1
0
mirror of https://github.com/samba-team/samba.git synced 2025-04-30 18:53:31 +03:00

128 Commits

Author SHA1 Message Date
Andrew Tridgell
0b3b7e3797 samba-tool: exit with non-zero status on dbcheck failure
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-17 15:25:42 +10:00
Andrew Tridgell
705ed1c492 samba-tool: show success message on group operations 2011-06-17 15:24:23 +10:00
Andrew Tridgell
a8269792aa samba-tool: report total error count and suggest --fix if needed 2011-06-17 12:32:55 +10:00
Andrew Tridgell
08dc1aa4cc samba-tool: added attribute normalisation checks
this checks that all attributes have the right normalisation, and
offers to fix the ones that don't
2011-06-17 12:32:55 +10:00
Andrew Tridgell
d575b2b0ab samba-tool: disable validation on removing an empty attribute in dbcheck
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Jun 14 10:49:34 CEST 2011 on sn-devel-104
2011-06-14 10:49:34 +02:00
Andrew Tridgell
0c89d624e6 s4-samba-tool: added dbcheck commmand
this will be used as a consistency checker and repair tool for
sam.ldb. This initial checkin just checks for empty attributes and
offers to fix them

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Jun 10 10:31:56 CEST 2011 on sn-devel-104
2011-06-10 10:31:56 +02:00
Andrew Tridgell
516dc404fd samba-tool: added --local option to drs replicate command
this allows replication directly to the local SAM, which means it can
run without the samba daemon running. It also bypasses all usnChanged
checks, which is useful for forcing replication of a set of objects
which are not marked as replication being needed

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Jun  9 08:15:10 CEST 2011 on sn-devel-104
2011-06-09 08:15:10 +02:00
Andrew Tridgell
087ee1f40e s4-gpo: fixed display of GPO version numbers 2011-06-06 12:26:10 +10:00
Andrew Tridgell
1bc1ac0d08 samba-tool: improved error handling in user setexpiry 2011-06-01 17:24:36 +10:00
Andrew Tridgell
7b3d8b6c90 samba-tool: improved user enable error handling 2011-06-01 17:24:36 +10:00
Theresa Halloran
23177b5f44 s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01 17:24:36 +10:00
Theresa Halloran
726ee12bb4 s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01 17:24:36 +10:00
Andrew Bartlett
c6cc22adc0 s4-libnet: Remove libnet_Join and create libnet_Join_member
libnet_Join conflicts with a function in the source3 netapi of the
same name, and the ability to join as a DC via this particular method
is unused.

Andrew Bartlett
2011-05-18 16:12:08 +02:00
Matthieu Patou
7f36f3effa s4-samba-tool: allow specification of targetdir when joining as (RO)DC
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Thu May  5 02:04:13 CEST 2011 on sn-devel-104
2011-05-05 02:04:13 +02:00
Matthieu Patou
7cc02cf870 samba-tool: fix machinepw command so that we use the full path to the secret database and raise an error if secret can't be found
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun Apr 17 13:12:27 CEST 2011 on sn-devel-104
2011-04-17 13:12:27 +02:00
Andrew Tridgell
6d0be9e3d1 s4-test: fixed a problem with very verbose NDR debug
lp.get("log level") returns a string, not an integer. It needs to be
cast to an integer for comparison with a number

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Apr  6 08:58:05 CEST 2011 on sn-devel-104
2011-04-06 08:58:05 +02:00
Kai Blin
4b78956985 s4 samba-tool: Implement "testparm" command
This is a port of the existing "testparm" python script to a samba-tool
command.

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Apr  5 07:49:13 CEST 2011 on sn-devel-104
2011-04-05 07:49:13 +02:00
Andrew Tridgell
bf3a75cf82 s4-samba-tool: give a bit better error on user delete failure 2011-04-04 10:30:30 +10:00
Andrew Tridgell
ef44794097 s4-fsmo: say which role is being transferred
this is particularly useful for "samba-tool fsmo transfer --role=all"
2011-03-29 00:00:23 +02:00
Andrew Tridgell
3600f2e250 s4-fsmo: samba-tool fsmo transfer now gets full error code
We now wait for the transfer to succeed or fail

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Andrew Tridgell
f4e3ccfe9e s4-fsmo: nicer error messages on failed FSMO transfers
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Andrew Tridgell
07b6f75bc1 s4-drs: default hostname in samba-tool drs command
default to our hostname

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Andrew Tridgell
f4d581468c s4-fsmo: samba-tool fsmo takes a URL, not a hostname
better to call the option --url

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-29 00:00:22 +02:00
Stefan Metzmacher
b423d83729 s4:ldapcmp: cope with range retrivals of multivalued attributes
A Windows Server returns a 'member;range=0-1499' attribute
with the first 1500 values of the 'member' attribute.

The client can do a BASE search on the given object
and ask for the 'member;range=1500-*' attribute.
It needs to loop until the high part of the returned
range is '*'.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Feb 14 16:26:46 CET 2011 on sn-devel-104
2011-02-14 16:26:46 +01:00
Nadezhda Ivanova
a38d04a7a8 s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format
Useful for testing purposes.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Feb 10 15:28:04 CET 2011 on sn-devel-104
2011-02-10 15:28:04 +01:00
Kamen Mazdrashki
d0867e5c6c s4/samba-tool/drs: Make use of Command.message() method instead of using 'print' 2011-02-09 11:57:12 +02:00
Kamen Mazdrashki
ad48c70db6 s4/samba-tool/drs: Move get_dsServiceName function at module level to be re-used 2011-02-09 11:57:12 +02:00
Kamen Mazdrashki
f3db67e14f s4/samba-tool: 'drs options' command implementation
Current implementation handle only one flag change per call
2011-02-09 11:57:11 +02:00
Kamen Mazdrashki
da3a2c68b0 s4/samba-tool: Add --sync-forced flag to 'drs replicate' command
We are going to need this to trigger replication when
inbound replication is disabled for a given DC

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Wed Feb  2 09:03:22 CET 2011 on sn-devel-104
2011-02-02 09:03:22 +01:00
Nadezhda Ivanova
35d8b80800 s4-tools: Fixed a bug in ldapcmp - DACL was not retrieved correctly if the object had no SACL.
--Pair-Programmed-With: Zahari Zahariev
2011-01-17 17:38:04 +01:00
Nadezhda Ivanova
3ecce7f2ee s4-tools: Added a --sort-aces option to ldapcmp
This option sorts the ACE lists during SD comparison in collision view to make it easier to
determine of a difference is only in ACE order, and if not, where do differences start.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Mon Jan 17 14:09:09 CET 2011 on sn-devel-104
2011-01-17 14:09:09 +01:00
Andrew Tridgell
a0bc538a8f s4-samba-tool: fixed the gpo command to use the right DN for access checks 2011-01-14 16:39:33 +11:00
Andrew Bartlett
29fb42a48b s4-samba_tool Added ACL checking to python GPO management tool 2011-01-14 16:39:32 +11:00
Zahari Zahariev
6a0a0478ad s4/ldapcmp: Two new options are added to the tool
The new ones are --base and --scope they give us the opportunity to
compare DN subsets of the partitions. Now we are also able to compare
any two objects even if they have different DNs. This is exteremely
helpful when you are after nasty nTSecurityDescriptor bug.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Fri Jan  7 13:22:26 CET 2011 on sn-devel-104
2011-01-07 13:22:26 +01:00
Anatoliy Atanasov
c9757371db s4/ldapcmp: Correct fix for creds2
We need to set domain and workstation to creds2 otherwise we get Segfault
because they are not initialized correctly.
2011-01-05 16:16:59 +02:00
Anatoliy Atanasov
2e30897503 Revert "s4/ldapcmp: Fix the parsing of the second set of credentials"
This reverts commit 1cbce84683ef4fa49b85d87988c5e8db7057530a.
Wrong assumption about a segmentation fault
2011-01-05 16:14:14 +02:00
Anatoliy Atanasov
3f0db2e53b Revert "s4/ldapcmp: Check if creds2 is actualy set by the command line"
This reverts commit f8275bae5d7b471967be7222170d049c18b8882f.
Wrong assumption about a segmentation fault.
2011-01-05 16:14:14 +02:00
Anatoliy Atanasov
f8275bae5d s4/ldapcmp: Check if creds2 is actualy set by the command line
When parsing the command line for the second set of credentials
the parser returns wrong user if the second set of parameters isn't set.
So check if the password is set instead.

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Tue Jan  4 18:11:26 CET 2011 on sn-devel-104
2011-01-04 18:11:26 +01:00
Anatoliy Atanasov
1cbce84683 s4/ldapcmp: Fix the parsing of the second set of credentials
We need this second set of credentials so we can do comparison
between DCs in two different domains.

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Tue Jan  4 16:36:06 CET 2011 on sn-devel-104
2011-01-04 16:36:06 +01:00
Andrew Tridgell
545932fda5 samba-tools: more reasonable defaults for samba-tool commands
- fallback to machine account where possible

- default to local hostname where this is reasonable
2010-12-08 05:26:05 +01:00
Andrew Tridgell
249afc8906 samba-tools: export doesn't need any credentials
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-12-08 05:26:05 +01:00
Andrew Tridgell
b7172e7a71 s4-drs: cope with invalid NTDS DNs from DsReplicaInfo()
w2k3 sometimes returns a deleted DN

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Dec  1 07:48:19 CET 2010 on sn-devel-104
2010-12-01 07:48:18 +01:00
Andrew Bartlett
c1fa6be925 s4-samba-tool Show when we have created the user successfully 2010-12-01 16:09:58 +11:00
Andrew Tridgell
c2fb350218 s4-drs: the options attribute is optional on NTDSDSA objects 2010-12-01 16:09:58 +11:00
Andrew Tridgell
37bfc4ec38 s4-samba-tool: fixed exception handling in subcommands
this switches to the new pattern of:

 except Exception, e:
 	raise CommandError("some error message", e)
2010-11-29 18:04:42 +11:00
Andrew Tridgell
6250690310 s4-samba-tool: fixed ldb exception handling in domainlevel command
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-29 18:04:42 +11:00
Andrew Tridgell
a1f96923e6 s4-samba-tool: improved exception handling in samba-tool
we now do reasonable printing on a wide range of common exception
classes, and always force a backtrace on an exception if the debug
level is >= 3

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-11-29 18:04:42 +11:00
Andrew Tridgell
abe9ac53f0 s4-ldapcmp: make ldapcmp a samba-tool command
The ldapcmp tool is very useful, and should be available to Samba
admins, not just developers. This makes it a samba-tool command, which
also gives it the nicer command line handling that samba-tool has
2010-11-29 18:04:42 +11:00
Andrew Tridgell
6982a00ded s4-gpo: started on samba-tool gpo list command 2010-11-29 18:04:42 +11:00
Andrew Tridgell
7a826d02a3 s4-samba-tool: started on gpo subcommands in python
this adds the listall GPO command. Currently the python variants are
available as "samba-tool gpo2 SUBCOMMAND". These will replace the
"samba-tool gpo" commands when complete
2010-11-29 18:04:41 +11:00