1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-14 19:24:43 +03:00

2037 Commits

Author SHA1 Message Date
Matthias Dieter Wallnöfer
7578e04fb8 s4:provision - adapt the "provision" so that SIDs are only set on entry creation
SID modifications are denied.
2010-11-01 12:25:24 +01:00
Andrew Tridgell
43f7c9ca26 s4-test: we don't need to set LDB_MODULES_PATH any more 2010-11-01 18:55:19 +11:00
Matthias Dieter Wallnöfer
572774a7a0 s4:provision - remove the "servicePrincipalName" creation on the DC object
This is now done by the "samba_spnupdate" script.
2010-10-31 18:44:07 +00:00
Matthias Dieter Wallnöfer
971ce6c5ed s4:scripting/bin/samba_spnupdate - also support adding all possible "servicePrincipalName"s 2010-10-31 18:44:06 +00:00
Jelmer Vernooij
3deece5591 s4: Remove the old perl/m4/make/mk-based build system.
The new waf-based build system now has all the same functionality, and
the old build system has been broken for quite some time.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-31 02:01:44 +00:00
Matthieu Patou
b548674c29 provision: fix wrong tests
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Oct 30 17:31:23 UTC 2010 on sn-devel-104
2010-10-30 17:31:23 +00:00
Matthieu Patou
dc0000e1a8 provision: when deriving netbiosname from hostname force the netbiosname to be compliant
It means no space/_/-/@.... and less than 16 chars.

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Oct 30 14:26:22 UTC 2010 on sn-devel-104
2010-10-30 14:26:22 +00:00
Matthieu Patou
d8e246cf8a Add a script for formating test result of st/subunit
This script show the time of each test and tests are sorted by execution
time (from the slowest to the quickest)

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Tue Oct 26 20:42:11 UTC 2010 on sn-devel-104
2010-10-26 20:42:11 +00:00
Jelmer Vernooij
a702c07e02 talloc: change pytalloc-util to be a public library. 2010-10-26 10:17:19 -07:00
Jelmer Vernooij
0ceb5018f3 waf: Remove unused EXT_LIB_PYTHON. 2010-10-26 10:17:19 -07:00
Jelmer Vernooij
1ae0981ce8 talloc: Move pytalloc to lib/talloc. 2010-10-26 10:17:18 -07:00
Jelmer Vernooij
8cf61377aa waf: Remove lib prefix from libraries manually. 2010-10-26 10:17:17 -07:00
Jelmer Vernooij
d9cbcdd410 s4: Drop duplicate 'lib' prefix for private libraries. 2010-10-26 10:17:16 -07:00
Jelmer Vernooij
833480d3ad s4: Rename LIBSAMBA-* to libsamba-* 2010-10-24 00:20:04 +00:00
Jelmer Vernooij
9065f9644b s4: Rename LIBNETIF to libnetif. 2010-10-23 22:24:06 +00:00
Matthias Dieter Wallnöfer
8b9a08e10f s4:provision.py - add the correct "CN=Sites" security descriptor
This should help to fix bug #7403.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104
2010-10-23 20:16:59 +00:00
Matthias Dieter Wallnöfer
245642a36b s4:schema.py - reformat and fix the security descriptor
- Now it matches Windows's order
- It contained a superfluous entry (an "Administrator" user grant)
2010-10-23 19:35:06 +00:00
Andrew Tridgell
1748d10e47 s4-python: python_samba needs pyext 2010-10-21 19:03:27 +11:00
Andrew Tridgell
af36485ae5 s4-python: added a samba_python grouping library
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21 19:03:26 +11:00
Matthias Dieter Wallnöfer
a9b58f6246 s4:samdb.py - remove a pointless comment
We are only looking for the default DN - but the method name already tells
us this.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Oct 19 10:03:12 UTC 2010 on sn-devel-104
2010-10-19 10:03:12 +00:00
Matthias Dieter Wallnöfer
8c4f6bcd67 s4:samdb.py - use a more standard way to get to the domain realm/dns name
We do always use the canonical name as a base if we don't have it around yet.
2010-10-19 09:21:04 +00:00
Lukasz Zalewski
87fd2fd157 Addition of userPrincipalName attribute when new account is created 2010-10-19 09:21:04 +00:00
Andrew Bartlett
f9c7365e53 s4-provisionbackend Allow a fixed URI to be specified for LDAP backend
This is added to make the 'existing' LDAP backend class more useful,
and to allow debuging of our OpenLDAP backend class with wireshark, by
forcing the traffic over loopback TCP, which is much easier to sniff.

Andrew Bartlett
2010-10-19 18:57:06 +11:00
Andrew Bartlett
4d9b12ae8f s4-provision Remove serverdn parameter from Schema()
We don't need to know the server DN here any more, and it
makes no sense for many callers.

Andrew Bartlett
2010-10-19 18:57:00 +11:00
Jelmer Vernooij
5324b943e7 wafsamba: Fix handling of pyembed/pyext. 2010-10-10 23:54:04 +00:00
Jelmer Vernooij
c15e919a09 wafsamba: Clarify needs_python argument name, use pyembed/pyext where
applicable.

Allow using both pyembed and pyext, to prevent unresolved symbols.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Oct 10 03:54:01 UTC 2010 on sn-devel-104
2010-10-10 03:54:01 +00:00
Andrew Tridgell
c24240bcd2 waf: fixed some python3.x portability issues
these have crept into the tree over time. Maybe we should add testing
of a range of python versions to autobuild?
2010-10-06 11:13:05 +00:00
Kamen Mazdrashki
5218bcf76f s4-provision: Reset "debuglevel" after "provision" take place
Otherwise "provision" resets our current debug level and
we don't get debug messages we may expect onwards

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Oct  5 11:32:50 UTC 2010 on sn-devel-104
2010-10-05 11:32:50 +00:00
Matthias Dieter Wallnöfer
dda6c354f6 s4:dsdb python stuff - introduce also here the "show_recycled" control
But also here beside "show_deleted" to not loose compatibility with older
provisions.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-10-03 15:23:18 +00:00
Andrew Tridgell
29e1a847dd s4-selftest: silence warnings about bind chown 2010-10-02 21:11:52 -07:00
Andrew Tridgell
762ad1c4ba s4-test: silence the Failed to chown message in make test 2010-10-02 21:11:52 -07:00
Kamen Mazdrashki
197a1514d6 s4-ldapcmp.py: Don't guess credentials for second Credentials object
This allow us to fallback to first credentials given.

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Sat Oct  2 23:05:20 UTC 2010 on sn-devel-104
2010-10-02 23:05:20 +00:00
Kamen Mazdrashki
da0f3bd229 s4-getopt.py: Make Anonymous creds when no credentials
are supplied on command line and caller doesn't want us
to guess credentials from environment
2010-10-03 01:24:57 +03:00
Kamen Mazdrashki
302e1d29d8 s4-python-test: Common implementation for getting environment variable value
Unit-test based python tests require certain input parameters
to be set in environment, otherwise they can't be run
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
6546127b64 s4-python-samba: Remove trailing ';'s 2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
7acbb7346f s4-python-test: Implement global connect_samdb() function
This helper makes proper ldb url to connect to
and is a shorthand for test to create SamDB connections
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
46ac1c3b47 s4-samba.samdb: Fix masking names from outer context
- 'filter' is built-in
- 'ldb' is a module name we imported
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
0cb476fb26 s4-python-samba: 'file' is a built-in 2010-10-03 01:24:55 +03:00
Kamen Mazdrashki
edfb8c64f6 s4-samba.samdb: Fix leading indention and trailing ';' 2010-10-03 01:24:55 +03:00
Kamen Mazdrashki
e9620c5fd2 s4-python-samba: Fix few cosmetics
- we have sys module already imported
- _glue module is part of samba package so be more precise how to import
2010-10-03 01:24:55 +03:00
Andrew Tridgell
694f2876c9 s4-spn: don't try and send an empty SPN list
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 20:11:15 -07:00
Andrew Tridgell
176ecce9a6 s4-provision: wipe the old keytabs when provisioning
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 14:36:12 -07:00
Andrew Tridgell
67a04613e9 s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytab
we need to fetch the msDS-keyVersionNumber from the writeable DC

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 14:36:12 -07:00
Zahari Zahariev
73763b3678 LDAPCmp feature to compare nTSecurityDescriptors
New feature that enables LDAPCmp users to find unmatched or
missing ACEs in objects for the three naming contexts between
DCs in one domain (default) or different domains. Comparing
security descriptors is not the default action but attribute
compatison. So to activate the new mode there is --sd switch.
However there are two view modes to the new --sd action which
are 'section' (default) or 'collision'. In 'section' mode you
can only find differences connected to missing or value
unmatched ACEs but not disorder unmatch if ACE values and count
are the same. All of the mentioned differences plus disorder
ACE unmatch you can observe under 'collision' view however
it is more verbose.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
2010-09-30 09:41:20 -07:00
Andrew Tridgell
92586abac0 s4-dns: send A record updates via TKEY 2010-09-30 00:59:16 +00:00
Andrew Tridgell
768df75ed9 s4-devel: added new options to getncchanges script
added --pas, --dest-dsa and --replica-flags options

Pair-Programmed-With: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
2010-09-29 16:36:22 -07:00
Andrew Tridgell
31310826e0 s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS call
we can't do SPN updates via sam writes and replication, as the sam is
read-only
2010-09-29 03:55:04 +00:00
Andrew Tridgell
739a4e4e23 s4-drsutils: expose DsBind() call in drs_utils.py
this will be used by samba_spnupdate
2010-09-29 03:55:04 +00:00
Andrew Tridgell
06022dad70 s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers
Our helper scripts can fail on Fedora with the PDT timezone (Western
USA). This is the same issue we found with Heimdal earlier today, the
24 second difference between GMT and UTC, but this time in MIT
Kerberos as linked into bind9.

By forcing TZ=GMT in these scripts we avoid the problem

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-29 03:55:04 +00:00
Andrew Tridgell
6237d56027 s4-dns: added --update-list option to samba_dnsupdate
this allows us to use it for RODC netlogon updates
2010-09-27 22:55:05 -07:00