sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-11-20 08:23:50 +03:00
Code Activity
12,913 Commits 64 Branches 1,179 Tags
0149226ece306af4a65c27ce3fff2988232f4523
Commit Graph

205 Commits

Author SHA1 Message Date
Andrew Bartlett
6d4d90399f r23235: Don't do a seperate LDAP provision step. Instead, everything we need 
(including the config files) is created by provision-backend.

Andrew Bartlett
 2007-10-10 14:53:05 -05:00
Andrew Bartlett
0108334fe3 r23232: Add in some extra files required by the new provision-backend. 
(sorry for breaking the build)

Andrew Bartlett
 2007-10-10 14:53:04 -05:00
Stefan Metzmacher
236da2cb3d r23205: abartlet please commit the correct content ... 
this just fixes make install

metze
 2007-10-10 14:53:03 -05:00
Andrew Bartlett
0f457b1d2e r23189: Work towards a totally scripted setup of LDAP backends, so others can 
easily try this out.

I also intend to use this for the selftest, but I'm chasing issues
with the OpenlDAP (but not Fedora DS) backend.

Andrew Bartlett
 2007-10-10 14:53:02 -05:00
Andrew Bartlett
01d54d13dc r23177: Add in a new provision-backend script. This helps set up the OpenLDAP or Fedora DS backend. 
This required a new mkdir() call in ejs.

We can now provision just the schema for ad2oLschema to operate on
(with provision_schema(), without performing the whole provision, just
to wipe it again (adjustments to 'make test' to come soon).

Andrew Bartlett
 2007-10-10 14:53:00 -05:00
Stefan Metzmacher
c9e017c008 r23033: regenerate schema.ldif with minischema.js 
metze
 2007-10-10 14:52:42 -05:00
Andrew Bartlett
55c7c0906c r23027: Make sure the parent object always exists. 
Andrew Bartlett
 2007-10-10 14:52:41 -05:00
Andrew Tridgell
f60817d797 r22984: not everyone uses tridgell.net (fortunately) 2007-10-10 14:52:35 -05:00
Andrew Tridgell
4c6e01a585 r22972: added the basic ldif needed to support group policies in Samba4. WinXP 
clients do correctly see our group policies, but the gpmc admin tool
doesn't yet work to allow you to edit the policies
 2007-10-10 14:52:34 -05:00
Andrew Bartlett
a258455e75 r22921: This index saves another 7 seconds off a 'make quicktest', and is a common search operator. 
Andrew Bartlett
 2007-10-10 14:52:30 -05:00
Andrew Tridgell
45d668d19f r22887: and servicePrincipalName .... 2007-10-10 14:52:29 -05:00
Andrew Tridgell
600d39e0ba r22885: now we use kernberos more, we need to index on userPrincipalName 2007-10-10 14:52:29 -05:00
Andrew Bartlett
ee7b06fc83 r22756: Make it easier to setup an LDAP replica. Provision with 
--partitions-only (suggestions for a better name welcome) will setup
the partitions records, but no any data in those partitions.  This can
then point at the already configured remote LDAP server.

Andrew Bartlett
 2007-10-10 14:52:15 -05:00
Andrew Bartlett
b5afec8b82 r22572: Don't manually set objectGUID values 2007-10-10 14:51:46 -05:00
Andrew Bartlett
ef9320ae5b r22531: Fix up OpenLDAP schema map to almost pass 'make test'. 
Andrew Bartlett
 2007-10-10 14:51:38 -05:00
Stefan Metzmacher
7c381b2d4f r22530: use message() to make --quiet work 
metze
 2007-10-10 14:51:38 -05:00
Andrew Bartlett
d7cd4b768a r22497: Support renaming objectclasses and attributes for the LDAP backend. 
OpenLDAP is fussy about operational attributes in user-supplied
schema.

Andrew Bartlett
 2007-10-10 14:51:33 -05:00
Andrew Bartlett
65327a0e4d r22494: Skip subSchema again, but we will need to remap this objectClass. 
Make the Fedora DS backend test again.

Andrew Bartlett
 2007-10-10 14:51:33 -05:00
Andrew Bartlett
860dfa4ea1 r22478: Update the LDAP backend code to handle initialisation of multiple 
partitions onto the target LDAP server.

Make the LDAP provision run before smbd starts, then stop the LDAP
server.  This ensures this occurs synchronously, We then restart it
for the 'real run' (with slapd's stdin being the FIFO).

This required fixing a few things in the provision scripts, with more
containers being created via a add/modify pair.

Andrew Bartlett
 2007-10-10 14:51:31 -05:00
Jelmer Vernooij
ef794f03d5 r21673: Fix Samba 3 data read tests. I can't figure out why the upgrade one is broken, so that one is still disabled. 2007-10-10 14:49:08 -05:00
Stefan Metzmacher
199416a4d3 r21583: add missing CN= 
metze
 2007-10-10 14:49:00 -05:00
Stefan Metzmacher
9e91bd6449 r21435: ntPwdHash,lmPwdHash,sambaNTPwdHistory,sambaLMPwdHistory and krb5Key 
are not used anymore

metze
 2007-10-10 14:48:34 -05:00
Simo Sorce
35886b4ae6 r21351: Change ldb ejs bindings return codes. 
We were returning just true/false and discarding error number and string.

This checking probably breaks swat, will fix it in next round as swat
is what made me look into this as I had no way to get back error messages
to show to the users.

Simo.
 2007-10-10 14:48:18 -05:00
Stefan Metzmacher
5c779b3767 r21298: protect windows password attributes too 
metze
 2007-10-10 14:48:04 -05:00
Andrew Bartlett
6ce557a1af r21135: Instead of having hooks to update keytabs as an explicit thing, update 
them as a hook on ldb modify, via a module.

This should allow the secrets.ldb to be edited by the admin, and to
have things update in the on-disk keytab just as an in-memory keytab
would.

This isn't really a dsdb plugin, but I don't have any other good ideas
about where to put it.

Andrew Bartlett
 2007-10-10 14:44:31 -05:00
Stefan Metzmacher
7510b9ca4a r20956: cn and instanceType are autogenerated values, later we need to remove them from all 
ldif files, but for now only the ones used by the NET-API-BECOME-DC test

metze
 2007-10-10 14:44:02 -05:00
Stefan Metzmacher
ba6ee1a098 r20859: fix typo 
metze
 2007-10-10 14:43:40 -05:00
Stefan Metzmacher
684eee52e8 r20826: make the dsdb_control_current_partition struct public and allocate an oid for the 
control

metze
 2007-10-10 14:43:37 -05:00
Stefan Metzmacher
c78e345fea r20805: don't use hardcoded values for secrects.keytab and sam.ldb 
metze
 2007-10-10 14:43:32 -05:00
Stefan Metzmacher
4380cc9ed6 r20728: the DSDB_CONTROL_REPLICATED_OBJECT_OID control isn't used anymore 
because we now use DSDB_EXTENDED_REPLICATED_OBJECTS_OID extended operation

metze
 2007-10-10 14:40:32 -05:00
Stefan Metzmacher
e967b37017 r20678: add index for objectGUID 
metze
 2007-10-10 14:40:20 -05:00
Stefan Metzmacher
6397f01448 r20586: - allocate an OID range for LDB/LDAP extended operations 
- allocate an OID for DSDB_EXTENDED_REPLICATED_OBJECTS_OID which
  will replace the DSDB_CONTROL_REPLICATED_OBJECT_OID soon

metze
 2007-10-10 14:37:08 -05:00
Stefan Metzmacher
2660c5ab21 r20577: - allocate an OID range for samba4 LDB/LDAP Controls 
- allocate an OID for LDB Control that hold meta data when applying
  replicated objects

metze
 2007-10-10 14:37:06 -05:00
Stefan Metzmacher
5875ce1ac6 r20568: split out the rootdse ldif 
and set the isSyncronized = TRUE when we done

metze
 2007-10-10 14:37:02 -05:00
Stefan Metzmacher
cbebe559a2 r20565: configure the list of global ldb modules also in js code 
metze
 2007-10-10 14:36:59 -05:00
Stefan Metzmacher
3e337ec276 r20560: make it possible to configure the backend and modules 
for all partitions and make it not use LDAP in the variable names
because it isn't specific to the ldap backend case.

metze
 2007-10-10 14:36:57 -05:00
Stefan Metzmacher
2a6e6a2695 r20557: use ${DOMAINDN} instead of ${BASEDN} 
metze
 2007-10-10 14:36:56 -05:00
Stefan Metzmacher
ebbd8a83c9 r20554: - use ${ROOTDN} for the rootDomainNamingContext 
- the ${CONFIGDN} is a child of the ${ROOTDN}

metze
 2007-10-10 14:36:55 -05:00
Stefan Metzmacher
09ca6aae12 r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded paths 
under ${BASEDN}

metze
 2007-10-10 14:36:54 -05:00
Stefan Metzmacher
21f433018a r20551: use variable instead of hardcoded value for the default site 
metze
 2007-10-10 14:36:53 -05:00
Andrew Bartlett
f45504e271 r20495: Further notes on joining with fedora DS. 
Add in a hook for adding an ACI, needed to allow anonymous access
until we hook across a SYSTEM token to the LDAP server.

Andrew Bartlett
 2007-10-10 14:36:00 -05:00
Andrew Bartlett
600c7f1a68 r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend. 
Add a new module entrypoint to handle the new, interesting and
different mappings required for Fedora DS.

Andrew Bartlett
 2007-10-10 14:35:59 -05:00
Andrew Bartlett
99faff0ad8 r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to load 
into an exsting LDAP server.  (Allow some parts to pre-exist, and try
to blow away less data).

Andrew Bartlett
 2007-10-10 14:35:54 -05:00
Stefan Metzmacher
6d43c19638 r20332: add mastered-By and msDs-mastered-By attributes to the domain object 
the config and schema head objects already have them

metze
 2007-10-10 14:29:42 -05:00
Andrew Bartlett
dc9eee7cb3 r20152: Commit missing files from last night's commit. We no longer maintain 
a distinction between PDC and BDC in the configuration files, only as
an entry in the ldb.

Andrew Bartlett
 2007-10-10 14:29:15 -05:00
Andrew Bartlett
ac5abff4b6 r19336: Merge from release branch: new Mapped OIDs, in own subtree. 
Andrew Bartlett
 2007-10-10 14:21:12 -05:00
Andrew Bartlett
0ceffb52eb r19315: Record some OID allocations. 
Andrew Bartlett
 2007-10-10 14:21:07 -05:00
Andrew Bartlett
a1f14d10fd r19311: Try to keep the schema map files fairly similar (hope for less weird bugs). 
Andrew Bartlett
 2007-10-10 14:21:06 -05:00
Andrew Bartlett
942d7ad0c3 r19310: Add another conflicting oid 
Cope with there being no attributes to skip in the ad2oLscheam tool

Andrew Bartlett
 2007-10-10 14:21:06 -05:00
Andrew Bartlett
962219df7d r19258: Don't delete the contents of the partitions twice, and in particular 
don't delete their contents until we have specified the new partition
locations.

However, preserve the important part of tridge's change, that is to
ensure that no database index is present when the mass delete occours.
In my testing, it is best to leave the index until the provision is
compleated.

Andrew Bartlett
 2007-10-10 14:20:58 -05:00