sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-11 16:58:40 +03:00
Code

r2804: - setup some reasonable default SAM to unixName mappings in the provisioning.

Browse Source 
- enable the unixuid module by default on all backends
(This used to be commit e335cd4933fccc1bb53641131eb6505faca857ce)
This commit is contained in:
Andrew Tridgell 2004-10-03 10:31:12 +00:00 committed by Gerald (Jerry) Carter
parent fe3294f7f0
commit 0eeb0973e9
3 changed files with 17 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
source4/param/loadparm.c
View File

@ -886,7 +886,7 @@ static void init_globals(void)
init_printer_values(); init_printer_values();
do_parameter("fstype", FSTYPE_STRING); do_parameter("fstype", FSTYPE_STRING);
do_parameter("ntvfs handler", "default"); do_parameter("ntvfs handler", "unixuid default");
do_parameter("dcerpc endpoint servers", "epmapper srvsvc wkssvc rpcecho samr netlogon lsarpc spoolss"); do_parameter("dcerpc endpoint servers", "epmapper srvsvc wkssvc rpcecho samr netlogon lsarpc spoolss");
do_parameter("server services", "smb rpc"); do_parameter("server services", "smb rpc");

10
source4/provision.ldif
View File

@ -191,6 +191,8 @@ sAMAccountName: Administrator
sAMAccountType: 0x30000000 sAMAccountType: 0x30000000
objectCategory: CN=Person,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Person,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unicodePwd: ${ADMINPASS}
unixName: root
dn: CN=Guest,CN=Users,${BASEDN} dn: CN=Guest,CN=Users,${BASEDN}
objectClass: top objectClass: top
@ -247,6 +249,7 @@ systemFlags: 0x8c000000
groupType: 0x80000005 groupType: 0x80000005
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: root
dn: CN=Users,CN=Builtin,${BASEDN} dn: CN=Users,CN=Builtin,${BASEDN}
objectClass: top objectClass: top
@ -290,6 +293,7 @@ systemFlags: 0x8c000000
groupType: 0x80000005 groupType: 0x80000005
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: nogroup
dn: CN=Print Operators,CN=Builtin,${BASEDN} dn: CN=Print Operators,CN=Builtin,${BASEDN}
objectClass: top objectClass: top
@ -562,6 +566,7 @@ sAMAccountType: 268435456
groupType: -2147483646 groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: root
dn: CN=Enterprise Admins,CN=Users,${BASEDN} dn: CN=Enterprise Admins,CN=Users,${BASEDN}
objectClass: top objectClass: top
@ -584,6 +589,7 @@ sAMAccountType: 268435456
groupType: -2147483646 groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: root
dn: CN=Cert Publishers,CN=Users,${BASEDN} dn: CN=Cert Publishers,CN=Users,${BASEDN}
objectClass: top objectClass: top
@ -625,6 +631,7 @@ sAMAccountType: 268435456
groupType: -2147483646 groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: root
dn: CN=Domain Users,CN=Users,${BASEDN} dn: CN=Domain Users,CN=Users,${BASEDN}
objectClass: top objectClass: top
@ -645,6 +652,7 @@ sAMAccountType: 268435456
groupType: -2147483646 groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: users
dn: CN=Domain Guests,CN=Users,${BASEDN} dn: CN=Domain Guests,CN=Users,${BASEDN}
objectClass: top objectClass: top
@ -685,6 +693,7 @@ sAMAccountType: 268435456
groupType: -2147483646 groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN} objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
isCriticalSystemObject: TRUE isCriticalSystemObject: TRUE
unixName: root
dn: CN=RAS and IAS Servers,CN=Users,${BASEDN} dn: CN=RAS and IAS Servers,CN=Users,${BASEDN}
objectClass: top objectClass: top
@ -839,3 +848,4 @@ cn: TemplateGroup
name: TemplateGroup name: TemplateGroup
instanceType: 4 instanceType: 4
sAMAccountType: 0x10000000 sAMAccountType: 0x10000000

10
source4/script/provision.pl
View File

@ -139,10 +139,11 @@ sub FileLoad($)
####################################################################### #######################################################################
# add a foreign security principle # add a foreign security principle
sub add_foreign($$) sub add_foreign($$$)
{ {
my $sid = shift; my $sid = shift;
my $desc = shift; my $desc = shift;
my $unixname = shift;
return " return "
dn: CN=$sid,CN=ForeignSecurityPrincipals,\${BASEDN} dn: CN=$sid,CN=ForeignSecurityPrincipals,\${BASEDN}
objectClass: top objectClass: top
@ -160,6 +161,7 @@ name: $sid
objectGUID: \${NEWGUID} objectGUID: \${NEWGUID}
objectSid: $sid objectSid: $sid
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,\${BASEDN} objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,\${BASEDN}
unixName: $unixname
"; ";
} }
@ -209,9 +211,9 @@ $basedn = "DC=" . join(",DC=", split(/\./, $opt_realm));
my $data = FileLoad("provision.ldif") || die "Unable to load provision.ldif\n"; my $data = FileLoad("provision.ldif") || die "Unable to load provision.ldif\n";
$data .= add_foreign("S-1-5-7", "Anonymous"); $data .= add_foreign("S-1-5-7", "Anonymous", "nobody");
$data .= add_foreign("S-1-5-18", "System"); $data .= add_foreign("S-1-5-18", "System", "root");
$data .= add_foreign("S-1-5-11", "Authenticated Users"); $data .= add_foreign("S-1-5-11", "Authenticated Users", "users");
if (!$opt_adminpass) { if (!$opt_adminpass) {
$opt_adminpass = randpass(); $opt_adminpass = randpass();