2 Unix SMB/CIFS mplementation.
5 Copyright (C) Stefan Metzmacher <metze@samba.org> 2006
6 Copyright (C) Simo Sorce 2005
7 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "dsdb/samdb/samdb.h"
25 #include "librpc/gen_ndr/ndr_drsuapi.h"
26 #include "librpc/gen_ndr/ndr_security.h"
27 #include "librpc/gen_ndr/ndr_misc.h"
29 #include <ldb_errors.h>
30 #include "system/time.h"
31 #include "../lib/util/charset/charset.h"
32 #include "librpc/ndr/libndr.h"
33 #include "../lib/util/asn1.h"
36 * Initialize dsdb_syntax_ctx with default values
39 void dsdb_syntax_ctx_init(struct dsdb_syntax_ctx *ctx,
40 struct ldb_context *ldb,
41 const struct dsdb_schema *schema)
47 * 'true' will keep current behavior,
48 * i.e. attributeID_id will be returned by default
50 ctx->is_schema_nc = true;
52 ctx->pfm_remote = NULL;
57 * Returns ATTID for DRS attribute.
59 * ATTID depends on whether we are replicating
60 * Schema NC or msDs-IntId is set for schemaAttribute
63 uint32_t dsdb_attribute_get_attid(const struct dsdb_attribute *attr,
66 if (!for_schema_nc && attr->msDS_IntId) {
67 return attr->msDS_IntId;
70 return attr->attributeID_id;
74 * Map an ATTID from remote DC to a local ATTID
75 * using remote prefixMap
77 static bool dsdb_syntax_attid_from_remote_attid(const struct dsdb_syntax_ctx *ctx,
86 * map remote ATTID to local directly in case
87 * of no remote prefixMap (during provision for instance)
89 if (!ctx->pfm_remote) {
90 *id_local = id_remote;
94 werr = dsdb_schema_pfm_oid_from_attid(ctx->pfm_remote, id_remote, mem_ctx, &oid);
95 if (!W_ERROR_IS_OK(werr)) {
96 DEBUG(0,("ATTID->OID failed (%s) for: 0x%08X\n", win_errstr(werr), id_remote));
100 werr = dsdb_schema_pfm_make_attid(ctx->schema->prefixmap, oid, id_local);
101 if (!W_ERROR_IS_OK(werr)) {
102 DEBUG(0,("OID->ATTID failed (%s) for: %s\n", win_errstr(werr), oid));
109 static WERROR dsdb_syntax_FOOBAR_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
110 const struct dsdb_attribute *attr,
111 const struct drsuapi_DsReplicaAttribute *in,
113 struct ldb_message_element *out)
118 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
119 W_ERROR_HAVE_NO_MEMORY(out->name);
121 out->num_values = in->value_ctr.num_values;
122 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
123 W_ERROR_HAVE_NO_MEMORY(out->values);
125 for (i=0; i < out->num_values; i++) {
128 if (in->value_ctr.values[i].blob == NULL) {
132 str = talloc_asprintf(out->values, "%s: not implemented",
134 W_ERROR_HAVE_NO_MEMORY(str);
136 out->values[i] = data_blob_string_const(str);
142 static WERROR dsdb_syntax_FOOBAR_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
143 const struct dsdb_attribute *attr,
144 const struct ldb_message_element *in,
146 struct drsuapi_DsReplicaAttribute *out)
151 static WERROR dsdb_syntax_FOOBAR_validate_ldb(const struct dsdb_syntax_ctx *ctx,
152 const struct dsdb_attribute *attr,
153 const struct ldb_message_element *in)
158 static WERROR dsdb_syntax_BOOL_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
159 const struct dsdb_attribute *attr,
160 const struct drsuapi_DsReplicaAttribute *in,
162 struct ldb_message_element *out)
167 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
168 W_ERROR_HAVE_NO_MEMORY(out->name);
170 out->num_values = in->value_ctr.num_values;
171 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
172 W_ERROR_HAVE_NO_MEMORY(out->values);
174 for (i=0; i < out->num_values; i++) {
178 if (in->value_ctr.values[i].blob == NULL) {
182 if (in->value_ctr.values[i].blob->length != 4) {
186 v = IVAL(in->value_ctr.values[i].blob->data, 0);
189 str = talloc_strdup(out->values, "TRUE");
190 W_ERROR_HAVE_NO_MEMORY(str);
192 str = talloc_strdup(out->values, "FALSE");
193 W_ERROR_HAVE_NO_MEMORY(str);
196 out->values[i] = data_blob_string_const(str);
202 static WERROR dsdb_syntax_BOOL_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
203 const struct dsdb_attribute *attr,
204 const struct ldb_message_element *in,
206 struct drsuapi_DsReplicaAttribute *out)
211 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
215 out->attid = dsdb_attribute_get_attid(attr,
217 out->value_ctr.num_values = in->num_values;
218 out->value_ctr.values = talloc_array(mem_ctx,
219 struct drsuapi_DsAttributeValue,
221 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
223 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
224 W_ERROR_HAVE_NO_MEMORY(blobs);
226 for (i=0; i < in->num_values; i++) {
227 out->value_ctr.values[i].blob = &blobs[i];
229 blobs[i] = data_blob_talloc(blobs, NULL, 4);
230 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
232 if (strcmp("TRUE", (const char *)in->values[i].data) == 0) {
233 SIVAL(blobs[i].data, 0, 0x00000001);
234 } else if (strcmp("FALSE", (const char *)in->values[i].data) == 0) {
235 SIVAL(blobs[i].data, 0, 0x00000000);
244 static WERROR dsdb_syntax_BOOL_validate_ldb(const struct dsdb_syntax_ctx *ctx,
245 const struct dsdb_attribute *attr,
246 const struct ldb_message_element *in)
250 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
254 for (i=0; i < in->num_values; i++) {
258 (const char *)in->values[i].data,
259 in->values[i].length);
261 (const char *)in->values[i].data,
262 in->values[i].length);
264 if (t != 0 && f != 0) {
265 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
272 static WERROR dsdb_syntax_INT32_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
273 const struct dsdb_attribute *attr,
274 const struct drsuapi_DsReplicaAttribute *in,
276 struct ldb_message_element *out)
281 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
282 W_ERROR_HAVE_NO_MEMORY(out->name);
284 out->num_values = in->value_ctr.num_values;
285 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
286 W_ERROR_HAVE_NO_MEMORY(out->values);
288 for (i=0; i < out->num_values; i++) {
292 if (in->value_ctr.values[i].blob == NULL) {
296 if (in->value_ctr.values[i].blob->length != 4) {
300 v = IVALS(in->value_ctr.values[i].blob->data, 0);
302 str = talloc_asprintf(out->values, "%d", v);
303 W_ERROR_HAVE_NO_MEMORY(str);
305 out->values[i] = data_blob_string_const(str);
311 static WERROR dsdb_syntax_INT32_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
312 const struct dsdb_attribute *attr,
313 const struct ldb_message_element *in,
315 struct drsuapi_DsReplicaAttribute *out)
320 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
324 out->attid = dsdb_attribute_get_attid(attr,
326 out->value_ctr.num_values = in->num_values;
327 out->value_ctr.values = talloc_array(mem_ctx,
328 struct drsuapi_DsAttributeValue,
330 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
332 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
333 W_ERROR_HAVE_NO_MEMORY(blobs);
335 for (i=0; i < in->num_values; i++) {
338 out->value_ctr.values[i].blob = &blobs[i];
340 blobs[i] = data_blob_talloc(blobs, NULL, 4);
341 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
343 /* We've to use "strtoll" here to have the intended overflows.
344 * Otherwise we may get "LONG_MAX" and the conversion is wrong. */
345 v = (int32_t) strtoll((char *)in->values[i].data, NULL, 0);
347 SIVALS(blobs[i].data, 0, v);
353 static WERROR dsdb_syntax_INT32_validate_ldb(const struct dsdb_syntax_ctx *ctx,
354 const struct dsdb_attribute *attr,
355 const struct ldb_message_element *in)
359 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
363 for (i=0; i < in->num_values; i++) {
365 char buf[sizeof("-2147483648")];
369 if (in->values[i].length >= sizeof(buf)) {
370 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
373 memcpy(buf, in->values[i].data, in->values[i].length);
375 v = strtol(buf, &end, 10);
377 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
379 if (end && end[0] != '\0') {
380 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
383 if (attr->rangeLower) {
384 if ((int32_t)v < (int32_t)*attr->rangeLower) {
385 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
389 if (attr->rangeUpper) {
390 if ((int32_t)v > (int32_t)*attr->rangeUpper) {
391 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
399 static WERROR dsdb_syntax_INT64_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
400 const struct dsdb_attribute *attr,
401 const struct drsuapi_DsReplicaAttribute *in,
403 struct ldb_message_element *out)
408 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
409 W_ERROR_HAVE_NO_MEMORY(out->name);
411 out->num_values = in->value_ctr.num_values;
412 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
413 W_ERROR_HAVE_NO_MEMORY(out->values);
415 for (i=0; i < out->num_values; i++) {
419 if (in->value_ctr.values[i].blob == NULL) {
423 if (in->value_ctr.values[i].blob->length != 8) {
427 v = BVALS(in->value_ctr.values[i].blob->data, 0);
429 str = talloc_asprintf(out->values, "%lld", (long long int)v);
430 W_ERROR_HAVE_NO_MEMORY(str);
432 out->values[i] = data_blob_string_const(str);
438 static WERROR dsdb_syntax_INT64_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
439 const struct dsdb_attribute *attr,
440 const struct ldb_message_element *in,
442 struct drsuapi_DsReplicaAttribute *out)
447 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
451 out->attid = dsdb_attribute_get_attid(attr,
453 out->value_ctr.num_values = in->num_values;
454 out->value_ctr.values = talloc_array(mem_ctx,
455 struct drsuapi_DsAttributeValue,
457 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
459 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
460 W_ERROR_HAVE_NO_MEMORY(blobs);
462 for (i=0; i < in->num_values; i++) {
465 out->value_ctr.values[i].blob = &blobs[i];
467 blobs[i] = data_blob_talloc(blobs, NULL, 8);
468 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
470 v = strtoll((const char *)in->values[i].data, NULL, 10);
472 SBVALS(blobs[i].data, 0, v);
478 static WERROR dsdb_syntax_INT64_validate_ldb(const struct dsdb_syntax_ctx *ctx,
479 const struct dsdb_attribute *attr,
480 const struct ldb_message_element *in)
484 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
488 for (i=0; i < in->num_values; i++) {
490 char buf[sizeof("-9223372036854775808")];
494 if (in->values[i].length >= sizeof(buf)) {
495 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
497 memcpy(buf, in->values[i].data, in->values[i].length);
500 v = strtoll(buf, &end, 10);
502 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
504 if (end && end[0] != '\0') {
505 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
508 if (attr->rangeLower) {
509 if ((int64_t)v < (int64_t)*attr->rangeLower) {
510 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
514 if (attr->rangeUpper) {
515 if ((int64_t)v > (int64_t)*attr->rangeUpper) {
516 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
523 static WERROR dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
524 const struct dsdb_attribute *attr,
525 const struct drsuapi_DsReplicaAttribute *in,
527 struct ldb_message_element *out)
532 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
533 W_ERROR_HAVE_NO_MEMORY(out->name);
535 out->num_values = in->value_ctr.num_values;
536 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
537 W_ERROR_HAVE_NO_MEMORY(out->values);
539 for (i=0; i < out->num_values; i++) {
544 if (in->value_ctr.values[i].blob == NULL) {
548 if (in->value_ctr.values[i].blob->length != 8) {
552 v = BVAL(in->value_ctr.values[i].blob->data, 0);
554 t = nt_time_to_unix(v);
557 * NOTE: On a w2k3 server you can set a GeneralizedTime string
558 * via LDAP, but you get back an UTCTime string,
559 * but via DRSUAPI you get back the NTTIME_1sec value
560 * that represents the GeneralizedTime value!
562 * So if we store the UTCTime string in our ldb
563 * we'll loose information!
565 str = ldb_timestring_utc(out->values, t);
566 W_ERROR_HAVE_NO_MEMORY(str);
567 out->values[i] = data_blob_string_const(str);
573 static WERROR dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
574 const struct dsdb_attribute *attr,
575 const struct ldb_message_element *in,
577 struct drsuapi_DsReplicaAttribute *out)
582 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
586 out->attid = dsdb_attribute_get_attid(attr,
588 out->value_ctr.num_values = in->num_values;
589 out->value_ctr.values = talloc_array(mem_ctx,
590 struct drsuapi_DsAttributeValue,
592 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
594 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
595 W_ERROR_HAVE_NO_MEMORY(blobs);
597 for (i=0; i < in->num_values; i++) {
601 out->value_ctr.values[i].blob = &blobs[i];
603 blobs[i] = data_blob_talloc(blobs, NULL, 8);
604 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
606 t = ldb_string_utc_to_time((const char *)in->values[i].data);
607 unix_to_nt_time(&v, t);
610 SBVAL(blobs[i].data, 0, v);
616 static WERROR dsdb_syntax_NTTIME_UTC_validate_ldb(const struct dsdb_syntax_ctx *ctx,
617 const struct dsdb_attribute *attr,
618 const struct ldb_message_element *in)
622 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
626 for (i=0; i < in->num_values; i++) {
628 char buf[sizeof("090826075717Z")];
631 if (in->values[i].length >= sizeof(buf)) {
632 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
634 memcpy(buf, in->values[i].data, in->values[i].length);
637 t = ldb_string_utc_to_time(buf);
639 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
642 if (attr->rangeLower) {
643 if ((int32_t)t < (int32_t)*attr->rangeLower) {
644 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
648 if (attr->rangeUpper) {
649 if ((int32_t)t > (int32_t)*attr->rangeLower) {
650 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
655 * TODO: verify the comment in the
656 * dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb() function!
663 static WERROR dsdb_syntax_NTTIME_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
664 const struct dsdb_attribute *attr,
665 const struct drsuapi_DsReplicaAttribute *in,
667 struct ldb_message_element *out)
672 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
673 W_ERROR_HAVE_NO_MEMORY(out->name);
675 out->num_values = in->value_ctr.num_values;
676 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
677 W_ERROR_HAVE_NO_MEMORY(out->values);
679 for (i=0; i < out->num_values; i++) {
684 if (in->value_ctr.values[i].blob == NULL) {
688 if (in->value_ctr.values[i].blob->length != 8) {
692 v = BVAL(in->value_ctr.values[i].blob->data, 0);
694 t = nt_time_to_unix(v);
696 str = ldb_timestring(out->values, t);
697 W_ERROR_HAVE_NO_MEMORY(str);
699 out->values[i] = data_blob_string_const(str);
705 static WERROR dsdb_syntax_NTTIME_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
706 const struct dsdb_attribute *attr,
707 const struct ldb_message_element *in,
709 struct drsuapi_DsReplicaAttribute *out)
714 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
718 out->attid = dsdb_attribute_get_attid(attr,
720 out->value_ctr.num_values = in->num_values;
721 out->value_ctr.values = talloc_array(mem_ctx,
722 struct drsuapi_DsAttributeValue,
724 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
726 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
727 W_ERROR_HAVE_NO_MEMORY(blobs);
729 for (i=0; i < in->num_values; i++) {
734 out->value_ctr.values[i].blob = &blobs[i];
736 blobs[i] = data_blob_talloc(blobs, NULL, 8);
737 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
739 ret = ldb_val_to_time(&in->values[i], &t);
740 if (ret != LDB_SUCCESS) {
741 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
743 unix_to_nt_time(&v, t);
746 SBVAL(blobs[i].data, 0, v);
752 static WERROR dsdb_syntax_NTTIME_validate_ldb(const struct dsdb_syntax_ctx *ctx,
753 const struct dsdb_attribute *attr,
754 const struct ldb_message_element *in)
758 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
762 for (i=0; i < in->num_values; i++) {
766 ret = ldb_val_to_time(&in->values[i], &t);
767 if (ret != LDB_SUCCESS) {
768 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
771 if (attr->rangeLower) {
772 if ((int32_t)t < (int32_t)*attr->rangeLower) {
773 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
777 if (attr->rangeUpper) {
778 if ((int32_t)t > (int32_t)*attr->rangeLower) {
779 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
787 static WERROR dsdb_syntax_DATA_BLOB_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
788 const struct dsdb_attribute *attr,
789 const struct drsuapi_DsReplicaAttribute *in,
791 struct ldb_message_element *out)
796 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
797 W_ERROR_HAVE_NO_MEMORY(out->name);
799 out->num_values = in->value_ctr.num_values;
800 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
801 W_ERROR_HAVE_NO_MEMORY(out->values);
803 for (i=0; i < out->num_values; i++) {
804 if (in->value_ctr.values[i].blob == NULL) {
808 if (in->value_ctr.values[i].blob->length == 0) {
812 out->values[i] = data_blob_dup_talloc(out->values,
813 in->value_ctr.values[i].blob);
814 W_ERROR_HAVE_NO_MEMORY(out->values[i].data);
820 static WERROR dsdb_syntax_DATA_BLOB_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
821 const struct dsdb_attribute *attr,
822 const struct ldb_message_element *in,
824 struct drsuapi_DsReplicaAttribute *out)
829 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
833 out->attid = dsdb_attribute_get_attid(attr,
835 out->value_ctr.num_values = in->num_values;
836 out->value_ctr.values = talloc_array(mem_ctx,
837 struct drsuapi_DsAttributeValue,
839 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
841 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
842 W_ERROR_HAVE_NO_MEMORY(blobs);
844 for (i=0; i < in->num_values; i++) {
845 out->value_ctr.values[i].blob = &blobs[i];
847 blobs[i] = data_blob_dup_talloc(blobs, &in->values[i]);
848 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
854 static WERROR dsdb_syntax_DATA_BLOB_validate_one_val(const struct dsdb_syntax_ctx *ctx,
855 const struct dsdb_attribute *attr,
856 const struct ldb_val *val)
858 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
862 if (attr->rangeLower) {
863 if ((uint32_t)val->length < (uint32_t)*attr->rangeLower) {
864 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
868 if (attr->rangeUpper) {
869 if ((uint32_t)val->length > (uint32_t)*attr->rangeUpper) {
870 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
877 static WERROR dsdb_syntax_DATA_BLOB_validate_ldb(const struct dsdb_syntax_ctx *ctx,
878 const struct dsdb_attribute *attr,
879 const struct ldb_message_element *in)
884 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
888 for (i=0; i < in->num_values; i++) {
889 if (in->values[i].length == 0) {
890 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
893 status = dsdb_syntax_DATA_BLOB_validate_one_val(ctx,
896 if (!W_ERROR_IS_OK(status)) {
904 static WERROR _dsdb_syntax_auto_OID_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
905 const struct dsdb_attribute *attr,
906 const struct drsuapi_DsReplicaAttribute *in,
908 struct ldb_message_element *out)
913 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
914 W_ERROR_HAVE_NO_MEMORY(out->name);
916 out->num_values = in->value_ctr.num_values;
917 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
918 W_ERROR_HAVE_NO_MEMORY(out->values);
920 for (i=0; i < out->num_values; i++) {
922 const struct dsdb_class *c;
923 const struct dsdb_attribute *a;
924 const char *str = NULL;
926 if (in->value_ctr.values[i].blob == NULL) {
930 if (in->value_ctr.values[i].blob->length != 4) {
934 v = IVAL(in->value_ctr.values[i].blob->data, 0);
936 if ((c = dsdb_class_by_governsID_id(ctx->schema, v))) {
937 str = talloc_strdup(out->values, c->lDAPDisplayName);
938 } else if ((a = dsdb_attribute_by_attributeID_id(ctx->schema, v))) {
939 str = talloc_strdup(out->values, a->lDAPDisplayName);
942 SMB_ASSERT(ctx->pfm_remote);
943 werr = dsdb_schema_pfm_oid_from_attid(ctx->pfm_remote, v,
945 W_ERROR_NOT_OK_RETURN(werr);
947 W_ERROR_HAVE_NO_MEMORY(str);
949 /* the values need to be reversed */
950 out->values[out->num_values - (i + 1)] = data_blob_string_const(str);
956 static WERROR _dsdb_syntax_OID_obj_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
957 const struct dsdb_attribute *attr,
958 const struct drsuapi_DsReplicaAttribute *in,
960 struct ldb_message_element *out)
965 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
966 W_ERROR_HAVE_NO_MEMORY(out->name);
968 out->num_values = in->value_ctr.num_values;
969 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
970 W_ERROR_HAVE_NO_MEMORY(out->values);
972 for (i=0; i < out->num_values; i++) {
974 const struct dsdb_class *c;
977 if (in->value_ctr.values[i].blob == NULL) {
981 if (in->value_ctr.values[i].blob->length != 4) {
985 v = IVAL(in->value_ctr.values[i].blob->data, 0);
987 /* convert remote ATTID to local ATTID */
988 if (!dsdb_syntax_attid_from_remote_attid(ctx, mem_ctx, v, &v)) {
989 DEBUG(1,(__location__ ": Failed to map remote ATTID to local ATTID!\n"));
993 c = dsdb_class_by_governsID_id(ctx->schema, v);
995 DEBUG(1,(__location__ ": Unknown governsID 0x%08X\n", v));
999 str = talloc_strdup(out->values, c->lDAPDisplayName);
1000 W_ERROR_HAVE_NO_MEMORY(str);
1002 /* the values need to be reversed */
1003 out->values[out->num_values - (i + 1)] = data_blob_string_const(str);
1009 static WERROR _dsdb_syntax_OID_attr_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1010 const struct dsdb_attribute *attr,
1011 const struct drsuapi_DsReplicaAttribute *in,
1012 TALLOC_CTX *mem_ctx,
1013 struct ldb_message_element *out)
1018 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1019 W_ERROR_HAVE_NO_MEMORY(out->name);
1021 out->num_values = in->value_ctr.num_values;
1022 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1023 W_ERROR_HAVE_NO_MEMORY(out->values);
1025 for (i=0; i < out->num_values; i++) {
1027 const struct dsdb_attribute *a;
1030 if (in->value_ctr.values[i].blob == NULL) {
1034 if (in->value_ctr.values[i].blob->length != 4) {
1038 v = IVAL(in->value_ctr.values[i].blob->data, 0);
1040 /* convert remote ATTID to local ATTID */
1041 if (!dsdb_syntax_attid_from_remote_attid(ctx, mem_ctx, v, &v)) {
1042 DEBUG(1,(__location__ ": Failed to map remote ATTID to local ATTID!\n"));
1046 a = dsdb_attribute_by_attributeID_id(ctx->schema, v);
1048 DEBUG(1,(__location__ ": Unknown attributeID_id 0x%08X\n", v));
1052 str = talloc_strdup(out->values, a->lDAPDisplayName);
1053 W_ERROR_HAVE_NO_MEMORY(str);
1055 /* the values need to be reversed */
1056 out->values[out->num_values - (i + 1)] = data_blob_string_const(str);
1062 static WERROR _dsdb_syntax_OID_oid_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1063 const struct dsdb_attribute *attr,
1064 const struct drsuapi_DsReplicaAttribute *in,
1065 TALLOC_CTX *mem_ctx,
1066 struct ldb_message_element *out)
1070 SMB_ASSERT(ctx->pfm_remote);
1073 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1074 W_ERROR_HAVE_NO_MEMORY(out->name);
1076 out->num_values = in->value_ctr.num_values;
1077 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1078 W_ERROR_HAVE_NO_MEMORY(out->values);
1080 for (i=0; i < out->num_values; i++) {
1085 if (in->value_ctr.values[i].blob == NULL) {
1089 if (in->value_ctr.values[i].blob->length != 4) {
1093 attid = IVAL(in->value_ctr.values[i].blob->data, 0);
1095 status = dsdb_schema_pfm_oid_from_attid(ctx->pfm_remote, attid,
1097 if (!W_ERROR_IS_OK(status)) {
1098 DEBUG(0,(__location__ ": Error: Unknown ATTID 0x%08X\n",
1103 out->values[i] = data_blob_string_const(oid);
1109 static WERROR _dsdb_syntax_auto_OID_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1110 const struct dsdb_attribute *attr,
1111 const struct ldb_message_element *in,
1112 TALLOC_CTX *mem_ctx,
1113 struct drsuapi_DsReplicaAttribute *out)
1118 out->attid= dsdb_attribute_get_attid(attr,
1120 out->value_ctr.num_values= in->num_values;
1121 out->value_ctr.values= talloc_array(mem_ctx,
1122 struct drsuapi_DsAttributeValue,
1124 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1126 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1127 W_ERROR_HAVE_NO_MEMORY(blobs);
1129 for (i=0; i < in->num_values; i++) {
1130 const struct dsdb_class *obj_class;
1131 const struct dsdb_attribute *obj_attr;
1134 out->value_ctr.values[i].blob= &blobs[i];
1136 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1137 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1139 /* in DRS windows puts the classes in the opposite
1140 order to the order used in ldap */
1141 v = &in->values[(in->num_values-1)-i];
1143 if ((obj_class = dsdb_class_by_lDAPDisplayName_ldb_val(ctx->schema, v))) {
1144 SIVAL(blobs[i].data, 0, obj_class->governsID_id);
1145 } else if ((obj_attr = dsdb_attribute_by_lDAPDisplayName_ldb_val(ctx->schema, v))) {
1146 SIVAL(blobs[i].data, 0, obj_attr->attributeID_id);
1150 werr = dsdb_schema_pfm_attid_from_oid(ctx->schema->prefixmap,
1151 (const char *)v->data,
1153 W_ERROR_NOT_OK_RETURN(werr);
1154 SIVAL(blobs[i].data, 0, attid);
1163 static WERROR _dsdb_syntax_OID_obj_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1164 const struct dsdb_attribute *attr,
1165 const struct ldb_message_element *in,
1166 TALLOC_CTX *mem_ctx,
1167 struct drsuapi_DsReplicaAttribute *out)
1172 out->attid= dsdb_attribute_get_attid(attr,
1174 out->value_ctr.num_values= in->num_values;
1175 out->value_ctr.values= talloc_array(mem_ctx,
1176 struct drsuapi_DsAttributeValue,
1178 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1180 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1181 W_ERROR_HAVE_NO_MEMORY(blobs);
1183 for (i=0; i < in->num_values; i++) {
1184 const struct dsdb_class *obj_class;
1186 out->value_ctr.values[i].blob= &blobs[i];
1188 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1189 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1191 /* in DRS windows puts the classes in the opposite
1192 order to the order used in ldap */
1193 obj_class = dsdb_class_by_lDAPDisplayName(ctx->schema,
1194 (const char *)in->values[(in->num_values-1)-i].data);
1198 SIVAL(blobs[i].data, 0, obj_class->governsID_id);
1205 static WERROR _dsdb_syntax_OID_attr_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1206 const struct dsdb_attribute *attr,
1207 const struct ldb_message_element *in,
1208 TALLOC_CTX *mem_ctx,
1209 struct drsuapi_DsReplicaAttribute *out)
1214 out->attid= dsdb_attribute_get_attid(attr,
1216 out->value_ctr.num_values= in->num_values;
1217 out->value_ctr.values= talloc_array(mem_ctx,
1218 struct drsuapi_DsAttributeValue,
1220 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1222 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1223 W_ERROR_HAVE_NO_MEMORY(blobs);
1225 for (i=0; i < in->num_values; i++) {
1226 const struct dsdb_attribute *obj_attr;
1228 out->value_ctr.values[i].blob= &blobs[i];
1230 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1231 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1233 obj_attr = dsdb_attribute_by_lDAPDisplayName(ctx->schema, (const char *)in->values[i].data);
1237 SIVAL(blobs[i].data, 0, obj_attr->attributeID_id);
1244 static WERROR _dsdb_syntax_OID_oid_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1245 const struct dsdb_attribute *attr,
1246 const struct ldb_message_element *in,
1247 TALLOC_CTX *mem_ctx,
1248 struct drsuapi_DsReplicaAttribute *out)
1253 out->attid= dsdb_attribute_get_attid(attr,
1255 out->value_ctr.num_values= in->num_values;
1256 out->value_ctr.values= talloc_array(mem_ctx,
1257 struct drsuapi_DsAttributeValue,
1259 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1261 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1262 W_ERROR_HAVE_NO_MEMORY(blobs);
1264 for (i=0; i < in->num_values; i++) {
1268 out->value_ctr.values[i].blob= &blobs[i];
1270 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1271 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1273 status = dsdb_schema_pfm_attid_from_oid(ctx->schema->prefixmap,
1274 (const char *)in->values[i].data,
1276 W_ERROR_NOT_OK_RETURN(status);
1278 SIVAL(blobs[i].data, 0, attid);
1284 static WERROR dsdb_syntax_OID_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1285 const struct dsdb_attribute *attr,
1286 const struct drsuapi_DsReplicaAttribute *in,
1287 TALLOC_CTX *mem_ctx,
1288 struct ldb_message_element *out)
1292 switch (attr->attributeID_id) {
1293 case DRSUAPI_ATTID_objectClass:
1294 case DRSUAPI_ATTID_subClassOf:
1295 case DRSUAPI_ATTID_auxiliaryClass:
1296 case DRSUAPI_ATTID_systemAuxiliaryClass:
1297 case DRSUAPI_ATTID_systemPossSuperiors:
1298 case DRSUAPI_ATTID_possSuperiors:
1299 werr = _dsdb_syntax_OID_obj_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1301 case DRSUAPI_ATTID_systemMustContain:
1302 case DRSUAPI_ATTID_systemMayContain:
1303 case DRSUAPI_ATTID_mustContain:
1304 case DRSUAPI_ATTID_rDNAttId:
1305 case DRSUAPI_ATTID_transportAddressAttribute:
1306 case DRSUAPI_ATTID_mayContain:
1307 werr = _dsdb_syntax_OID_attr_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1309 case DRSUAPI_ATTID_governsID:
1310 case DRSUAPI_ATTID_attributeID:
1311 case DRSUAPI_ATTID_attributeSyntax:
1312 werr = _dsdb_syntax_OID_oid_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1315 DEBUG(0,(__location__ ": Unknown handling for attributeID_id for %s\n",
1316 attr->lDAPDisplayName));
1317 return _dsdb_syntax_auto_OID_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1320 /* When we are doing the vampire of a schema, we don't want
1321 * the inability to reference an OID to get in the way.
1322 * Otherwise, we won't get the new schema with which to
1323 * understand this */
1324 if (!W_ERROR_IS_OK(werr) && ctx->schema->relax_OID_conversions) {
1325 return _dsdb_syntax_OID_oid_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1330 static WERROR dsdb_syntax_OID_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1331 const struct dsdb_attribute *attr,
1332 const struct ldb_message_element *in,
1333 TALLOC_CTX *mem_ctx,
1334 struct drsuapi_DsReplicaAttribute *out)
1336 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1340 switch (attr->attributeID_id) {
1341 case DRSUAPI_ATTID_objectClass:
1342 case DRSUAPI_ATTID_subClassOf:
1343 case DRSUAPI_ATTID_auxiliaryClass:
1344 case DRSUAPI_ATTID_systemAuxiliaryClass:
1345 case DRSUAPI_ATTID_systemPossSuperiors:
1346 case DRSUAPI_ATTID_possSuperiors:
1347 return _dsdb_syntax_OID_obj_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1348 case DRSUAPI_ATTID_systemMustContain:
1349 case DRSUAPI_ATTID_systemMayContain:
1350 case DRSUAPI_ATTID_mustContain:
1351 case DRSUAPI_ATTID_rDNAttId:
1352 case DRSUAPI_ATTID_transportAddressAttribute:
1353 case DRSUAPI_ATTID_mayContain:
1354 return _dsdb_syntax_OID_attr_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1355 case DRSUAPI_ATTID_governsID:
1356 case DRSUAPI_ATTID_attributeID:
1357 case DRSUAPI_ATTID_attributeSyntax:
1358 return _dsdb_syntax_OID_oid_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1361 DEBUG(0,(__location__ ": Unknown handling for attributeID_id for %s\n",
1362 attr->lDAPDisplayName));
1364 return _dsdb_syntax_auto_OID_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1367 static WERROR _dsdb_syntax_OID_validate_numericoid(const struct dsdb_syntax_ctx *ctx,
1368 const struct dsdb_attribute *attr,
1369 const struct ldb_message_element *in)
1372 TALLOC_CTX *tmp_ctx;
1374 tmp_ctx = talloc_new(ctx->ldb);
1375 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1377 for (i=0; i < in->num_values; i++) {
1380 const char *oid = (const char*)in->values[i].data;
1382 if (!ber_write_OID_String(tmp_ctx, &blob, oid)) {
1383 DEBUG(0,("ber_write_OID_String() failed for %s\n", oid));
1384 talloc_free(tmp_ctx);
1385 return WERR_INVALID_PARAMETER;
1388 if (!ber_read_OID_String(tmp_ctx, blob, &oid_out)) {
1389 DEBUG(0,("ber_read_OID_String() failed for %s\n",
1390 hex_encode_talloc(tmp_ctx, blob.data, blob.length)));
1391 talloc_free(tmp_ctx);
1392 return WERR_INVALID_PARAMETER;
1395 if (strcmp(oid, oid_out) != 0) {
1396 talloc_free(tmp_ctx);
1397 return WERR_INVALID_PARAMETER;
1401 talloc_free(tmp_ctx);
1405 static WERROR dsdb_syntax_OID_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1406 const struct dsdb_attribute *attr,
1407 const struct ldb_message_element *in)
1410 struct drsuapi_DsReplicaAttribute drs_tmp;
1411 struct ldb_message_element ldb_tmp;
1412 TALLOC_CTX *tmp_ctx;
1414 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1418 switch (attr->attributeID_id) {
1419 case DRSUAPI_ATTID_governsID:
1420 case DRSUAPI_ATTID_attributeID:
1421 case DRSUAPI_ATTID_attributeSyntax:
1422 return _dsdb_syntax_OID_validate_numericoid(ctx, attr, in);
1426 * TODO: optimize and verify this code
1429 tmp_ctx = talloc_new(ctx->ldb);
1430 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1432 status = dsdb_syntax_OID_ldb_to_drsuapi(ctx,
1437 if (!W_ERROR_IS_OK(status)) {
1438 talloc_free(tmp_ctx);
1442 status = dsdb_syntax_OID_drsuapi_to_ldb(ctx,
1447 if (!W_ERROR_IS_OK(status)) {
1448 talloc_free(tmp_ctx);
1452 talloc_free(tmp_ctx);
1456 static WERROR dsdb_syntax_UNICODE_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1457 const struct dsdb_attribute *attr,
1458 const struct drsuapi_DsReplicaAttribute *in,
1459 TALLOC_CTX *mem_ctx,
1460 struct ldb_message_element *out)
1465 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1466 W_ERROR_HAVE_NO_MEMORY(out->name);
1468 out->num_values = in->value_ctr.num_values;
1469 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1470 W_ERROR_HAVE_NO_MEMORY(out->values);
1472 for (i=0; i < out->num_values; i++) {
1473 size_t converted_size = 0;
1476 if (in->value_ctr.values[i].blob == NULL) {
1480 if (in->value_ctr.values[i].blob->length == 0) {
1484 if (!convert_string_talloc(out->values,
1486 in->value_ctr.values[i].blob->data,
1487 in->value_ctr.values[i].blob->length,
1488 (void **)&str, &converted_size)) {
1492 out->values[i] = data_blob_string_const(str);
1498 static WERROR dsdb_syntax_UNICODE_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1499 const struct dsdb_attribute *attr,
1500 const struct ldb_message_element *in,
1501 TALLOC_CTX *mem_ctx,
1502 struct drsuapi_DsReplicaAttribute *out)
1507 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1511 out->attid = dsdb_attribute_get_attid(attr,
1513 out->value_ctr.num_values = in->num_values;
1514 out->value_ctr.values = talloc_array(mem_ctx,
1515 struct drsuapi_DsAttributeValue,
1517 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1519 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1520 W_ERROR_HAVE_NO_MEMORY(blobs);
1522 for (i=0; i < in->num_values; i++) {
1523 out->value_ctr.values[i].blob = &blobs[i];
1525 if (!convert_string_talloc(blobs,
1527 in->values[i].data, in->values[i].length,
1528 (void **)&blobs[i].data, &blobs[i].length)) {
1536 static WERROR dsdb_syntax_UNICODE_validate_one_val(const struct dsdb_syntax_ctx *ctx,
1537 const struct dsdb_attribute *attr,
1538 const struct ldb_val *val)
1544 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1548 ok = convert_string_talloc(ctx->ldb,
1556 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1559 if (attr->rangeLower) {
1560 if ((size/2) < *attr->rangeLower) {
1561 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1565 if (attr->rangeUpper) {
1566 if ((size/2) > *attr->rangeUpper) {
1567 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1574 static WERROR dsdb_syntax_UNICODE_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1575 const struct dsdb_attribute *attr,
1576 const struct ldb_message_element *in)
1581 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1585 for (i=0; i < in->num_values; i++) {
1586 if (in->values[i].length == 0) {
1587 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1590 status = dsdb_syntax_UNICODE_validate_one_val(ctx,
1593 if (!W_ERROR_IS_OK(status)) {
1601 static WERROR dsdb_syntax_one_DN_drsuapi_to_ldb(TALLOC_CTX *mem_ctx, struct ldb_context *ldb,
1602 const struct dsdb_syntax *syntax,
1603 const DATA_BLOB *in, DATA_BLOB *out)
1605 struct drsuapi_DsReplicaObjectIdentifier3 id3;
1606 enum ndr_err_code ndr_err;
1607 DATA_BLOB guid_blob;
1609 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1614 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1618 talloc_free(tmp_ctx);
1622 if (in->length == 0) {
1623 talloc_free(tmp_ctx);
1628 /* windows sometimes sends an extra two pad bytes here */
1629 ndr_err = ndr_pull_struct_blob(in,
1631 (ndr_pull_flags_fn_t)ndr_pull_drsuapi_DsReplicaObjectIdentifier3);
1632 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1633 status = ndr_map_error2ntstatus(ndr_err);
1634 talloc_free(tmp_ctx);
1635 return ntstatus_to_werror(status);
1638 dn = ldb_dn_new(tmp_ctx, ldb, id3.dn);
1640 talloc_free(tmp_ctx);
1641 /* If this fails, it must be out of memory, as it does not do much parsing */
1642 W_ERROR_HAVE_NO_MEMORY(dn);
1645 if (!GUID_all_zero(&id3.guid)) {
1646 status = GUID_to_ndr_blob(&id3.guid, tmp_ctx, &guid_blob);
1647 if (!NT_STATUS_IS_OK(status)) {
1648 talloc_free(tmp_ctx);
1649 return ntstatus_to_werror(status);
1652 ret = ldb_dn_set_extended_component(dn, "GUID", &guid_blob);
1653 if (ret != LDB_SUCCESS) {
1654 talloc_free(tmp_ctx);
1657 talloc_free(guid_blob.data);
1660 if (id3.__ndr_size_sid) {
1662 ndr_err = ndr_push_struct_blob(&sid_blob, tmp_ctx, &id3.sid,
1663 (ndr_push_flags_fn_t)ndr_push_dom_sid);
1664 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1665 status = ndr_map_error2ntstatus(ndr_err);
1666 talloc_free(tmp_ctx);
1667 return ntstatus_to_werror(status);
1670 ret = ldb_dn_set_extended_component(dn, "SID", &sid_blob);
1671 if (ret != LDB_SUCCESS) {
1672 talloc_free(tmp_ctx);
1677 *out = data_blob_string_const(ldb_dn_get_extended_linearized(mem_ctx, dn, 1));
1678 talloc_free(tmp_ctx);
1682 static WERROR dsdb_syntax_DN_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1683 const struct dsdb_attribute *attr,
1684 const struct drsuapi_DsReplicaAttribute *in,
1685 TALLOC_CTX *mem_ctx,
1686 struct ldb_message_element *out)
1691 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1692 W_ERROR_HAVE_NO_MEMORY(out->name);
1694 out->num_values = in->value_ctr.num_values;
1695 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1696 W_ERROR_HAVE_NO_MEMORY(out->values);
1698 for (i=0; i < out->num_values; i++) {
1699 WERROR status = dsdb_syntax_one_DN_drsuapi_to_ldb(out->values, ctx->ldb, attr->syntax,
1700 in->value_ctr.values[i].blob,
1702 if (!W_ERROR_IS_OK(status)) {
1711 static WERROR dsdb_syntax_DN_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1712 const struct dsdb_attribute *attr,
1713 const struct ldb_message_element *in,
1714 TALLOC_CTX *mem_ctx,
1715 struct drsuapi_DsReplicaAttribute *out)
1720 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1724 out->attid = dsdb_attribute_get_attid(attr,
1726 out->value_ctr.num_values = in->num_values;
1727 out->value_ctr.values = talloc_array(mem_ctx,
1728 struct drsuapi_DsAttributeValue,
1730 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1732 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1733 W_ERROR_HAVE_NO_MEMORY(blobs);
1735 for (i=0; i < in->num_values; i++) {
1736 struct drsuapi_DsReplicaObjectIdentifier3 id3;
1737 enum ndr_err_code ndr_err;
1739 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1742 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1744 out->value_ctr.values[i].blob = &blobs[i];
1746 dn = ldb_dn_from_ldb_val(tmp_ctx, ctx->ldb, &in->values[i]);
1748 W_ERROR_HAVE_NO_MEMORY(dn);
1752 status = dsdb_get_extended_dn_guid(dn, &id3.guid, "GUID");
1753 if (!NT_STATUS_IS_OK(status) &&
1754 !NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1755 talloc_free(tmp_ctx);
1756 return ntstatus_to_werror(status);
1759 status = dsdb_get_extended_dn_sid(dn, &id3.sid, "SID");
1760 if (!NT_STATUS_IS_OK(status) &&
1761 !NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1762 talloc_free(tmp_ctx);
1763 return ntstatus_to_werror(status);
1766 id3.dn = ldb_dn_get_linearized(dn);
1768 ndr_err = ndr_push_struct_blob(&blobs[i], blobs, &id3, (ndr_push_flags_fn_t)ndr_push_drsuapi_DsReplicaObjectIdentifier3);
1769 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1770 status = ndr_map_error2ntstatus(ndr_err);
1771 talloc_free(tmp_ctx);
1772 return ntstatus_to_werror(status);
1774 talloc_free(tmp_ctx);
1780 static WERROR dsdb_syntax_DN_validate_one_val(const struct dsdb_syntax_ctx *ctx,
1781 const struct dsdb_attribute *attr,
1782 const struct ldb_val *val,
1783 TALLOC_CTX *mem_ctx,
1784 struct dsdb_dn **_dsdb_dn)
1786 static const char * const extended_list[] = { "GUID", "SID", NULL };
1787 enum ndr_err_code ndr_err;
1790 const DATA_BLOB *sid_blob;
1791 struct dsdb_dn *dsdb_dn;
1797 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1800 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1802 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1806 dsdb_dn = dsdb_dn_parse(tmp_ctx, ctx->ldb, val,
1807 attr->syntax->ldap_oid);
1809 talloc_free(tmp_ctx);
1810 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1814 dn2 = ldb_dn_copy(tmp_ctx, dn);
1816 talloc_free(tmp_ctx);
1820 num_components = ldb_dn_get_comp_num(dn);
1822 status = dsdb_get_extended_dn_guid(dn, &guid, "GUID");
1823 if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1825 } else if (!NT_STATUS_IS_OK(status)) {
1826 talloc_free(tmp_ctx);
1827 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1830 sid_blob = ldb_dn_get_extended_component(dn, "SID");
1833 ndr_err = ndr_pull_struct_blob_all(sid_blob,
1836 (ndr_pull_flags_fn_t)ndr_pull_dom_sid);
1837 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1838 talloc_free(tmp_ctx);
1839 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1843 /* Do not allow links to the RootDSE */
1844 if (num_components == 0) {
1845 talloc_free(tmp_ctx);
1846 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1850 * We need to check that only "GUID" and "SID" are
1851 * specified as extended components, we do that
1852 * by comparing the dn's after removing all components
1853 * from one dn and only the allowed subset from the other
1856 ldb_dn_extended_filter(dn, extended_list);
1858 dn_str = ldb_dn_get_extended_linearized(tmp_ctx, dn, 0);
1859 if (dn_str == NULL) {
1860 talloc_free(tmp_ctx);
1861 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1863 dn2_str = ldb_dn_get_extended_linearized(tmp_ctx, dn2, 0);
1864 if (dn2_str == NULL) {
1865 talloc_free(tmp_ctx);
1866 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1869 if (strcmp(dn_str, dn2_str) != 0) {
1870 talloc_free(tmp_ctx);
1871 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1874 *_dsdb_dn = talloc_move(mem_ctx, &dsdb_dn);
1875 talloc_free(tmp_ctx);
1879 static WERROR dsdb_syntax_DN_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1880 const struct dsdb_attribute *attr,
1881 const struct ldb_message_element *in)
1885 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
1889 for (i=0; i < in->num_values; i++) {
1891 struct dsdb_dn *dsdb_dn;
1892 TALLOC_CTX *tmp_ctx = talloc_new(ctx->ldb);
1893 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1895 status = dsdb_syntax_DN_validate_one_val(ctx,
1899 if (!W_ERROR_IS_OK(status)) {
1900 talloc_free(tmp_ctx);
1904 if (dsdb_dn->dn_format != DSDB_NORMAL_DN) {
1905 talloc_free(tmp_ctx);
1906 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1909 talloc_free(tmp_ctx);
1915 static WERROR dsdb_syntax_DN_BINARY_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1916 const struct dsdb_attribute *attr,
1917 const struct drsuapi_DsReplicaAttribute *in,
1918 TALLOC_CTX *mem_ctx,
1919 struct ldb_message_element *out)
1925 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1926 W_ERROR_HAVE_NO_MEMORY(out->name);
1928 out->num_values = in->value_ctr.num_values;
1929 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1930 W_ERROR_HAVE_NO_MEMORY(out->values);
1932 for (i=0; i < out->num_values; i++) {
1933 struct drsuapi_DsReplicaObjectIdentifier3Binary id3;
1934 enum ndr_err_code ndr_err;
1935 DATA_BLOB guid_blob;
1937 struct dsdb_dn *dsdb_dn;
1939 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1941 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1944 if (in->value_ctr.values[i].blob == NULL) {
1945 talloc_free(tmp_ctx);
1949 if (in->value_ctr.values[i].blob->length == 0) {
1950 talloc_free(tmp_ctx);
1955 /* windows sometimes sends an extra two pad bytes here */
1956 ndr_err = ndr_pull_struct_blob(in->value_ctr.values[i].blob,
1958 (ndr_pull_flags_fn_t)ndr_pull_drsuapi_DsReplicaObjectIdentifier3Binary);
1959 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1960 status = ndr_map_error2ntstatus(ndr_err);
1961 talloc_free(tmp_ctx);
1962 return ntstatus_to_werror(status);
1965 dn = ldb_dn_new(tmp_ctx, ctx->ldb, id3.dn);
1967 talloc_free(tmp_ctx);
1968 /* If this fails, it must be out of memory, as it does not do much parsing */
1969 W_ERROR_HAVE_NO_MEMORY(dn);
1972 status = GUID_to_ndr_blob(&id3.guid, tmp_ctx, &guid_blob);
1973 if (!NT_STATUS_IS_OK(status)) {
1974 talloc_free(tmp_ctx);
1975 return ntstatus_to_werror(status);
1978 ret = ldb_dn_set_extended_component(dn, "GUID", &guid_blob);
1979 if (ret != LDB_SUCCESS) {
1980 talloc_free(tmp_ctx);
1984 talloc_free(guid_blob.data);
1986 if (id3.__ndr_size_sid) {
1988 ndr_err = ndr_push_struct_blob(&sid_blob, tmp_ctx, &id3.sid,
1989 (ndr_push_flags_fn_t)ndr_push_dom_sid);
1990 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1991 status = ndr_map_error2ntstatus(ndr_err);
1992 talloc_free(tmp_ctx);
1993 return ntstatus_to_werror(status);
1996 ret = ldb_dn_set_extended_component(dn, "SID", &sid_blob);
1997 if (ret != LDB_SUCCESS) {
1998 talloc_free(tmp_ctx);
2003 /* set binary stuff */
2004 dsdb_dn = dsdb_dn_construct(tmp_ctx, dn, id3.binary, attr->syntax->ldap_oid);
2006 /* If this fails, it must be out of memory, we know the ldap_oid is valid */
2007 talloc_free(tmp_ctx);
2008 W_ERROR_HAVE_NO_MEMORY(dsdb_dn);
2010 out->values[i] = data_blob_string_const(dsdb_dn_get_extended_linearized(out->values, dsdb_dn, 1));
2011 talloc_free(tmp_ctx);
2017 static WERROR dsdb_syntax_DN_BINARY_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
2018 const struct dsdb_attribute *attr,
2019 const struct ldb_message_element *in,
2020 TALLOC_CTX *mem_ctx,
2021 struct drsuapi_DsReplicaAttribute *out)
2026 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
2030 out->attid = dsdb_attribute_get_attid(attr,
2032 out->value_ctr.num_values = in->num_values;
2033 out->value_ctr.values = talloc_array(mem_ctx,
2034 struct drsuapi_DsAttributeValue,
2036 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
2038 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
2039 W_ERROR_HAVE_NO_MEMORY(blobs);
2041 for (i=0; i < in->num_values; i++) {
2042 struct drsuapi_DsReplicaObjectIdentifier3Binary id3;
2043 enum ndr_err_code ndr_err;
2044 const DATA_BLOB *sid_blob;
2045 struct dsdb_dn *dsdb_dn;
2046 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
2049 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
2051 out->value_ctr.values[i].blob = &blobs[i];
2053 dsdb_dn = dsdb_dn_parse(tmp_ctx, ctx->ldb, &in->values[i], attr->syntax->ldap_oid);
2056 talloc_free(tmp_ctx);
2057 return ntstatus_to_werror(NT_STATUS_INVALID_PARAMETER);
2062 status = dsdb_get_extended_dn_guid(dsdb_dn->dn, &id3.guid, "GUID");
2063 if (!NT_STATUS_IS_OK(status) &&
2064 !NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
2065 talloc_free(tmp_ctx);
2066 return ntstatus_to_werror(status);
2069 sid_blob = ldb_dn_get_extended_component(dsdb_dn->dn, "SID");
2072 ndr_err = ndr_pull_struct_blob_all(sid_blob,
2074 (ndr_pull_flags_fn_t)ndr_pull_dom_sid);
2075 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2076 status = ndr_map_error2ntstatus(ndr_err);
2077 talloc_free(tmp_ctx);
2078 return ntstatus_to_werror(status);
2082 id3.dn = ldb_dn_get_linearized(dsdb_dn->dn);
2084 /* get binary stuff */
2085 id3.binary = dsdb_dn->extra_part;
2087 ndr_err = ndr_push_struct_blob(&blobs[i], blobs, &id3, (ndr_push_flags_fn_t)ndr_push_drsuapi_DsReplicaObjectIdentifier3Binary);
2088 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2089 status = ndr_map_error2ntstatus(ndr_err);
2090 talloc_free(tmp_ctx);
2091 return ntstatus_to_werror(status);
2093 talloc_free(tmp_ctx);
2099 static WERROR dsdb_syntax_DN_BINARY_validate_ldb(const struct dsdb_syntax_ctx *ctx,
2100 const struct dsdb_attribute *attr,
2101 const struct ldb_message_element *in)
2105 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
2109 for (i=0; i < in->num_values; i++) {
2111 struct dsdb_dn *dsdb_dn;
2112 TALLOC_CTX *tmp_ctx = talloc_new(ctx->ldb);
2113 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
2115 status = dsdb_syntax_DN_validate_one_val(ctx,
2119 if (!W_ERROR_IS_OK(status)) {
2120 talloc_free(tmp_ctx);
2124 if (dsdb_dn->dn_format != DSDB_BINARY_DN) {
2125 talloc_free(tmp_ctx);
2126 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
2129 status = dsdb_syntax_DATA_BLOB_validate_one_val(ctx,
2131 &dsdb_dn->extra_part);
2132 if (!W_ERROR_IS_OK(status)) {
2133 talloc_free(tmp_ctx);
2137 talloc_free(tmp_ctx);
2143 static WERROR dsdb_syntax_DN_STRING_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
2144 const struct dsdb_attribute *attr,
2145 const struct drsuapi_DsReplicaAttribute *in,
2146 TALLOC_CTX *mem_ctx,
2147 struct ldb_message_element *out)
2149 return dsdb_syntax_DN_BINARY_drsuapi_to_ldb(ctx,
2156 static WERROR dsdb_syntax_DN_STRING_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
2157 const struct dsdb_attribute *attr,
2158 const struct ldb_message_element *in,
2159 TALLOC_CTX *mem_ctx,
2160 struct drsuapi_DsReplicaAttribute *out)
2162 return dsdb_syntax_DN_BINARY_ldb_to_drsuapi(ctx,
2169 static WERROR dsdb_syntax_DN_STRING_validate_ldb(const struct dsdb_syntax_ctx *ctx,
2170 const struct dsdb_attribute *attr,
2171 const struct ldb_message_element *in)
2175 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
2179 for (i=0; i < in->num_values; i++) {
2181 struct dsdb_dn *dsdb_dn;
2182 TALLOC_CTX *tmp_ctx = talloc_new(ctx->ldb);
2183 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
2185 status = dsdb_syntax_DN_validate_one_val(ctx,
2189 if (!W_ERROR_IS_OK(status)) {
2190 talloc_free(tmp_ctx);
2194 if (dsdb_dn->dn_format != DSDB_STRING_DN) {
2195 talloc_free(tmp_ctx);
2196 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
2199 status = dsdb_syntax_UNICODE_validate_one_val(ctx,
2201 &dsdb_dn->extra_part);
2202 if (!W_ERROR_IS_OK(status)) {
2203 talloc_free(tmp_ctx);
2207 talloc_free(tmp_ctx);
2213 static WERROR dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
2214 const struct dsdb_attribute *attr,
2215 const struct drsuapi_DsReplicaAttribute *in,
2216 TALLOC_CTX *mem_ctx,
2217 struct ldb_message_element *out)
2222 out->name = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
2223 W_ERROR_HAVE_NO_MEMORY(out->name);
2225 out->num_values = in->value_ctr.num_values;
2226 out->values = talloc_array(mem_ctx, struct ldb_val, out->num_values);
2227 W_ERROR_HAVE_NO_MEMORY(out->values);
2229 for (i=0; i < out->num_values; i++) {
2231 size_t converted_size = 0;
2234 if (in->value_ctr.values[i].blob == NULL) {
2238 if (in->value_ctr.values[i].blob->length < 4) {
2242 len = IVAL(in->value_ctr.values[i].blob->data, 0);
2244 if (len != in->value_ctr.values[i].blob->length) {
2248 if (!convert_string_talloc(out->values, CH_UTF16, CH_UNIX,
2249 in->value_ctr.values[i].blob->data+4,
2250 in->value_ctr.values[i].blob->length-4,
2251 (void **)&str, &converted_size)) {
2255 out->values[i] = data_blob_string_const(str);
2261 static WERROR dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
2262 const struct dsdb_attribute *attr,
2263 const struct ldb_message_element *in,
2264 TALLOC_CTX *mem_ctx,
2265 struct drsuapi_DsReplicaAttribute *out)
2270 if (attr->attributeID_id == DRSUAPI_ATTID_INVALID) {
2274 out->attid = dsdb_attribute_get_attid(attr,
2276 out->value_ctr.num_values = in->num_values;
2277 out->value_ctr.values = talloc_array(mem_ctx,
2278 struct drsuapi_DsAttributeValue,
2280 W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
2282 blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
2283 W_ERROR_HAVE_NO_MEMORY(blobs);
2285 for (i=0; i < in->num_values; i++) {
2289 out->value_ctr.values[i].blob = &blobs[i];
2291 if (!convert_string_talloc(blobs, CH_UNIX, CH_UTF16,
2293 in->values[i].length,
2294 (void **)&data, &ret)) {
2298 blobs[i] = data_blob_talloc(blobs, NULL, 4 + ret);
2299 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
2301 SIVAL(blobs[i].data, 0, 4 + ret);
2304 memcpy(blobs[i].data + 4, data, ret);
2312 static WERROR dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb(const struct dsdb_syntax_ctx *ctx,
2313 const struct dsdb_attribute *attr,
2314 const struct ldb_message_element *in)
2316 return dsdb_syntax_UNICODE_validate_ldb(ctx,
2321 #define OMOBJECTCLASS(val) { .length = sizeof(val) - 1, .data = discard_const_p(uint8_t, val) }
2323 static const struct dsdb_syntax dsdb_syntaxes[] = {
2326 .ldap_oid = LDB_SYNTAX_BOOLEAN,
2328 .attributeSyntax_oid = "2.5.5.8",
2329 .drsuapi_to_ldb = dsdb_syntax_BOOL_drsuapi_to_ldb,
2330 .ldb_to_drsuapi = dsdb_syntax_BOOL_ldb_to_drsuapi,
2331 .validate_ldb = dsdb_syntax_BOOL_validate_ldb,
2332 .equality = "booleanMatch",
2333 .comment = "Boolean"
2336 .ldap_oid = LDB_SYNTAX_INTEGER,
2338 .attributeSyntax_oid = "2.5.5.9",
2339 .drsuapi_to_ldb = dsdb_syntax_INT32_drsuapi_to_ldb,
2340 .ldb_to_drsuapi = dsdb_syntax_INT32_ldb_to_drsuapi,
2341 .validate_ldb = dsdb_syntax_INT32_validate_ldb,
2342 .equality = "integerMatch",
2343 .comment = "Integer",
2344 .ldb_syntax = LDB_SYNTAX_SAMBA_INT32
2346 .name = "String(Octet)",
2347 .ldap_oid = LDB_SYNTAX_OCTET_STRING,
2349 .attributeSyntax_oid = "2.5.5.10",
2350 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2351 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2352 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2353 .equality = "octetStringMatch",
2354 .comment = "Octet String",
2356 .name = "String(Sid)",
2357 .ldap_oid = LDB_SYNTAX_OCTET_STRING,
2359 .attributeSyntax_oid = "2.5.5.17",
2360 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2361 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2362 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2363 .equality = "octetStringMatch",
2364 .comment = "Octet String - Security Identifier (SID)",
2365 .ldb_syntax = LDB_SYNTAX_SAMBA_SID
2367 .name = "String(Object-Identifier)",
2368 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.38",
2370 .attributeSyntax_oid = "2.5.5.2",
2371 .drsuapi_to_ldb = dsdb_syntax_OID_drsuapi_to_ldb,
2372 .ldb_to_drsuapi = dsdb_syntax_OID_ldb_to_drsuapi,
2373 .validate_ldb = dsdb_syntax_OID_validate_ldb,
2374 .equality = "caseIgnoreMatch", /* Would use "objectIdentifierMatch" but most are ldap attribute/class names */
2375 .comment = "OID String",
2376 .ldb_syntax = LDB_SYNTAX_DIRECTORY_STRING
2378 .name = "Enumeration",
2379 .ldap_oid = LDB_SYNTAX_INTEGER,
2381 .attributeSyntax_oid = "2.5.5.9",
2382 .drsuapi_to_ldb = dsdb_syntax_INT32_drsuapi_to_ldb,
2383 .ldb_to_drsuapi = dsdb_syntax_INT32_ldb_to_drsuapi,
2384 .validate_ldb = dsdb_syntax_INT32_validate_ldb,
2385 .ldb_syntax = LDB_SYNTAX_SAMBA_INT32
2387 /* not used in w2k3 forest */
2388 .name = "String(Numeric)",
2389 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.36",
2391 .attributeSyntax_oid = "2.5.5.6",
2392 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2393 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2394 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2395 .equality = "numericStringMatch",
2396 .substring = "numericStringSubstringsMatch",
2397 .comment = "Numeric String",
2398 .ldb_syntax = LDB_SYNTAX_DIRECTORY_STRING,
2400 .name = "String(Printable)",
2401 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.44",
2403 .attributeSyntax_oid = "2.5.5.5",
2404 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2405 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2406 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2407 .ldb_syntax = LDB_SYNTAX_OCTET_STRING,
2409 .name = "String(Teletex)",
2410 .ldap_oid = "1.2.840.113556.1.4.905",
2412 .attributeSyntax_oid = "2.5.5.4",
2413 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2414 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2415 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2416 .equality = "caseIgnoreMatch",
2417 .substring = "caseIgnoreSubstringsMatch",
2418 .comment = "Case Insensitive String",
2419 .ldb_syntax = LDB_SYNTAX_DIRECTORY_STRING,
2421 .name = "String(IA5)",
2422 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.26",
2424 .attributeSyntax_oid = "2.5.5.5",
2425 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2426 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2427 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2428 .equality = "caseExactIA5Match",
2429 .comment = "Printable String",
2430 .ldb_syntax = LDB_SYNTAX_OCTET_STRING,
2432 .name = "String(UTC-Time)",
2433 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.53",
2435 .attributeSyntax_oid = "2.5.5.11",
2436 .drsuapi_to_ldb = dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb,
2437 .ldb_to_drsuapi = dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi,
2438 .validate_ldb = dsdb_syntax_NTTIME_UTC_validate_ldb,
2439 .equality = "generalizedTimeMatch",
2440 .comment = "UTC Time",
2442 .name = "String(Generalized-Time)",
2443 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.24",
2445 .attributeSyntax_oid = "2.5.5.11",
2446 .drsuapi_to_ldb = dsdb_syntax_NTTIME_drsuapi_to_ldb,
2447 .ldb_to_drsuapi = dsdb_syntax_NTTIME_ldb_to_drsuapi,
2448 .validate_ldb = dsdb_syntax_NTTIME_validate_ldb,
2449 .equality = "generalizedTimeMatch",
2450 .comment = "Generalized Time",
2451 .ldb_syntax = LDB_SYNTAX_UTC_TIME,
2453 /* not used in w2k3 schema */
2454 .name = "String(Case Sensitive)",
2455 .ldap_oid = "1.2.840.113556.1.4.1362",
2457 .attributeSyntax_oid = "2.5.5.3",
2458 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2459 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2460 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2461 .equality = "caseExactMatch",
2462 .substring = "caseExactSubstringsMatch",
2463 /* TODO (kim): according to LDAP rfc we should be using same comparison
2464 * as Directory String (LDB_SYNTAX_DIRECTORY_STRING), but case sensitive.
2465 * But according to ms docs binary compare should do the job:
2466 * http://msdn.microsoft.com/en-us/library/cc223200(v=PROT.10).aspx */
2467 .ldb_syntax = LDB_SYNTAX_OCTET_STRING,
2469 .name = "String(Unicode)",
2470 .ldap_oid = LDB_SYNTAX_DIRECTORY_STRING,
2472 .attributeSyntax_oid = "2.5.5.12",
2473 .drsuapi_to_ldb = dsdb_syntax_UNICODE_drsuapi_to_ldb,
2474 .ldb_to_drsuapi = dsdb_syntax_UNICODE_ldb_to_drsuapi,
2475 .validate_ldb = dsdb_syntax_UNICODE_validate_ldb,
2476 .equality = "caseIgnoreMatch",
2477 .substring = "caseIgnoreSubstringsMatch",
2478 .comment = "Directory String",
2480 .name = "Interval/LargeInteger",
2481 .ldap_oid = "1.2.840.113556.1.4.906",
2483 .attributeSyntax_oid = "2.5.5.16",
2484 .drsuapi_to_ldb = dsdb_syntax_INT64_drsuapi_to_ldb,
2485 .ldb_to_drsuapi = dsdb_syntax_INT64_ldb_to_drsuapi,
2486 .validate_ldb = dsdb_syntax_INT64_validate_ldb,
2487 .equality = "integerMatch",
2488 .comment = "Large Integer",
2489 .ldb_syntax = LDB_SYNTAX_INTEGER,
2491 .name = "String(NT-Sec-Desc)",
2492 .ldap_oid = LDB_SYNTAX_SAMBA_SECURITY_DESCRIPTOR,
2494 .attributeSyntax_oid = "2.5.5.15",
2495 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2496 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2497 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2499 .name = "Object(DS-DN)",
2500 .ldap_oid = LDB_SYNTAX_DN,
2502 .oMObjectClass = OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x4a"),
2503 .attributeSyntax_oid = "2.5.5.1",
2504 .drsuapi_to_ldb = dsdb_syntax_DN_drsuapi_to_ldb,
2505 .ldb_to_drsuapi = dsdb_syntax_DN_ldb_to_drsuapi,
2506 .validate_ldb = dsdb_syntax_DN_validate_ldb,
2507 .equality = "distinguishedNameMatch",
2508 .comment = "Object(DS-DN) == a DN",
2510 .name = "Object(DN-Binary)",
2511 .ldap_oid = DSDB_SYNTAX_BINARY_DN,
2513 .oMObjectClass = OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0b"),
2514 .attributeSyntax_oid = "2.5.5.7",
2515 .drsuapi_to_ldb = dsdb_syntax_DN_BINARY_drsuapi_to_ldb,
2516 .ldb_to_drsuapi = dsdb_syntax_DN_BINARY_ldb_to_drsuapi,
2517 .validate_ldb = dsdb_syntax_DN_BINARY_validate_ldb,
2518 .equality = "octetStringMatch",
2519 .comment = "OctetString: Binary+DN",
2521 /* not used in w2k3 schema, but used in Exchange schema*/
2522 .name = "Object(OR-Name)",
2523 .ldap_oid = DSDB_SYNTAX_OR_NAME,
2525 .oMObjectClass = OMOBJECTCLASS("\x56\x06\x01\x02\x05\x0b\x1D"),
2526 .attributeSyntax_oid = "2.5.5.7",
2527 .drsuapi_to_ldb = dsdb_syntax_DN_BINARY_drsuapi_to_ldb,
2528 .ldb_to_drsuapi = dsdb_syntax_DN_BINARY_ldb_to_drsuapi,
2529 .validate_ldb = dsdb_syntax_DN_BINARY_validate_ldb,
2530 .equality = "caseIgnoreMatch",
2531 .ldb_syntax = LDB_SYNTAX_DN,
2534 * TODO: verify if DATA_BLOB is correct here...!
2536 * repsFrom and repsTo are the only attributes using
2537 * this attribute syntax, but they're not replicated...
2539 .name = "Object(Replica-Link)",
2540 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.40",
2542 .oMObjectClass = OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x06"),
2543 .attributeSyntax_oid = "2.5.5.10",
2544 .drsuapi_to_ldb = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2545 .ldb_to_drsuapi = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2546 .validate_ldb = dsdb_syntax_DATA_BLOB_validate_ldb,
2548 .name = "Object(Presentation-Address)",
2549 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.43",
2551 .oMObjectClass = OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x5c"),
2552 .attributeSyntax_oid = "2.5.5.13",
2553 .drsuapi_to_ldb = dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb,
2554 .ldb_to_drsuapi = dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi,
2555 .validate_ldb = dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb,
2556 .comment = "Presentation Address",
2557 .ldb_syntax = LDB_SYNTAX_DIRECTORY_STRING,
2559 /* not used in w2k3 schema */
2560 .name = "Object(Access-Point)",
2561 .ldap_oid = "1.3.6.1.4.1.1466.115.121.1.2",
2563 .oMObjectClass = OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x3e"),
2564 .attributeSyntax_oid = "2.5.5.14",
2565 .drsuapi_to_ldb = dsdb_syntax_FOOBAR_drsuapi_to_ldb,
2566 .ldb_to_drsuapi = dsdb_syntax_FOOBAR_ldb_to_drsuapi,
2567 .validate_ldb = dsdb_syntax_FOOBAR_validate_ldb,
2568 .ldb_syntax = LDB_SYNTAX_DIRECTORY_STRING,
2570 /* not used in w2k3 schema */
2571 .name = "Object(DN-String)",
2572 .ldap_oid = DSDB_SYNTAX_STRING_DN,
2574 .oMObjectClass = OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0c"),
2575 .attributeSyntax_oid = "2.5.5.14",
2576 .drsuapi_to_ldb = dsdb_syntax_DN_STRING_drsuapi_to_ldb,
2577 .ldb_to_drsuapi = dsdb_syntax_DN_STRING_ldb_to_drsuapi,
2578 .validate_ldb = dsdb_syntax_DN_STRING_validate_ldb,
2579 .equality = "octetStringMatch",
2580 .comment = "OctetString: String+DN",
2584 const struct dsdb_syntax *find_syntax_map_by_ad_oid(const char *ad_oid)
2587 for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
2588 if (strcasecmp(ad_oid, dsdb_syntaxes[i].attributeSyntax_oid) == 0) {
2589 return &dsdb_syntaxes[i];
2595 const struct dsdb_syntax *find_syntax_map_by_ad_syntax(int oMSyntax)
2598 for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
2599 if (oMSyntax == dsdb_syntaxes[i].oMSyntax) {
2600 return &dsdb_syntaxes[i];
2606 const struct dsdb_syntax *find_syntax_map_by_standard_oid(const char *standard_oid)
2609 for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
2610 if (strcasecmp(standard_oid, dsdb_syntaxes[i].ldap_oid) == 0) {
2611 return &dsdb_syntaxes[i];
2617 const struct dsdb_syntax *dsdb_syntax_for_attribute(const struct dsdb_attribute *attr)
2621 for (i=0; i < ARRAY_SIZE(dsdb_syntaxes); i++) {
2622 if (attr->oMSyntax != dsdb_syntaxes[i].oMSyntax) continue;
2624 if (attr->oMObjectClass.length != dsdb_syntaxes[i].oMObjectClass.length) continue;
2626 if (attr->oMObjectClass.length) {
2628 ret = memcmp(attr->oMObjectClass.data,
2629 dsdb_syntaxes[i].oMObjectClass.data,
2630 attr->oMObjectClass.length);
2631 if (ret != 0) continue;
2634 if (strcmp(attr->attributeSyntax_oid, dsdb_syntaxes[i].attributeSyntax_oid) != 0) continue;
2636 return &dsdb_syntaxes[i];
2642 WERROR dsdb_attribute_drsuapi_to_ldb(struct ldb_context *ldb,
2643 const struct dsdb_schema *schema,
2644 const struct dsdb_schema_prefixmap *pfm_remote,
2645 const struct drsuapi_DsReplicaAttribute *in,
2646 TALLOC_CTX *mem_ctx,
2647 struct ldb_message_element *out)
2649 const struct dsdb_attribute *sa;
2650 struct dsdb_syntax_ctx syntax_ctx;
2651 uint32_t attid_local;
2653 /* use default syntax conversion context */
2654 dsdb_syntax_ctx_init(&syntax_ctx, ldb, schema);
2655 syntax_ctx.pfm_remote = pfm_remote;
2657 switch (dsdb_pfm_get_attid_type(in->attid)) {
2658 case DSDB_ATTID_TYPE_PFM:
2659 /* map remote ATTID to local ATTID */
2660 if (!dsdb_syntax_attid_from_remote_attid(&syntax_ctx, mem_ctx, in->attid, &attid_local)) {
2661 DEBUG(0,(__location__ ": Can't find local ATTID for 0x%08X\n",
2666 case DSDB_ATTID_TYPE_INTID:
2667 /* use IntId value directly */
2668 attid_local = in->attid;
2671 /* we should never get here */
2672 DEBUG(0,(__location__ ": Invalid ATTID type passed for conversion - 0x%08X\n",
2674 return WERR_INVALID_PARAMETER;
2677 sa = dsdb_attribute_by_attributeID_id(schema, attid_local);
2679 DEBUG(1,(__location__ ": Unknown attributeID_id 0x%08X\n", in->attid));
2683 return sa->syntax->drsuapi_to_ldb(&syntax_ctx, sa, in, mem_ctx, out);
2686 WERROR dsdb_attribute_ldb_to_drsuapi(struct ldb_context *ldb,
2687 const struct dsdb_schema *schema,
2688 const struct ldb_message_element *in,
2689 TALLOC_CTX *mem_ctx,
2690 struct drsuapi_DsReplicaAttribute *out)
2692 const struct dsdb_attribute *sa;
2693 struct dsdb_syntax_ctx syntax_ctx;
2695 sa = dsdb_attribute_by_lDAPDisplayName(schema, in->name);
2700 /* use default syntax conversion context */
2701 dsdb_syntax_ctx_init(&syntax_ctx, ldb, schema);
2703 return sa->syntax->ldb_to_drsuapi(&syntax_ctx, sa, in, mem_ctx, out);