1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-26 21:57:41 +03:00

3259 Commits

Author SHA1 Message Date
Andrew Bartlett
117d5f4c37 selftest: Cover the important non-Samba invalidation of the NT ACL
This covers the case where we have a valid hash of the posix ACL (or the NT ACL from the
POSIX ACL) and we notice it no longer matches.

Andrew Bartlett
2012-10-25 22:18:50 +11:00
Andrew Bartlett
53244c9151 selftest: Cover one more NT ACL invalidation case and improve comments
This tries to show the difference between the cases where we trap
the POSIX ACL change and where we actually detect an OS-level change.

Andrew Bartlett
2012-10-25 20:24:36 +11:00
Andrew Bartlett
e9b6b23fbd selftest: Add many more tests for our posix ACL handling
This tests the mapping of posix ACLs to NT ACLs, the invalidation of
NT ACLs stored as an xattr and ensures this security-critical code
continues to work in the long term.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Oct 25 10:05:16 CEST 2012 on sn-devel-104
2012-10-25 10:05:16 +02:00
Jelmer Vernooij
13bbd3b3b1 pyglue: Make all_interfaces argumen to interface_ips() optional.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Sun Oct 21 21:26:01 CEST 2012 on sn-devel-104
2012-10-21 21:26:01 +02:00
Jelmer Vernooij
f67c0a28cf pyglue: Mention parameters in interface_ips() docstring. 2012-10-21 10:42:40 -07:00
Jelmer Vernooij
e3a48bb5f6 samba-tool user test: Fix expected output.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Fri Oct 19 11:37:44 CEST 2012 on sn-devel-104
2012-10-19 11:37:44 +02:00
Jelmer Vernooij
364ed82d22 samba.tests.docs: Ignore removed parameters. 2012-10-19 09:21:01 +02:00
Jelmer Vernooij
ed37b8ad14 samba.tests.docs: Assume docs are generated by waf. 2012-10-19 09:16:55 +02:00
Jelmer Vernooij
cfa72bcc5e samba.tests.docs: Write error output from xsltproc to standard out. 2012-10-19 09:10:14 +02:00
Jelmer Vernooij
8412b57f5c samba.tests.docs: Skip tests if xsltproc is not present. 2012-10-19 09:10:14 +02:00
Jelmer Vernooij
2a31f0b509 smb.conf(5): Consistent spelling of parameter names.
This includes spacing and casing.
2012-10-19 09:10:14 +02:00
Jelmer Vernooij
32fad2b910 samba.tests.docs: Support spaces before synonyms. 2012-10-19 09:10:14 +02:00
Jelmer Vernooij
be4dea45da samba.tests.docs: Support synonyms. 2012-10-19 09:10:14 +02:00
Jelmer Vernooij
d0e644e0c8 samba.tests.docs: Distinguish between unknown and undocumened parameters. 2012-10-19 09:10:14 +02:00
Jelmer Vernooij
d2f8fe855d tests: Convert find_missing_doc into a unit test. 2012-10-19 09:10:13 +02:00
Jelmer Vernooij
d09f151638 samba-tool user: Fix typos, improve messages. 2012-10-18 22:34:29 +02:00
Alexander Wuerstlein
64886e312f Warn when setting UID/GID without idmap_ldb:use rfc2307 = Yes
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Oct 18 09:51:35 CEST 2012 on sn-devel-104
2012-10-18 09:51:35 +02:00
Alexander Wuerstlein
071047e895 Tests for 'samba-tool user create' with RFC2307 attributes
Check if attributes are correctly set and read from SamDB
Test automatic creation of attributes from getpwent (NSS)
Check if overriding NSS attributes works

getpwent will be skipped if the current UID of the user running the
tests has no passwd entry (getpwuid(geteuid())).

If a user with the name of the current UID already exists in the
directory, the getpwent test will fail. If that should happen, the
test would need to be updated to use a nonexistent UID that is
visible to the Python 'pwd' module.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18 17:10:58 +11:00
Alexander Wuerstlein
bfdaaf2327 Set RFC2307 attributes in samba-tool create
Optionally set RFC2307 (NIS Schema) attributes in samba-tool create.
Mainly needed for UID mapping to be usable.
Not all attributes are set-able, only harmless and non-overlapping
ones (uid, uidNumber, gidNumber, loginShell, gecos). Description and
homeDirectory should already be set, userPassword seems problematic.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18 17:10:58 +11:00
Andrew Bartlett
9eb022c8c6 provision: No longer use the wheel group in new AD Domains
The issue here is that if we set S-1-5-32-544 (administrators) to a
GID only, then users cannot force a mandetory profile to be owned by
administrators (which is a requirement).

There is no particularly useful reason for us to enforce this matching
a system group.

Andrew Bartlett
2012-10-18 17:10:58 +11:00
Ricky Nance
d09ac9636a Removed phpldapadmin inclusion for Samba 4.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Wed Oct 17 12:55:44 CEST 2012 on sn-devel-104
2012-10-17 12:55:44 +02:00
Stefan Metzmacher
266b4c5963 Revert "provision: Always create DNS user."
This reverts commit c2d14747d608d406de6410556807d467cd0b85ef.

samba_upgradedns handles creates/removed the dns acount.

See
https://lists.samba.org/archive/samba-technical/2012-October/thread.html#87578

metze
2012-10-16 08:38:25 +02:00
Jelmer Vernooij
21b58b5eac samba.join: Fix multiple spaces.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Thu Oct 11 20:30:43 CEST 2012 on sn-devel-104
2012-10-11 20:30:43 +02:00
Jelmer Vernooij
2adf27a99b samba.provision.sambadns: Use == to compare strings, not 'is'. 2012-10-11 18:50:40 +02:00
Jelmer Vernooij
c2d14747d6 provision: Always create DNS user.
The DNS user is currently only used by the bind9 plugin. This makes it
easier to later on switch between the builtin DNS server and bind
backend.

In addition, ideally the internal DNS server would use that (separate)
user too.

Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Thu Oct 11 17:05:40 CEST 2012 on sn-devel-104
2012-10-11 17:05:40 +02:00
Karolin Seeger
f9a4a9bfe1 samba-tool: Some more unifications...
in the usage message.

Karolin
2012-10-09 17:12:07 +02:00
Andrew Bartlett
2f0753b456 samba-tool: skip chown in sysvolreset when it would fail on a GID
This skips the chown of the files if (for example) the domain Admins group
were to own the file and not be able to because the group maps only to a GID.

This essentially papers over the problem, but may be enough to get us past
the Samba 4.0 release.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Oct  9 15:24:44 CEST 2012 on sn-devel-104
2012-10-09 15:24:44 +02:00
Stefan Metzmacher
8746faf846 s4:scripting/python: add '-V' as alias for '--version'
metze

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Mon Oct  8 17:52:52 CEST 2012 on sn-devel-104
2012-10-08 17:52:52 +02:00
Stefan Metzmacher
309434a773 s4:samba-tool: allow 'samba-tool --version'
metze
2012-10-08 16:13:06 +02:00
Stefan Metzmacher
2fce71c89a s4:samba-tool: use normal option parsing in SuperCommand
We use the epilog to print the subcommands.

metze
2012-10-08 16:13:06 +02:00
Stefan Metzmacher
8d4943dcf9 s4:samba-tool: add optional epilog to _create_parser()
metze
2012-10-08 16:13:06 +02:00
Karolin Seeger
acea51cc37 samba-tool: Unify usage messages.
Karolin

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Oct  8 14:26:52 CEST 2012 on sn-devel-104
2012-10-08 14:26:51 +02:00
Karolin Seeger
a2f3ec0577 samba-tool: Clarify usage of --help.
Karolin
2012-10-08 11:47:22 +02:00
Karolin Seeger
171bf9827b samba-tool: Fix typo in usage.
Karolin
2012-10-08 11:14:42 +02:00
Matthieu Patou
95ea6d765b s4-join: factorize code, add info 2012-10-07 22:11:47 -07:00
Matthieu Patou
d57e0d8a6d s4-join: add some documentation 2012-10-07 22:11:47 -07:00
Matthieu Patou
e332f98909 devel-crackname: Print if count > 0 2012-10-07 21:51:01 -07:00
Björn Baumbach
9a6f648122 s4: samba_backup: Fix typos.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-10-03 16:26:53 +02:00
Jelmer Vernooij
df23b17fa9 provision: Use logger rather than print.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Wed Oct  3 14:24:09 CEST 2012 on sn-devel-104
2012-10-03 14:24:09 +02:00
Matthieu Patou
c1677e3b2f s4-provision: do not skip setting the acls on sysvol
Autobuild-User(master): Matthieu Patou <mat@samba.org>
Autobuild-Date(master): Wed Oct  3 10:26:06 CEST 2012 on sn-devel-104
2012-10-03 10:26:06 +02:00
Kai Blin
81805222ec s4 dns: Fix return code for deleted records
This fixes bug #9225. We already had a test for this scenario, but the test wasn't
correct. This patch fixes the test, and also fixes the bug.

Signed-off-by: Kai Blin <kai@samba.org>

Autobuild-User(master): Kai Blin <kai@samba.org>
Autobuild-Date(master): Sun Sep 30 13:09:14 CEST 2012 on sn-devel-104
2012-09-30 13:09:14 +02:00
Jelmer Vernooij
0883e174bf sanba.upgradehelpers: Use standard functionality for getting temp dir. 2012-09-27 18:45:12 +02:00
Jelmer Vernooij
2a797f29aa s4-python: Various formatting fixes.
* Trailing whitespace
* use of "==" where "is" should be used
* double spaces
2012-09-27 18:45:12 +02:00
Jelmer Vernooij
6986f7bdda samba.tests.source: Check for trailing whitespace in Python files. 2012-09-27 18:45:12 +02:00
Ricky Nance
ee0012de1a samba-tool domain provision: DNS forwarder default
Provision would break with an exception if there was no value given for the DNS forwarder, this simply sets a default to "none".

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>

Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Thu Sep 27 04:35:33 CEST 2012 on sn-devel-104
2012-09-27 04:35:33 +02:00
Jelmer Vernooij
c5e83ee9a5 samba-tool: Hide 'samba-tool domain samba3upgrade'.
This subcommand is provided for backwards compatibility only; new use of
it should be discouraged. Its new name is 'samba-tool domain
classicupgrade'.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=9047
2012-09-26 07:58:31 +02:00
Andrew Bartlett
3c4d0ce469 samba_dnsupdate: Safely update/create names for Samba3 targets as well
This avoids unlocked writes to the dns_hosts_file, and may fix some of our
issues on the build farm where large numbers of tests fail due to failed name resolution.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Wed Sep 26 05:48:25 CEST 2012 on sn-devel-104
2012-09-26 05:48:25 +02:00
Andrew Bartlett
6d7c651f2f samba_dnsupdate: Move to using tmpfile/rename to keep the dns_hosts_file consistent
This may be the cause of some of the large failure modes on the build farm.

Andrew Bartlett
2012-09-26 04:08:26 +02:00
Jelmer Vernooij
fa332b71dc s4-python: Override SIGINT handler in scripts only.
Override the SIGINT handler in a few select cases only, rather than
doing so in one of the samba Python modules. I've done this where it
matters most; we can add this code to other scripts too if necessary.

This means that importing the 'samba' module from a third party
application does not have side-effects on the state of the signal
handlers.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=9068
2012-09-25 20:59:09 +02:00
Jelmer Vernooij
f44ad36718 samba-tool domain provision: DNS forwarder is not a boolean.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Tue Sep 25 00:48:43 CEST 2012 on sn-devel-104
2012-09-25 00:48:42 +02:00