Extending LDB for Extended DNs

Andrew Bartlett abartlet at samba.org
Thu Nov 6 02:14:26 GMT 2008


On Wed, 2008-11-05 at 09:27 -0500, simo wrote:
> On Wed, 2008-11-05 at 22:33 +1100, Andrew Bartlett wrote:
> > On Tue, 2008-10-28 at 08:13 +0100, Stefan (metze) Metzmacher wrote:
> > > Andrew Bartlett schrieb:
> > > > Simo,
> > > > 
> > > > Per our discussion on IRC last night, I wanted to clarify with you want
> > > > I would like to do to DN support in Samba4, and how I would like to
> > > > extend LDB to help with this.
> > > > 
> > > > The problem of extended DNs is partially indicated by:
> > > > 
> > > > http://msdn.microsoft.com/en-us/library/cc200561.aspx
> > > > 
> > > > Firstly, I would like to try and support sending 'extended dns' to
> > > > clients, as required by the extended DN control.  
> > > > 
> > > > To do this properly, we need to do better than extended_dn.c does at the
> > > > moment - it relies on the fact that if you stuff something into
> > > > ldb_dn_new(), then it will appear in the DN - the DN structure does not
> > > > contain the parsed DN.
> > > > 
> > > > Secondly, I would like to accept the alternate DN forms 
> > > > 
> > > > http://msdn.microsoft.com/en-us/library/cc200459.aspx
> > > > 
> > > > My hope is that these should be parsed as 'normal' DNs as much as
> > > > possible - then canonicalised into a form we can actually look up (or
> > > > used directly if possible). 
> > 
> > > > My plan is to extend the ldb DN parser's existing 'TODO' handling of
> > > > <SID= and <GUID= to be a general set of key-value pairs, much like the
> > > > DN components are.  Samba4 can then register a custom handler to parse
> > > > and print these attributes (with 'string as is' being the default).
> > > > This will be much like we handle all other 'samba special' types in
> > > > LDB. 
> > > 
> > > I think that's the correct way of doing it...
> > 
> > > I thing that will be a big step forward (but please remember that next
> > > thing is the handling of per attribute replication meta data for linked
> > > attributes:-)
> > 
> > Great.  I've been working on this hard for the past week or so.  See
> > http://gitweb.samba.org/?p=abartlet/samba.git/.git;a=shortlog for the
> > current work in progress.
> > 
> > I'm currently working on the comprehensive testsuite for DN behaviours,
> > particularly with the extended DNs.
> > 
> > I would appreciate any comments or feedback,
> 
> Andrew it would make it much easier to evaluate if you could rebase and
> re-group your patched code on top of the current branch and maybe label
> the commits so that they are clearly recognizable and separated in
> relevant units. more or less like I did for the LDB Async work.
> 
> git rebase is a great tool for that :-)

The patches have been rebased, and this is the result.  All of the
recent work in that branch represents the patches for this effort (there
is a reason it has taken me a week)

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20081106/d794f5b0/attachment.bin


More information about the samba-technical mailing list