_element
*out
)
96 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
97 W_ERROR_HAVE_NO_MEMORY(out
->name
);
99 out
->num_values
= in
->value_ctr
.num_values
;
100 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
101 W_ERROR_HAVE_NO_MEMORY(out
->values
);
103 for (i
=0; i
< out
->num_values
; i
++) {
107 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
111 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
115 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
118 str
= talloc_strdup(out
->values
, "TRUE");
119 W_ERROR_HAVE_NO_MEMORY(str
);
121 str
= talloc_strdup(out
->values
, "FALSE");
122 W_ERROR_HAVE_NO_MEMORY(str
);
125 out
->values
[i
] = data_blob_string_const(str
);
131 static WERROR
dsdb_syntax_BOOL_ldb_to_drsuapi(struct ldb_context
*ldb
,
132 const struct dsdb_schema
*schema
,
133 const struct dsdb_attribute
*attr
,
134 const struct ldb_message_element
*in
,
136 struct drsuapi_DsReplicaAttribute
*out
)
141 if (attr
->attributeID_id
== 0xFFFFFFFF) {
145 out
->attid
= attr
->attributeID_id
;
146 out
->value_ctr
.num_values
= in
->num_values
;
147 out
->value_ctr
.values
= talloc_array(mem_ctx
,
148 struct drsuapi_DsAttributeValue
,
150 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
152 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
153 W_ERROR_HAVE_NO_MEMORY(blobs
);
155 for (i
=0; i
< in
->num_values
; i
++) {
156 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
158 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
159 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
161 if (strcmp("TRUE", (const char *)in
->values
[i
].data
) == 0) {
162 SIVAL(blobs
[i
].data
, 0, 0x00000001);
163 } else if (strcmp("FALSE", (const char *)in
->values
[i
].data
) == 0) {
164 SIVAL(blobs
[i
].data
, 0, 0x00000000);
173 static WERROR
dsdb_syntax_BOOL_validate_ldb(struct ldb_context
*ldb
,
174 const struct dsdb_schema
*schema
,
175 const struct dsdb_attribute
*attr
,
176 const struct ldb_message_element
*in
)
180 if (attr
->attributeID_id
== 0xFFFFFFFF) {
184 for (i
=0; i
< in
->num_values
; i
++) {
188 (const char *)in
->values
[i
].data
,
189 in
->values
[i
].length
);
191 (const char *)in
->values
[i
].data
,
192 in
->values
[i
].length
);
194 if (t
!= 0 && f
!= 0) {
195 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
202 static WERROR
dsdb_syntax_INT32_drsuapi_to_ldb(struct ldb_context
*ldb
,
203 const struct dsdb_schema
*schema
,
204 const struct dsdb_attribute
*attr
,
205 const struct drsuapi_DsReplicaAttribute
*in
,
207 struct ldb_message_element
*out
)
212 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
213 W_ERROR_HAVE_NO_MEMORY(out
->name
);
215 out
->num_values
= in
->value_ctr
.num_values
;
216 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
217 W_ERROR_HAVE_NO_MEMORY(out
->values
);
219 for (i
=0; i
< out
->num_values
; i
++) {
223 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
227 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
231 v
= IVALS(in
->value_ctr
.values
[i
].blob
->data
, 0);
233 str
= talloc_asprintf(out
->values
, "%d", v
);
234 W_ERROR_HAVE_NO_MEMORY(str
);
236 out
->values
[i
] = data_blob_string_const(str
);
242 static WERROR
dsdb_syntax_INT32_ldb_to_drsuapi(struct ldb_context
*ldb
,
243 const struct dsdb_schema
*schema
,
244 const struct dsdb_attribute
*attr
,
245 const struct ldb_message_element
*in
,
247 struct drsuapi_DsReplicaAttribute
*out
)
252 if (attr
->attributeID_id
== 0xFFFFFFFF) {
256 out
->attid
= attr
->attributeID_id
;
257 out
->value_ctr
.num_values
= in
->num_values
;
258 out
->value_ctr
.values
= talloc_array(mem_ctx
,
259 struct drsuapi_DsAttributeValue
,
261 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
263 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
264 W_ERROR_HAVE_NO_MEMORY(blobs
);
266 for (i
=0; i
< in
->num_values
; i
++) {
269 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
271 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
272 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
274 /* We've to use "strtoll" here to have the intended overflows.
275 * Otherwise we may get "LONG_MAX" and the conversion is wrong. */
276 v
= (int32_t) strtoll((char *)in
->values
[i
].data
, NULL
, 0);
278 SIVALS(blobs
[i
].data
, 0, v
);
284 static WERROR
dsdb_syntax_INT32_validate_ldb(struct ldb_context
*ldb
,
285 const struct dsdb_schema
*schema
,
286 const struct dsdb_attribute
*attr
,
287 const struct ldb_message_element
*in
)
291 if (attr
->attributeID_id
== 0xFFFFFFFF) {
295 for (i
=0; i
< in
->num_values
; i
++) {
297 char buf
[sizeof("-2147483648")];
301 if (in
->values
[i
].length
>= sizeof(buf
)) {
302 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
305 memcpy(buf
, in
->values
[i
].data
, in
->values
[i
].length
);
307 v
= strtol(buf
, &end
, 10);
309 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
311 if (end
&& end
[0] != '\0') {
312 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
315 if (attr
->rangeLower
) {
316 if ((int32_t)v
< (int32_t)*attr
->rangeLower
) {
317 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
321 if (attr
->rangeUpper
) {
322 if ((int32_t)v
> (int32_t)*attr
->rangeUpper
) {
323 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
331 static WERROR
dsdb_syntax_INT64_drsuapi_to_ldb(struct ldb_context
*ldb
,
332 const struct dsdb_schema
*schema
,
333 const struct dsdb_attribute
*attr
,
334 const struct drsuapi_DsReplicaAttribute
*in
,
336 struct ldb_message_element
*out
)
341 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
342 W_ERROR_HAVE_NO_MEMORY(out
->name
);
344 out
->num_values
= in
->value_ctr
.num_values
;
345 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
346 W_ERROR_HAVE_NO_MEMORY(out
->values
);
348 for (i
=0; i
< out
->num_values
; i
++) {
352 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
356 if (in
->value_ctr
.values
[i
].blob
->length
!= 8) {
360 v
= BVALS(in
->value_ctr
.values
[i
].blob
->data
, 0);
362 str
= talloc_asprintf(out
->values
, "%lld", (long long int)v
);
363 W_ERROR_HAVE_NO_MEMORY(str
);
365 out
->values
[i
] = data_blob_string_const(str
);
371 static WERROR
dsdb_syntax_INT64_ldb_to_drsuapi(struct ldb_context
*ldb
,
372 const struct dsdb_schema
*schema
,
373 const struct dsdb_attribute
*attr
,
374 const struct ldb_message_element
*in
,
376 struct drsuapi_DsReplicaAttribute
*out
)
381 if (attr
->attributeID_id
== 0xFFFFFFFF) {
385 out
->attid
= attr
->attributeID_id
;
386 out
->value_ctr
.num_values
= in
->num_values
;
387 out
->value_ctr
.values
= talloc_array(mem_ctx
,
388 struct drsuapi_DsAttributeValue
,
390 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
392 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
393 W_ERROR_HAVE_NO_MEMORY(blobs
);
395 for (i
=0; i
< in
->num_values
; i
++) {
398 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
400 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 8);
401 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
403 v
= strtoll((const char *)in
->values
[i
].data
, NULL
, 10);
405 SBVALS(blobs
[i
].data
, 0, v
);
411 static WERROR
dsdb_syntax_INT64_validate_ldb(struct ldb_context
*ldb
,
412 const struct dsdb_schema
*schema
,
413 const struct dsdb_attribute
*attr
,
414 const struct ldb_message_element
*in
)
418 if (attr
->attributeID_id
== 0xFFFFFFFF) {
422 for (i
=0; i
< in
->num_values
; i
++) {
424 char buf
[sizeof("-9223372036854775808")];
428 if (in
->values
[i
].length
>= sizeof(buf
)) {
429 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
431 memcpy(buf
, in
->values
[i
].data
, in
->values
[i
].length
);
434 v
= strtoll(buf
, &end
, 10);
436 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
438 if (end
&& end
[0] != '\0') {
439 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
442 if (attr
->rangeLower
) {
443 if ((int64_t)v
< (int64_t)*attr
->rangeLower
) {
444 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
448 if (attr
->rangeUpper
) {
449 if ((int64_t)v
> (int64_t)*attr
->rangeUpper
) {
450 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
457 static WERROR
dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb(struct ldb_context
*ldb
,
458 const struct dsdb_schema
*schema
,
459 const struct dsdb_attribute
*attr
,
460 const struct drsuapi_DsReplicaAttribute
*in
,
462 struct ldb_message_element
*out
)
467 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
468 W_ERROR_HAVE_NO_MEMORY(out
->name
);
470 out
->num_values
= in
->value_ctr
.num_values
;
471 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
472 W_ERROR_HAVE_NO_MEMORY(out
->values
);
474 for (i
=0; i
< out
->num_values
; i
++) {
479 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
483 if (in
->value_ctr
.values
[i
].blob
->length
!= 8) {
487 v
= BVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
489 t
= nt_time_to_unix(v
);
492 * NOTE: On a w2k3 server you can set a GeneralizedTime string
493 * via LDAP, but you get back an UTCTime string,
494 * but via DRSUAPI you get back the NTTIME_1sec value
495 * that represents the GeneralizedTime value!
497 * So if we store the UTCTime string in our ldb
498 * we'll loose information!
500 str
= ldb_timestring_utc(out
->values
, t
);
501 W_ERROR_HAVE_NO_MEMORY(str
);
502 out
->values
[i
] = data_blob_string_const(str
);
508 static WERROR
dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi(struct ldb_context
*ldb
,
509 const struct dsdb_schema
*schema
,
510 const struct dsdb_attribute
*attr
,
511 const struct ldb_message_element
*in
,
513 struct drsuapi_DsReplicaAttribute
*out
)
518 if (attr
->attributeID_id
== 0xFFFFFFFF) {
522 out
->attid
= attr
->attributeID_id
;
523 out
->value_ctr
.num_values
= in
->num_values
;
524 out
->value_ctr
.values
= talloc_array(mem_ctx
,
525 struct drsuapi_DsAttributeValue
,
527 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
529 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
530 W_ERROR_HAVE_NO_MEMORY(blobs
);
532 for (i
=0; i
< in
->num_values
; i
++) {
536 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
538 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 8);
539 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
541 t
= ldb_string_utc_to_time((const char *)in
->values
[i
].data
);
542 unix_to_nt_time(&v
, t
);
545 SBVAL(blobs
[i
].data
, 0, v
);
551 static WERROR
dsdb_syntax_NTTIME_UTC_validate_ldb(struct ldb_context
*ldb
,
552 const struct dsdb_schema
*schema
,
553 const struct dsdb_attribute
*attr
,
554 const struct ldb_message_element
*in
)
558 if (attr
->attributeID_id
== 0xFFFFFFFF) {
562 for (i
=0; i
< in
->num_values
; i
++) {
564 char buf
[sizeof("090826075717Z")];
567 if (in
->values
[i
].length
>= sizeof(buf
)) {
568 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
570 memcpy(buf
, in
->values
[i
].data
, in
->values
[i
].length
);
573 t
= ldb_string_utc_to_time(buf
);
575 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
578 if (attr
->rangeLower
) {
579 if ((int32_t)t
< (int32_t)*attr
->rangeLower
) {
580 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
584 if (attr
->rangeUpper
) {
585 if ((int32_t)t
> (int32_t)*attr
->rangeLower
) {
586 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
591 * TODO: verify the comment in the
592 * dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb() function!
599 static WERROR
dsdb_syntax_NTTIME_drsuapi_to_ldb(struct ldb_context
*ldb
,
600 const struct dsdb_schema
*schema
,
601 const struct dsdb_attribute
*attr
,
602 const struct drsuapi_DsReplicaAttribute
*in
,
604 struct ldb_message_element
*out
)
609 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
610 W_ERROR_HAVE_NO_MEMORY(out
->name
);
612 out
->num_values
= in
->value_ctr
.num_values
;
613 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
614 W_ERROR_HAVE_NO_MEMORY(out
->values
);
616 for (i
=0; i
< out
->num_values
; i
++) {
621 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
625 if (in
->value_ctr
.values
[i
].blob
->length
!= 8) {
629 v
= BVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
631 t
= nt_time_to_unix(v
);
633 str
= ldb_timestring(out
->values
, t
);
634 W_ERROR_HAVE_NO_MEMORY(str
);
636 out
->values
[i
] = data_blob_string_const(str
);
642 static WERROR
dsdb_syntax_NTTIME_ldb_to_drsuapi(struct ldb_context
*ldb
,
643 const struct dsdb_schema
*schema
,
644 const struct dsdb_attribute
*attr
,
645 const struct ldb_message_element
*in
,
647 struct drsuapi_DsReplicaAttribute
*out
)
652 if (attr
->attributeID_id
== 0xFFFFFFFF) {
656 out
->attid
= attr
->attributeID_id
;
657 out
->value_ctr
.num_values
= in
->num_values
;
658 out
->value_ctr
.values
= talloc_array(mem_ctx
,
659 struct drsuapi_DsAttributeValue
,
661 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
663 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
664 W_ERROR_HAVE_NO_MEMORY(blobs
);
666 for (i
=0; i
< in
->num_values
; i
++) {
671 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
673 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 8);
674 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
676 ret
= ldb_val_to_time(&in
->values
[i
], &t
);
677 if (ret
!= LDB_SUCCESS
) {
678 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
680 unix_to_nt_time(&v
, t
);
683 SBVAL(blobs
[i
].data
, 0, v
);
689 static WERROR
dsdb_syntax_NTTIME_validate_ldb(struct ldb_context
*ldb
,
690 const struct dsdb_schema
*schema
,
691 const struct dsdb_attribute
*attr
,
692 const struct ldb_message_element
*in
)
696 if (attr
->attributeID_id
== 0xFFFFFFFF) {
700 for (i
=0; i
< in
->num_values
; i
++) {
704 ret
= ldb_val_to_time(&in
->values
[i
], &t
);
705 if (ret
!= LDB_SUCCESS
) {
706 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
709 if (attr
->rangeLower
) {
710 if ((int32_t)t
< (int32_t)*attr
->rangeLower
) {
711 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
715 if (attr
->rangeUpper
) {
716 if ((int32_t)t
> (int32_t)*attr
->rangeLower
) {
717 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
725 static WERROR
dsdb_syntax_DATA_BLOB_drsuapi_to_ldb(struct ldb_context
*ldb
,
726 const struct dsdb_schema
*schema
,
727 const struct dsdb_attribute
*attr
,
728 const struct drsuapi_DsReplicaAttribute
*in
,
730 struct ldb_message_element
*out
)
735 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
736 W_ERROR_HAVE_NO_MEMORY(out
->name
);
738 out
->num_values
= in
->value_ctr
.num_values
;
739 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
740 W_ERROR_HAVE_NO_MEMORY(out
->values
);
742 for (i
=0; i
< out
->num_values
; i
++) {
743 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
747 if (in
->value_ctr
.values
[i
].blob
->length
== 0) {
751 out
->values
[i
] = data_blob_dup_talloc(out
->values
,
752 in
->value_ctr
.values
[i
].blob
);
753 W_ERROR_HAVE_NO_MEMORY(out
->values
[i
].data
);
759 static WERROR
dsdb_syntax_DATA_BLOB_ldb_to_drsuapi(struct ldb_context
*ldb
,
760 const struct dsdb_schema
*schema
,
761 const struct dsdb_attribute
*attr
,
762 const struct ldb_message_element
*in
,
764 struct drsuapi_DsReplicaAttribute
*out
)
769 if (attr
->attributeID_id
== 0xFFFFFFFF) {
773 out
->attid
= attr
->attributeID_id
;
774 out
->value_ctr
.num_values
= in
->num_values
;
775 out
->value_ctr
.values
= talloc_array(mem_ctx
,
776 struct drsuapi_DsAttributeValue
,
778 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
780 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
781 W_ERROR_HAVE_NO_MEMORY(blobs
);
783 for (i
=0; i
< in
->num_values
; i
++) {
784 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
786 blobs
[i
] = data_blob_dup_talloc(blobs
, &in
->values
[i
]);
787 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
793 static WERROR
dsdb_syntax_DATA_BLOB_validate_one_val(struct ldb_context
*ldb
,
794 const struct dsdb_schema
*schema
,
795 const struct dsdb_attribute
*attr
,
796 const struct ldb_val
*val
)
798 if (attr
->attributeID_id
== 0xFFFFFFFF) {
802 if (attr
->rangeLower
) {
803 if ((uint32_t)val
->length
< (uint32_t)*attr
->rangeLower
) {
804 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
808 if (attr
->rangeUpper
) {
809 if ((uint32_t)val
->length
> (uint32_t)*attr
->rangeUpper
) {
810 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
817 static WERROR
dsdb_syntax_DATA_BLOB_validate_ldb(struct ldb_context
*ldb
,
818 const struct dsdb_schema
*schema
,
819 const struct dsdb_attribute
*attr
,
820 const struct ldb_message_element
*in
)
825 if (attr
->attributeID_id
== 0xFFFFFFFF) {
829 for (i
=0; i
< in
->num_values
; i
++) {
830 if (in
->values
[i
].length
== 0) {
831 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
834 status
= dsdb_syntax_DATA_BLOB_validate_one_val(ldb
,
838 if (!W_ERROR_IS_OK(status
)) {
846 static WERROR
_dsdb_syntax_auto_OID_drsuapi_to_ldb(struct ldb_context
*ldb
,
847 const struct dsdb_schema
*schema
,
848 const struct dsdb_attribute
*attr
,
849 const struct drsuapi_DsReplicaAttribute
*in
,
851 struct ldb_message_element
*out
)
856 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
857 W_ERROR_HAVE_NO_MEMORY(out
->name
);
859 out
->num_values
= in
->value_ctr
.num_values
;
860 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
861 W_ERROR_HAVE_NO_MEMORY(out
->values
);
863 for (i
=0; i
< out
->num_values
; i
++) {
865 const struct dsdb_class
*c
;
866 const struct dsdb_attribute
*a
;
867 const char *str
= NULL
;
869 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
873 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
877 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
879 if ((c
= dsdb_class_by_governsID_id(schema
, v
))) {
880 str
= talloc_strdup(out
->values
, c
->lDAPDisplayName
);
881 } else if ((a
= dsdb_attribute_by_attributeID_id(schema
, v
))) {
882 str
= talloc_strdup(out
->values
, a
->lDAPDisplayName
);
885 werr
= dsdb_schema_pfm_oid_from_attid(schema
->prefixmap
, v
, out
->values
, &str
);
886 W_ERROR_NOT_OK_RETURN(werr
);
888 W_ERROR_HAVE_NO_MEMORY(str
);
890 /* the values need to be reversed */
891 out
->values
[out
->num_values
- (i
+ 1)] = data_blob_string_const(str
);
897 static WERROR
_dsdb_syntax_OID_obj_drsuapi_to_ldb(struct ldb_context
*ldb
,
898 const struct dsdb_schema
*schema
,
899 const struct dsdb_attribute
*attr
,
900 const struct drsuapi_DsReplicaAttribute
*in
,
902 struct ldb_message_element
*out
)
907 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
908 W_ERROR_HAVE_NO_MEMORY(out
->name
);
910 out
->num_values
= in
->value_ctr
.num_values
;
911 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
912 W_ERROR_HAVE_NO_MEMORY(out
->values
);
914 for (i
=0; i
< out
->num_values
; i
++) {
916 const struct dsdb_class
*c
;
919 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
923 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
927 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
929 c
= dsdb_class_by_governsID_id(schema
, v
);
934 str
= talloc_strdup(out
->values
, c
->lDAPDisplayName
);
935 W_ERROR_HAVE_NO_MEMORY(str
);
937 /* the values need to be reversed */
938 out
->values
[out
->num_values
- (i
+ 1)] = data_blob_string_const(str
);
944 static WERROR
_dsdb_syntax_OID_attr_drsuapi_to_ldb(struct ldb_context
*ldb
,
945 const struct dsdb_schema
*schema
,
946 const struct dsdb_attribute
*attr
,
947 const struct drsuapi_DsReplicaAttribute
*in
,
949 struct ldb_message_element
*out
)
954 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
955 W_ERROR_HAVE_NO_MEMORY(out
->name
);
957 out
->num_values
= in
->value_ctr
.num_values
;
958 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
959 W_ERROR_HAVE_NO_MEMORY(out
->values
);
961 for (i
=0; i
< out
->num_values
; i
++) {
963 const struct dsdb_attribute
*a
;
966 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
970 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
974 v
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
976 a
= dsdb_attribute_by_attributeID_id(schema
, v
);
981 str
= talloc_strdup(out
->values
, a
->lDAPDisplayName
);
982 W_ERROR_HAVE_NO_MEMORY(str
);
984 /* the values need to be reversed */
985 out
->values
[out
->num_values
- (i
+ 1)] = data_blob_string_const(str
);
991 static WERROR
_dsdb_syntax_OID_oid_drsuapi_to_ldb(struct ldb_context
*ldb
,
992 const struct dsdb_schema
*schema
,
993 const struct dsdb_attribute
*attr
,
994 const struct drsuapi_DsReplicaAttribute
*in
,
996 struct ldb_message_element
*out
)
1001 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1002 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1004 out
->num_values
= in
->value_ctr
.num_values
;
1005 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1006 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1008 for (i
=0; i
< out
->num_values
; i
++) {
1013 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
1017 if (in
->value_ctr
.values
[i
].blob
->length
!= 4) {
1021 attid
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
1023 status
= dsdb_schema_pfm_oid_from_attid(schema
->prefixmap
, attid
, out
->values
, &oid
);
1024 W_ERROR_NOT_OK_RETURN(status
);
1026 out
->values
[i
] = data_blob_string_const(oid
);
1032 static WERROR
_dsdb_syntax_auto_OID_ldb_to_drsuapi(struct ldb_context
*ldb
,
1033 const struct dsdb_schema
*schema
,
1034 const struct dsdb_attribute
*attr
,
1035 const struct ldb_message_element
*in
,
1036 TALLOC_CTX
*mem_ctx
,
1037 struct drsuapi_DsReplicaAttribute
*out
)
1042 out
->attid
= attr
->attributeID_id
;
1043 out
->value_ctr
.num_values
= in
->num_values
;
1044 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1045 struct drsuapi_DsAttributeValue
,
1047 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1049 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1050 W_ERROR_HAVE_NO_MEMORY(blobs
);
1052 for (i
=0; i
< in
->num_values
; i
++) {
1053 const struct dsdb_class
*obj_class
;
1054 const struct dsdb_attribute
*obj_attr
;
1057 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1059 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
1060 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
1062 /* in DRS windows puts the classes in the opposite
1063 order to the order used in ldap */
1064 v
= &in
->values
[(in
->num_values
-1)-i
];
1066 if ((obj_class
= dsdb_class_by_lDAPDisplayName_ldb_val(schema
, v
))) {
1067 SIVAL(blobs
[i
].data
, 0, obj_class
->governsID_id
);
1068 } else if ((obj_attr
= dsdb_attribute_by_lDAPDisplayName_ldb_val(schema
, v
))) {
1069 SIVAL(blobs
[i
].data
, 0, obj_attr
->attributeID_id
);
1073 werr
= dsdb_schema_pfm_make_attid(schema
->prefixmap
,
1074 (const char *)v
->data
,
1076 W_ERROR_NOT_OK_RETURN(werr
);
1077 SIVAL(blobs
[i
].data
, 0, attid
);
1086 static WERROR
_dsdb_syntax_OID_obj_ldb_to_drsuapi(struct ldb_context
*ldb
,
1087 const struct dsdb_schema
*schema
,
1088 const struct dsdb_attribute
*attr
,
1089 const struct ldb_message_element
*in
,
1090 TALLOC_CTX
*mem_ctx
,
1091 struct drsuapi_DsReplicaAttribute
*out
)
1096 out
->attid
= attr
->attributeID_id
;
1097 out
->value_ctr
.num_values
= in
->num_values
;
1098 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1099 struct drsuapi_DsAttributeValue
,
1101 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1103 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1104 W_ERROR_HAVE_NO_MEMORY(blobs
);
1106 for (i
=0; i
< in
->num_values
; i
++) {
1107 const struct dsdb_class
*obj_class
;
1109 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1111 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
1112 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
1114 /* in DRS windows puts the classes in the opposite
1115 order to the order used in ldap */
1116 obj_class
= dsdb_class_by_lDAPDisplayName(schema
,
1117 (const char *)in
->values
[(in
->num_values
-1)-i
].data
);
1121 SIVAL(blobs
[i
].data
, 0, obj_class
->governsID_id
);
1128 static WERROR
_dsdb_syntax_OID_attr_ldb_to_drsuapi(struct ldb_context
*ldb
,
1129 const struct dsdb_schema
*schema
,
1130 const struct dsdb_attribute
*attr
,
1131 const struct ldb_message_element
*in
,
1132 TALLOC_CTX
*mem_ctx
,
1133 struct drsuapi_DsReplicaAttribute
*out
)
1138 out
->attid
= attr
->attributeID_id
;
1139 out
->value_ctr
.num_values
= in
->num_values
;
1140 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1141 struct drsuapi_DsAttributeValue
,
1143 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1145 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1146 W_ERROR_HAVE_NO_MEMORY(blobs
);
1148 for (i
=0; i
< in
->num_values
; i
++) {
1149 const struct dsdb_attribute
*obj_attr
;
1151 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1153 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
1154 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
1156 obj_attr
= dsdb_attribute_by_lDAPDisplayName(schema
, (const char *)in
->values
[i
].data
);
1160 SIVAL(blobs
[i
].data
, 0, obj_attr
->attributeID_id
);
1167 static WERROR
_dsdb_syntax_OID_oid_ldb_to_drsuapi(struct ldb_context
*ldb
,
1168 const struct dsdb_schema
*schema
,
1169 const struct dsdb_attribute
*attr
,
1170 const struct ldb_message_element
*in
,
1171 TALLOC_CTX
*mem_ctx
,
1172 struct drsuapi_DsReplicaAttribute
*out
)
1177 out
->attid
= attr
->attributeID_id
;
1178 out
->value_ctr
.num_values
= in
->num_values
;
1179 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1180 struct drsuapi_DsAttributeValue
,
1182 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1184 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1185 W_ERROR_HAVE_NO_MEMORY(blobs
);
1187 for (i
=0; i
< in
->num_values
; i
++) {
1191 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1193 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4);
1194 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
1196 status
= dsdb_schema_pfm_make_attid(schema
->prefixmap
,
1197 (const char *)in
->values
[i
].data
,
1199 W_ERROR_NOT_OK_RETURN(status
);
1201 SIVAL(blobs
[i
].data
, 0, attid
);
1207 static WERROR
dsdb_syntax_OID_drsuapi_to_ldb(struct ldb_context
*ldb
,
1208 const struct dsdb_schema
*schema
,
1209 const struct dsdb_attribute
*attr
,
1210 const struct drsuapi_DsReplicaAttribute
*in
,
1211 TALLOC_CTX
*mem_ctx
,
1212 struct ldb_message_element
*out
)
1214 switch (attr
->attributeID_id
) {
1215 case DRSUAPI_ATTRIBUTE_objectClass
:
1216 case DRSUAPI_ATTRIBUTE_subClassOf
:
1217 case DRSUAPI_ATTRIBUTE_auxiliaryClass
:
1218 case DRSUAPI_ATTRIBUTE_systemAuxiliaryClass
:
1219 case DRSUAPI_ATTRIBUTE_systemPossSuperiors
:
1220 case DRSUAPI_ATTRIBUTE_possSuperiors
:
1221 return _dsdb_syntax_OID_obj_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1222 case DRSUAPI_ATTRIBUTE_systemMustContain
:
1223 case DRSUAPI_ATTRIBUTE_systemMayContain
:
1224 case DRSUAPI_ATTRIBUTE_mustContain
:
1225 case DRSUAPI_ATTRIBUTE_rDNAttId
:
1226 case DRSUAPI_ATTRIBUTE_transportAddressAttribute
:
1227 case DRSUAPI_ATTRIBUTE_mayContain
:
1228 return _dsdb_syntax_OID_attr_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1229 case DRSUAPI_ATTRIBUTE_governsID
:
1230 case DRSUAPI_ATTRIBUTE_attributeID
:
1231 case DRSUAPI_ATTRIBUTE_attributeSyntax
:
1232 return _dsdb_syntax_OID_oid_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1235 DEBUG(0,(__location__
": Unknown handling for attributeID_id for %s\n",
1236 attr
->lDAPDisplayName
));
1237 return _dsdb_syntax_auto_OID_drsuapi_to_ldb(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1240 static WERROR
dsdb_syntax_OID_ldb_to_drsuapi(struct ldb_context
*ldb
,
1241 const struct dsdb_schema
*schema
,
1242 const struct dsdb_attribute
*attr
,
1243 const struct ldb_message_element
*in
,
1244 TALLOC_CTX
*mem_ctx
,
1245 struct drsuapi_DsReplicaAttribute
*out
)
1247 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1251 switch (attr
->attributeID_id
) {
1252 case DRSUAPI_ATTRIBUTE_objectClass
:
1253 case DRSUAPI_ATTRIBUTE_subClassOf
:
1254 case DRSUAPI_ATTRIBUTE_auxiliaryClass
:
1255 case DRSUAPI_ATTRIBUTE_systemAuxiliaryClass
:
1256 case DRSUAPI_ATTRIBUTE_systemPossSuperiors
:
1257 case DRSUAPI_ATTRIBUTE_possSuperiors
:
1258 return _dsdb_syntax_OID_obj_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1259 case DRSUAPI_ATTRIBUTE_systemMustContain
:
1260 case DRSUAPI_ATTRIBUTE_systemMayContain
:
1261 case DRSUAPI_ATTRIBUTE_mustContain
:
1262 case DRSUAPI_ATTRIBUTE_rDNAttId
:
1263 case DRSUAPI_ATTRIBUTE_transportAddressAttribute
:
1264 case DRSUAPI_ATTRIBUTE_mayContain
:
1265 return _dsdb_syntax_OID_attr_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1266 case DRSUAPI_ATTRIBUTE_governsID
:
1267 case DRSUAPI_ATTRIBUTE_attributeID
:
1268 case DRSUAPI_ATTRIBUTE_attributeSyntax
:
1269 return _dsdb_syntax_OID_oid_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1272 DEBUG(0,(__location__
": Unknown handling for attributeID_id for %s\n",
1273 attr
->lDAPDisplayName
));
1275 return _dsdb_syntax_auto_OID_ldb_to_drsuapi(ldb
, schema
, attr
, in
, mem_ctx
, out
);
1278 static WERROR
dsdb_syntax_OID_validate_ldb(struct ldb_context
*ldb
,
1279 const struct dsdb_schema
*schema
,
1280 const struct dsdb_attribute
*attr
,
1281 const struct ldb_message_element
*in
)
1284 struct drsuapi_DsReplicaAttribute drs_tmp
;
1285 struct ldb_message_element ldb_tmp
;
1286 TALLOC_CTX
*tmp_ctx
;
1288 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1293 * TODO: optimize and verify this code
1296 tmp_ctx
= talloc_new(ldb
);
1297 if (tmp_ctx
== NULL
) {
1301 status
= dsdb_syntax_OID_ldb_to_drsuapi(ldb
,
1307 if (!W_ERROR_IS_OK(status
)) {
1308 talloc_free(tmp_ctx
);
1312 status
= dsdb_syntax_OID_drsuapi_to_ldb(ldb
,
1318 if (!W_ERROR_IS_OK(status
)) {
1319 talloc_free(tmp_ctx
);
1323 talloc_free(tmp_ctx
);
1327 static WERROR
dsdb_syntax_UNICODE_drsuapi_to_ldb(struct ldb_context
*ldb
,
1328 const struct dsdb_schema
*schema
,
1329 const struct dsdb_attribute
*attr
,
1330 const struct drsuapi_DsReplicaAttribute
*in
,
1331 TALLOC_CTX
*mem_ctx
,
1332 struct ldb_message_element
*out
)
1337 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1338 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1340 out
->num_values
= in
->value_ctr
.num_values
;
1341 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1342 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1344 for (i
=0; i
< out
->num_values
; i
++) {
1347 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
1351 if (in
->value_ctr
.values
[i
].blob
->length
== 0) {
1355 if (!convert_string_talloc(out
->values
,
1357 in
->value_ctr
.values
[i
].blob
->data
,
1358 in
->value_ctr
.values
[i
].blob
->length
,
1359 (void **)&str
, NULL
, false)) {
1363 out
->values
[i
] = data_blob_string_const(str
);
1369 static WERROR
dsdb_syntax_UNICODE_ldb_to_drsuapi(struct ldb_context
*ldb
,
1370 const struct dsdb_schema
*schema
,
1371 const struct dsdb_attribute
*attr
,
1372 const struct ldb_message_element
*in
,
1373 TALLOC_CTX
*mem_ctx
,
1374 struct drsuapi_DsReplicaAttribute
*out
)
1379 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1383 out
->attid
= attr
->attributeID_id
;
1384 out
->value_ctr
.num_values
= in
->num_values
;
1385 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1386 struct drsuapi_DsAttributeValue
,
1388 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1390 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1391 W_ERROR_HAVE_NO_MEMORY(blobs
);
1393 for (i
=0; i
< in
->num_values
; i
++) {
1394 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1396 if (!convert_string_talloc(blobs
,
1398 in
->values
[i
].data
, in
->values
[i
].length
,
1399 (void **)&blobs
[i
].data
, &blobs
[i
].length
, false)) {
1407 static WERROR
dsdb_syntax_UNICODE_validate_one_val(struct ldb_context
*ldb
,
1408 const struct dsdb_schema
*schema
,
1409 const struct dsdb_attribute
*attr
,
1410 const struct ldb_val
*val
)
1416 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1420 ok
= convert_string_talloc(ldb
,
1428 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1431 if (attr
->rangeLower
) {
1432 if ((size
/2) < *attr
->rangeLower
) {
1433 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1437 if (attr
->rangeUpper
) {
1438 if ((size
/2) > *attr
->rangeUpper
) {
1439 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1446 static WERROR
dsdb_syntax_UNICODE_validate_ldb(struct ldb_context
*ldb
,
1447 const struct dsdb_schema
*schema
,
1448 const struct dsdb_attribute
*attr
,
1449 const struct ldb_message_element
*in
)
1454 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1458 for (i
=0; i
< in
->num_values
; i
++) {
1459 if (in
->values
[i
].length
== 0) {
1460 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1463 status
= dsdb_syntax_UNICODE_validate_one_val(ldb
,
1467 if (!W_ERROR_IS_OK(status
)) {
1475 WERROR
dsdb_syntax_one_DN_drsuapi_to_ldb(TALLOC_CTX
*mem_ctx
, struct ldb_context
*ldb
,
1476 const struct dsdb_syntax
*syntax
,
1477 const DATA_BLOB
*in
, DATA_BLOB
*out
)
1479 struct drsuapi_DsReplicaObjectIdentifier3 id3
;
1480 enum ndr_err_code ndr_err
;
1481 DATA_BLOB guid_blob
;
1483 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1488 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1492 talloc_free(tmp_ctx
);
1496 if (in
->length
== 0) {
1497 talloc_free(tmp_ctx
);
1502 /* windows sometimes sends an extra two pad bytes here */
1503 ndr_err
= ndr_pull_struct_blob(in
,
1505 (ndr_pull_flags_fn_t
)ndr_pull_drsuapi_DsReplicaObjectIdentifier3
);
1506 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1507 status
= ndr_map_error2ntstatus(ndr_err
);
1508 talloc_free(tmp_ctx
);
1509 return ntstatus_to_werror(status
);
1512 dn
= ldb_dn_new(tmp_ctx
, ldb
, id3
.dn
);
1514 talloc_free(tmp_ctx
);
1515 /* If this fails, it must be out of memory, as it does not do much parsing */
1516 W_ERROR_HAVE_NO_MEMORY(dn
);
1519 if (!GUID_all_zero(&id3
.guid
)) {
1520 status
= GUID_to_ndr_blob(&id3
.guid
, tmp_ctx
, &guid_blob
);
1521 if (!NT_STATUS_IS_OK(status
)) {
1522 talloc_free(tmp_ctx
);
1523 return ntstatus_to_werror(status
);
1526 ret
= ldb_dn_set_extended_component(dn
, "GUID", &guid_blob
);
1527 if (ret
!= LDB_SUCCESS
) {
1528 talloc_free(tmp_ctx
);
1531 talloc_free(guid_blob
.data
);
1534 if (id3
.__ndr_size_sid
) {
1536 ndr_err
= ndr_push_struct_blob(&sid_blob
, tmp_ctx
, &id3
.sid
,
1537 (ndr_push_flags_fn_t
)ndr_push_dom_sid
);
1538 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1539 status
= ndr_map_error2ntstatus(ndr_err
);
1540 talloc_free(tmp_ctx
);
1541 return ntstatus_to_werror(status
);
1544 ret
= ldb_dn_set_extended_component(dn
, "SID", &sid_blob
);
1545 if (ret
!= LDB_SUCCESS
) {
1546 talloc_free(tmp_ctx
);
1551 *out
= data_blob_string_const(ldb_dn_get_extended_linearized(mem_ctx
, dn
, 1));
1552 talloc_free(tmp_ctx
);
1556 static WERROR
dsdb_syntax_DN_drsuapi_to_ldb(struct ldb_context
*ldb
,
1557 const struct dsdb_schema
*schema
,
1558 const struct dsdb_attribute
*attr
,
1559 const struct drsuapi_DsReplicaAttribute
*in
,
1560 TALLOC_CTX
*mem_ctx
,
1561 struct ldb_message_element
*out
)
1566 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1567 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1569 out
->num_values
= in
->value_ctr
.num_values
;
1570 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1571 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1573 for (i
=0; i
< out
->num_values
; i
++) {
1574 WERROR status
= dsdb_syntax_one_DN_drsuapi_to_ldb(out
->values
, ldb
, attr
->syntax
,
1575 in
->value_ctr
.values
[i
].blob
,
1577 if (!W_ERROR_IS_OK(status
)) {
1586 static WERROR
dsdb_syntax_DN_ldb_to_drsuapi(struct ldb_context
*ldb
,
1587 const struct dsdb_schema
*schema
,
1588 const struct dsdb_attribute
*attr
,
1589 const struct ldb_message_element
*in
,
1590 TALLOC_CTX
*mem_ctx
,
1591 struct drsuapi_DsReplicaAttribute
*out
)
1596 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1600 out
->attid
= attr
->attributeID_id
;
1601 out
->value_ctr
.num_values
= in
->num_values
;
1602 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1603 struct drsuapi_DsAttributeValue
,
1605 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1607 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1608 W_ERROR_HAVE_NO_MEMORY(blobs
);
1610 for (i
=0; i
< in
->num_values
; i
++) {
1611 struct drsuapi_DsReplicaObjectIdentifier3 id3
;
1612 enum ndr_err_code ndr_err
;
1614 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1617 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1619 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1621 dn
= ldb_dn_from_ldb_val(tmp_ctx
, ldb
, &in
->values
[i
]);
1623 W_ERROR_HAVE_NO_MEMORY(dn
);
1627 status
= dsdb_get_extended_dn_guid(dn
, &id3
.guid
, "GUID");
1628 if (!NT_STATUS_IS_OK(status
) &&
1629 !NT_STATUS_EQUAL(status
, NT_STATUS_OBJECT_NAME_NOT_FOUND
)) {
1630 talloc_free(tmp_ctx
);
1631 return ntstatus_to_werror(status
);
1634 status
= dsdb_get_extended_dn_sid(dn
, &id3
.sid
, "SID");
1635 if (!NT_STATUS_IS_OK(status
) &&
1636 !NT_STATUS_EQUAL(status
, NT_STATUS_OBJECT_NAME_NOT_FOUND
)) {
1637 talloc_free(tmp_ctx
);
1638 return ntstatus_to_werror(status
);
1641 id3
.dn
= ldb_dn_get_linearized(dn
);
1643 ndr_err
= ndr_push_struct_blob(&blobs
[i
], blobs
, &id3
, (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1644 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1645 status
= ndr_map_error2ntstatus(ndr_err
);
1646 talloc_free(tmp_ctx
);
1647 return ntstatus_to_werror(status
);
1649 talloc_free(tmp_ctx
);
1655 static WERROR
dsdb_syntax_DN_validate_one_val(struct ldb_context
*ldb
,
1656 const struct dsdb_schema
*schema
,
1657 const struct dsdb_attribute
*attr
,
1658 const struct ldb_val
*val
,
1659 TALLOC_CTX
*mem_ctx
,
1660 struct dsdb_dn
**_dsdb_dn
)
1662 static const char * const extended_list
[] = { "GUID", "SID", NULL
};
1663 enum ndr_err_code ndr_err
;
1666 const DATA_BLOB
*sid_blob
;
1667 struct dsdb_dn
*dsdb_dn
;
1673 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1676 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1678 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1682 dsdb_dn
= dsdb_dn_parse(tmp_ctx
, ldb
, val
,
1683 attr
->syntax
->ldap_oid
);
1685 talloc_free(tmp_ctx
);
1686 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1690 dn2
= ldb_dn_copy(tmp_ctx
, dn
);
1692 talloc_free(tmp_ctx
);
1696 num_components
= ldb_dn_get_comp_num(dn
);
1698 status
= dsdb_get_extended_dn_guid(dn
, &guid
, "GUID");
1699 if (NT_STATUS_EQUAL(status
, NT_STATUS_OBJECT_NAME_NOT_FOUND
)) {
1701 } else if (!NT_STATUS_IS_OK(status
)) {
1702 talloc_free(tmp_ctx
);
1703 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1706 sid_blob
= ldb_dn_get_extended_component(dn
, "SID");
1709 ndr_err
= ndr_pull_struct_blob_all(sid_blob
,
1712 (ndr_pull_flags_fn_t
)ndr_pull_dom_sid
);
1713 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1714 talloc_free(tmp_ctx
);
1715 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1719 /* Do not allow links to the RootDSE */
1720 if (num_components
== 0) {
1721 talloc_free(tmp_ctx
);
1722 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1726 * We need to check that only "GUID" and "SID" are
1727 * specified as extended components, we do that
1728 * by comparing the dn's after removing all components
1729 * from one dn and only the allowed subset from the other
1732 ldb_dn_extended_filter(dn
, extended_list
);
1734 dn_str
= ldb_dn_get_extended_linearized(tmp_ctx
, dn
, 0);
1735 if (dn_str
== NULL
) {
1736 talloc_free(tmp_ctx
);
1737 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1739 dn2_str
= ldb_dn_get_extended_linearized(tmp_ctx
, dn2
, 0);
1740 if (dn2_str
== NULL
) {
1741 talloc_free(tmp_ctx
);
1742 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1745 if (strcmp(dn_str
, dn2_str
) != 0) {
1746 talloc_free(tmp_ctx
);
1747 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1750 *_dsdb_dn
= talloc_move(mem_ctx
, &dsdb_dn
);
1751 talloc_free(tmp_ctx
);
1755 static WERROR
dsdb_syntax_DN_validate_ldb(struct ldb_context
*ldb
,
1756 const struct dsdb_schema
*schema
,
1757 const struct dsdb_attribute
*attr
,
1758 const struct ldb_message_element
*in
)
1762 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1766 for (i
=0; i
< in
->num_values
; i
++) {
1768 struct dsdb_dn
*dsdb_dn
;
1769 TALLOC_CTX
*tmp_ctx
= talloc_new(ldb
);
1770 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1772 status
= dsdb_syntax_DN_validate_one_val(ldb
,
1777 if (!W_ERROR_IS_OK(status
)) {
1778 talloc_free(tmp_ctx
);
1782 if (dsdb_dn
->dn_format
!= DSDB_NORMAL_DN
) {
1783 talloc_free(tmp_ctx
);
1784 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
1787 talloc_free(tmp_ctx
);
1793 static WERROR
dsdb_syntax_DN_BINARY_drsuapi_to_ldb(struct ldb_context
*ldb
,
1794 const struct dsdb_schema
*schema
,
1795 const struct dsdb_attribute
*attr
,
1796 const struct drsuapi_DsReplicaAttribute
*in
,
1797 TALLOC_CTX
*mem_ctx
,
1798 struct ldb_message_element
*out
)
1804 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
1805 W_ERROR_HAVE_NO_MEMORY(out
->name
);
1807 out
->num_values
= in
->value_ctr
.num_values
;
1808 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
1809 W_ERROR_HAVE_NO_MEMORY(out
->values
);
1811 for (i
=0; i
< out
->num_values
; i
++) {
1812 struct drsuapi_DsReplicaObjectIdentifier3Binary id3
;
1813 enum ndr_err_code ndr_err
;
1814 DATA_BLOB guid_blob
;
1816 struct dsdb_dn
*dsdb_dn
;
1818 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1820 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1823 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
1824 talloc_free(tmp_ctx
);
1828 if (in
->value_ctr
.values
[i
].blob
->length
== 0) {
1829 talloc_free(tmp_ctx
);
1834 /* windows sometimes sends an extra two pad bytes here */
1835 ndr_err
= ndr_pull_struct_blob(in
->value_ctr
.values
[i
].blob
,
1837 (ndr_pull_flags_fn_t
)ndr_pull_drsuapi_DsReplicaObjectIdentifier3Binary
);
1838 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1839 status
= ndr_map_error2ntstatus(ndr_err
);
1840 talloc_free(tmp_ctx
);
1841 return ntstatus_to_werror(status
);
1844 dn
= ldb_dn_new(tmp_ctx
, ldb
, id3
.dn
);
1846 talloc_free(tmp_ctx
);
1847 /* If this fails, it must be out of memory, as it does not do much parsing */
1848 W_ERROR_HAVE_NO_MEMORY(dn
);
1851 status
= GUID_to_ndr_blob(&id3
.guid
, tmp_ctx
, &guid_blob
);
1852 if (!NT_STATUS_IS_OK(status
)) {
1853 talloc_free(tmp_ctx
);
1854 return ntstatus_to_werror(status
);
1857 ret
= ldb_dn_set_extended_component(dn
, "GUID", &guid_blob
);
1858 if (ret
!= LDB_SUCCESS
) {
1859 talloc_free(tmp_ctx
);
1863 talloc_free(guid_blob
.data
);
1865 if (id3
.__ndr_size_sid
) {
1867 ndr_err
= ndr_push_struct_blob(&sid_blob
, tmp_ctx
, &id3
.sid
,
1868 (ndr_push_flags_fn_t
)ndr_push_dom_sid
);
1869 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1870 status
= ndr_map_error2ntstatus(ndr_err
);
1871 talloc_free(tmp_ctx
);
1872 return ntstatus_to_werror(status
);
1875 ret
= ldb_dn_set_extended_component(dn
, "SID", &sid_blob
);
1876 if (ret
!= LDB_SUCCESS
) {
1877 talloc_free(tmp_ctx
);
1882 /* set binary stuff */
1883 dsdb_dn
= dsdb_dn_construct(tmp_ctx
, dn
, id3
.binary
, attr
->syntax
->ldap_oid
);
1885 /* If this fails, it must be out of memory, we know the ldap_oid is valid */
1886 talloc_free(tmp_ctx
);
1887 W_ERROR_HAVE_NO_MEMORY(dsdb_dn
);
1889 out
->values
[i
] = data_blob_string_const(dsdb_dn_get_extended_linearized(out
->values
, dsdb_dn
, 1));
1890 talloc_free(tmp_ctx
);
1896 static WERROR
dsdb_syntax_DN_BINARY_ldb_to_drsuapi(struct ldb_context
*ldb
,
1897 const struct dsdb_schema
*schema
,
1898 const struct dsdb_attribute
*attr
,
1899 const struct ldb_message_element
*in
,
1900 TALLOC_CTX
*mem_ctx
,
1901 struct drsuapi_DsReplicaAttribute
*out
)
1906 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1910 out
->attid
= attr
->attributeID_id
;
1911 out
->value_ctr
.num_values
= in
->num_values
;
1912 out
->value_ctr
.values
= talloc_array(mem_ctx
,
1913 struct drsuapi_DsAttributeValue
,
1915 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
1917 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
1918 W_ERROR_HAVE_NO_MEMORY(blobs
);
1920 for (i
=0; i
< in
->num_values
; i
++) {
1921 struct drsuapi_DsReplicaObjectIdentifier3Binary id3
;
1922 enum ndr_err_code ndr_err
;
1923 const DATA_BLOB
*sid_blob
;
1924 struct dsdb_dn
*dsdb_dn
;
1925 TALLOC_CTX
*tmp_ctx
= talloc_new(mem_ctx
);
1928 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1930 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
1932 dsdb_dn
= dsdb_dn_parse(tmp_ctx
, ldb
, &in
->values
[i
], attr
->syntax
->ldap_oid
);
1935 talloc_free(tmp_ctx
);
1936 return ntstatus_to_werror(NT_STATUS_INVALID_PARAMETER
);
1941 status
= dsdb_get_extended_dn_guid(dsdb_dn
->dn
, &id3
.guid
, "GUID");
1942 if (!NT_STATUS_IS_OK(status
) &&
1943 !NT_STATUS_EQUAL(status
, NT_STATUS_OBJECT_NAME_NOT_FOUND
)) {
1944 talloc_free(tmp_ctx
);
1945 return ntstatus_to_werror(status
);
1948 sid_blob
= ldb_dn_get_extended_component(dsdb_dn
->dn
, "SID");
1951 ndr_err
= ndr_pull_struct_blob_all(sid_blob
,
1953 (ndr_pull_flags_fn_t
)ndr_pull_dom_sid
);
1954 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1955 status
= ndr_map_error2ntstatus(ndr_err
);
1956 talloc_free(tmp_ctx
);
1957 return ntstatus_to_werror(status
);
1961 id3
.dn
= ldb_dn_get_linearized(dsdb_dn
->dn
);
1963 /* get binary stuff */
1964 id3
.binary
= dsdb_dn
->extra_part
;
1966 ndr_err
= ndr_push_struct_blob(&blobs
[i
], blobs
, &id3
, (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3Binary
);
1967 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1968 status
= ndr_map_error2ntstatus(ndr_err
);
1969 talloc_free(tmp_ctx
);
1970 return ntstatus_to_werror(status
);
1972 talloc_free(tmp_ctx
);
1978 static WERROR
dsdb_syntax_DN_BINARY_validate_ldb(struct ldb_context
*ldb
,
1979 const struct dsdb_schema
*schema
,
1980 const struct dsdb_attribute
*attr
,
1981 const struct ldb_message_element
*in
)
1985 if (attr
->attributeID_id
== 0xFFFFFFFF) {
1989 for (i
=0; i
< in
->num_values
; i
++) {
1991 struct dsdb_dn
*dsdb_dn
;
1992 TALLOC_CTX
*tmp_ctx
= talloc_new(ldb
);
1993 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
1995 status
= dsdb_syntax_DN_validate_one_val(ldb
,
2000 if (!W_ERROR_IS_OK(status
)) {
2001 talloc_free(tmp_ctx
);
2005 if (dsdb_dn
->dn_format
!= DSDB_BINARY_DN
) {
2006 talloc_free(tmp_ctx
);
2007 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
2010 status
= dsdb_syntax_DATA_BLOB_validate_one_val(ldb
,
2013 &dsdb_dn
->extra_part
);
2014 if (!W_ERROR_IS_OK(status
)) {
2015 talloc_free(tmp_ctx
);
2019 talloc_free(tmp_ctx
);
2025 static WERROR
dsdb_syntax_DN_STRING_drsuapi_to_ldb(struct ldb_context
*ldb
,
2026 const struct dsdb_schema
*schema
,
2027 const struct dsdb_attribute
*attr
,
2028 const struct drsuapi_DsReplicaAttribute
*in
,
2029 TALLOC_CTX
*mem_ctx
,
2030 struct ldb_message_element
*out
)
2032 return dsdb_syntax_DN_BINARY_drsuapi_to_ldb(ldb
,
2040 static WERROR
dsdb_syntax_DN_STRING_ldb_to_drsuapi(struct ldb_context
*ldb
,
2041 const struct dsdb_schema
*schema
,
2042 const struct dsdb_attribute
*attr
,
2043 const struct ldb_message_element
*in
,
2044 TALLOC_CTX
*mem_ctx
,
2045 struct drsuapi_DsReplicaAttribute
*out
)
2047 return dsdb_syntax_DN_BINARY_ldb_to_drsuapi(ldb
,
2055 static WERROR
dsdb_syntax_DN_STRING_validate_ldb(struct ldb_context
*ldb
,
2056 const struct dsdb_schema
*schema
,
2057 const struct dsdb_attribute
*attr
,
2058 const struct ldb_message_element
*in
)
2062 if (attr
->attributeID_id
== 0xFFFFFFFF) {
2066 for (i
=0; i
< in
->num_values
; i
++) {
2068 struct dsdb_dn
*dsdb_dn
;
2069 TALLOC_CTX
*tmp_ctx
= talloc_new(ldb
);
2070 W_ERROR_HAVE_NO_MEMORY(tmp_ctx
);
2072 status
= dsdb_syntax_DN_validate_one_val(ldb
,
2077 if (!W_ERROR_IS_OK(status
)) {
2078 talloc_free(tmp_ctx
);
2082 if (dsdb_dn
->dn_format
!= DSDB_STRING_DN
) {
2083 talloc_free(tmp_ctx
);
2084 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX
;
2087 status
= dsdb_syntax_UNICODE_validate_one_val(ldb
,
2090 &dsdb_dn
->extra_part
);
2091 if (!W_ERROR_IS_OK(status
)) {
2092 talloc_free(tmp_ctx
);
2096 talloc_free(tmp_ctx
);
2102 static WERROR
dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb(struct ldb_context
*ldb
,
2103 const struct dsdb_schema
*schema
,
2104 const struct dsdb_attribute
*attr
,
2105 const struct drsuapi_DsReplicaAttribute
*in
,
2106 TALLOC_CTX
*mem_ctx
,
2107 struct ldb_message_element
*out
)
2112 out
->name
= talloc_strdup(mem_ctx
, attr
->lDAPDisplayName
);
2113 W_ERROR_HAVE_NO_MEMORY(out
->name
);
2115 out
->num_values
= in
->value_ctr
.num_values
;
2116 out
->values
= talloc_array(mem_ctx
, struct ldb_val
, out
->num_values
);
2117 W_ERROR_HAVE_NO_MEMORY(out
->values
);
2119 for (i
=0; i
< out
->num_values
; i
++) {
2123 if (in
->value_ctr
.values
[i
].blob
== NULL
) {
2127 if (in
->value_ctr
.values
[i
].blob
->length
< 4) {
2131 len
= IVAL(in
->value_ctr
.values
[i
].blob
->data
, 0);
2133 if (len
!= in
->value_ctr
.values
[i
].blob
->length
) {
2137 if (!convert_string_talloc(out
->values
, CH_UTF16
, CH_UNIX
,
2138 in
->value_ctr
.values
[i
].blob
->data
+4,
2139 in
->value_ctr
.values
[i
].blob
->length
-4,
2140 (void **)&str
, NULL
, false)) {
2144 out
->values
[i
] = data_blob_string_const(str
);
2150 static WERROR
dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi(struct ldb_context
*ldb
,
2151 const struct dsdb_schema
*schema
,
2152 const struct dsdb_attribute
*attr
,
2153 const struct ldb_message_element
*in
,
2154 TALLOC_CTX
*mem_ctx
,
2155 struct drsuapi_DsReplicaAttribute
*out
)
2160 if (attr
->attributeID_id
== 0xFFFFFFFF) {
2164 out
->attid
= attr
->attributeID_id
;
2165 out
->value_ctr
.num_values
= in
->num_values
;
2166 out
->value_ctr
.values
= talloc_array(mem_ctx
,
2167 struct drsuapi_DsAttributeValue
,
2169 W_ERROR_HAVE_NO_MEMORY(out
->value_ctr
.values
);
2171 blobs
= talloc_array(mem_ctx
, DATA_BLOB
, in
->num_values
);
2172 W_ERROR_HAVE_NO_MEMORY(blobs
);
2174 for (i
=0; i
< in
->num_values
; i
++) {
2178 out
->value_ctr
.values
[i
].blob
= &blobs
[i
];
2180 if (!convert_string_talloc(blobs
, CH_UNIX
, CH_UTF16
,
2182 in
->values
[i
].length
,
2183 (void **)&data
, &ret
, false)) {
2187 blobs
[i
] = data_blob_talloc(blobs
, NULL
, 4 + ret
);
2188 W_ERROR_HAVE_NO_MEMORY(blobs
[i
].data
);
2190 SIVAL(blobs
[i
].data
, 0, 4 + ret
);
2193 memcpy(blobs
[i
].data
+ 4, data
, ret
);
2201 static WERROR
dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb(struct ldb_context
*ldb
,
2202 const struct dsdb_schema
*schema
,
2203 const struct dsdb_attribute
*attr
,
2204 const struct ldb_message_element
*in
)
2206 return dsdb_syntax_UNICODE_validate_ldb(ldb
,
2212 #define OMOBJECTCLASS(val) { .length = sizeof(val) - 1, .data = discard_const_p(uint8_t, val) }
2214 static const struct dsdb_syntax dsdb_syntaxes
[] = {
2217 .ldap_oid
= LDB_SYNTAX_BOOLEAN
,
2219 .attributeSyntax_oid
= "2.5.5.8",
2220 .drsuapi_to_ldb
= dsdb_syntax_BOOL_drsuapi_to_ldb
,
2221 .ldb_to_drsuapi
= dsdb_syntax_BOOL_ldb_to_drsuapi
,
2222 .validate_ldb
= dsdb_syntax_BOOL_validate_ldb
,
2223 .equality
= "booleanMatch",
2224 .comment
= "Boolean"
2227 .ldap_oid
= LDB_SYNTAX_INTEGER
,
2229 .attributeSyntax_oid
= "2.5.5.9",
2230 .drsuapi_to_ldb
= dsdb_syntax_INT32_drsuapi_to_ldb
,
2231 .ldb_to_drsuapi
= dsdb_syntax_INT32_ldb_to_drsuapi
,
2232 .validate_ldb
= dsdb_syntax_INT32_validate_ldb
,
2233 .equality
= "integerMatch",
2234 .comment
= "Integer",
2235 .ldb_syntax
= LDB_SYNTAX_SAMBA_INT32
2237 .name
= "String(Octet)",
2238 .ldap_oid
= LDB_SYNTAX_OCTET_STRING
,
2240 .attributeSyntax_oid
= "2.5.5.10",
2241 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2242 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2243 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2244 .equality
= "octetStringMatch",
2245 .comment
= "Octet String",
2247 .name
= "String(Sid)",
2248 .ldap_oid
= LDB_SYNTAX_OCTET_STRING
,
2250 .attributeSyntax_oid
= "2.5.5.17",
2251 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2252 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2253 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2254 .equality
= "octetStringMatch",
2255 .comment
= "Octet String - Security Identifier (SID)",
2256 .ldb_syntax
= LDB_SYNTAX_SAMBA_SID
2258 .name
= "String(Object-Identifier)",
2259 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.38",
2261 .attributeSyntax_oid
= "2.5.5.2",
2262 .drsuapi_to_ldb
= dsdb_syntax_OID_drsuapi_to_ldb
,
2263 .ldb_to_drsuapi
= dsdb_syntax_OID_ldb_to_drsuapi
,
2264 .validate_ldb
= dsdb_syntax_OID_validate_ldb
,
2265 .equality
= "caseIgnoreMatch", /* Would use "objectIdentifierMatch" but most are ldap attribute/class names */
2266 .comment
= "OID String",
2267 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
2269 .name
= "Enumeration",
2270 .ldap_oid
= LDB_SYNTAX_INTEGER
,
2272 .attributeSyntax_oid
= "2.5.5.9",
2273 .drsuapi_to_ldb
= dsdb_syntax_INT32_drsuapi_to_ldb
,
2274 .ldb_to_drsuapi
= dsdb_syntax_INT32_ldb_to_drsuapi
,
2275 .validate_ldb
= dsdb_syntax_INT32_validate_ldb
,
2276 .ldb_syntax
= LDB_SYNTAX_SAMBA_INT32
2278 /* not used in w2k3 forest */
2279 .name
= "String(Numeric)",
2280 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.36",
2282 .attributeSyntax_oid
= "2.5.5.6",
2283 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2284 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2285 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2286 .equality
= "numericStringMatch",
2287 .substring
= "numericStringSubstringsMatch",
2288 .comment
= "Numeric String",
2289 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
2291 .name
= "String(Printable)",
2292 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.44",
2294 .attributeSyntax_oid
= "2.5.5.5",
2295 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2296 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2297 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2298 .ldb_syntax
= LDB_SYNTAX_OCTET_STRING
,
2300 .name
= "String(Teletex)",
2301 .ldap_oid
= "1.2.840.113556.1.4.905",
2303 .attributeSyntax_oid
= "2.5.5.4",
2304 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2305 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2306 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2307 .equality
= "caseIgnoreMatch",
2308 .substring
= "caseIgnoreSubstringsMatch",
2309 .comment
= "Case Insensitive String",
2310 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
2312 .name
= "String(IA5)",
2313 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.26",
2315 .attributeSyntax_oid
= "2.5.5.5",
2316 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2317 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2318 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2319 .equality
= "caseExactIA5Match",
2320 .comment
= "Printable String",
2321 .ldb_syntax
= LDB_SYNTAX_OCTET_STRING
,
2323 .name
= "String(UTC-Time)",
2324 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.53",
2326 .attributeSyntax_oid
= "2.5.5.11",
2327 .drsuapi_to_ldb
= dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb
,
2328 .ldb_to_drsuapi
= dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi
,
2329 .validate_ldb
= dsdb_syntax_NTTIME_UTC_validate_ldb
,
2330 .equality
= "generalizedTimeMatch",
2331 .comment
= "UTC Time",
2333 .name
= "String(Generalized-Time)",
2334 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.24",
2336 .attributeSyntax_oid
= "2.5.5.11",
2337 .drsuapi_to_ldb
= dsdb_syntax_NTTIME_drsuapi_to_ldb
,
2338 .ldb_to_drsuapi
= dsdb_syntax_NTTIME_ldb_to_drsuapi
,
2339 .validate_ldb
= dsdb_syntax_NTTIME_validate_ldb
,
2340 .equality
= "generalizedTimeMatch",
2341 .comment
= "Generalized Time",
2342 .ldb_syntax
= LDB_SYNTAX_UTC_TIME
,
2344 /* not used in w2k3 schema */
2345 .name
= "String(Case Sensitive)",
2346 .ldap_oid
= "1.2.840.113556.1.4.1362",
2348 .attributeSyntax_oid
= "2.5.5.3",
2349 .drsuapi_to_ldb
= dsdb_syntax_FOOBAR_drsuapi_to_ldb
,
2350 .ldb_to_drsuapi
= dsdb_syntax_FOOBAR_ldb_to_drsuapi
,
2351 .validate_ldb
= dsdb_syntax_FOOBAR_validate_ldb
,
2353 .name
= "String(Unicode)",
2354 .ldap_oid
= LDB_SYNTAX_DIRECTORY_STRING
,
2356 .attributeSyntax_oid
= "2.5.5.12",
2357 .drsuapi_to_ldb
= dsdb_syntax_UNICODE_drsuapi_to_ldb
,
2358 .ldb_to_drsuapi
= dsdb_syntax_UNICODE_ldb_to_drsuapi
,
2359 .validate_ldb
= dsdb_syntax_UNICODE_validate_ldb
,
2360 .equality
= "caseIgnoreMatch",
2361 .substring
= "caseIgnoreSubstringsMatch",
2362 .comment
= "Directory String",
2364 .name
= "Interval/LargeInteger",
2365 .ldap_oid
= "1.2.840.113556.1.4.906",
2367 .attributeSyntax_oid
= "2.5.5.16",
2368 .drsuapi_to_ldb
= dsdb_syntax_INT64_drsuapi_to_ldb
,
2369 .ldb_to_drsuapi
= dsdb_syntax_INT64_ldb_to_drsuapi
,
2370 .validate_ldb
= dsdb_syntax_INT64_validate_ldb
,
2371 .equality
= "integerMatch",
2372 .comment
= "Large Integer",
2373 .ldb_syntax
= LDB_SYNTAX_INTEGER
,
2375 .name
= "String(NT-Sec-Desc)",
2376 .ldap_oid
= LDB_SYNTAX_SAMBA_SECURITY_DESCRIPTOR
,
2378 .attributeSyntax_oid
= "2.5.5.15",
2379 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2380 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2381 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2383 .name
= "Object(DS-DN)",
2384 .ldap_oid
= LDB_SYNTAX_DN
,
2386 .oMObjectClass
= OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x4a"),
2387 .attributeSyntax_oid
= "2.5.5.1",
2388 .drsuapi_to_ldb
= dsdb_syntax_DN_drsuapi_to_ldb
,
2389 .ldb_to_drsuapi
= dsdb_syntax_DN_ldb_to_drsuapi
,
2390 .validate_ldb
= dsdb_syntax_DN_validate_ldb
,
2391 .equality
= "distinguishedNameMatch",
2392 .comment
= "Object(DS-DN) == a DN",
2394 .name
= "Object(DN-Binary)",
2395 .ldap_oid
= DSDB_SYNTAX_BINARY_DN
,
2397 .oMObjectClass
= OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0b"),
2398 .attributeSyntax_oid
= "2.5.5.7",
2399 .drsuapi_to_ldb
= dsdb_syntax_DN_BINARY_drsuapi_to_ldb
,
2400 .ldb_to_drsuapi
= dsdb_syntax_DN_BINARY_ldb_to_drsuapi
,
2401 .validate_ldb
= dsdb_syntax_DN_BINARY_validate_ldb
,
2402 .equality
= "octetStringMatch",
2403 .comment
= "OctetString: Binary+DN",
2405 /* not used in w2k3 schema, but used in Exchange schema*/
2406 .name
= "Object(OR-Name)",
2407 .ldap_oid
= DSDB_SYNTAX_OR_NAME
,
2409 .oMObjectClass
= OMOBJECTCLASS("\x56\x06\x01\x02\x05\x0b\x1D"),
2410 .attributeSyntax_oid
= "2.5.5.7",
2411 .drsuapi_to_ldb
= dsdb_syntax_DN_BINARY_drsuapi_to_ldb
,
2412 .ldb_to_drsuapi
= dsdb_syntax_DN_BINARY_ldb_to_drsuapi
,
2413 .validate_ldb
= dsdb_syntax_DN_BINARY_validate_ldb
,
2414 .equality
= "caseIgnoreMatch",
2415 .ldb_syntax
= LDB_SYNTAX_DN
,
2418 * TODO: verify if DATA_BLOB is correct here...!
2420 * repsFrom and repsTo are the only attributes using
2421 * this attribute syntax, but they're not replicated...
2423 .name
= "Object(Replica-Link)",
2424 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.40",
2426 .oMObjectClass
= OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x06"),
2427 .attributeSyntax_oid
= "2.5.5.10",
2428 .drsuapi_to_ldb
= dsdb_syntax_DATA_BLOB_drsuapi_to_ldb
,
2429 .ldb_to_drsuapi
= dsdb_syntax_DATA_BLOB_ldb_to_drsuapi
,
2430 .validate_ldb
= dsdb_syntax_DATA_BLOB_validate_ldb
,
2432 .name
= "Object(Presentation-Address)",
2433 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.43",
2435 .oMObjectClass
= OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x5c"),
2436 .attributeSyntax_oid
= "2.5.5.13",
2437 .drsuapi_to_ldb
= dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb
,
2438 .ldb_to_drsuapi
= dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi
,
2439 .validate_ldb
= dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb
,
2440 .comment
= "Presentation Address",
2441 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
2443 /* not used in w2k3 schema */
2444 .name
= "Object(Access-Point)",
2445 .ldap_oid
= "1.3.6.1.4.1.1466.115.121.1.2",
2447 .oMObjectClass
= OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x3e"),
2448 .attributeSyntax_oid
= "2.5.5.14",
2449 .drsuapi_to_ldb
= dsdb_syntax_FOOBAR_drsuapi_to_ldb
,
2450 .ldb_to_drsuapi
= dsdb_syntax_FOOBAR_ldb_to_drsuapi
,
2451 .validate_ldb
= dsdb_syntax_FOOBAR_validate_ldb
,
2452 .ldb_syntax
= LDB_SYNTAX_DIRECTORY_STRING
,
2454 /* not used in w2k3 schema */
2455 .name
= "Object(DN-String)",
2456 .ldap_oid
= DSDB_SYNTAX_STRING_DN
,
2458 .oMObjectClass
= OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0c"),
2459 .attributeSyntax_oid
= "2.5.5.14",
2460 .drsuapi_to_ldb
= dsdb_syntax_DN_STRING_drsuapi_to_ldb
,
2461 .ldb_to_drsuapi
= dsdb_syntax_DN_STRING_ldb_to_drsuapi
,
2462 .validate_ldb
= dsdb_syntax_DN_STRING_validate_ldb
,
2463 .equality
= "octetStringMatch",
2464 .comment
= "OctetString: String+DN",
2468 const struct dsdb_syntax
*find_syntax_map_by_ad_oid(const char *ad_oid
)
2471 for (i
=0; dsdb_syntaxes
[i
].ldap_oid
; i
++) {
2472 if (strcasecmp(ad_oid
, dsdb_syntaxes
[i
].attributeSyntax_oid
) == 0) {
2473 return &dsdb_syntaxes
[i
];
2479 const struct dsdb_syntax
*find_syntax_map_by_ad_syntax(int oMSyntax
)
2482 for (i
=0; dsdb_syntaxes
[i
].ldap_oid
; i
++) {
2483 if (oMSyntax
== dsdb_syntaxes
[i
].oMSyntax
) {
2484 return &dsdb_syntaxes
[i
];
2490 const struct dsdb_syntax
*find_syntax_map_by_standard_oid(const char *standard_oid
)
2493 for (i
=0; dsdb_syntaxes
[i
].ldap_oid
; i
++) {
2494 if (strcasecmp(standard_oid
, dsdb_syntaxes
[i
].ldap_oid
) == 0) {
2495 return &dsdb_syntaxes
[i
];
2500 const struct dsdb_syntax
*dsdb_syntax_for_attribute(const struct dsdb_attribute
*attr
)
2504 for (i
=0; i
< ARRAY_SIZE(dsdb_syntaxes
); i
++) {
2505 if (attr
->oMSyntax
!= dsdb_syntaxes
[i
].oMSyntax
) continue;
2507 if (attr
->oMObjectClass
.length
!= dsdb_syntaxes
[i
].oMObjectClass
.length
) continue;
2509 if (attr
->oMObjectClass
.length
) {
2511 ret
= memcmp(attr
->oMObjectClass
.data
,
2512 dsdb_syntaxes
[i
].oMObjectClass
.data
,
2513 attr
->oMObjectClass
.length
);
2514 if (ret
!= 0) continue;
2517 if (strcmp(attr
->attributeSyntax_oid
, dsdb_syntaxes
[i
].attributeSyntax_oid
) != 0) continue;
2519 return &dsdb_syntaxes
[i
];
2525 WERROR
dsdb_attribute_drsuapi_to_ldb(struct ldb_context
*ldb
,
2526 const struct dsdb_schema
*schema
,
2527 const struct drsuapi_DsReplicaAttribute
*in
,
2528 TALLOC_CTX
*mem_ctx
,
2529 struct ldb_message_element
*out
)
2531 const struct dsdb_attribute
*sa
;
2533 sa
= dsdb_attribute_by_attributeID_id(schema
, in
->attid
);
2538 return sa
->syntax
->drsuapi_to_ldb(ldb
, schema
, sa
, in
, mem_ctx
, out
);
2541 WERROR
dsdb_attribute_ldb_to_drsuapi(struct ldb_context
*ldb
,
2542 const struct dsdb_schema
*schema
,
2543 const struct ldb_message_element
*in
,
2544 TALLOC_CTX
*mem_ctx
,
2545 struct drsuapi_DsReplicaAttribute
*out
)
2547 const struct dsdb_attribute
*sa
;
2549 sa
= dsdb_attribute_by_lDAPDisplayName(schema
, in
->name
);
2554 return sa
->syntax
->ldb_to_drsuapi(ldb
, schema
, sa
, in
, mem_ctx
, out
);
2557 WERROR
dsdb_attribute_validate_ldb(struct ldb_context
*ldb
,
2558 const struct dsdb_schema
*schema
,
2559 const struct ldb_message_element
*in
)
2561 const struct dsdb_attribute
*sa
;
2563 sa
= dsdb_attribute_by_lDAPDisplayName(schema
, in
->name
);
2565 return WERR_DS_ATTRIBUTE_TYPE_UNDEFINED
;
2568 return sa
->syntax
->validate_ldb(ldb
, schema
, sa
, in
);