1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-30 19:42:05 +03:00
Commit Graph

325 Commits

Author SHA1 Message Date
41493cbe68 Update OpenLDAP MMR configuration per comments by Oliver Liebel
<oliver@itc.li>

This changes the RIDs to be <serverID><DBID>, to ease later debugging.

The need to specify the port on the MMR URLs is now included in the
help.

Andrew Bartlett
(This used to be commit a5cbe8c09c)
2008-08-20 12:21:36 +10:00
b33f4541f6 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit fc6b4f03eb)
2008-08-19 14:11:51 +10:00
7ef21658fb Fix up new OpenLDAP MMR code.
This changes the MMR password from hard-coded value of 'linux',
adds tests and fixes the Fedora DS backend.

Currently the MMR password matches the admin password, but we can
change this to be another random value if required.

Also require the port to be specified on the command line, so we don't
hard-code a port of 9000.

Andrew Bartlett
(This used to be commit 08257c6d6c)
2008-08-19 14:10:14 +10:00
805dd85291 Generate Multi-Master Replication configuration for OpenLDAP
This patches provision-backend and the related scripts to generate the
correct configuration blobs for N-way multi-master replication using
OpenLDAP.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 6ed0b3f247)
2008-08-19 12:03:04 +10:00
47d80366be Fix templates.ldb reprovision handling.
This sets the attributes in a seperate transaction, and allows a
forced delete of the whole file.

Andrew Bartlett
(This used to be commit 423db2468b)
2008-08-19 11:43:41 +10:00
1c94f3e95d Use new style python classes.
(This used to be commit 2a39aae0ce)
2008-08-01 21:00:09 +02:00
3b4ff07ded Actually fix missing substitution variables.
(This used to be commit 783412ecb2)
2008-08-01 20:47:03 +02:00
2fbe25b39d Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
(This used to be commit c87a8ba1fe)
2008-08-01 20:17:56 +02:00
3573420d7d Fix some forgotten substitute variables in provision, add check to prevent this sort of regression in the future.
(This used to be commit a461118f3b)
2008-08-01 20:17:29 +02:00
e80115deb9 We don't use EXTENSIBLEOBJECT any more.
(This used to be commit 4b137085c8)
2008-07-28 20:51:02 +10:00
08795db6d6 Make it even clearer what to do next in the LDAP backend setup
(This used to be commit bace931ad6)
2008-07-28 20:26:14 +10:00
45d60f5bd9 Always print the slapd startup command
(This used to be commit b1d05e7d14)
2008-07-28 20:18:17 +10:00
cff30c6da6 Remove unused function and make sensitive directories private.
(This used to be commit e23333d163)
2008-07-28 08:04:15 +10:00
1f285560bc Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit b12dd8ee54)
2008-07-25 11:58:51 +10:00
11798902dc Complain if we are told to use an ldap backend, without the type
(This used to be commit e9c3c9ad82)
2008-07-25 08:45:16 +10:00
c9c296b6bb Install'named.txt' to private/ as documentation.
This document is much more use when subbed with all the right things.

Andrew Bartlett
(This used to be commit 136a855998)
2008-07-22 11:09:18 +10:00
fb3e663678 Improve DNS and Group poicy configurations.
- fixes bug #4813 (simplify DNS setup)
  - This reworks the named.conf to be a fully fledged include
  - This also moves the documentation into named.txt
 - improves bug #4900 (Group policy support in Samba)
   - by creating an empty GPT.INI
 - fixes bug #5582 (DNS: Enhanced zone file)
   - This is now closer to the zone file AD creates

committed by Andrew Bartlett
(This used to be commit 74d684f6b3)
2008-07-22 11:06:47 +10:00
3408a2d18f Make a seperate template for the refint configuration too
(This used to be commit d2a527acc5)
2008-07-18 18:58:56 +10:00
cfc2063f23 Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP

Andrew Bartlett
(This used to be commit 6d6e03834a)
2008-07-18 18:44:07 +10:00
fe9fa62a05 Reorder whitespace in generated slapd.conf
This helps us see the real groupings in the generated memberOf
handling.

Andrew Bartlett
(This used to be commit ec70ebb831)
2008-07-16 14:04:24 +10:00
e400b3ec4e Fix asking for credentials for non-LDAP provisions.
(This used to be commit 78416f4840)
2008-07-15 18:44:58 +10:00
0f1eea2672 Rework provision to handle both simple and SASL binds.
Fedora DS is still setup for simple binds only, at this point.
(it also fails on other issues).

Andrew Bartlett
(This used to be commit b24c572d5a)
2008-07-15 15:46:32 +10:00
a6b842f963 Connect to the LDAP backend with SASL credentials.
This reworks our LDAP backend code to move from anonymous access to a
shared-secret SASL-protected connection.  (SASL selects NTLM or
DIGEST-MD5 on my system).

To get this working, we must pre-populate the LDAP backend with a DN
to store ths SASL secret on, and we use back-ldif for this.

This gives us a reasonable basis to deploy a replicated OpenLDAP
backend solution.

Andrew Bartlett
(This used to be commit cd0745253c)
2008-07-15 15:15:12 +10:00
9ea25cacf1 Add a blackbox test for the provision-backend script.
This test (as most tests do :-) found a few bugs, also fixed in this
commit.

Andrew Bartlett
(This used to be commit d96a6482da)
2008-06-19 11:05:20 +10:00
370f95acfc Try to get a bit further with provisioning
(This used to be commit 649f6c0c10)
2008-06-16 17:52:50 -04:00
2772871146 Fix samdb python test.
(This used to be commit 0e3d488cc1)
2008-05-30 14:15:40 +02:00
b9babfe4cc Fix up provision and samdb tests.
This fixes up the provision to operate with a target directory - it
must override the smb.conf in this case.

Andrew Bartlett
(This used to be commit 89fc39f7ed)
2008-05-30 14:26:47 +10:00
b7c8e020a6 Print prefixMap in a human-readable format.
This should allow the prefixMap to be edited, until we find the right
way to autogenerate it.

Andrew Bartlett
(This used to be commit 24ae9a55ec)
2008-05-29 18:38:17 +10:00
815c0ef2ed provision: Add missing string parameter token when assigning ldap_backend.
(This used to be commit 7d26145a7f)
2008-05-28 22:43:25 -05:00
73b789b6d2 Add docstrings to a couple more python modules.
(This used to be commit b4560c90e5)
2008-05-24 04:01:57 +02:00
a203ee1ab1 Fix indentation, add docstring in provisioning script.
(This used to be commit 86a8a08549)
2008-05-23 16:43:26 +02:00
e3d000f3bf Some more PEP improvements.
(This used to be commit 015ca850df)
2008-05-23 16:29:08 +02:00
cceac63aaa Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-wsgi
Conflicts:

	source/scripting/python/samba/provision.py
(This used to be commit d27de63365)
2008-05-23 16:24:07 +02:00
c401aa9357 Use restructuredText formatting for docstrings.
(This used to be commit 0cc58decd7)
2008-05-23 00:37:22 +02:00
bf3f3af926 provision: Generate krb5.conf template separate from named.conf template.
(This used to be commit ebf130e9e5)
2008-05-21 20:46:15 -05:00
25ea110c38 provision: Create instructions for enabling DNS GSS-TSIG updates.
Added code to the python provisioning to create the named.conf file that was
previously generated by the EJS provisioning.

Updated the named.conf template to provide the additional details necessary
to get things working.
(This used to be commit 0b7a6bfcba)
2008-05-18 01:54:57 -05:00
251f6bd991 make sure to always use string version of uuid rather than object.
(This used to be commit bcd5fc7dc9)
2008-05-11 04:36:37 +02:00
5319d9620b Use consistent function names with the standard Python uuid module that is available in >= 2.4.
(This used to be commit 60d458e319)
2008-05-11 03:31:26 +02:00
2ddd23a875 Re-add 'db' subdirectory for LDAP backend provision
Andrew Bartlett
(This used to be commit 19890c0d15)
2008-04-15 17:10:47 +02:00
f8f4856ab7 Fix provision-backend script
Andrew Bartlett
(This used to be commit ee6e4f8da2)
2008-04-15 15:52:52 +02:00
e44f0e7b75 Don't reopen the sam.ldb again
Andrew Bartlett
(This used to be commit b51b8a2d84)
2008-04-11 19:33:52 +10:00
393007315d Far less cryptic traceback when you have an existing smb.conf
When the user has an existing smb.conf, but no [netlogon] or [sysvol]
share, the provision script would trigger a traceback.  While we still
need to abort in this situation, we do so now with a useful error.

Andrew Bartlett
(This used to be commit 10a8b7ea48)
2008-04-11 19:04:43 +10:00
ae977ef247 Fix merge errors on C provision interface after jelmer's good work.
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet

Conflicts:

	source/torture/local/torture.c
(This used to be commit 5bf1c89cf8)
2008-04-11 11:11:42 +10:00
ad8e3e4192 Add infrastructure for returning ProvisionResult in C provision code.
(This used to be commit 98c3d34eb2)
2008-04-10 05:23:17 +02:00
b202b6e7d4 Fix up provision to specify SERVERDN in more places.
Andrew Bartlett
(This used to be commit d01d542502)
2008-04-09 15:32:49 +10:00
9d2948f4bd Don't fill in the secrets DB unless we make the entries.
Leave filling in (we still initialise it) the secrets DB for the join
or vampire code.

Andrew Bartlett
(This used to be commit c93208c13c)
2008-04-09 14:57:57 +10:00
ac10ac62c1 Add docstring, PEP8.
(This used to be commit f8cac3735c)
2008-04-09 03:51:41 +02:00
b2805c50ee Re-add support for the --ldap-backend-port option to provision-backend
This option allows Fedora DS multi-master replication to work.  I've
tried to update the wiki and scripts to the largely consistant with
each other.

Andrew Bartlett
(This used to be commit 42393c8307)
2008-04-08 17:28:25 +10:00
7c7880695b More PEP8 compliancy.
(This used to be commit d16b30d005)
2008-04-06 00:40:01 +02:00
3e97aa73c2 Simplify some code, fix style.
(This used to be commit 1c983e4e4d)
2008-04-05 16:32:28 +02:00