source4/dsdb/schema/schema_syntax.c

   1 /*
   2    Unix SMB/CIFS mplementation.
   3    DSDB schema syntaxes
   4
   5    Copyright (C) Stefan Metzmacher <metze@samba.org> 2006
   6    Copyright (C) Simo Sorce 2005
   7    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21
  22 */
  23 #include "includes.h"
  24 #include "dsdb/samdb/samdb.h"
  25 #include "librpc/gen_ndr/ndr_drsuapi.h"
  26 #include "librpc/gen_ndr/ndr_security.h"
  27 #include "librpc/gen_ndr/ndr_misc.h"
  28 #include "lib/ldb/include/ldb.h"
  29 #include "lib/ldb/include/ldb_errors.h"
  30 #include "system/time.h"
  31 #include "../lib/util/charset/charset.h"
  32 #include "librpc/ndr/libndr.h"
  33
  34 /**
  35  * Initialize dsdb_syntax_ctx with default values
  36  * for common cases.
  37  */
  38 void dsdb_syntax_ctx_init(struct dsdb_syntax_ctx *ctx,
  39                           struct ldb_context *ldb,
  40                           const struct dsdb_schema *schema)
  41 {
  42         ctx->ldb        = ldb;
  43         ctx->schema     = schema;
  44
  45         /*
  46          * 'true' will keep current behavior,
  47          * i.e. attributeID_id will be returned by default
  48          */
  49         ctx->is_schema_nc = true;
  50 }
  51
  52
  53 /**
  54  * Returns ATTID for DRS attribute.
  55  *
  56  * ATTID depends on whether we are replicating
  57  * Schema NC or msDs-IntId is set for schemaAttribute
  58  * for the attribute.
  59  */
  60 static uint32_t dsdb_attribute_get_attid(const struct dsdb_attribute *attr,
  61                                          bool for_schema_nc)
  62 {
  63         if (!for_schema_nc && attr->msDS_IntId) {
  64                 return attr->msDS_IntId;
  65         }
  66
  67         return attr->attributeID_id;
  68 }
  69
  70
  71 static WERROR dsdb_syntax_FOOBAR_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
  72                                                 const struct dsdb_attribute *attr,
  73                                                 const struct drsuapi_DsReplicaAttribute *in,
  74                                                 TALLOC_CTX *mem_ctx,
  75                                                 struct ldb_message_element *out)
  76 {
  77         unsigned int i;
  78
  79         out->flags      = 0;
  80         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
  81         W_ERROR_HAVE_NO_MEMORY(out->name);
  82
  83         out->num_values = in->value_ctr.num_values;
  84         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
  85         W_ERROR_HAVE_NO_MEMORY(out->values);
  86
  87         for (i=0; i < out->num_values; i++) {
  88                 char *str;
  89
  90                 if (in->value_ctr.values[i].blob == NULL) {
  91                         return WERR_FOOBAR;
  92                 }
  93
  94                 str = talloc_asprintf(out->values, "%s: not implemented",
  95                                       attr->syntax->name);
  96                 W_ERROR_HAVE_NO_MEMORY(str);
  97
  98                 out->values[i] = data_blob_string_const(str);
  99         }
 100
 101         return WERR_OK;
 102 }
 103
 104 static WERROR dsdb_syntax_FOOBAR_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 105                                                 const struct dsdb_attribute *attr,
 106                                                 const struct ldb_message_element *in,
 107                                                 TALLOC_CTX *mem_ctx,
 108                                                 struct drsuapi_DsReplicaAttribute *out)
 109 {
 110         return WERR_FOOBAR;
 111 }
 112
 113 static WERROR dsdb_syntax_FOOBAR_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 114                                               const struct dsdb_attribute *attr,
 115                                               const struct ldb_message_element *in)
 116 {
 117         return WERR_FOOBAR;
 118 }
 119
 120 static WERROR dsdb_syntax_BOOL_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 121                                               const struct dsdb_attribute *attr,
 122                                               const struct drsuapi_DsReplicaAttribute *in,
 123                                               TALLOC_CTX *mem_ctx,
 124                                               struct ldb_message_element *out)
 125 {
 126         unsigned int i;
 127
 128         out->flags      = 0;
 129         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 130         W_ERROR_HAVE_NO_MEMORY(out->name);
 131
 132         out->num_values = in->value_ctr.num_values;
 133         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 134         W_ERROR_HAVE_NO_MEMORY(out->values);
 135
 136         for (i=0; i < out->num_values; i++) {
 137                 uint32_t v;
 138                 char *str;
 139
 140                 if (in->value_ctr.values[i].blob == NULL) {
 141                         return WERR_FOOBAR;
 142                 }
 143
 144                 if (in->value_ctr.values[i].blob->length != 4) {
 145                         return WERR_FOOBAR;
 146                 }
 147
 148                 v = IVAL(in->value_ctr.values[i].blob->data, 0);
 149
 150                 if (v != 0) {
 151                         str = talloc_strdup(out->values, "TRUE");
 152                         W_ERROR_HAVE_NO_MEMORY(str);
 153                 } else {
 154                         str = talloc_strdup(out->values, "FALSE");
 155                         W_ERROR_HAVE_NO_MEMORY(str);
 156                 }
 157
 158                 out->values[i] = data_blob_string_const(str);
 159         }
 160
 161         return WERR_OK;
 162 }
 163
 164 static WERROR dsdb_syntax_BOOL_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 165                                               const struct dsdb_attribute *attr,
 166                                               const struct ldb_message_element *in,
 167                                               TALLOC_CTX *mem_ctx,
 168                                               struct drsuapi_DsReplicaAttribute *out)
 169 {
 170         unsigned int i;
 171         DATA_BLOB *blobs;
 172
 173         if (attr->attributeID_id == 0xFFFFFFFF) {
 174                 return WERR_FOOBAR;
 175         }
 176
 177         out->attid                      = dsdb_attribute_get_attid(attr,
 178                                                                    ctx->is_schema_nc);
 179         out->value_ctr.num_values       = in->num_values;
 180         out->value_ctr.values           = talloc_array(mem_ctx,
 181                                                        struct drsuapi_DsAttributeValue,
 182                                                        in->num_values);
 183         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
 184
 185         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
 186         W_ERROR_HAVE_NO_MEMORY(blobs);
 187
 188         for (i=0; i < in->num_values; i++) {
 189                 out->value_ctr.values[i].blob   = &blobs[i];
 190
 191                 blobs[i] = data_blob_talloc(blobs, NULL, 4);
 192                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
 193
 194                 if (strcmp("TRUE", (const char *)in->values[i].data) == 0) {
 195                         SIVAL(blobs[i].data, 0, 0x00000001);
 196                 } else if (strcmp("FALSE", (const char *)in->values[i].data) == 0) {
 197                         SIVAL(blobs[i].data, 0, 0x00000000);
 198                 } else {
 199                         return WERR_FOOBAR;
 200                 }
 201         }
 202
 203         return WERR_OK;
 204 }
 205
 206 static WERROR dsdb_syntax_BOOL_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 207                                             const struct dsdb_attribute *attr,
 208                                             const struct ldb_message_element *in)
 209 {
 210         unsigned int i;
 211
 212         if (attr->attributeID_id == 0xFFFFFFFF) {
 213                 return WERR_FOOBAR;
 214         }
 215
 216         for (i=0; i < in->num_values; i++) {
 217                 int t, f;
 218
 219                 t = strncmp("TRUE",
 220                             (const char *)in->values[i].data,
 221                             in->values[i].length);
 222                 f = strncmp("FALSE",
 223                             (const char *)in->values[i].data,
 224                             in->values[i].length);
 225
 226                 if (t != 0 && f != 0) {
 227                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 228                 }
 229         }
 230
 231         return WERR_OK;
 232 }
 233
 234 static WERROR dsdb_syntax_INT32_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 235                                                const struct dsdb_attribute *attr,
 236                                                const struct drsuapi_DsReplicaAttribute *in,
 237                                                TALLOC_CTX *mem_ctx,
 238                                                struct ldb_message_element *out)
 239 {
 240         unsigned int i;
 241
 242         out->flags      = 0;
 243         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 244         W_ERROR_HAVE_NO_MEMORY(out->name);
 245
 246         out->num_values = in->value_ctr.num_values;
 247         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 248         W_ERROR_HAVE_NO_MEMORY(out->values);
 249
 250         for (i=0; i < out->num_values; i++) {
 251                 int32_t v;
 252                 char *str;
 253
 254                 if (in->value_ctr.values[i].blob == NULL) {
 255                         return WERR_FOOBAR;
 256                 }
 257
 258                 if (in->value_ctr.values[i].blob->length != 4) {
 259                         return WERR_FOOBAR;
 260                 }
 261
 262                 v = IVALS(in->value_ctr.values[i].blob->data, 0);
 263
 264                 str = talloc_asprintf(out->values, "%d", v);
 265                 W_ERROR_HAVE_NO_MEMORY(str);
 266
 267                 out->values[i] = data_blob_string_const(str);
 268         }
 269
 270         return WERR_OK;
 271 }
 272
 273 static WERROR dsdb_syntax_INT32_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 274                                                const struct dsdb_attribute *attr,
 275                                                const struct ldb_message_element *in,
 276                                                TALLOC_CTX *mem_ctx,
 277                                                struct drsuapi_DsReplicaAttribute *out)
 278 {
 279         unsigned int i;
 280         DATA_BLOB *blobs;
 281
 282         if (attr->attributeID_id == 0xFFFFFFFF) {
 283                 return WERR_FOOBAR;
 284         }
 285
 286         out->attid                      = dsdb_attribute_get_attid(attr,
 287                                                                    ctx->is_schema_nc);
 288         out->value_ctr.num_values       = in->num_values;
 289         out->value_ctr.values           = talloc_array(mem_ctx,
 290                                                        struct drsuapi_DsAttributeValue,
 291                                                        in->num_values);
 292         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
 293
 294         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
 295         W_ERROR_HAVE_NO_MEMORY(blobs);
 296
 297         for (i=0; i < in->num_values; i++) {
 298                 int32_t v;
 299
 300                 out->value_ctr.values[i].blob   = &blobs[i];
 301
 302                 blobs[i] = data_blob_talloc(blobs, NULL, 4);
 303                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
 304
 305                 /* We've to use "strtoll" here to have the intended overflows.
 306                  * Otherwise we may get "LONG_MAX" and the conversion is wrong. */
 307                 v = (int32_t) strtoll((char *)in->values[i].data, NULL, 0);
 308
 309                 SIVALS(blobs[i].data, 0, v);
 310         }
 311
 312         return WERR_OK;
 313 }
 314
 315 static WERROR dsdb_syntax_INT32_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 316                                              const struct dsdb_attribute *attr,
 317                                              const struct ldb_message_element *in)
 318 {
 319         unsigned int i;
 320
 321         if (attr->attributeID_id == 0xFFFFFFFF) {
 322                 return WERR_FOOBAR;
 323         }
 324
 325         for (i=0; i < in->num_values; i++) {
 326                 long v;
 327                 char buf[sizeof("-2147483648")];
 328                 char *end = NULL;
 329
 330                 ZERO_STRUCT(buf);
 331                 if (in->values[i].length >= sizeof(buf)) {
 332                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 333                 }
 334
 335                 memcpy(buf, in->values[i].data, in->values[i].length);
 336                 errno = 0;
 337                 v = strtol(buf, &end, 10);
 338                 if (errno != 0) {
 339                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 340                 }
 341                 if (end && end[0] != '\0') {
 342                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 343                 }
 344
 345                 if (attr->rangeLower) {
 346                         if ((int32_t)v < (int32_t)*attr->rangeLower) {
 347                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 348                         }
 349                 }
 350
 351                 if (attr->rangeUpper) {
 352                         if ((int32_t)v > (int32_t)*attr->rangeUpper) {
 353                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 354                         }
 355                 }
 356         }
 357
 358         return WERR_OK;
 359 }
 360
 361 static WERROR dsdb_syntax_INT64_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 362                                                const struct dsdb_attribute *attr,
 363                                                const struct drsuapi_DsReplicaAttribute *in,
 364                                                TALLOC_CTX *mem_ctx,
 365                                                struct ldb_message_element *out)
 366 {
 367         unsigned int i;
 368
 369         out->flags      = 0;
 370         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 371         W_ERROR_HAVE_NO_MEMORY(out->name);
 372
 373         out->num_values = in->value_ctr.num_values;
 374         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 375         W_ERROR_HAVE_NO_MEMORY(out->values);
 376
 377         for (i=0; i < out->num_values; i++) {
 378                 int64_t v;
 379                 char *str;
 380
 381                 if (in->value_ctr.values[i].blob == NULL) {
 382                         return WERR_FOOBAR;
 383                 }
 384
 385                 if (in->value_ctr.values[i].blob->length != 8) {
 386                         return WERR_FOOBAR;
 387                 }
 388
 389                 v = BVALS(in->value_ctr.values[i].blob->data, 0);
 390
 391                 str = talloc_asprintf(out->values, "%lld", (long long int)v);
 392                 W_ERROR_HAVE_NO_MEMORY(str);
 393
 394                 out->values[i] = data_blob_string_const(str);
 395         }
 396
 397         return WERR_OK;
 398 }
 399
 400 static WERROR dsdb_syntax_INT64_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 401                                                const struct dsdb_attribute *attr,
 402                                                const struct ldb_message_element *in,
 403                                                TALLOC_CTX *mem_ctx,
 404                                                struct drsuapi_DsReplicaAttribute *out)
 405 {
 406         unsigned int i;
 407         DATA_BLOB *blobs;
 408
 409         if (attr->attributeID_id == 0xFFFFFFFF) {
 410                 return WERR_FOOBAR;
 411         }
 412
 413         out->attid                      = dsdb_attribute_get_attid(attr,
 414                                                                    ctx->is_schema_nc);
 415         out->value_ctr.num_values       = in->num_values;
 416         out->value_ctr.values           = talloc_array(mem_ctx,
 417                                                        struct drsuapi_DsAttributeValue,
 418                                                        in->num_values);
 419         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
 420
 421         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
 422         W_ERROR_HAVE_NO_MEMORY(blobs);
 423
 424         for (i=0; i < in->num_values; i++) {
 425                 int64_t v;
 426
 427                 out->value_ctr.values[i].blob   = &blobs[i];
 428
 429                 blobs[i] = data_blob_talloc(blobs, NULL, 8);
 430                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
 431
 432                 v = strtoll((const char *)in->values[i].data, NULL, 10);
 433
 434                 SBVALS(blobs[i].data, 0, v);
 435         }
 436
 437         return WERR_OK;
 438 }
 439
 440 static WERROR dsdb_syntax_INT64_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 441                                              const struct dsdb_attribute *attr,
 442                                              const struct ldb_message_element *in)
 443 {
 444         unsigned int i;
 445
 446         if (attr->attributeID_id == 0xFFFFFFFF) {
 447                 return WERR_FOOBAR;
 448         }
 449
 450         for (i=0; i < in->num_values; i++) {
 451                 long long v;
 452                 char buf[sizeof("-9223372036854775808")];
 453                 char *end = NULL;
 454
 455                 ZERO_STRUCT(buf);
 456                 if (in->values[i].length >= sizeof(buf)) {
 457                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 458                 }
 459                 memcpy(buf, in->values[i].data, in->values[i].length);
 460
 461                 errno = 0;
 462                 v = strtoll(buf, &end, 10);
 463                 if (errno != 0) {
 464                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 465                 }
 466                 if (end && end[0] != '\0') {
 467                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 468                 }
 469
 470                 if (attr->rangeLower) {
 471                         if ((int64_t)v < (int64_t)*attr->rangeLower) {
 472                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 473                         }
 474                 }
 475
 476                 if (attr->rangeUpper) {
 477                         if ((int64_t)v > (int64_t)*attr->rangeUpper) {
 478                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 479                         }
 480                 }
 481         }
 482
 483         return WERR_OK;
 484 }
 485 static WERROR dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 486                                                     const struct dsdb_attribute *attr,
 487                                                     const struct drsuapi_DsReplicaAttribute *in,
 488                                                     TALLOC_CTX *mem_ctx,
 489                                                     struct ldb_message_element *out)
 490 {
 491         unsigned int i;
 492
 493         out->flags      = 0;
 494         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 495         W_ERROR_HAVE_NO_MEMORY(out->name);
 496
 497         out->num_values = in->value_ctr.num_values;
 498         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 499         W_ERROR_HAVE_NO_MEMORY(out->values);
 500
 501         for (i=0; i < out->num_values; i++) {
 502                 NTTIME v;
 503                 time_t t;
 504                 char *str;
 505
 506                 if (in->value_ctr.values[i].blob == NULL) {
 507                         return WERR_FOOBAR;
 508                 }
 509
 510                 if (in->value_ctr.values[i].blob->length != 8) {
 511                         return WERR_FOOBAR;
 512                 }
 513
 514                 v = BVAL(in->value_ctr.values[i].blob->data, 0);
 515                 v *= 10000000;
 516                 t = nt_time_to_unix(v);
 517
 518                 /*
 519                  * NOTE: On a w2k3 server you can set a GeneralizedTime string
 520                  *       via LDAP, but you get back an UTCTime string,
 521                  *       but via DRSUAPI you get back the NTTIME_1sec value
 522                  *       that represents the GeneralizedTime value!
 523                  *
 524                  *       So if we store the UTCTime string in our ldb
 525                  *       we'll loose information!
 526                  */
 527                 str = ldb_timestring_utc(out->values, t);
 528                 W_ERROR_HAVE_NO_MEMORY(str);
 529                 out->values[i] = data_blob_string_const(str);
 530         }
 531
 532         return WERR_OK;
 533 }
 534
 535 static WERROR dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 536                                                     const struct dsdb_attribute *attr,
 537                                                     const struct ldb_message_element *in,
 538                                                     TALLOC_CTX *mem_ctx,
 539                                                     struct drsuapi_DsReplicaAttribute *out)
 540 {
 541         unsigned int i;
 542         DATA_BLOB *blobs;
 543
 544         if (attr->attributeID_id == 0xFFFFFFFF) {
 545                 return WERR_FOOBAR;
 546         }
 547
 548         out->attid                      = dsdb_attribute_get_attid(attr,
 549                                                                    ctx->is_schema_nc);
 550         out->value_ctr.num_values       = in->num_values;
 551         out->value_ctr.values           = talloc_array(mem_ctx,
 552                                                        struct drsuapi_DsAttributeValue,
 553                                                        in->num_values);
 554         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
 555
 556         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
 557         W_ERROR_HAVE_NO_MEMORY(blobs);
 558
 559         for (i=0; i < in->num_values; i++) {
 560                 NTTIME v;
 561                 time_t t;
 562
 563                 out->value_ctr.values[i].blob   = &blobs[i];
 564
 565                 blobs[i] = data_blob_talloc(blobs, NULL, 8);
 566                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
 567
 568                 t = ldb_string_utc_to_time((const char *)in->values[i].data);
 569                 unix_to_nt_time(&v, t);
 570                 v /= 10000000;
 571
 572                 SBVAL(blobs[i].data, 0, v);
 573         }
 574
 575         return WERR_OK;
 576 }
 577
 578 static WERROR dsdb_syntax_NTTIME_UTC_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 579                                                   const struct dsdb_attribute *attr,
 580                                                   const struct ldb_message_element *in)
 581 {
 582         unsigned int i;
 583
 584         if (attr->attributeID_id == 0xFFFFFFFF) {
 585                 return WERR_FOOBAR;
 586         }
 587
 588         for (i=0; i < in->num_values; i++) {
 589                 time_t t;
 590                 char buf[sizeof("090826075717Z")];
 591
 592                 ZERO_STRUCT(buf);
 593                 if (in->values[i].length >= sizeof(buf)) {
 594                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 595                 }
 596                 memcpy(buf, in->values[i].data, in->values[i].length);
 597
 598                 errno = 0;
 599                 t = ldb_string_utc_to_time(buf);
 600                 if (errno != 0) {
 601                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 602                 }
 603
 604                 if (attr->rangeLower) {
 605                         if ((int32_t)t < (int32_t)*attr->rangeLower) {
 606                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 607                         }
 608                 }
 609
 610                 if (attr->rangeUpper) {
 611                         if ((int32_t)t > (int32_t)*attr->rangeLower) {
 612                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 613                         }
 614                 }
 615
 616                 /*
 617                  * TODO: verify the comment in the
 618                  * dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb() function!
 619                  */
 620         }
 621
 622         return WERR_OK;
 623 }
 624
 625 static WERROR dsdb_syntax_NTTIME_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 626                                                 const struct dsdb_attribute *attr,
 627                                                 const struct drsuapi_DsReplicaAttribute *in,
 628                                                 TALLOC_CTX *mem_ctx,
 629                                                 struct ldb_message_element *out)
 630 {
 631         unsigned int i;
 632
 633         out->flags      = 0;
 634         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 635         W_ERROR_HAVE_NO_MEMORY(out->name);
 636
 637         out->num_values = in->value_ctr.num_values;
 638         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 639         W_ERROR_HAVE_NO_MEMORY(out->values);
 640
 641         for (i=0; i < out->num_values; i++) {
 642                 NTTIME v;
 643                 time_t t;
 644                 char *str;
 645
 646                 if (in->value_ctr.values[i].blob == NULL) {
 647                         return WERR_FOOBAR;
 648                 }
 649
 650                 if (in->value_ctr.values[i].blob->length != 8) {
 651                         return WERR_FOOBAR;
 652                 }
 653
 654                 v = BVAL(in->value_ctr.values[i].blob->data, 0);
 655                 v *= 10000000;
 656                 t = nt_time_to_unix(v);
 657
 658                 str = ldb_timestring(out->values, t);
 659                 W_ERROR_HAVE_NO_MEMORY(str);
 660
 661                 out->values[i] = data_blob_string_const(str);
 662         }
 663
 664         return WERR_OK;
 665 }
 666
 667 static WERROR dsdb_syntax_NTTIME_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 668                                                 const struct dsdb_attribute *attr,
 669                                                 const struct ldb_message_element *in,
 670                                                 TALLOC_CTX *mem_ctx,
 671                                                 struct drsuapi_DsReplicaAttribute *out)
 672 {
 673         unsigned int i;
 674         DATA_BLOB *blobs;
 675
 676         if (attr->attributeID_id == 0xFFFFFFFF) {
 677                 return WERR_FOOBAR;
 678         }
 679
 680         out->attid                      = dsdb_attribute_get_attid(attr,
 681                                                                    ctx->is_schema_nc);
 682         out->value_ctr.num_values       = in->num_values;
 683         out->value_ctr.values           = talloc_array(mem_ctx,
 684                                                        struct drsuapi_DsAttributeValue,
 685                                                        in->num_values);
 686         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
 687
 688         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
 689         W_ERROR_HAVE_NO_MEMORY(blobs);
 690
 691         for (i=0; i < in->num_values; i++) {
 692                 NTTIME v;
 693                 time_t t;
 694                 int ret;
 695
 696                 out->value_ctr.values[i].blob   = &blobs[i];
 697
 698                 blobs[i] = data_blob_talloc(blobs, NULL, 8);
 699                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
 700
 701                 ret = ldb_val_to_time(&in->values[i], &t);
 702                 if (ret != LDB_SUCCESS) {
 703                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 704                 }
 705                 unix_to_nt_time(&v, t);
 706                 v /= 10000000;
 707
 708                 SBVAL(blobs[i].data, 0, v);
 709         }
 710
 711         return WERR_OK;
 712 }
 713
 714 static WERROR dsdb_syntax_NTTIME_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 715                                               const struct dsdb_attribute *attr,
 716                                               const struct ldb_message_element *in)
 717 {
 718         unsigned int i;
 719
 720         if (attr->attributeID_id == 0xFFFFFFFF) {
 721                 return WERR_FOOBAR;
 722         }
 723
 724         for (i=0; i < in->num_values; i++) {
 725                 time_t t;
 726                 int ret;
 727
 728                 ret = ldb_val_to_time(&in->values[i], &t);
 729                 if (ret != LDB_SUCCESS) {
 730                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 731                 }
 732
 733                 if (attr->rangeLower) {
 734                         if ((int32_t)t < (int32_t)*attr->rangeLower) {
 735                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 736                         }
 737                 }
 738
 739                 if (attr->rangeUpper) {
 740                         if ((int32_t)t > (int32_t)*attr->rangeLower) {
 741                                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 742                         }
 743                 }
 744         }
 745
 746         return WERR_OK;
 747 }
 748
 749 static WERROR dsdb_syntax_DATA_BLOB_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 750                                                    const struct dsdb_attribute *attr,
 751                                                    const struct drsuapi_DsReplicaAttribute *in,
 752                                                    TALLOC_CTX *mem_ctx,
 753                                                    struct ldb_message_element *out)
 754 {
 755         unsigned int i;
 756
 757         out->flags      = 0;
 758         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 759         W_ERROR_HAVE_NO_MEMORY(out->name);
 760
 761         out->num_values = in->value_ctr.num_values;
 762         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 763         W_ERROR_HAVE_NO_MEMORY(out->values);
 764
 765         for (i=0; i < out->num_values; i++) {
 766                 if (in->value_ctr.values[i].blob == NULL) {
 767                         return WERR_FOOBAR;
 768                 }
 769
 770                 if (in->value_ctr.values[i].blob->length == 0) {
 771                         return WERR_FOOBAR;
 772                 }
 773
 774                 out->values[i] = data_blob_dup_talloc(out->values,
 775                                                       in->value_ctr.values[i].blob);
 776                 W_ERROR_HAVE_NO_MEMORY(out->values[i].data);
 777         }
 778
 779         return WERR_OK;
 780 }
 781
 782 static WERROR dsdb_syntax_DATA_BLOB_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
 783                                                    const struct dsdb_attribute *attr,
 784                                                    const struct ldb_message_element *in,
 785                                                    TALLOC_CTX *mem_ctx,
 786                                                    struct drsuapi_DsReplicaAttribute *out)
 787 {
 788         unsigned int i;
 789         DATA_BLOB *blobs;
 790
 791         if (attr->attributeID_id == 0xFFFFFFFF) {
 792                 return WERR_FOOBAR;
 793         }
 794
 795         out->attid                      = dsdb_attribute_get_attid(attr,
 796                                                                    ctx->is_schema_nc);
 797         out->value_ctr.num_values       = in->num_values;
 798         out->value_ctr.values           = talloc_array(mem_ctx,
 799                                                        struct drsuapi_DsAttributeValue,
 800                                                        in->num_values);
 801         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
 802
 803         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
 804         W_ERROR_HAVE_NO_MEMORY(blobs);
 805
 806         for (i=0; i < in->num_values; i++) {
 807                 out->value_ctr.values[i].blob   = &blobs[i];
 808
 809                 blobs[i] = data_blob_dup_talloc(blobs, &in->values[i]);
 810                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
 811         }
 812
 813         return WERR_OK;
 814 }
 815
 816 static WERROR dsdb_syntax_DATA_BLOB_validate_one_val(const struct dsdb_syntax_ctx *ctx,
 817                                                      const struct dsdb_attribute *attr,
 818                                                      const struct ldb_val *val)
 819 {
 820         if (attr->attributeID_id == 0xFFFFFFFF) {
 821                 return WERR_FOOBAR;
 822         }
 823
 824         if (attr->rangeLower) {
 825                 if ((uint32_t)val->length < (uint32_t)*attr->rangeLower) {
 826                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 827                 }
 828         }
 829
 830         if (attr->rangeUpper) {
 831                 if ((uint32_t)val->length > (uint32_t)*attr->rangeUpper) {
 832                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 833                 }
 834         }
 835
 836         return WERR_OK;
 837 }
 838
 839 static WERROR dsdb_syntax_DATA_BLOB_validate_ldb(const struct dsdb_syntax_ctx *ctx,
 840                                                  const struct dsdb_attribute *attr,
 841                                                  const struct ldb_message_element *in)
 842 {
 843         unsigned int i;
 844         WERROR status;
 845
 846         if (attr->attributeID_id == 0xFFFFFFFF) {
 847                 return WERR_FOOBAR;
 848         }
 849
 850         for (i=0; i < in->num_values; i++) {
 851                 if (in->values[i].length == 0) {
 852                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
 853                 }
 854
 855                 status = dsdb_syntax_DATA_BLOB_validate_one_val(ctx,
 856                                                                 attr,
 857                                                                 &in->values[i]);
 858                 if (!W_ERROR_IS_OK(status)) {
 859                         return status;
 860                 }
 861         }
 862
 863         return WERR_OK;
 864 }
 865
 866 static WERROR _dsdb_syntax_auto_OID_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 867                                                    const struct dsdb_attribute *attr,
 868                                                    const struct drsuapi_DsReplicaAttribute *in,
 869                                                    TALLOC_CTX *mem_ctx,
 870                                                    struct ldb_message_element *out)
 871 {
 872         unsigned int i;
 873
 874         out->flags      = 0;
 875         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 876         W_ERROR_HAVE_NO_MEMORY(out->name);
 877
 878         out->num_values = in->value_ctr.num_values;
 879         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 880         W_ERROR_HAVE_NO_MEMORY(out->values);
 881
 882         for (i=0; i < out->num_values; i++) {
 883                 uint32_t v;
 884                 const struct dsdb_class *c;
 885                 const struct dsdb_attribute *a;
 886                 const char *str = NULL;
 887
 888                 if (in->value_ctr.values[i].blob == NULL) {
 889                         return WERR_FOOBAR;
 890                 }
 891
 892                 if (in->value_ctr.values[i].blob->length != 4) {
 893                         return WERR_FOOBAR;
 894                 }
 895
 896                 v = IVAL(in->value_ctr.values[i].blob->data, 0);
 897
 898                 if ((c = dsdb_class_by_governsID_id(ctx->schema, v))) {
 899                         str = talloc_strdup(out->values, c->lDAPDisplayName);
 900                 } else if ((a = dsdb_attribute_by_attributeID_id(ctx->schema, v))) {
 901                         str = talloc_strdup(out->values, a->lDAPDisplayName);
 902                 } else {
 903                         WERROR werr;
 904                         werr = dsdb_schema_pfm_oid_from_attid(ctx->schema->prefixmap, v, out->values, &str);
 905                         W_ERROR_NOT_OK_RETURN(werr);
 906                 }
 907                 W_ERROR_HAVE_NO_MEMORY(str);
 908
 909                 /* the values need to be reversed */
 910                 out->values[out->num_values - (i + 1)] = data_blob_string_const(str);
 911         }
 912
 913         return WERR_OK;
 914 }
 915
 916 static WERROR _dsdb_syntax_OID_obj_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 917                                                   const struct dsdb_attribute *attr,
 918                                                   const struct drsuapi_DsReplicaAttribute *in,
 919                                                   TALLOC_CTX *mem_ctx,
 920                                                   struct ldb_message_element *out)
 921 {
 922         unsigned int i;
 923
 924         out->flags      = 0;
 925         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 926         W_ERROR_HAVE_NO_MEMORY(out->name);
 927
 928         out->num_values = in->value_ctr.num_values;
 929         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 930         W_ERROR_HAVE_NO_MEMORY(out->values);
 931
 932         for (i=0; i < out->num_values; i++) {
 933                 uint32_t v;
 934                 const struct dsdb_class *c;
 935                 const char *str;
 936
 937                 if (in->value_ctr.values[i].blob == NULL) {
 938                         return WERR_FOOBAR;
 939                 }
 940
 941                 if (in->value_ctr.values[i].blob->length != 4) {
 942                         return WERR_FOOBAR;
 943                 }
 944
 945                 v = IVAL(in->value_ctr.values[i].blob->data, 0);
 946
 947                 c = dsdb_class_by_governsID_id(ctx->schema, v);
 948                 if (!c) {
 949                         return WERR_FOOBAR;
 950                 }
 951
 952                 str = talloc_strdup(out->values, c->lDAPDisplayName);
 953                 W_ERROR_HAVE_NO_MEMORY(str);
 954
 955                 /* the values need to be reversed */
 956                 out->values[out->num_values - (i + 1)] = data_blob_string_const(str);
 957         }
 958
 959         return WERR_OK;
 960 }
 961
 962 static WERROR _dsdb_syntax_OID_attr_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
 963                                                    const struct dsdb_attribute *attr,
 964                                                    const struct drsuapi_DsReplicaAttribute *in,
 965                                                    TALLOC_CTX *mem_ctx,
 966                                                    struct ldb_message_element *out)
 967 {
 968         unsigned int i;
 969
 970         out->flags      = 0;
 971         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
 972         W_ERROR_HAVE_NO_MEMORY(out->name);
 973
 974         out->num_values = in->value_ctr.num_values;
 975         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
 976         W_ERROR_HAVE_NO_MEMORY(out->values);
 977
 978         for (i=0; i < out->num_values; i++) {
 979                 uint32_t v;
 980                 const struct dsdb_attribute *a;
 981                 const char *str;
 982
 983                 if (in->value_ctr.values[i].blob == NULL) {
 984                         return WERR_FOOBAR;
 985                 }
 986
 987                 if (in->value_ctr.values[i].blob->length != 4) {
 988                         return WERR_FOOBAR;
 989                 }
 990
 991                 v = IVAL(in->value_ctr.values[i].blob->data, 0);
 992
 993                 a = dsdb_attribute_by_attributeID_id(ctx->schema, v);
 994                 if (!a) {
 995                         return WERR_FOOBAR;
 996                 }
 997
 998                 str = talloc_strdup(out->values, a->lDAPDisplayName);
 999                 W_ERROR_HAVE_NO_MEMORY(str);
1000
1001                 /* the values need to be reversed */
1002                 out->values[out->num_values - (i + 1)] = data_blob_string_const(str);
1003         }
1004
1005         return WERR_OK;
1006 }
1007
1008 static WERROR _dsdb_syntax_OID_oid_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1009                                                   const struct dsdb_attribute *attr,
1010                                                   const struct drsuapi_DsReplicaAttribute *in,
1011                                                   TALLOC_CTX *mem_ctx,
1012                                                   struct ldb_message_element *out)
1013 {
1014         unsigned int i;
1015
1016         out->flags      = 0;
1017         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1018         W_ERROR_HAVE_NO_MEMORY(out->name);
1019
1020         out->num_values = in->value_ctr.num_values;
1021         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1022         W_ERROR_HAVE_NO_MEMORY(out->values);
1023
1024         for (i=0; i < out->num_values; i++) {
1025                 uint32_t attid;
1026                 WERROR status;
1027                 const char *oid;
1028
1029                 if (in->value_ctr.values[i].blob == NULL) {
1030                         return WERR_FOOBAR;
1031                 }
1032
1033                 if (in->value_ctr.values[i].blob->length != 4) {
1034                         return WERR_FOOBAR;
1035                 }
1036
1037                 attid = IVAL(in->value_ctr.values[i].blob->data, 0);
1038
1039                 status = dsdb_schema_pfm_oid_from_attid(ctx->schema->prefixmap, attid, out->values, &oid);
1040                 W_ERROR_NOT_OK_RETURN(status);
1041
1042                 out->values[i] = data_blob_string_const(oid);
1043         }
1044
1045         return WERR_OK;
1046 }
1047
1048 static WERROR _dsdb_syntax_auto_OID_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1049                                                    const struct dsdb_attribute *attr,
1050                                                    const struct ldb_message_element *in,
1051                                                    TALLOC_CTX *mem_ctx,
1052                                                    struct drsuapi_DsReplicaAttribute *out)
1053 {
1054         unsigned int i;
1055         DATA_BLOB *blobs;
1056
1057         out->attid= dsdb_attribute_get_attid(attr,
1058                                              ctx->is_schema_nc);
1059         out->value_ctr.num_values= in->num_values;
1060         out->value_ctr.values= talloc_array(mem_ctx,
1061                                             struct drsuapi_DsAttributeValue,
1062                                             in->num_values);
1063         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1064
1065         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1066         W_ERROR_HAVE_NO_MEMORY(blobs);
1067
1068         for (i=0; i < in->num_values; i++) {
1069                 const struct dsdb_class *obj_class;
1070                 const struct dsdb_attribute *obj_attr;
1071                 struct ldb_val *v;
1072
1073                 out->value_ctr.values[i].blob= &blobs[i];
1074
1075                 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1076                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1077
1078                 /* in DRS windows puts the classes in the opposite
1079                    order to the order used in ldap */
1080                 v = &in->values[(in->num_values-1)-i];
1081
1082                 if ((obj_class = dsdb_class_by_lDAPDisplayName_ldb_val(ctx->schema, v))) {
1083                         SIVAL(blobs[i].data, 0, obj_class->governsID_id);
1084                 } else if ((obj_attr = dsdb_attribute_by_lDAPDisplayName_ldb_val(ctx->schema, v))) {
1085                         SIVAL(blobs[i].data, 0, obj_attr->attributeID_id);
1086                 } else {
1087                         uint32_t attid;
1088                         WERROR werr;
1089                         werr = dsdb_schema_pfm_make_attid(ctx->schema->prefixmap,
1090                                                           (const char *)v->data,
1091                                                           &attid);
1092                         W_ERROR_NOT_OK_RETURN(werr);
1093                         SIVAL(blobs[i].data, 0, attid);
1094                 }
1095
1096         }
1097
1098
1099         return WERR_OK;
1100 }
1101
1102 static WERROR _dsdb_syntax_OID_obj_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1103                                                   const struct dsdb_attribute *attr,
1104                                                   const struct ldb_message_element *in,
1105                                                   TALLOC_CTX *mem_ctx,
1106                                                   struct drsuapi_DsReplicaAttribute *out)
1107 {
1108         unsigned int i;
1109         DATA_BLOB *blobs;
1110
1111         out->attid= dsdb_attribute_get_attid(attr,
1112                                              ctx->is_schema_nc);
1113         out->value_ctr.num_values= in->num_values;
1114         out->value_ctr.values= talloc_array(mem_ctx,
1115                                             struct drsuapi_DsAttributeValue,
1116                                             in->num_values);
1117         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1118
1119         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1120         W_ERROR_HAVE_NO_MEMORY(blobs);
1121
1122         for (i=0; i < in->num_values; i++) {
1123                 const struct dsdb_class *obj_class;
1124
1125                 out->value_ctr.values[i].blob= &blobs[i];
1126
1127                 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1128                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1129
1130                 /* in DRS windows puts the classes in the opposite
1131                    order to the order used in ldap */
1132                 obj_class = dsdb_class_by_lDAPDisplayName(ctx->schema,
1133                                                           (const char *)in->values[(in->num_values-1)-i].data);
1134                 if (!obj_class) {
1135                         return WERR_FOOBAR;
1136                 }
1137                 SIVAL(blobs[i].data, 0, obj_class->governsID_id);
1138         }
1139
1140
1141         return WERR_OK;
1142 }
1143
1144 static WERROR _dsdb_syntax_OID_attr_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1145                                                    const struct dsdb_attribute *attr,
1146                                                    const struct ldb_message_element *in,
1147                                                    TALLOC_CTX *mem_ctx,
1148                                                    struct drsuapi_DsReplicaAttribute *out)
1149 {
1150         unsigned int i;
1151         DATA_BLOB *blobs;
1152
1153         out->attid= dsdb_attribute_get_attid(attr,
1154                                              ctx->is_schema_nc);
1155         out->value_ctr.num_values= in->num_values;
1156         out->value_ctr.values= talloc_array(mem_ctx,
1157                                             struct drsuapi_DsAttributeValue,
1158                                             in->num_values);
1159         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1160
1161         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1162         W_ERROR_HAVE_NO_MEMORY(blobs);
1163
1164         for (i=0; i < in->num_values; i++) {
1165                 const struct dsdb_attribute *obj_attr;
1166
1167                 out->value_ctr.values[i].blob= &blobs[i];
1168
1169                 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1170                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1171
1172                 obj_attr = dsdb_attribute_by_lDAPDisplayName(ctx->schema, (const char *)in->values[i].data);
1173                 if (!obj_attr) {
1174                         return WERR_FOOBAR;
1175                 }
1176                 SIVAL(blobs[i].data, 0, obj_attr->attributeID_id);
1177         }
1178
1179
1180         return WERR_OK;
1181 }
1182
1183 static WERROR _dsdb_syntax_OID_oid_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1184                                                   const struct dsdb_attribute *attr,
1185                                                   const struct ldb_message_element *in,
1186                                                   TALLOC_CTX *mem_ctx,
1187                                                   struct drsuapi_DsReplicaAttribute *out)
1188 {
1189         unsigned int i;
1190         DATA_BLOB *blobs;
1191
1192         out->attid= dsdb_attribute_get_attid(attr,
1193                                              ctx->is_schema_nc);
1194         out->value_ctr.num_values= in->num_values;
1195         out->value_ctr.values= talloc_array(mem_ctx,
1196                                             struct drsuapi_DsAttributeValue,
1197                                             in->num_values);
1198         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1199
1200         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1201         W_ERROR_HAVE_NO_MEMORY(blobs);
1202
1203         for (i=0; i < in->num_values; i++) {
1204                 uint32_t attid;
1205                 WERROR status;
1206
1207                 out->value_ctr.values[i].blob= &blobs[i];
1208
1209                 blobs[i] = data_blob_talloc(blobs, NULL, 4);
1210                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
1211
1212                 status = dsdb_schema_pfm_make_attid(ctx->schema->prefixmap,
1213                                                     (const char *)in->values[i].data,
1214                                                     &attid);
1215                 W_ERROR_NOT_OK_RETURN(status);
1216
1217                 SIVAL(blobs[i].data, 0, attid);
1218         }
1219
1220         return WERR_OK;
1221 }
1222
1223 static WERROR dsdb_syntax_OID_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1224                                              const struct dsdb_attribute *attr,
1225                                              const struct drsuapi_DsReplicaAttribute *in,
1226                                              TALLOC_CTX *mem_ctx,
1227                                              struct ldb_message_element *out)
1228 {
1229         WERROR werr;
1230
1231         switch (attr->attributeID_id) {
1232         case DRSUAPI_ATTRIBUTE_objectClass:
1233         case DRSUAPI_ATTRIBUTE_subClassOf:
1234         case DRSUAPI_ATTRIBUTE_auxiliaryClass:
1235         case DRSUAPI_ATTRIBUTE_systemAuxiliaryClass:
1236         case DRSUAPI_ATTRIBUTE_systemPossSuperiors:
1237         case DRSUAPI_ATTRIBUTE_possSuperiors:
1238                 werr = _dsdb_syntax_OID_obj_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1239                 break;
1240         case DRSUAPI_ATTRIBUTE_systemMustContain:
1241         case DRSUAPI_ATTRIBUTE_systemMayContain:
1242         case DRSUAPI_ATTRIBUTE_mustContain:
1243         case DRSUAPI_ATTRIBUTE_rDNAttId:
1244         case DRSUAPI_ATTRIBUTE_transportAddressAttribute:
1245         case DRSUAPI_ATTRIBUTE_mayContain:
1246                 werr = _dsdb_syntax_OID_attr_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1247                 break;
1248         case DRSUAPI_ATTRIBUTE_governsID:
1249         case DRSUAPI_ATTRIBUTE_attributeID:
1250         case DRSUAPI_ATTRIBUTE_attributeSyntax:
1251                 werr = _dsdb_syntax_OID_oid_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1252                 break;
1253         default:
1254                 DEBUG(0,(__location__ ": Unknown handling for attributeID_id for %s\n",
1255                          attr->lDAPDisplayName));
1256                 return _dsdb_syntax_auto_OID_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1257         }
1258
1259         /* When we are doing the vampire of a schema, we don't want
1260          * the inability to reference an OID to get in the way.
1261          * Otherwise, we won't get the new schema with which to
1262          * understand this */
1263         if (!W_ERROR_IS_OK(werr) && ctx->schema->relax_OID_conversions) {
1264                 return _dsdb_syntax_OID_oid_drsuapi_to_ldb(ctx, attr, in, mem_ctx, out);
1265         }
1266         return werr;
1267 }
1268
1269 static WERROR dsdb_syntax_OID_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1270                                              const struct dsdb_attribute *attr,
1271                                              const struct ldb_message_element *in,
1272                                              TALLOC_CTX *mem_ctx,
1273                                              struct drsuapi_DsReplicaAttribute *out)
1274 {
1275         if (attr->attributeID_id == 0xFFFFFFFF) {
1276                 return WERR_FOOBAR;
1277         }
1278
1279         switch (attr->attributeID_id) {
1280         case DRSUAPI_ATTRIBUTE_objectClass:
1281         case DRSUAPI_ATTRIBUTE_subClassOf:
1282         case DRSUAPI_ATTRIBUTE_auxiliaryClass:
1283         case DRSUAPI_ATTRIBUTE_systemAuxiliaryClass:
1284         case DRSUAPI_ATTRIBUTE_systemPossSuperiors:
1285         case DRSUAPI_ATTRIBUTE_possSuperiors:
1286                 return _dsdb_syntax_OID_obj_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1287         case DRSUAPI_ATTRIBUTE_systemMustContain:
1288         case DRSUAPI_ATTRIBUTE_systemMayContain:
1289         case DRSUAPI_ATTRIBUTE_mustContain:
1290         case DRSUAPI_ATTRIBUTE_rDNAttId:
1291         case DRSUAPI_ATTRIBUTE_transportAddressAttribute:
1292         case DRSUAPI_ATTRIBUTE_mayContain:
1293                 return _dsdb_syntax_OID_attr_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1294         case DRSUAPI_ATTRIBUTE_governsID:
1295         case DRSUAPI_ATTRIBUTE_attributeID:
1296         case DRSUAPI_ATTRIBUTE_attributeSyntax:
1297                 return _dsdb_syntax_OID_oid_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1298         }
1299
1300         DEBUG(0,(__location__ ": Unknown handling for attributeID_id for %s\n",
1301                  attr->lDAPDisplayName));
1302
1303         return _dsdb_syntax_auto_OID_ldb_to_drsuapi(ctx, attr, in, mem_ctx, out);
1304 }
1305
1306 static WERROR dsdb_syntax_OID_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1307                                            const struct dsdb_attribute *attr,
1308                                            const struct ldb_message_element *in)
1309 {
1310         WERROR status;
1311         struct drsuapi_DsReplicaAttribute drs_tmp;
1312         struct ldb_message_element ldb_tmp;
1313         TALLOC_CTX *tmp_ctx;
1314
1315         if (attr->attributeID_id == 0xFFFFFFFF) {
1316                 return WERR_FOOBAR;
1317         }
1318
1319         /*
1320          * TODO: optimize and verify this code
1321          */
1322
1323         tmp_ctx = talloc_new(ctx->ldb);
1324         if (tmp_ctx == NULL) {
1325                 return WERR_NOMEM;
1326         }
1327
1328         status = dsdb_syntax_OID_ldb_to_drsuapi(ctx,
1329                                                 attr,
1330                                                 in,
1331                                                 tmp_ctx,
1332                                                 &drs_tmp);
1333         if (!W_ERROR_IS_OK(status)) {
1334                 talloc_free(tmp_ctx);
1335                 return status;
1336         }
1337
1338         status = dsdb_syntax_OID_drsuapi_to_ldb(ctx,
1339                                                 attr,
1340                                                 &drs_tmp,
1341                                                 tmp_ctx,
1342                                                 &ldb_tmp);
1343         if (!W_ERROR_IS_OK(status)) {
1344                 talloc_free(tmp_ctx);
1345                 return status;
1346         }
1347
1348         talloc_free(tmp_ctx);
1349         return WERR_OK;
1350 }
1351
1352 static WERROR dsdb_syntax_UNICODE_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1353                                                  const struct dsdb_attribute *attr,
1354                                                  const struct drsuapi_DsReplicaAttribute *in,
1355                                                  TALLOC_CTX *mem_ctx,
1356                                                  struct ldb_message_element *out)
1357 {
1358         unsigned int i;
1359
1360         out->flags      = 0;
1361         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1362         W_ERROR_HAVE_NO_MEMORY(out->name);
1363
1364         out->num_values = in->value_ctr.num_values;
1365         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1366         W_ERROR_HAVE_NO_MEMORY(out->values);
1367
1368         for (i=0; i < out->num_values; i++) {
1369                 char *str;
1370
1371                 if (in->value_ctr.values[i].blob == NULL) {
1372                         return WERR_FOOBAR;
1373                 }
1374
1375                 if (in->value_ctr.values[i].blob->length == 0) {
1376                         return WERR_FOOBAR;
1377                 }
1378
1379                 if (!convert_string_talloc(out->values,
1380                                            CH_UTF16, CH_UNIX,
1381                                            in->value_ctr.values[i].blob->data,
1382                                            in->value_ctr.values[i].blob->length,
1383                                            (void **)&str, NULL, false)) {
1384                         return WERR_FOOBAR;
1385                 }
1386
1387                 out->values[i] = data_blob_string_const(str);
1388         }
1389
1390         return WERR_OK;
1391 }
1392
1393 static WERROR dsdb_syntax_UNICODE_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1394                                                  const struct dsdb_attribute *attr,
1395                                                  const struct ldb_message_element *in,
1396                                                  TALLOC_CTX *mem_ctx,
1397                                                  struct drsuapi_DsReplicaAttribute *out)
1398 {
1399         unsigned int i;
1400         DATA_BLOB *blobs;
1401
1402         if (attr->attributeID_id == 0xFFFFFFFF) {
1403                 return WERR_FOOBAR;
1404         }
1405
1406         out->attid                      = dsdb_attribute_get_attid(attr,
1407                                                                    ctx->is_schema_nc);
1408         out->value_ctr.num_values       = in->num_values;
1409         out->value_ctr.values           = talloc_array(mem_ctx,
1410                                                        struct drsuapi_DsAttributeValue,
1411                                                        in->num_values);
1412         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1413
1414         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1415         W_ERROR_HAVE_NO_MEMORY(blobs);
1416
1417         for (i=0; i < in->num_values; i++) {
1418                 out->value_ctr.values[i].blob   = &blobs[i];
1419
1420                 if (!convert_string_talloc(blobs,
1421                                            CH_UNIX, CH_UTF16,
1422                                            in->values[i].data, in->values[i].length,
1423                                            (void **)&blobs[i].data, &blobs[i].length, false)) {
1424                         return WERR_FOOBAR;
1425                 }
1426         }
1427
1428         return WERR_OK;
1429 }
1430
1431 static WERROR dsdb_syntax_UNICODE_validate_one_val(const struct dsdb_syntax_ctx *ctx,
1432                                                    const struct dsdb_attribute *attr,
1433                                                    const struct ldb_val *val)
1434 {
1435         void *dst = NULL;
1436         size_t size;
1437         bool ok;
1438
1439         if (attr->attributeID_id == 0xFFFFFFFF) {
1440                 return WERR_FOOBAR;
1441         }
1442
1443         ok = convert_string_talloc(ctx->ldb,
1444                                    CH_UNIX, CH_UTF16,
1445                                    val->data,
1446                                    val->length,
1447                                    (void **)&dst,
1448                                    &size, false);
1449         TALLOC_FREE(dst);
1450         if (!ok) {
1451                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1452         }
1453
1454         if (attr->rangeLower) {
1455                 if ((size/2) < *attr->rangeLower) {
1456                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1457                 }
1458         }
1459
1460         if (attr->rangeUpper) {
1461                 if ((size/2) > *attr->rangeUpper) {
1462                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1463                 }
1464         }
1465
1466         return WERR_OK;
1467 }
1468
1469 static WERROR dsdb_syntax_UNICODE_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1470                                                const struct dsdb_attribute *attr,
1471                                                const struct ldb_message_element *in)
1472 {
1473         WERROR status;
1474         unsigned int i;
1475
1476         if (attr->attributeID_id == 0xFFFFFFFF) {
1477                 return WERR_FOOBAR;
1478         }
1479
1480         for (i=0; i < in->num_values; i++) {
1481                 if (in->values[i].length == 0) {
1482                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1483                 }
1484
1485                 status = dsdb_syntax_UNICODE_validate_one_val(ctx,
1486                                                               attr,
1487                                                               &in->values[i]);
1488                 if (!W_ERROR_IS_OK(status)) {
1489                         return status;
1490                 }
1491         }
1492
1493         return WERR_OK;
1494 }
1495
1496 static WERROR dsdb_syntax_one_DN_drsuapi_to_ldb(TALLOC_CTX *mem_ctx, struct ldb_context *ldb,
1497                                                 const struct dsdb_syntax *syntax,
1498                                                 const DATA_BLOB *in, DATA_BLOB *out)
1499 {
1500         struct drsuapi_DsReplicaObjectIdentifier3 id3;
1501         enum ndr_err_code ndr_err;
1502         DATA_BLOB guid_blob;
1503         struct ldb_dn *dn;
1504         TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1505         int ret;
1506         NTSTATUS status;
1507
1508         if (!tmp_ctx) {
1509                 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1510         }
1511
1512         if (in == NULL) {
1513                 talloc_free(tmp_ctx);
1514                 return WERR_FOOBAR;
1515         }
1516
1517         if (in->length == 0) {
1518                 talloc_free(tmp_ctx);
1519                 return WERR_FOOBAR;
1520         }
1521
1522
1523         /* windows sometimes sends an extra two pad bytes here */
1524         ndr_err = ndr_pull_struct_blob(in,
1525                                        tmp_ctx, &id3,
1526                                        (ndr_pull_flags_fn_t)ndr_pull_drsuapi_DsReplicaObjectIdentifier3);
1527         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1528                 status = ndr_map_error2ntstatus(ndr_err);
1529                 talloc_free(tmp_ctx);
1530                 return ntstatus_to_werror(status);
1531         }
1532
1533         dn = ldb_dn_new(tmp_ctx, ldb, id3.dn);
1534         if (!dn) {
1535                 talloc_free(tmp_ctx);
1536                 /* If this fails, it must be out of memory, as it does not do much parsing */
1537                 W_ERROR_HAVE_NO_MEMORY(dn);
1538         }
1539
1540         if (!GUID_all_zero(&id3.guid)) {
1541                 status = GUID_to_ndr_blob(&id3.guid, tmp_ctx, &guid_blob);
1542                 if (!NT_STATUS_IS_OK(status)) {
1543                         talloc_free(tmp_ctx);
1544                         return ntstatus_to_werror(status);
1545                 }
1546
1547                 ret = ldb_dn_set_extended_component(dn, "GUID", &guid_blob);
1548                 if (ret != LDB_SUCCESS) {
1549                         talloc_free(tmp_ctx);
1550                         return WERR_FOOBAR;
1551                 }
1552                 talloc_free(guid_blob.data);
1553         }
1554
1555         if (id3.__ndr_size_sid) {
1556                 DATA_BLOB sid_blob;
1557                 ndr_err = ndr_push_struct_blob(&sid_blob, tmp_ctx, &id3.sid,
1558                                                (ndr_push_flags_fn_t)ndr_push_dom_sid);
1559                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1560                         status = ndr_map_error2ntstatus(ndr_err);
1561                         talloc_free(tmp_ctx);
1562                         return ntstatus_to_werror(status);
1563                 }
1564
1565                 ret = ldb_dn_set_extended_component(dn, "SID", &sid_blob);
1566                 if (ret != LDB_SUCCESS) {
1567                         talloc_free(tmp_ctx);
1568                         return WERR_FOOBAR;
1569                 }
1570         }
1571
1572         *out = data_blob_string_const(ldb_dn_get_extended_linearized(mem_ctx, dn, 1));
1573         talloc_free(tmp_ctx);
1574         return WERR_OK;
1575 }
1576
1577 static WERROR dsdb_syntax_DN_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1578                                             const struct dsdb_attribute *attr,
1579                                             const struct drsuapi_DsReplicaAttribute *in,
1580                                             TALLOC_CTX *mem_ctx,
1581                                             struct ldb_message_element *out)
1582 {
1583         unsigned int i;
1584
1585         out->flags      = 0;
1586         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1587         W_ERROR_HAVE_NO_MEMORY(out->name);
1588
1589         out->num_values = in->value_ctr.num_values;
1590         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1591         W_ERROR_HAVE_NO_MEMORY(out->values);
1592
1593         for (i=0; i < out->num_values; i++) {
1594                 WERROR status = dsdb_syntax_one_DN_drsuapi_to_ldb(out->values, ctx->ldb, attr->syntax,
1595                                                                   in->value_ctr.values[i].blob,
1596                                                                   &out->values[i]);
1597                 if (!W_ERROR_IS_OK(status)) {
1598                         return status;
1599                 }
1600
1601         }
1602
1603         return WERR_OK;
1604 }
1605
1606 static WERROR dsdb_syntax_DN_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1607                                             const struct dsdb_attribute *attr,
1608                                             const struct ldb_message_element *in,
1609                                             TALLOC_CTX *mem_ctx,
1610                                             struct drsuapi_DsReplicaAttribute *out)
1611 {
1612         unsigned int i;
1613         DATA_BLOB *blobs;
1614
1615         if (attr->attributeID_id == 0xFFFFFFFF) {
1616                 return WERR_FOOBAR;
1617         }
1618
1619         out->attid                      = dsdb_attribute_get_attid(attr,
1620                                                                    ctx->is_schema_nc);
1621         out->value_ctr.num_values       = in->num_values;
1622         out->value_ctr.values           = talloc_array(mem_ctx,
1623                                                        struct drsuapi_DsAttributeValue,
1624                                                        in->num_values);
1625         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1626
1627         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1628         W_ERROR_HAVE_NO_MEMORY(blobs);
1629
1630         for (i=0; i < in->num_values; i++) {
1631                 struct drsuapi_DsReplicaObjectIdentifier3 id3;
1632                 enum ndr_err_code ndr_err;
1633                 struct ldb_dn *dn;
1634                 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1635                 NTSTATUS status;
1636
1637                 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1638
1639                 out->value_ctr.values[i].blob   = &blobs[i];
1640
1641                 dn = ldb_dn_from_ldb_val(tmp_ctx, ctx->ldb, &in->values[i]);
1642
1643                 W_ERROR_HAVE_NO_MEMORY(dn);
1644
1645                 ZERO_STRUCT(id3);
1646
1647                 status = dsdb_get_extended_dn_guid(dn, &id3.guid, "GUID");
1648                 if (!NT_STATUS_IS_OK(status) &&
1649                     !NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1650                         talloc_free(tmp_ctx);
1651                         return ntstatus_to_werror(status);
1652                 }
1653
1654                 status = dsdb_get_extended_dn_sid(dn, &id3.sid, "SID");
1655                 if (!NT_STATUS_IS_OK(status) &&
1656                     !NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1657                         talloc_free(tmp_ctx);
1658                         return ntstatus_to_werror(status);
1659                 }
1660
1661                 id3.dn = ldb_dn_get_linearized(dn);
1662
1663                 ndr_err = ndr_push_struct_blob(&blobs[i], blobs, &id3, (ndr_push_flags_fn_t)ndr_push_drsuapi_DsReplicaObjectIdentifier3);
1664                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1665                         status = ndr_map_error2ntstatus(ndr_err);
1666                         talloc_free(tmp_ctx);
1667                         return ntstatus_to_werror(status);
1668                 }
1669                 talloc_free(tmp_ctx);
1670         }
1671
1672         return WERR_OK;
1673 }
1674
1675 static WERROR dsdb_syntax_DN_validate_one_val(const struct dsdb_syntax_ctx *ctx,
1676                                               const struct dsdb_attribute *attr,
1677                                               const struct ldb_val *val,
1678                                               TALLOC_CTX *mem_ctx,
1679                                               struct dsdb_dn **_dsdb_dn)
1680 {
1681         static const char * const extended_list[] = { "GUID", "SID", NULL };
1682         enum ndr_err_code ndr_err;
1683         struct GUID guid;
1684         struct dom_sid sid;
1685         const DATA_BLOB *sid_blob;
1686         struct dsdb_dn *dsdb_dn;
1687         struct ldb_dn *dn;
1688         char *dn_str;
1689         struct ldb_dn *dn2;
1690         char *dn2_str;
1691         int num_components;
1692         TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1693         NTSTATUS status;
1694
1695         W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1696
1697         if (attr->attributeID_id == 0xFFFFFFFF) {
1698                 return WERR_FOOBAR;
1699         }
1700
1701         dsdb_dn = dsdb_dn_parse(tmp_ctx, ctx->ldb, val,
1702                                 attr->syntax->ldap_oid);
1703         if (!dsdb_dn) {
1704                 talloc_free(tmp_ctx);
1705                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1706         }
1707         dn = dsdb_dn->dn;
1708
1709         dn2 = ldb_dn_copy(tmp_ctx, dn);
1710         if (dn == NULL) {
1711                 talloc_free(tmp_ctx);
1712                 return WERR_NOMEM;
1713         }
1714
1715         num_components = ldb_dn_get_comp_num(dn);
1716
1717         status = dsdb_get_extended_dn_guid(dn, &guid, "GUID");
1718         if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1719                 num_components++;
1720         } else if (!NT_STATUS_IS_OK(status)) {
1721                 talloc_free(tmp_ctx);
1722                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1723         }
1724
1725         sid_blob = ldb_dn_get_extended_component(dn, "SID");
1726         if (sid_blob) {
1727                 num_components++;
1728                 ndr_err = ndr_pull_struct_blob_all(sid_blob,
1729                                                    tmp_ctx,
1730                                                    &sid,
1731                                                    (ndr_pull_flags_fn_t)ndr_pull_dom_sid);
1732                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1733                         talloc_free(tmp_ctx);
1734                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1735                 }
1736         }
1737
1738         /* Do not allow links to the RootDSE */
1739         if (num_components == 0) {
1740                 talloc_free(tmp_ctx);
1741                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1742         }
1743
1744         /*
1745          * We need to check that only "GUID" and "SID" are
1746          * specified as extended components, we do that
1747          * by comparing the dn's after removing all components
1748          * from one dn and only the allowed subset from the other
1749          * one.
1750          */
1751         ldb_dn_extended_filter(dn, extended_list);
1752
1753         dn_str = ldb_dn_get_extended_linearized(tmp_ctx, dn, 0);
1754         if (dn_str == NULL) {
1755                 talloc_free(tmp_ctx);
1756                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1757         }
1758         dn2_str = ldb_dn_get_extended_linearized(tmp_ctx, dn2, 0);
1759         if (dn2_str == NULL) {
1760                 talloc_free(tmp_ctx);
1761                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1762         }
1763
1764         if (strcmp(dn_str, dn2_str) != 0) {
1765                 talloc_free(tmp_ctx);
1766                 return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1767         }
1768
1769         *_dsdb_dn = talloc_move(mem_ctx, &dsdb_dn);
1770         talloc_free(tmp_ctx);
1771         return WERR_OK;
1772 }
1773
1774 static WERROR dsdb_syntax_DN_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1775                                           const struct dsdb_attribute *attr,
1776                                           const struct ldb_message_element *in)
1777 {
1778         unsigned int i;
1779
1780         if (attr->attributeID_id == 0xFFFFFFFF) {
1781                 return WERR_FOOBAR;
1782         }
1783
1784         for (i=0; i < in->num_values; i++) {
1785                 WERROR status;
1786                 struct dsdb_dn *dsdb_dn;
1787                 TALLOC_CTX *tmp_ctx = talloc_new(ctx->ldb);
1788                 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1789
1790                 status = dsdb_syntax_DN_validate_one_val(ctx,
1791                                                          attr,
1792                                                          &in->values[i],
1793                                                          tmp_ctx, &dsdb_dn);
1794                 if (!W_ERROR_IS_OK(status)) {
1795                         talloc_free(tmp_ctx);
1796                         return status;
1797                 }
1798
1799                 if (dsdb_dn->dn_format != DSDB_NORMAL_DN) {
1800                         talloc_free(tmp_ctx);
1801                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
1802                 }
1803
1804                 talloc_free(tmp_ctx);
1805         }
1806
1807         return WERR_OK;
1808 }
1809
1810 static WERROR dsdb_syntax_DN_BINARY_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
1811                                                    const struct dsdb_attribute *attr,
1812                                                    const struct drsuapi_DsReplicaAttribute *in,
1813                                                    TALLOC_CTX *mem_ctx,
1814                                                    struct ldb_message_element *out)
1815 {
1816         unsigned int i;
1817         int ret;
1818
1819         out->flags      = 0;
1820         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
1821         W_ERROR_HAVE_NO_MEMORY(out->name);
1822
1823         out->num_values = in->value_ctr.num_values;
1824         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
1825         W_ERROR_HAVE_NO_MEMORY(out->values);
1826
1827         for (i=0; i < out->num_values; i++) {
1828                 struct drsuapi_DsReplicaObjectIdentifier3Binary id3;
1829                 enum ndr_err_code ndr_err;
1830                 DATA_BLOB guid_blob;
1831                 struct ldb_dn *dn;
1832                 struct dsdb_dn *dsdb_dn;
1833                 NTSTATUS status;
1834                 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1835                 if (!tmp_ctx) {
1836                         W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1837                 }
1838
1839                 if (in->value_ctr.values[i].blob == NULL) {
1840                         talloc_free(tmp_ctx);
1841                         return WERR_FOOBAR;
1842                 }
1843
1844                 if (in->value_ctr.values[i].blob->length == 0) {
1845                         talloc_free(tmp_ctx);
1846                         return WERR_FOOBAR;
1847                 }
1848
1849
1850                 /* windows sometimes sends an extra two pad bytes here */
1851                 ndr_err = ndr_pull_struct_blob(in->value_ctr.values[i].blob,
1852                                                tmp_ctx, &id3,
1853                                                (ndr_pull_flags_fn_t)ndr_pull_drsuapi_DsReplicaObjectIdentifier3Binary);
1854                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1855                         status = ndr_map_error2ntstatus(ndr_err);
1856                         talloc_free(tmp_ctx);
1857                         return ntstatus_to_werror(status);
1858                 }
1859
1860                 dn = ldb_dn_new(tmp_ctx, ctx->ldb, id3.dn);
1861                 if (!dn) {
1862                         talloc_free(tmp_ctx);
1863                         /* If this fails, it must be out of memory, as it does not do much parsing */
1864                         W_ERROR_HAVE_NO_MEMORY(dn);
1865                 }
1866
1867                 status = GUID_to_ndr_blob(&id3.guid, tmp_ctx, &guid_blob);
1868                 if (!NT_STATUS_IS_OK(status)) {
1869                         talloc_free(tmp_ctx);
1870                         return ntstatus_to_werror(status);
1871                 }
1872
1873                 ret = ldb_dn_set_extended_component(dn, "GUID", &guid_blob);
1874                 if (ret != LDB_SUCCESS) {
1875                         talloc_free(tmp_ctx);
1876                         return WERR_FOOBAR;
1877                 }
1878
1879                 talloc_free(guid_blob.data);
1880
1881                 if (id3.__ndr_size_sid) {
1882                         DATA_BLOB sid_blob;
1883                         ndr_err = ndr_push_struct_blob(&sid_blob, tmp_ctx, &id3.sid,
1884                                                        (ndr_push_flags_fn_t)ndr_push_dom_sid);
1885                         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1886                                 status = ndr_map_error2ntstatus(ndr_err);
1887                                 talloc_free(tmp_ctx);
1888                                 return ntstatus_to_werror(status);
1889                         }
1890
1891                         ret = ldb_dn_set_extended_component(dn, "SID", &sid_blob);
1892                         if (ret != LDB_SUCCESS) {
1893                                 talloc_free(tmp_ctx);
1894                                 return WERR_FOOBAR;
1895                         }
1896                 }
1897
1898                 /* set binary stuff */
1899                 dsdb_dn = dsdb_dn_construct(tmp_ctx, dn, id3.binary, attr->syntax->ldap_oid);
1900                 if (!dsdb_dn) {
1901                         /* If this fails, it must be out of memory, we know the ldap_oid is valid */
1902                         talloc_free(tmp_ctx);
1903                         W_ERROR_HAVE_NO_MEMORY(dsdb_dn);
1904                 }
1905                 out->values[i] = data_blob_string_const(dsdb_dn_get_extended_linearized(out->values, dsdb_dn, 1));
1906                 talloc_free(tmp_ctx);
1907         }
1908
1909         return WERR_OK;
1910 }
1911
1912 static WERROR dsdb_syntax_DN_BINARY_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
1913                                                    const struct dsdb_attribute *attr,
1914                                                    const struct ldb_message_element *in,
1915                                                    TALLOC_CTX *mem_ctx,
1916                                                    struct drsuapi_DsReplicaAttribute *out)
1917 {
1918         unsigned int i;
1919         DATA_BLOB *blobs;
1920
1921         if (attr->attributeID_id == 0xFFFFFFFF) {
1922                 return WERR_FOOBAR;
1923         }
1924
1925         out->attid                      = dsdb_attribute_get_attid(attr,
1926                                                                    ctx->is_schema_nc);
1927         out->value_ctr.num_values       = in->num_values;
1928         out->value_ctr.values           = talloc_array(mem_ctx,
1929                                                        struct drsuapi_DsAttributeValue,
1930                                                        in->num_values);
1931         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
1932
1933         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
1934         W_ERROR_HAVE_NO_MEMORY(blobs);
1935
1936         for (i=0; i < in->num_values; i++) {
1937                 struct drsuapi_DsReplicaObjectIdentifier3Binary id3;
1938                 enum ndr_err_code ndr_err;
1939                 const DATA_BLOB *sid_blob;
1940                 struct dsdb_dn *dsdb_dn;
1941                 TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
1942                 NTSTATUS status;
1943
1944                 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
1945
1946                 out->value_ctr.values[i].blob   = &blobs[i];
1947
1948                 dsdb_dn = dsdb_dn_parse(tmp_ctx, ctx->ldb, &in->values[i], attr->syntax->ldap_oid);
1949
1950                 if (!dsdb_dn) {
1951                         talloc_free(tmp_ctx);
1952                         return ntstatus_to_werror(NT_STATUS_INVALID_PARAMETER);
1953                 }
1954
1955                 ZERO_STRUCT(id3);
1956
1957                 status = dsdb_get_extended_dn_guid(dsdb_dn->dn, &id3.guid, "GUID");
1958                 if (!NT_STATUS_IS_OK(status) &&
1959                     !NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
1960                         talloc_free(tmp_ctx);
1961                         return ntstatus_to_werror(status);
1962                 }
1963
1964                 sid_blob = ldb_dn_get_extended_component(dsdb_dn->dn, "SID");
1965                 if (sid_blob) {
1966
1967                         ndr_err = ndr_pull_struct_blob_all(sid_blob,
1968                                                            tmp_ctx, &id3.sid,
1969                                                            (ndr_pull_flags_fn_t)ndr_pull_dom_sid);
1970                         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1971                                 status = ndr_map_error2ntstatus(ndr_err);
1972                                 talloc_free(tmp_ctx);
1973                                 return ntstatus_to_werror(status);
1974                         }
1975                 }
1976
1977                 id3.dn = ldb_dn_get_linearized(dsdb_dn->dn);
1978
1979                 /* get binary stuff */
1980                 id3.binary = dsdb_dn->extra_part;
1981
1982                 ndr_err = ndr_push_struct_blob(&blobs[i], blobs, &id3, (ndr_push_flags_fn_t)ndr_push_drsuapi_DsReplicaObjectIdentifier3Binary);
1983                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1984                         status = ndr_map_error2ntstatus(ndr_err);
1985                         talloc_free(tmp_ctx);
1986                         return ntstatus_to_werror(status);
1987                 }
1988                 talloc_free(tmp_ctx);
1989         }
1990
1991         return WERR_OK;
1992 }
1993
1994 static WERROR dsdb_syntax_DN_BINARY_validate_ldb(const struct dsdb_syntax_ctx *ctx,
1995                                                  const struct dsdb_attribute *attr,
1996                                                  const struct ldb_message_element *in)
1997 {
1998         unsigned int i;
1999
2000         if (attr->attributeID_id == 0xFFFFFFFF) {
2001                 return WERR_FOOBAR;
2002         }
2003
2004         for (i=0; i < in->num_values; i++) {
2005                 WERROR status;
2006                 struct dsdb_dn *dsdb_dn;
2007                 TALLOC_CTX *tmp_ctx = talloc_new(ctx->ldb);
2008                 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
2009
2010                 status = dsdb_syntax_DN_validate_one_val(ctx,
2011                                                          attr,
2012                                                          &in->values[i],
2013                                                          tmp_ctx, &dsdb_dn);
2014                 if (!W_ERROR_IS_OK(status)) {
2015                         talloc_free(tmp_ctx);
2016                         return status;
2017                 }
2018
2019                 if (dsdb_dn->dn_format != DSDB_BINARY_DN) {
2020                         talloc_free(tmp_ctx);
2021                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
2022                 }
2023
2024                 status = dsdb_syntax_DATA_BLOB_validate_one_val(ctx,
2025                                                                 attr,
2026                                                                 &dsdb_dn->extra_part);
2027                 if (!W_ERROR_IS_OK(status)) {
2028                         talloc_free(tmp_ctx);
2029                         return status;
2030                 }
2031
2032                 talloc_free(tmp_ctx);
2033         }
2034
2035         return WERR_OK;
2036 }
2037
2038 static WERROR dsdb_syntax_DN_STRING_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
2039                                                    const struct dsdb_attribute *attr,
2040                                                    const struct drsuapi_DsReplicaAttribute *in,
2041                                                    TALLOC_CTX *mem_ctx,
2042                                                    struct ldb_message_element *out)
2043 {
2044         return dsdb_syntax_DN_BINARY_drsuapi_to_ldb(ctx,
2045                                                     attr,
2046                                                     in,
2047                                                     mem_ctx,
2048                                                     out);
2049 }
2050
2051 static WERROR dsdb_syntax_DN_STRING_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
2052                                                    const struct dsdb_attribute *attr,
2053                                                    const struct ldb_message_element *in,
2054                                                    TALLOC_CTX *mem_ctx,
2055                                                    struct drsuapi_DsReplicaAttribute *out)
2056 {
2057         return dsdb_syntax_DN_BINARY_ldb_to_drsuapi(ctx,
2058                                                     attr,
2059                                                     in,
2060                                                     mem_ctx,
2061                                                     out);
2062 }
2063
2064 static WERROR dsdb_syntax_DN_STRING_validate_ldb(const struct dsdb_syntax_ctx *ctx,
2065                                                  const struct dsdb_attribute *attr,
2066                                                  const struct ldb_message_element *in)
2067 {
2068         unsigned int i;
2069
2070         if (attr->attributeID_id == 0xFFFFFFFF) {
2071                 return WERR_FOOBAR;
2072         }
2073
2074         for (i=0; i < in->num_values; i++) {
2075                 WERROR status;
2076                 struct dsdb_dn *dsdb_dn;
2077                 TALLOC_CTX *tmp_ctx = talloc_new(ctx->ldb);
2078                 W_ERROR_HAVE_NO_MEMORY(tmp_ctx);
2079
2080                 status = dsdb_syntax_DN_validate_one_val(ctx,
2081                                                          attr,
2082                                                          &in->values[i],
2083                                                          tmp_ctx, &dsdb_dn);
2084                 if (!W_ERROR_IS_OK(status)) {
2085                         talloc_free(tmp_ctx);
2086                         return status;
2087                 }
2088
2089                 if (dsdb_dn->dn_format != DSDB_STRING_DN) {
2090                         talloc_free(tmp_ctx);
2091                         return WERR_DS_INVALID_ATTRIBUTE_SYNTAX;
2092                 }
2093
2094                 status = dsdb_syntax_UNICODE_validate_one_val(ctx,
2095                                                               attr,
2096                                                               &dsdb_dn->extra_part);
2097                 if (!W_ERROR_IS_OK(status)) {
2098                         talloc_free(tmp_ctx);
2099                         return status;
2100                 }
2101
2102                 talloc_free(tmp_ctx);
2103         }
2104
2105         return WERR_OK;
2106 }
2107
2108 static WERROR dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb(const struct dsdb_syntax_ctx *ctx,
2109                                                               const struct dsdb_attribute *attr,
2110                                                               const struct drsuapi_DsReplicaAttribute *in,
2111                                                               TALLOC_CTX *mem_ctx,
2112                                                               struct ldb_message_element *out)
2113 {
2114         unsigned int i;
2115
2116         out->flags      = 0;
2117         out->name       = talloc_strdup(mem_ctx, attr->lDAPDisplayName);
2118         W_ERROR_HAVE_NO_MEMORY(out->name);
2119
2120         out->num_values = in->value_ctr.num_values;
2121         out->values     = talloc_array(mem_ctx, struct ldb_val, out->num_values);
2122         W_ERROR_HAVE_NO_MEMORY(out->values);
2123
2124         for (i=0; i < out->num_values; i++) {
2125                 size_t len;
2126                 char *str;
2127
2128                 if (in->value_ctr.values[i].blob == NULL) {
2129                         return WERR_FOOBAR;
2130                 }
2131
2132                 if (in->value_ctr.values[i].blob->length < 4) {
2133                         return WERR_FOOBAR;
2134                 }
2135
2136                 len = IVAL(in->value_ctr.values[i].blob->data, 0);
2137
2138                 if (len != in->value_ctr.values[i].blob->length) {
2139                         return WERR_FOOBAR;
2140                 }
2141
2142                 if (!convert_string_talloc(out->values, CH_UTF16, CH_UNIX,
2143                                            in->value_ctr.values[i].blob->data+4,
2144                                            in->value_ctr.values[i].blob->length-4,
2145                                            (void **)&str, NULL, false)) {
2146                         return WERR_FOOBAR;
2147                 }
2148
2149                 out->values[i] = data_blob_string_const(str);
2150         }
2151
2152         return WERR_OK;
2153 }
2154
2155 static WERROR dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi(const struct dsdb_syntax_ctx *ctx,
2156                                                               const struct dsdb_attribute *attr,
2157                                                               const struct ldb_message_element *in,
2158                                                               TALLOC_CTX *mem_ctx,
2159                                                               struct drsuapi_DsReplicaAttribute *out)
2160 {
2161         unsigned int i;
2162         DATA_BLOB *blobs;
2163
2164         if (attr->attributeID_id == 0xFFFFFFFF) {
2165                 return WERR_FOOBAR;
2166         }
2167
2168         out->attid                      = dsdb_attribute_get_attid(attr,
2169                                                                    ctx->is_schema_nc);
2170         out->value_ctr.num_values       = in->num_values;
2171         out->value_ctr.values           = talloc_array(mem_ctx,
2172                                                        struct drsuapi_DsAttributeValue,
2173                                                        in->num_values);
2174         W_ERROR_HAVE_NO_MEMORY(out->value_ctr.values);
2175
2176         blobs = talloc_array(mem_ctx, DATA_BLOB, in->num_values);
2177         W_ERROR_HAVE_NO_MEMORY(blobs);
2178
2179         for (i=0; i < in->num_values; i++) {
2180                 uint8_t *data;
2181                 size_t ret;
2182
2183                 out->value_ctr.values[i].blob   = &blobs[i];
2184
2185                 if (!convert_string_talloc(blobs, CH_UNIX, CH_UTF16,
2186                                            in->values[i].data,
2187                                            in->values[i].length,
2188                                            (void **)&data, &ret, false)) {
2189                         return WERR_FOOBAR;
2190                 }
2191
2192                 blobs[i] = data_blob_talloc(blobs, NULL, 4 + ret);
2193                 W_ERROR_HAVE_NO_MEMORY(blobs[i].data);
2194
2195                 SIVAL(blobs[i].data, 0, 4 + ret);
2196
2197                 if (ret > 0) {
2198                         memcpy(blobs[i].data + 4, data, ret);
2199                         talloc_free(data);
2200                 }
2201         }
2202
2203         return WERR_OK;
2204 }
2205
2206 static WERROR dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb(const struct dsdb_syntax_ctx *ctx,
2207                                                             const struct dsdb_attribute *attr,
2208                                                             const struct ldb_message_element *in)
2209 {
2210         return dsdb_syntax_UNICODE_validate_ldb(ctx,
2211                                                 attr,
2212                                                 in);
2213 }
2214
2215 #define OMOBJECTCLASS(val) { .length = sizeof(val) - 1, .data = discard_const_p(uint8_t, val) }
2216
2217 static const struct dsdb_syntax dsdb_syntaxes[] = {
2218         {
2219                 .name                   = "Boolean",
2220                 .ldap_oid               = LDB_SYNTAX_BOOLEAN,
2221                 .oMSyntax               = 1,
2222                 .attributeSyntax_oid    = "2.5.5.8",
2223                 .drsuapi_to_ldb         = dsdb_syntax_BOOL_drsuapi_to_ldb,
2224                 .ldb_to_drsuapi         = dsdb_syntax_BOOL_ldb_to_drsuapi,
2225                 .validate_ldb           = dsdb_syntax_BOOL_validate_ldb,
2226                 .equality               = "booleanMatch",
2227                 .comment                = "Boolean"
2228         },{
2229                 .name                   = "Integer",
2230                 .ldap_oid               = LDB_SYNTAX_INTEGER,
2231                 .oMSyntax               = 2,
2232                 .attributeSyntax_oid    = "2.5.5.9",
2233                 .drsuapi_to_ldb         = dsdb_syntax_INT32_drsuapi_to_ldb,
2234                 .ldb_to_drsuapi         = dsdb_syntax_INT32_ldb_to_drsuapi,
2235                 .validate_ldb           = dsdb_syntax_INT32_validate_ldb,
2236                 .equality               = "integerMatch",
2237                 .comment                = "Integer",
2238                 .ldb_syntax             = LDB_SYNTAX_SAMBA_INT32
2239         },{
2240                 .name                   = "String(Octet)",
2241                 .ldap_oid               = LDB_SYNTAX_OCTET_STRING,
2242                 .oMSyntax               = 4,
2243                 .attributeSyntax_oid    = "2.5.5.10",
2244                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2245                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2246                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2247                 .equality               = "octetStringMatch",
2248                 .comment                = "Octet String",
2249         },{
2250                 .name                   = "String(Sid)",
2251                 .ldap_oid               = LDB_SYNTAX_OCTET_STRING,
2252                 .oMSyntax               = 4,
2253                 .attributeSyntax_oid    = "2.5.5.17",
2254                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2255                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2256                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2257                 .equality               = "octetStringMatch",
2258                 .comment                = "Octet String - Security Identifier (SID)",
2259                 .ldb_syntax             = LDB_SYNTAX_SAMBA_SID
2260         },{
2261                 .name                   = "String(Object-Identifier)",
2262                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.38",
2263                 .oMSyntax               = 6,
2264                 .attributeSyntax_oid    = "2.5.5.2",
2265                 .drsuapi_to_ldb         = dsdb_syntax_OID_drsuapi_to_ldb,
2266                 .ldb_to_drsuapi         = dsdb_syntax_OID_ldb_to_drsuapi,
2267                 .validate_ldb           = dsdb_syntax_OID_validate_ldb,
2268                 .equality               = "caseIgnoreMatch", /* Would use "objectIdentifierMatch" but most are ldap attribute/class names */
2269                 .comment                = "OID String",
2270                 .ldb_syntax             = LDB_SYNTAX_DIRECTORY_STRING
2271         },{
2272                 .name                   = "Enumeration",
2273                 .ldap_oid               = LDB_SYNTAX_INTEGER,
2274                 .oMSyntax               = 10,
2275                 .attributeSyntax_oid    = "2.5.5.9",
2276                 .drsuapi_to_ldb         = dsdb_syntax_INT32_drsuapi_to_ldb,
2277                 .ldb_to_drsuapi         = dsdb_syntax_INT32_ldb_to_drsuapi,
2278                 .validate_ldb           = dsdb_syntax_INT32_validate_ldb,
2279                 .ldb_syntax             = LDB_SYNTAX_SAMBA_INT32
2280         },{
2281         /* not used in w2k3 forest */
2282                 .name                   = "String(Numeric)",
2283                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.36",
2284                 .oMSyntax               = 18,
2285                 .attributeSyntax_oid    = "2.5.5.6",
2286                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2287                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2288                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2289                 .equality               = "numericStringMatch",
2290                 .substring              = "numericStringSubstringsMatch",
2291                 .comment                = "Numeric String",
2292                 .ldb_syntax             = LDB_SYNTAX_DIRECTORY_STRING,
2293         },{
2294                 .name                   = "String(Printable)",
2295                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.44",
2296                 .oMSyntax               = 19,
2297                 .attributeSyntax_oid    = "2.5.5.5",
2298                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2299                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2300                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2301                 .ldb_syntax             = LDB_SYNTAX_OCTET_STRING,
2302         },{
2303                 .name                   = "String(Teletex)",
2304                 .ldap_oid               = "1.2.840.113556.1.4.905",
2305                 .oMSyntax               = 20,
2306                 .attributeSyntax_oid    = "2.5.5.4",
2307                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2308                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2309                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2310                 .equality               = "caseIgnoreMatch",
2311                 .substring              = "caseIgnoreSubstringsMatch",
2312                 .comment                = "Case Insensitive String",
2313                 .ldb_syntax             = LDB_SYNTAX_DIRECTORY_STRING,
2314         },{
2315                 .name                   = "String(IA5)",
2316                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.26",
2317                 .oMSyntax               = 22,
2318                 .attributeSyntax_oid    = "2.5.5.5",
2319                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2320                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2321                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2322                 .equality               = "caseExactIA5Match",
2323                 .comment                = "Printable String",
2324                 .ldb_syntax             = LDB_SYNTAX_OCTET_STRING,
2325         },{
2326                 .name                   = "String(UTC-Time)",
2327                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.53",
2328                 .oMSyntax               = 23,
2329                 .attributeSyntax_oid    = "2.5.5.11",
2330                 .drsuapi_to_ldb         = dsdb_syntax_NTTIME_UTC_drsuapi_to_ldb,
2331                 .ldb_to_drsuapi         = dsdb_syntax_NTTIME_UTC_ldb_to_drsuapi,
2332                 .validate_ldb           = dsdb_syntax_NTTIME_UTC_validate_ldb,
2333                 .equality               = "generalizedTimeMatch",
2334                 .comment                = "UTC Time",
2335         },{
2336                 .name                   = "String(Generalized-Time)",
2337                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.24",
2338                 .oMSyntax               = 24,
2339                 .attributeSyntax_oid    = "2.5.5.11",
2340                 .drsuapi_to_ldb         = dsdb_syntax_NTTIME_drsuapi_to_ldb,
2341                 .ldb_to_drsuapi         = dsdb_syntax_NTTIME_ldb_to_drsuapi,
2342                 .validate_ldb           = dsdb_syntax_NTTIME_validate_ldb,
2343                 .equality               = "generalizedTimeMatch",
2344                 .comment                = "Generalized Time",
2345                 .ldb_syntax             = LDB_SYNTAX_UTC_TIME,
2346         },{
2347         /* not used in w2k3 schema */
2348                 .name                   = "String(Case Sensitive)",
2349                 .ldap_oid               = "1.2.840.113556.1.4.1362",
2350                 .oMSyntax               = 27,
2351                 .attributeSyntax_oid    = "2.5.5.3",
2352                 .drsuapi_to_ldb         = dsdb_syntax_FOOBAR_drsuapi_to_ldb,
2353                 .ldb_to_drsuapi         = dsdb_syntax_FOOBAR_ldb_to_drsuapi,
2354                 .validate_ldb           = dsdb_syntax_FOOBAR_validate_ldb,
2355         },{
2356                 .name                   = "String(Unicode)",
2357                 .ldap_oid               = LDB_SYNTAX_DIRECTORY_STRING,
2358                 .oMSyntax               = 64,
2359                 .attributeSyntax_oid    = "2.5.5.12",
2360                 .drsuapi_to_ldb         = dsdb_syntax_UNICODE_drsuapi_to_ldb,
2361                 .ldb_to_drsuapi         = dsdb_syntax_UNICODE_ldb_to_drsuapi,
2362                 .validate_ldb           = dsdb_syntax_UNICODE_validate_ldb,
2363                 .equality               = "caseIgnoreMatch",
2364                 .substring              = "caseIgnoreSubstringsMatch",
2365                 .comment                = "Directory String",
2366         },{
2367                 .name                   = "Interval/LargeInteger",
2368                 .ldap_oid               = "1.2.840.113556.1.4.906",
2369                 .oMSyntax               = 65,
2370                 .attributeSyntax_oid    = "2.5.5.16",
2371                 .drsuapi_to_ldb         = dsdb_syntax_INT64_drsuapi_to_ldb,
2372                 .ldb_to_drsuapi         = dsdb_syntax_INT64_ldb_to_drsuapi,
2373                 .validate_ldb           = dsdb_syntax_INT64_validate_ldb,
2374                 .equality               = "integerMatch",
2375                 .comment                = "Large Integer",
2376                 .ldb_syntax             = LDB_SYNTAX_INTEGER,
2377         },{
2378                 .name                   = "String(NT-Sec-Desc)",
2379                 .ldap_oid               = LDB_SYNTAX_SAMBA_SECURITY_DESCRIPTOR,
2380                 .oMSyntax               = 66,
2381                 .attributeSyntax_oid    = "2.5.5.15",
2382                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2383                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2384                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2385         },{
2386                 .name                   = "Object(DS-DN)",
2387                 .ldap_oid               = LDB_SYNTAX_DN,
2388                 .oMSyntax               = 127,
2389                 .oMObjectClass          = OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x4a"),
2390                 .attributeSyntax_oid    = "2.5.5.1",
2391                 .drsuapi_to_ldb         = dsdb_syntax_DN_drsuapi_to_ldb,
2392                 .ldb_to_drsuapi         = dsdb_syntax_DN_ldb_to_drsuapi,
2393                 .validate_ldb           = dsdb_syntax_DN_validate_ldb,
2394                 .equality               = "distinguishedNameMatch",
2395                 .comment                = "Object(DS-DN) == a DN",
2396         },{
2397                 .name                   = "Object(DN-Binary)",
2398                 .ldap_oid               = DSDB_SYNTAX_BINARY_DN,
2399                 .oMSyntax               = 127,
2400                 .oMObjectClass          = OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0b"),
2401                 .attributeSyntax_oid    = "2.5.5.7",
2402                 .drsuapi_to_ldb         = dsdb_syntax_DN_BINARY_drsuapi_to_ldb,
2403                 .ldb_to_drsuapi         = dsdb_syntax_DN_BINARY_ldb_to_drsuapi,
2404                 .validate_ldb           = dsdb_syntax_DN_BINARY_validate_ldb,
2405                 .equality               = "octetStringMatch",
2406                 .comment                = "OctetString: Binary+DN",
2407         },{
2408         /* not used in w2k3 schema, but used in Exchange schema*/
2409                 .name                   = "Object(OR-Name)",
2410                 .ldap_oid               = DSDB_SYNTAX_OR_NAME,
2411                 .oMSyntax               = 127,
2412                 .oMObjectClass          = OMOBJECTCLASS("\x56\x06\x01\x02\x05\x0b\x1D"),
2413                 .attributeSyntax_oid    = "2.5.5.7",
2414                 .drsuapi_to_ldb         = dsdb_syntax_DN_BINARY_drsuapi_to_ldb,
2415                 .ldb_to_drsuapi         = dsdb_syntax_DN_BINARY_ldb_to_drsuapi,
2416                 .validate_ldb           = dsdb_syntax_DN_BINARY_validate_ldb,
2417                 .equality               = "caseIgnoreMatch",
2418                 .ldb_syntax             = LDB_SYNTAX_DN,
2419         },{
2420         /*
2421          * TODO: verify if DATA_BLOB is correct here...!
2422          *
2423          *       repsFrom and repsTo are the only attributes using
2424          *       this attribute syntax, but they're not replicated...
2425          */
2426                 .name                   = "Object(Replica-Link)",
2427                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.40",
2428                 .oMSyntax               = 127,
2429                 .oMObjectClass          = OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x06"),
2430                 .attributeSyntax_oid    = "2.5.5.10",
2431                 .drsuapi_to_ldb         = dsdb_syntax_DATA_BLOB_drsuapi_to_ldb,
2432                 .ldb_to_drsuapi         = dsdb_syntax_DATA_BLOB_ldb_to_drsuapi,
2433                 .validate_ldb           = dsdb_syntax_DATA_BLOB_validate_ldb,
2434         },{
2435                 .name                   = "Object(Presentation-Address)",
2436                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.43",
2437                 .oMSyntax               = 127,
2438                 .oMObjectClass          = OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x5c"),
2439                 .attributeSyntax_oid    = "2.5.5.13",
2440                 .drsuapi_to_ldb         = dsdb_syntax_PRESENTATION_ADDRESS_drsuapi_to_ldb,
2441                 .ldb_to_drsuapi         = dsdb_syntax_PRESENTATION_ADDRESS_ldb_to_drsuapi,
2442                 .validate_ldb           = dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb,
2443                 .comment                = "Presentation Address",
2444                 .ldb_syntax             = LDB_SYNTAX_DIRECTORY_STRING,
2445         },{
2446         /* not used in w2k3 schema */
2447                 .name                   = "Object(Access-Point)",
2448                 .ldap_oid               = "1.3.6.1.4.1.1466.115.121.1.2",
2449                 .oMSyntax               = 127,
2450                 .oMObjectClass          = OMOBJECTCLASS("\x2b\x0c\x02\x87\x73\x1c\x00\x85\x3e"),
2451                 .attributeSyntax_oid    = "2.5.5.14",
2452                 .drsuapi_to_ldb         = dsdb_syntax_FOOBAR_drsuapi_to_ldb,
2453                 .ldb_to_drsuapi         = dsdb_syntax_FOOBAR_ldb_to_drsuapi,
2454                 .validate_ldb           = dsdb_syntax_FOOBAR_validate_ldb,
2455                 .ldb_syntax             = LDB_SYNTAX_DIRECTORY_STRING,
2456         },{
2457         /* not used in w2k3 schema */
2458                 .name                   = "Object(DN-String)",
2459                 .ldap_oid               = DSDB_SYNTAX_STRING_DN,
2460                 .oMSyntax               = 127,
2461                 .oMObjectClass          = OMOBJECTCLASS("\x2a\x86\x48\x86\xf7\x14\x01\x01\x01\x0c"),
2462                 .attributeSyntax_oid    = "2.5.5.14",
2463                 .drsuapi_to_ldb         = dsdb_syntax_DN_STRING_drsuapi_to_ldb,
2464                 .ldb_to_drsuapi         = dsdb_syntax_DN_STRING_ldb_to_drsuapi,
2465                 .validate_ldb           = dsdb_syntax_DN_STRING_validate_ldb,
2466                 .equality               = "octetStringMatch",
2467                 .comment                = "OctetString: String+DN",
2468         }
2469 };
2470
2471 const struct dsdb_syntax *find_syntax_map_by_ad_oid(const char *ad_oid)
2472 {
2473         unsigned int i;
2474         for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
2475                 if (strcasecmp(ad_oid, dsdb_syntaxes[i].attributeSyntax_oid) == 0) {
2476                         return &dsdb_syntaxes[i];
2477                 }
2478         }
2479         return NULL;
2480 }
2481
2482 const struct dsdb_syntax *find_syntax_map_by_ad_syntax(int oMSyntax)
2483 {
2484         unsigned int i;
2485         for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
2486                 if (oMSyntax == dsdb_syntaxes[i].oMSyntax) {
2487                         return &dsdb_syntaxes[i];
2488                 }
2489         }
2490         return NULL;
2491 }
2492
2493 const struct dsdb_syntax *find_syntax_map_by_standard_oid(const char *standard_oid)
2494 {
2495         unsigned int i;
2496         for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
2497                 if (strcasecmp(standard_oid, dsdb_syntaxes[i].ldap_oid) == 0) {
2498                         return &dsdb_syntaxes[i];
2499                 }
2500         }
2501         return NULL;
2502 }
2503
2504 const struct dsdb_syntax *dsdb_syntax_for_attribute(const struct dsdb_attribute *attr)
2505 {
2506         unsigned int i;
2507
2508         for (i=0; i < ARRAY_SIZE(dsdb_syntaxes); i++) {
2509                 if (attr->oMSyntax != dsdb_syntaxes[i].oMSyntax) continue;
2510
2511                 if (attr->oMObjectClass.length != dsdb_syntaxes[i].oMObjectClass.length) continue;
2512
2513                 if (attr->oMObjectClass.length) {
2514                         int ret;
2515                         ret = memcmp(attr->oMObjectClass.data,
2516                                      dsdb_syntaxes[i].oMObjectClass.data,
2517                                      attr->oMObjectClass.length);
2518                         if (ret != 0) continue;
2519                 }
2520
2521                 if (strcmp(attr->attributeSyntax_oid, dsdb_syntaxes[i].attributeSyntax_oid) != 0) continue;
2522
2523                 return &dsdb_syntaxes[i];
2524         }
2525
2526         return NULL;
2527 }
2528
2529 WERROR dsdb_attribute_drsuapi_to_ldb(struct ldb_context *ldb,
2530                                      const struct dsdb_schema *schema,
2531                                      const struct drsuapi_DsReplicaAttribute *in,
2532                                      TALLOC_CTX *mem_ctx,
2533                                      struct ldb_message_element *out)
2534 {
2535         const struct dsdb_attribute *sa;
2536         struct dsdb_syntax_ctx syntax_ctx;
2537
2538         sa = dsdb_attribute_by_attributeID_id(schema, in->attid);
2539         if (!sa) {
2540                 return WERR_FOOBAR;
2541         }
2542
2543         /* use default syntax conversion context */
2544         dsdb_syntax_ctx_init(&syntax_ctx, ldb, schema);
2545
2546         return sa->syntax->drsuapi_to_ldb(&syntax_ctx, sa, in, mem_ctx, out);
2547 }
2548
2549 WERROR dsdb_attribute_ldb_to_drsuapi(struct ldb_context *ldb,
2550                                      const struct dsdb_schema *schema,
2551                                      const struct ldb_message_element *in,
2552                                      TALLOC_CTX *mem_ctx,
2553                                      struct drsuapi_DsReplicaAttribute *out)
2554 {
2555         const struct dsdb_attribute *sa;
2556         struct dsdb_syntax_ctx syntax_ctx;
2557
2558         sa = dsdb_attribute_by_lDAPDisplayName(schema, in->name);
2559         if (!sa) {
2560                 return WERR_FOOBAR;
2561         }
2562
2563         /* use default syntax conversion context */
2564         dsdb_syntax_ctx_init(&syntax_ctx, ldb, schema);
2565
2566         return sa->syntax->ldb_to_drsuapi(&syntax_ctx, sa, in, mem_ctx, out);
2567 }
2568