| commit | b19d80d0a97faffc165f068612f74d4ef8d7e5da | |
| author | Andrew Bartlett <abartlet@samba.org> | |
| Thu, 3 Apr 2014 01:50:05 +0000 (3 14:50 +1300) | ||
| committer | Andrew Bartlett <abartlet@samba.org> | |
| Sat, 3 May 2014 05:57:12 +0000 (3 07:57 +0200) | ||
| tree | fe2227c6f898ccfa7dd22715a9362152d8aa5947 | treesnapshot (tar.gz zip) |
| parent | 4b324f7f08829ca3df0af291301d5272ae5cede1 | commitdiff |
dsdb: Make it harder to corrupt the database by requiring DBCHECK or RELAX for final object deletion
This kind of deletion can cause us to then replicate back a partial
object. We allow dbcheck to directly remove totally corrupt objects
(missing an objectclass) by specifying both DBCHECK and RELAX, and the
tombstone sweep after 180 days is done with the RELAX control.
Andrew Bartlett
Change-Id: Ic21f68e507ba9b65e035ca568430e35e2d001c7d
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
This kind of deletion can cause us to then replicate back a partial
object. We allow dbcheck to directly remove totally corrupt objects
(missing an objectclass) by specifying both DBCHECK and RELAX, and the
tombstone sweep after 180 days is done with the RELAX control.
Andrew Bartlett
Change-Id: Ic21f68e507ba9b65e035ca568430e35e2d001c7d
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
| source4/dsdb/kcc/kcc_deleted.c | diffblobblamehistory | |
| source4/dsdb/samdb/ldb_modules/repl_meta_data.c | diffblobblamehistory |