source4/dsdb/samdb/ldb_modules/schema_fsmo.c

   1 /*
   2    Unix SMB/CIFS mplementation.
   3
   4    The module that handles the Schema FSMO Role Owner
   5    checkings, it also loads the dsdb_schema.
   6
   7    Copyright (C) Stefan Metzmacher <metze@samba.org> 2007
   8    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2009
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22
  23 */
  24
  25 #include "includes.h"
  26 #include "ldb_module.h"
  27 #include "dsdb/samdb/samdb.h"
  28 #include "librpc/gen_ndr/ndr_misc.h"
  29 #include "librpc/gen_ndr/ndr_drsuapi.h"
  30 #include "librpc/gen_ndr/ndr_drsblobs.h"
  31 #include "param/param.h"
  32 #include "dsdb/samdb/ldb_modules/util.h"
  33
  34 static int generate_objectClasses(struct ldb_context *ldb, struct ldb_message *msg,
  35                                   const struct dsdb_schema *schema);
  36 static int generate_attributeTypes(struct ldb_context *ldb, struct ldb_message *msg,
  37                                    const struct dsdb_schema *schema);
  38 static int generate_dITContentRules(struct ldb_context *ldb, struct ldb_message *msg,
  39                                     const struct dsdb_schema *schema);
  40 static int generate_extendedAttributeInfo(struct ldb_context *ldb, struct ldb_message *msg,
  41                                           const struct dsdb_schema *schema);
  42 static int generate_extendedClassInfo(struct ldb_context *ldb, struct ldb_message *msg,
  43                                       const struct dsdb_schema *schema);
  44 static int generate_possibleInferiors(struct ldb_context *ldb, struct ldb_message *msg,
  45                                       const struct dsdb_schema *schema);
  46
  47 static const struct {
  48         const char *attr;
  49         int (*fn)(struct ldb_context *, struct ldb_message *, const struct dsdb_schema *);
  50         bool aggregate;
  51 } generated_attrs[] = {
  52         {
  53                 .attr = "objectClasses",
  54                 .fn = generate_objectClasses,
  55                 .aggregate = true,
  56         },
  57         {
  58                 .attr = "attributeTypes",
  59                 .fn = generate_attributeTypes,
  60                 .aggregate = true,
  61         },
  62         {
  63                 .attr = "dITContentRules",
  64                 .fn = generate_dITContentRules,
  65                 .aggregate = true,
  66         },
  67         {
  68                 .attr = "extendedAttributeInfo",
  69                 .fn = generate_extendedAttributeInfo,
  70                 .aggregate = true,
  71         },
  72         {
  73                 .attr = "extendedClassInfo",
  74                 .fn = generate_extendedClassInfo,
  75                 .aggregate = true,
  76         },
  77         {
  78                 .attr = "possibleInferiors",
  79                 .fn = generate_possibleInferiors,
  80                 .aggregate = false,
  81         }
  82 };
  83
  84 struct schema_fsmo_private_data {
  85         struct ldb_dn *aggregate_dn;
  86 };
  87
  88 struct schema_fsmo_search_data {
  89         struct ldb_module *module;
  90         struct ldb_request *req;
  91
  92         const struct dsdb_schema *schema;
  93 };
  94
  95 /*
  96   Given an LDB module (pointing at the schema DB), and the DN, set the populated schema
  97 */
  98
  99 static int dsdb_schema_from_schema_dn(TALLOC_CTX *mem_ctx, struct ldb_module *module,
 100                                       struct smb_iconv_convenience *iconv_convenience,
 101                                       struct ldb_dn *schema_dn,
 102                                       struct dsdb_schema **schema)
 103 {
 104         TALLOC_CTX *tmp_ctx;
 105         char *error_string;
 106         int ret;
 107         struct ldb_context *ldb = ldb_module_get_ctx(module);
 108         struct ldb_result *schema_res;
 109         struct ldb_result *a_res;
 110         struct ldb_result *c_res;
 111         static const char *schema_attrs[] = {
 112                 "prefixMap",
 113                 "schemaInfo",
 114                 "fSMORoleOwner",
 115                 NULL
 116         };
 117         unsigned flags;
 118
 119         tmp_ctx = talloc_new(mem_ctx);
 120         if (!tmp_ctx) {
 121                 ldb_oom(ldb);
 122                 return LDB_ERR_OPERATIONS_ERROR;
 123         }
 124
 125         /* we don't want to trace the schema load */
 126         flags = ldb_get_flags(ldb);
 127         ldb_set_flags(ldb, flags & ~LDB_FLG_ENABLE_TRACING);
 128
 129         /*
 130          * setup the prefix mappings and schema info
 131          */
 132         ret = dsdb_module_search_dn(module, tmp_ctx, &schema_res,
 133                                     schema_dn, schema_attrs);
 134         if (ret == LDB_ERR_NO_SUCH_OBJECT) {
 135                 goto failed;
 136         } else if (ret != LDB_SUCCESS) {
 137                 ldb_asprintf_errstring(ldb,
 138                                        "dsdb_schema: failed to search the schema head: %s",
 139                                        ldb_errstring(ldb));
 140                 goto failed;
 141         }
 142
 143         /*
 144          * load the attribute definitions
 145          */
 146         ret = dsdb_module_search(module, tmp_ctx, &a_res,
 147                                  schema_dn, LDB_SCOPE_ONELEVEL, NULL,
 148                                  "(objectClass=attributeSchema)");
 149         if (ret != LDB_SUCCESS) {
 150                 ldb_asprintf_errstring(ldb,
 151                                        "dsdb_schema: failed to search attributeSchema objects: %s",
 152                                        ldb_errstring(ldb));
 153                 goto failed;
 154         }
 155
 156         /*
 157          * load the objectClass definitions
 158          */
 159         ret = dsdb_module_search(module, tmp_ctx, &c_res,
 160                                  schema_dn, LDB_SCOPE_ONELEVEL, NULL,
 161                                  "(objectClass=classSchema)");
 162         if (ret != LDB_SUCCESS) {
 163                 ldb_asprintf_errstring(ldb,
 164                                        "dsdb_schema: failed to search attributeSchema objects: %s",
 165                                        ldb_errstring(ldb));
 166                 goto failed;
 167         }
 168
 169         ret = dsdb_schema_from_ldb_results(tmp_ctx, ldb,
 170                                            lp_iconv_convenience(ldb_get_opaque(ldb, "loadparm")),
 171                                            schema_res, a_res, c_res, schema, &error_string);
 172         if (ret != LDB_SUCCESS) {
 173                 ldb_asprintf_errstring(ldb,
 174                                                     "dsdb_schema load failed: %s",
 175                                                     error_string);
 176                 goto failed;
 177         }
 178         talloc_steal(mem_ctx, *schema);
 179
 180 failed:
 181         if (flags & LDB_FLG_ENABLE_TRACING) {
 182                 flags = ldb_get_flags(ldb);
 183                 ldb_set_flags(ldb, flags | LDB_FLG_ENABLE_TRACING);
 184         }
 185         talloc_free(tmp_ctx);
 186         return ret;
 187 }
 188
 189
 190 static int schema_fsmo_init(struct ldb_module *module)
 191 {
 192         struct ldb_context *ldb;
 193         TALLOC_CTX *mem_ctx;
 194         struct ldb_dn *schema_dn;
 195         struct dsdb_schema *schema;
 196         int ret;
 197         struct schema_fsmo_private_data *data;
 198
 199         ldb = ldb_module_get_ctx(module);
 200         schema_dn = samdb_schema_dn(ldb);
 201         if (!schema_dn) {
 202                 ldb_reset_err_string(ldb);
 203                 ldb_debug(ldb, LDB_DEBUG_WARNING,
 204                           "schema_fsmo_init: no schema dn present: (skip schema loading)\n");
 205                 return ldb_next_init(module);
 206         }
 207
 208         data = talloc(module, struct schema_fsmo_private_data);
 209         if (data == NULL) {
 210                 ldb_oom(ldb);
 211                 return LDB_ERR_OPERATIONS_ERROR;
 212         }
 213
 214         /* Check to see if this is a result on the CN=Aggregate schema */
 215         data->aggregate_dn = ldb_dn_copy(data, schema_dn);
 216         if (!ldb_dn_add_child_fmt(data->aggregate_dn, "CN=Aggregate")) {
 217                 ldb_oom(ldb);
 218                 return LDB_ERR_OPERATIONS_ERROR;
 219         }
 220
 221         ldb_module_set_private(module, data);
 222
 223         if (dsdb_get_schema(ldb)) {
 224                 return ldb_next_init(module);
 225         }
 226
 227         mem_ctx = talloc_new(module);
 228         if (!mem_ctx) {
 229                 ldb_oom(ldb);
 230                 return LDB_ERR_OPERATIONS_ERROR;
 231         }
 232
 233         ret = dsdb_schema_from_schema_dn(mem_ctx, module,
 234                                          lp_iconv_convenience(ldb_get_opaque(ldb, "loadparm")),
 235                                          schema_dn, &schema);
 236
 237         if (ret == LDB_ERR_NO_SUCH_OBJECT) {
 238                 ldb_reset_err_string(ldb);
 239                 ldb_debug(ldb, LDB_DEBUG_WARNING,
 240                           "schema_fsmo_init: no schema head present: (skip schema loading)\n");
 241                 talloc_free(mem_ctx);
 242                 return ldb_next_init(module);
 243         }
 244
 245         if (ret != LDB_SUCCESS) {
 246                 talloc_free(mem_ctx);
 247                 return ret;
 248         }
 249
 250         /* dsdb_set_schema() steal schema into the ldb_context */
 251         ret = dsdb_set_schema(ldb, schema);
 252         if (ret != LDB_SUCCESS) {
 253                 ldb_debug_set(ldb, LDB_DEBUG_FATAL,
 254                               "schema_fsmo_init: dsdb_set_schema() failed: %d:%s",
 255                               ret, ldb_strerror(ret));
 256                 talloc_free(mem_ctx);
 257                 return ret;
 258         }
 259
 260         talloc_free(mem_ctx);
 261         return ldb_next_init(module);
 262 }
 263
 264 static int schema_fsmo_add(struct ldb_module *module, struct ldb_request *req)
 265 {
 266         struct ldb_context *ldb;
 267         struct dsdb_schema *schema;
 268         const struct ldb_val *attributeID = NULL;
 269         const struct ldb_val *governsID = NULL;
 270         const char *oid_attr = NULL;
 271         const char *oid = NULL;
 272         uint32_t id32;
 273         WERROR status;
 274
 275         ldb = ldb_module_get_ctx(module);
 276
 277         /* special objects should always go through */
 278         if (ldb_dn_is_special(req->op.add.message->dn)) {
 279                 return ldb_next_request(module, req);
 280         }
 281
 282         /* replicated update should always go through */
 283         if (ldb_request_get_control(req, DSDB_CONTROL_REPLICATED_UPDATE_OID)) {
 284                 return ldb_next_request(module, req);
 285         }
 286
 287         schema = dsdb_get_schema(ldb);
 288         if (!schema) {
 289                 return ldb_next_request(module, req);
 290         }
 291
 292         if (!schema->fsmo.we_are_master) {
 293                 ldb_debug_set(ldb, LDB_DEBUG_ERROR,
 294                           "schema_fsmo_add: we are not master: reject request\n");
 295                 return LDB_ERR_UNWILLING_TO_PERFORM;
 296         }
 297
 298         attributeID = ldb_msg_find_ldb_val(req->op.add.message, "attributeID");
 299         governsID = ldb_msg_find_ldb_val(req->op.add.message, "governsID");
 300
 301         if (attributeID) {
 302                 oid_attr = "attributeID";
 303                 oid = talloc_strndup(req, (const char *)attributeID->data, attributeID->length);
 304         } else if (governsID) {
 305                 oid_attr = "governsID";
 306                 oid = talloc_strndup(req, (const char *)governsID->data, governsID->length);
 307         } else {
 308                 return ldb_next_request(module, req);
 309         }
 310
 311         if (!oid) {
 312                 ldb_oom(ldb);
 313                 return LDB_ERR_OPERATIONS_ERROR;
 314         }
 315
 316         status = dsdb_map_oid2int(schema, oid, &id32);
 317         if (W_ERROR_IS_OK(status)) {
 318                 return ldb_next_request(module, req);
 319         } else if (!W_ERROR_EQUAL(WERR_DS_NO_MSDS_INTID, status)) {
 320                 ldb_debug_set(ldb, LDB_DEBUG_ERROR,
 321                           "schema_fsmo_add: failed to map %s[%s]: %s\n",
 322                           oid_attr, oid, win_errstr(status));
 323                 return LDB_ERR_UNWILLING_TO_PERFORM;
 324         }
 325
 326         status = dsdb_create_prefix_mapping(ldb, schema, oid);
 327         if (!W_ERROR_IS_OK(status)) {
 328                 ldb_debug_set(ldb, LDB_DEBUG_ERROR,
 329                           "schema_fsmo_add: failed to create prefix mapping for %s[%s]: %s\n",
 330                           oid_attr, oid, win_errstr(status));
 331                 return LDB_ERR_UNWILLING_TO_PERFORM;
 332         }
 333
 334         return ldb_next_request(module, req);
 335 }
 336
 337 static int schema_fsmo_extended(struct ldb_module *module, struct ldb_request *req)
 338 {
 339         struct ldb_context *ldb;
 340         struct ldb_dn *schema_dn;
 341         struct dsdb_schema *schema;
 342         int ret;
 343         TALLOC_CTX *mem_ctx;
 344
 345         ldb = ldb_module_get_ctx(module);
 346
 347         if (strcmp(req->op.extended.oid, DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID) != 0) {
 348                 return ldb_next_request(module, req);
 349         }
 350
 351         schema_dn = samdb_schema_dn(ldb);
 352         if (!schema_dn) {
 353                 ldb_reset_err_string(ldb);
 354                 ldb_debug(ldb, LDB_DEBUG_WARNING,
 355                           "schema_fsmo_extended: no schema dn present: (skip schema loading)\n");
 356                 return ldb_next_request(module, req);
 357         }
 358
 359         mem_ctx = talloc_new(module);
 360         if (!mem_ctx) {
 361                 ldb_oom(ldb);
 362                 return LDB_ERR_OPERATIONS_ERROR;
 363         }
 364
 365         ret = dsdb_schema_from_schema_dn(mem_ctx, module,
 366                                          lp_iconv_convenience(ldb_get_opaque(ldb, "loadparm")),
 367                                          schema_dn, &schema);
 368
 369         if (ret == LDB_ERR_NO_SUCH_OBJECT) {
 370                 ldb_reset_err_string(ldb);
 371                 ldb_debug(ldb, LDB_DEBUG_WARNING,
 372                           "schema_fsmo_extended: no schema head present: (skip schema loading)\n");
 373                 talloc_free(mem_ctx);
 374                 return ldb_next_request(module, req);
 375         }
 376
 377         if (ret != LDB_SUCCESS) {
 378                 talloc_free(mem_ctx);
 379                 return ldb_next_request(module, req);
 380         }
 381
 382         /* Replace the old schema*/
 383         ret = dsdb_set_schema(ldb, schema);
 384         if (ret != LDB_SUCCESS) {
 385                 ldb_debug_set(ldb, LDB_DEBUG_FATAL,
 386                               "schema_fsmo_extended: dsdb_set_schema() failed: %d:%s",
 387                               ret, ldb_strerror(ret));
 388                 talloc_free(mem_ctx);
 389                 return ret;
 390         }
 391
 392         dsdb_make_schema_global(ldb);
 393
 394         talloc_free(mem_ctx);
 395         return LDB_SUCCESS;
 396 }
 397
 398 static int generate_objectClasses(struct ldb_context *ldb, struct ldb_message *msg,
 399                                   const struct dsdb_schema *schema)
 400 {
 401         const struct dsdb_class *sclass;
 402         int ret;
 403
 404         for (sclass = schema->classes; sclass; sclass = sclass->next) {
 405                 ret = ldb_msg_add_string(msg, "objectClasses", schema_class_to_description(msg, sclass));
 406                 if (ret != LDB_SUCCESS) {
 407                         return ret;
 408                 }
 409         }
 410         return LDB_SUCCESS;
 411 }
 412 static int generate_attributeTypes(struct ldb_context *ldb, struct ldb_message *msg,
 413                                   const struct dsdb_schema *schema)
 414 {
 415         const struct dsdb_attribute *attribute;
 416         int ret;
 417
 418         for (attribute = schema->attributes; attribute; attribute = attribute->next) {
 419                 ret = ldb_msg_add_string(msg, "attributeTypes", schema_attribute_to_description(msg, attribute));
 420                 if (ret != LDB_SUCCESS) {
 421                         return ret;
 422                 }
 423         }
 424         return LDB_SUCCESS;
 425 }
 426
 427 static int generate_dITContentRules(struct ldb_context *ldb, struct ldb_message *msg,
 428                                     const struct dsdb_schema *schema)
 429 {
 430         const struct dsdb_class *sclass;
 431         int ret;
 432
 433         for (sclass = schema->classes; sclass; sclass = sclass->next) {
 434                 if (sclass->auxiliaryClass || sclass->systemAuxiliaryClass) {
 435                         char *ditcontentrule = schema_class_to_dITContentRule(msg, sclass, schema);
 436                         if (!ditcontentrule) {
 437                                 ldb_oom(ldb);
 438                                 return LDB_ERR_OPERATIONS_ERROR;
 439                         }
 440                         ret = ldb_msg_add_steal_string(msg, "dITContentRules", ditcontentrule);
 441                         if (ret != LDB_SUCCESS) {
 442                                 return ret;
 443                         }
 444                 }
 445         }
 446         return LDB_SUCCESS;
 447 }
 448
 449 static int generate_extendedAttributeInfo(struct ldb_context *ldb,
 450                                           struct ldb_message *msg,
 451                                           const struct dsdb_schema *schema)
 452 {
 453         const struct dsdb_attribute *attribute;
 454         int ret;
 455
 456         for (attribute = schema->attributes; attribute; attribute = attribute->next) {
 457                 char *val = schema_attribute_to_extendedInfo(msg, attribute);
 458                 if (!val) {
 459                         ldb_oom(ldb);
 460                         return LDB_ERR_OPERATIONS_ERROR;
 461                 }
 462
 463                 ret = ldb_msg_add_string(msg, "extendedAttributeInfo", val);
 464                 if (ret != LDB_SUCCESS) {
 465                         return ret;
 466                 }
 467         }
 468
 469         return LDB_SUCCESS;
 470 }
 471
 472 static int generate_extendedClassInfo(struct ldb_context *ldb,
 473                                       struct ldb_message *msg,
 474                                       const struct dsdb_schema *schema)
 475 {
 476         const struct dsdb_class *sclass;
 477         int ret;
 478
 479         for (sclass = schema->classes; sclass; sclass = sclass->next) {
 480                 char *val = schema_class_to_extendedInfo(msg, sclass);
 481                 if (!val) {
 482                         ldb_oom(ldb);
 483                         return LDB_ERR_OPERATIONS_ERROR;
 484                 }
 485
 486                 ret = ldb_msg_add_string(msg, "extendedClassInfo", val);
 487                 if (ret != LDB_SUCCESS) {
 488                         return ret;
 489                 }
 490         }
 491
 492         return LDB_SUCCESS;
 493 }
 494
 495
 496 static int generate_possibleInferiors(struct ldb_context *ldb, struct ldb_message *msg,
 497                                       const struct dsdb_schema *schema)
 498 {
 499         struct ldb_dn *dn = msg->dn;
 500         int ret, i;
 501         const char *first_component_name = ldb_dn_get_component_name(dn, 0);
 502         const struct ldb_val *first_component_val;
 503         const struct dsdb_class *schema_class;
 504         const char **possibleInferiors;
 505
 506         if (strcasecmp(first_component_name, "cn") != 0) {
 507                 return LDB_SUCCESS;
 508         }
 509
 510         first_component_val = ldb_dn_get_component_val(dn, 0);
 511
 512         schema_class = dsdb_class_by_cn_ldb_val(schema, first_component_val);
 513         if (schema_class == NULL) {
 514                 return LDB_SUCCESS;
 515         }
 516
 517         possibleInferiors = schema_class->possibleInferiors;
 518         if (possibleInferiors == NULL) {
 519                 return LDB_SUCCESS;
 520         }
 521
 522         for (i=0;possibleInferiors[i];i++) {
 523                 ret = ldb_msg_add_string(msg, "possibleInferiors", possibleInferiors[i]);
 524                 if (ret != LDB_SUCCESS) {
 525                         return ret;
 526                 }
 527         }
 528
 529         return LDB_SUCCESS;
 530 }
 531
 532
 533 /* Add objectClasses, attributeTypes and dITContentRules from the
 534    schema object (they are not stored in the database)
 535  */
 536 static int schema_fsmo_search_callback(struct ldb_request *req, struct ldb_reply *ares)
 537 {
 538         struct ldb_context *ldb;
 539         struct schema_fsmo_search_data *ac;
 540         struct schema_fsmo_private_data *mc;
 541         int i, ret;
 542
 543         ac = talloc_get_type(req->context, struct schema_fsmo_search_data);
 544         mc = talloc_get_type(ldb_module_get_private(ac->module), struct schema_fsmo_private_data);
 545         ldb = ldb_module_get_ctx(ac->module);
 546
 547         if (!ares) {
 548                 return ldb_module_done(ac->req, NULL, NULL,
 549                                         LDB_ERR_OPERATIONS_ERROR);
 550         }
 551         if (ares->error != LDB_SUCCESS) {
 552                 return ldb_module_done(ac->req, ares->controls,
 553                                         ares->response, ares->error);
 554         }
 555         /* Only entries are interesting, and we handle the case of the parent seperatly */
 556
 557         switch (ares->type) {
 558         case LDB_REPLY_ENTRY:
 559
 560                 if (ldb_dn_compare(ares->message->dn, mc->aggregate_dn) == 0) {
 561                         for (i=0; i < ARRAY_SIZE(generated_attrs); i++) {
 562                                 if (generated_attrs[i].aggregate &&
 563                                     ldb_attr_in_list(ac->req->op.search.attrs, generated_attrs[i].attr)) {
 564                                         ret = generated_attrs[i].fn(ldb, ares->message, ac->schema);
 565                                         if (ret != LDB_SUCCESS) {
 566                                                 return ret;
 567                                         }
 568                                 }
 569                         }
 570                 } else {
 571                         for (i=0; i < ARRAY_SIZE(generated_attrs); i++) {
 572                                 if (!generated_attrs[i].aggregate &&
 573                                     ldb_attr_in_list(ac->req->op.search.attrs, generated_attrs[i].attr)) {
 574                                         ret = generated_attrs[i].fn(ldb, ares->message, ac->schema);
 575                                         if (ret != LDB_SUCCESS) {
 576                                                 return ret;
 577                                         }
 578                                 }
 579                         }
 580                 }
 581
 582
 583                 return ldb_module_send_entry(ac->req, ares->message, ares->controls);
 584
 585         case LDB_REPLY_REFERRAL:
 586
 587                 return ldb_module_send_referral(ac->req, ares->referral);
 588
 589         case LDB_REPLY_DONE:
 590
 591                 return ldb_module_done(ac->req, ares->controls,
 592                                         ares->response, ares->error);
 593         }
 594
 595         return LDB_SUCCESS;
 596 }
 597
 598 /* search */
 599 static int schema_fsmo_search(struct ldb_module *module, struct ldb_request *req)
 600 {
 601         struct ldb_context *ldb = ldb_module_get_ctx(module);
 602         int i, ret;
 603         struct schema_fsmo_search_data *search_context;
 604         struct ldb_request *down_req;
 605         struct dsdb_schema *schema = dsdb_get_schema(ldb);
 606
 607         if (!schema || !ldb_module_get_private(module)) {
 608                 /* If there is no schema, there is little we can do */
 609                 return ldb_next_request(module, req);
 610         }
 611         for (i=0; i < ARRAY_SIZE(generated_attrs); i++) {
 612                 if (ldb_attr_in_list(req->op.search.attrs, generated_attrs[i].attr)) {
 613                         break;
 614                 }
 615         }
 616         if (i == ARRAY_SIZE(generated_attrs)) {
 617                 /* No request for a generated attr found, nothing to
 618                  * see here, move along... */
 619                 return ldb_next_request(module, req);
 620         }
 621
 622         search_context = talloc(req, struct schema_fsmo_search_data);
 623         if (!search_context) {
 624                 ldb_oom(ldb);
 625                 return LDB_ERR_OPERATIONS_ERROR;
 626         }
 627
 628         search_context->module = module;
 629         search_context->req = req;
 630         search_context->schema = schema;
 631
 632         ret = ldb_build_search_req_ex(&down_req, ldb, search_context,
 633                                         req->op.search.base,
 634                                         req->op.search.scope,
 635                                         req->op.search.tree,
 636                                         req->op.search.attrs,
 637                                         req->controls,
 638                                         search_context, schema_fsmo_search_callback,
 639                                         req);
 640         if (ret != LDB_SUCCESS) {
 641                 return LDB_ERR_OPERATIONS_ERROR;
 642         }
 643
 644         return ldb_next_request(module, down_req);
 645 }
 646
 647
 648 _PUBLIC_ const struct ldb_module_ops ldb_schema_fsmo_module_ops = {
 649         .name           = "schema_fsmo",
 650         .init_context   = schema_fsmo_init,
 651         .add            = schema_fsmo_add,
 652         .extended       = schema_fsmo_extended,
 653         .search         = schema_fsmo_search
 654 };