1
0
mirror of https://github.com/samba-team/samba.git synced 2025-04-29 14:50:26 +03:00

143 Commits

Author SHA1 Message Date
Andrew Tridgell
059941b6e7 dbcheck: use specified DB schema for non-LDAP URLs
when connecting to a local database with -H we can use that databases
schema

Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11 14:32:44 +10:00
Andrew Tridgell
c6985f1e7e dbcheck: only use a paged search when checking a ldap database
paged searches don't work against a local database (they return only
the first N objects)
2011-07-05 07:10:03 +02:00
Stefan Metzmacher
dee41bcdf2 s4:samba-tool: add "delegation" subcommands for S4U2Proxy and related stuff
For now this only works on the local sam.ldb, but it shouldn't be hard
to improve it to talk to remove servers.

Pair-Programmed-With: Björn Baumbach <bb@sernet.de>

metze
2011-06-24 19:06:44 +02:00
Andrew Tridgell
4fe9ebc2e3 dbchecker: fixed argument error for -H and DN 2011-06-22 20:13:08 +02:00
Andrew Tridgell
9676c26fdd samba-tool: added --attrs option to dbcheck
this allows checking of a specific list of attributes
2011-06-22 20:13:08 +02:00
Andrew Tridgell
7fff636bce samba-tool: make the dbcheck class available outside of samba-tool
this will be used in provision, and probably in upgradeprovision as
well
2011-06-22 20:13:08 +02:00
Andrew Tridgell
9be9f0e43c samba-tool: added --quiet option to dbcheck
this will be used to allow for other tools (such as provision) to call
into dbcheck without generating a lot of noise
2011-06-22 20:13:08 +02:00
Andrew Tridgell
6d1fe054dd samba-tool: allow for running dbcheck against a remove ldap server
this is useful for running it against a Windows server
2011-06-22 11:16:26 +02:00
Andrew Tridgell
ff8cdeecfc samba-tool: expanded dbcheck DN checking
this now checks for bad GUID elements in DN links, and offers to fix
them when possible

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22 11:16:26 +02:00
Andrew Tridgell
9e766f019b samba-tool: added missing GUID component checks to dbcheck
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Jun 22 07:59:30 CEST 2011 on sn-devel-104
2011-06-22 07:59:30 +02:00
Andrew Tridgell
c4a7908f46 samba-tool: try to keep dbcheck.py in a logical ordering
keep individual error handlers together and separate from driver code
2011-06-22 14:47:07 +10:00
Matthieu Patou
9c94943d26 s4-sambatool: extract the confirm function in a separte module for reuse 2011-06-19 23:21:09 +02:00
Matthieu Patou
bc549575dd s4-samba-tool: remove unused imports 2011-06-19 23:21:08 +02:00
Matthieu Patou
db03091607 s4-samba-tool: use correct object notation ie. obj.method rather than method(obj, ...) 2011-06-19 23:21:08 +02:00
Matthieu Patou
8a04863f0d s4-sambatool: use correct way to call class methods 2011-06-19 23:21:08 +02:00
Andrew Tridgell
0b3b7e3797 samba-tool: exit with non-zero status on dbcheck failure
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-17 15:25:42 +10:00
Andrew Tridgell
705ed1c492 samba-tool: show success message on group operations 2011-06-17 15:24:23 +10:00
Andrew Tridgell
a8269792aa samba-tool: report total error count and suggest --fix if needed 2011-06-17 12:32:55 +10:00
Andrew Tridgell
08dc1aa4cc samba-tool: added attribute normalisation checks
this checks that all attributes have the right normalisation, and
offers to fix the ones that don't
2011-06-17 12:32:55 +10:00
Andrew Tridgell
d575b2b0ab samba-tool: disable validation on removing an empty attribute in dbcheck
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Jun 14 10:49:34 CEST 2011 on sn-devel-104
2011-06-14 10:49:34 +02:00
Andrew Tridgell
0c89d624e6 s4-samba-tool: added dbcheck commmand
this will be used as a consistency checker and repair tool for
sam.ldb. This initial checkin just checks for empty attributes and
offers to fix them

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Jun 10 10:31:56 CEST 2011 on sn-devel-104
2011-06-10 10:31:56 +02:00
Andrew Tridgell
516dc404fd samba-tool: added --local option to drs replicate command
this allows replication directly to the local SAM, which means it can
run without the samba daemon running. It also bypasses all usnChanged
checks, which is useful for forcing replication of a set of objects
which are not marked as replication being needed

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Jun  9 08:15:10 CEST 2011 on sn-devel-104
2011-06-09 08:15:10 +02:00
Andrew Tridgell
087ee1f40e s4-gpo: fixed display of GPO version numbers 2011-06-06 12:26:10 +10:00
Andrew Tridgell
1bc1ac0d08 samba-tool: improved error handling in user setexpiry 2011-06-01 17:24:36 +10:00
Andrew Tridgell
7b3d8b6c90 samba-tool: improved user enable error handling 2011-06-01 17:24:36 +10:00
Theresa Halloran
23177b5f44 s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01 17:24:36 +10:00
Theresa Halloran
726ee12bb4 s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01 17:24:36 +10:00
Andrew Bartlett
c6cc22adc0 s4-libnet: Remove libnet_Join and create libnet_Join_member
libnet_Join conflicts with a function in the source3 netapi of the
same name, and the ability to join as a DC via this particular method
is unused.

Andrew Bartlett
2011-05-18 16:12:08 +02:00
Matthieu Patou
7f36f3effa s4-samba-tool: allow specification of targetdir when joining as (RO)DC
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Thu May  5 02:04:13 CEST 2011 on sn-devel-104
2011-05-05 02:04:13 +02:00
Matthieu Patou
7cc02cf870 samba-tool: fix machinepw command so that we use the full path to the secret database and raise an error if secret can't be found
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun Apr 17 13:12:27 CEST 2011 on sn-devel-104
2011-04-17 13:12:27 +02:00
Andrew Tridgell
6d0be9e3d1 s4-test: fixed a problem with very verbose NDR debug
lp.get("log level") returns a string, not an integer. It needs to be
cast to an integer for comparison with a number

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Apr  6 08:58:05 CEST 2011 on sn-devel-104
2011-04-06 08:58:05 +02:00
Kai Blin
4b78956985 s4 samba-tool: Implement "testparm" command
This is a port of the existing "testparm" python script to a samba-tool
command.

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Apr  5 07:49:13 CEST 2011 on sn-devel-104
2011-04-05 07:49:13 +02:00
Andrew Tridgell
bf3a75cf82 s4-samba-tool: give a bit better error on user delete failure 2011-04-04 10:30:30 +10:00
Andrew Tridgell
ef44794097 s4-fsmo: say which role is being transferred
this is particularly useful for "samba-tool fsmo transfer --role=all"
2011-03-29 00:00:23 +02:00
Andrew Tridgell
3600f2e250 s4-fsmo: samba-tool fsmo transfer now gets full error code
We now wait for the transfer to succeed or fail

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Andrew Tridgell
f4e3ccfe9e s4-fsmo: nicer error messages on failed FSMO transfers
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Andrew Tridgell
07b6f75bc1 s4-drs: default hostname in samba-tool drs command
default to our hostname

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Andrew Tridgell
f4d581468c s4-fsmo: samba-tool fsmo takes a URL, not a hostname
better to call the option --url

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Stefan Metzmacher
b423d83729 s4:ldapcmp: cope with range retrivals of multivalued attributes
A Windows Server returns a 'member;range=0-1499' attribute
with the first 1500 values of the 'member' attribute.

The client can do a BASE search on the given object
and ask for the 'member;range=1500-*' attribute.
It needs to loop until the high part of the returned
range is '*'.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Feb 14 16:26:46 CET 2011 on sn-devel-104
2011-02-14 16:26:46 +01:00
Nadezhda Ivanova
a38d04a7a8 s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format
Useful for testing purposes.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Feb 10 15:28:04 CET 2011 on sn-devel-104
2011-02-10 15:28:04 +01:00
Kamen Mazdrashki
d0867e5c6c s4/samba-tool/drs: Make use of Command.message() method instead of using 'print' 2011-02-09 11:57:12 +02:00
Kamen Mazdrashki
ad48c70db6 s4/samba-tool/drs: Move get_dsServiceName function at module level to be re-used 2011-02-09 11:57:12 +02:00
Kamen Mazdrashki
f3db67e14f s4/samba-tool: 'drs options' command implementation
Current implementation handle only one flag change per call
2011-02-09 11:57:11 +02:00
Kamen Mazdrashki
da3a2c68b0 s4/samba-tool: Add --sync-forced flag to 'drs replicate' command
We are going to need this to trigger replication when
inbound replication is disabled for a given DC

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Wed Feb  2 09:03:22 CET 2011 on sn-devel-104
2011-02-02 09:03:22 +01:00
Nadezhda Ivanova
35d8b80800 s4-tools: Fixed a bug in ldapcmp - DACL was not retrieved correctly if the object had no SACL.
--Pair-Programmed-With: Zahari Zahariev
2011-01-17 17:38:04 +01:00
Nadezhda Ivanova
3ecce7f2ee s4-tools: Added a --sort-aces option to ldapcmp
This option sorts the ACE lists during SD comparison in collision view to make it easier to
determine of a difference is only in ACE order, and if not, where do differences start.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Mon Jan 17 14:09:09 CET 2011 on sn-devel-104
2011-01-17 14:09:09 +01:00
Andrew Tridgell
a0bc538a8f s4-samba-tool: fixed the gpo command to use the right DN for access checks 2011-01-14 16:39:33 +11:00
Andrew Bartlett
29fb42a48b s4-samba_tool Added ACL checking to python GPO management tool 2011-01-14 16:39:32 +11:00
Zahari Zahariev
6a0a0478ad s4/ldapcmp: Two new options are added to the tool
The new ones are --base and --scope they give us the opportunity to
compare DN subsets of the partitions. Now we are also able to compare
any two objects even if they have different DNs. This is exteremely
helpful when you are after nasty nTSecurityDescriptor bug.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Fri Jan  7 13:22:26 CET 2011 on sn-devel-104
2011-01-07 13:22:26 +01:00
Anatoliy Atanasov
c9757371db s4/ldapcmp: Correct fix for creds2
We need to set domain and workstation to creds2 otherwise we get Segfault
because they are not initialized correctly.
2011-01-05 16:16:59 +02:00