1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-01 05:47:28 +03:00

998 Commits

Author SHA1 Message Date
Andrew Tridgell
4f9977aaba r22984: not everyone uses tridgell.net (fortunately)
(This used to be commit f60817d7970ab449ac327f4da312f10350b9636f)
2007-10-10 14:52:35 -05:00
Andrew Tridgell
c0aa1f0d9e r22972: added the basic ldif needed to support group policies in Samba4. WinXP
clients do correctly see our group policies, but the gpmc admin tool
doesn't yet work to allow you to edit the policies
(This used to be commit 4c6e01a585f59caf7d2d87833f5eedc018ed8acc)
2007-10-10 14:52:34 -05:00
Andrew Bartlett
5ca5e6bdf9 r22921: This index saves another 7 seconds off a 'make quicktest', and is a common search operator.
Andrew Bartlett
(This used to be commit a258455e757dcc67637502bedf7066580cbf4034)
2007-10-10 14:52:30 -05:00
Andrew Tridgell
e9dcc9a3da r22887: and servicePrincipalName ....
(This used to be commit 45d668d19f661cbaff257b91ed2525577e3cf0d2)
2007-10-10 14:52:29 -05:00
Andrew Tridgell
71cbc569cb r22885: now we use kernberos more, we need to index on userPrincipalName
(This used to be commit 600d39e0bacfd669bdee0ea3aec6bdc02113993b)
2007-10-10 14:52:29 -05:00
Andrew Bartlett
112728c651 r22756: Make it easier to setup an LDAP replica. Provision with
--partitions-only (suggestions for a better name welcome) will setup
the partitions records, but no any data in those partitions.  This can
then point at the already configured remote LDAP server.

Andrew Bartlett
(This used to be commit ee7b06fc832ca7c572205c7c268c3c7c552effa0)
2007-10-10 14:52:15 -05:00
Andrew Bartlett
82ad0ea6ea r22572: Don't manually set objectGUID values
(This used to be commit b5afec8b828e1aba231501b68aa4196b94a87c32)
2007-10-10 14:51:46 -05:00
Andrew Bartlett
4d23d4b210 r22531: Fix up OpenLDAP schema map to almost pass 'make test'.
Andrew Bartlett
(This used to be commit ef9320ae5b0b01bd39b60c22ff4e3698ac0ae9a7)
2007-10-10 14:51:38 -05:00
Stefan Metzmacher
e5ea03737f r22530: use message() to make --quiet work
metze
(This used to be commit 7c381b2d4f92622ac7efdcc6b8e405d418e2d4bb)
2007-10-10 14:51:38 -05:00
Andrew Bartlett
17078a46b8 r22497: Support renaming objectclasses and attributes for the LDAP backend.
OpenLDAP is fussy about operational attributes in user-supplied
schema.

Andrew Bartlett
(This used to be commit d7cd4b768a7f56ced8ed94b9a63d01865ba7d10a)
2007-10-10 14:51:33 -05:00
Andrew Bartlett
f1851e7abc r22494: Skip subSchema again, but we will need to remap this objectClass.
Make the Fedora DS backend test again.

Andrew Bartlett
(This used to be commit 65327a0e4d61e2c9813720f04fe24ffc5c49278b)
2007-10-10 14:51:33 -05:00
Andrew Bartlett
3d4c4c5fa3 r22478: Update the LDAP backend code to handle initialisation of multiple
partitions onto the target LDAP server.

Make the LDAP provision run before smbd starts, then stop the LDAP
server.  This ensures this occurs synchronously, We then restart it
for the 'real run' (with slapd's stdin being the FIFO).

This required fixing a few things in the provision scripts, with more
containers being created via a add/modify pair.

Andrew Bartlett
(This used to be commit 860dfa4ea1ab2b62d4d4fe0644e0a9b882fdafa1)
2007-10-10 14:51:31 -05:00
Jelmer Vernooij
99fb785ea1 r21673: Fix Samba 3 data read tests. I can't figure out why the upgrade one is broken, so that one is still disabled.
(This used to be commit ef794f03d50022a77303c77045a04d9407d07cbc)
2007-10-10 14:49:08 -05:00
Stefan Metzmacher
c200374325 r21583: add missing CN=
metze
(This used to be commit 199416a4d3d7e0f4c416c66cb92e49fc9a83a556)
2007-10-10 14:49:00 -05:00
Stefan Metzmacher
760f438553 r21435: ntPwdHash,lmPwdHash,sambaNTPwdHistory,sambaLMPwdHistory and krb5Key
are not used anymore

metze
(This used to be commit 9e91bd64492c45ee333f5e797d4d492378600356)
2007-10-10 14:48:34 -05:00
Simo Sorce
7ca399c075 r21351: Change ldb ejs bindings return codes.
We were returning just true/false and discarding error number and string.

This checking probably breaks swat, will fix it in next round as swat
is what made me look into this as I had no way to get back error messages
to show to the users.

Simo.
(This used to be commit 35886b4ae68be475b0fc8b2689ca04d766661261)
2007-10-10 14:48:18 -05:00
Stefan Metzmacher
43014e70c3 r21298: protect windows password attributes too
metze
(This used to be commit 5c779b3767b47c140fc658fb9aed0ebfd5d956f0)
2007-10-10 14:48:04 -05:00
Andrew Bartlett
744dddd75b r21135: Instead of having hooks to update keytabs as an explicit thing, update
them as a hook on ldb modify, via a module.

This should allow the secrets.ldb to be edited by the admin, and to
have things update in the on-disk keytab just as an in-memory keytab
would.

This isn't really a dsdb plugin, but I don't have any other good ideas
about where to put it.

Andrew Bartlett
(This used to be commit 6ce557a1aff4754d2622be8f1c6695d9ee788d54)
2007-10-10 14:44:31 -05:00
Stefan Metzmacher
9de1b173b4 r20956: cn and instanceType are autogenerated values, later we need to remove them from all
ldif files, but for now only the ones used by the NET-API-BECOME-DC test

metze
(This used to be commit 7510b9ca4a79c12c31abcf4a64b5eaba2f6c2fe9)
2007-10-10 14:44:02 -05:00
Stefan Metzmacher
5e2f0275e8 r20859: fix typo
metze
(This used to be commit ba6ee1a098381683223d7efaafb04582a47ea871)
2007-10-10 14:43:40 -05:00
Stefan Metzmacher
21206f36c6 r20826: make the dsdb_control_current_partition struct public and allocate an oid for the
control

metze
(This used to be commit 684eee52e8812f6d104d8706ab059643ff4faa46)
2007-10-10 14:43:37 -05:00
Stefan Metzmacher
03d2647bd0 r20805: don't use hardcoded values for secrects.keytab and sam.ldb
metze
(This used to be commit c78e345feaef607b9297372aacb00ec068127785)
2007-10-10 14:43:32 -05:00
Stefan Metzmacher
82b4069171 r20728: the DSDB_CONTROL_REPLICATED_OBJECT_OID control isn't used anymore
because we now use DSDB_EXTENDED_REPLICATED_OBJECTS_OID extended operation

metze
(This used to be commit 4380cc9ed6ac2e6c133b5a36f922b341474a8e7e)
2007-10-10 14:40:32 -05:00
Stefan Metzmacher
05533e23f9 r20678: add index for objectGUID
metze
(This used to be commit e967b370173e1ae86632132851ab33d92c221291)
2007-10-10 14:40:20 -05:00
Stefan Metzmacher
15d9b63caf r20586: - allocate an OID range for LDB/LDAP extended operations
- allocate an OID for DSDB_EXTENDED_REPLICATED_OBJECTS_OID which
  will replace the DSDB_CONTROL_REPLICATED_OBJECT_OID soon

metze
(This used to be commit 6397f014482172573facd3d87d1f9eec1b320ac5)
2007-10-10 14:37:08 -05:00
Stefan Metzmacher
13881fa128 r20577: - allocate an OID range for samba4 LDB/LDAP Controls
- allocate an OID for LDB Control that hold meta data when applying
  replicated objects

metze
(This used to be commit 2660c5ab211f353324452694b4bd5fd8bd17745b)
2007-10-10 14:37:06 -05:00
Stefan Metzmacher
d0e221c4e0 r20568: split out the rootdse ldif
and set the isSyncronized = TRUE when we done

metze
(This used to be commit 5875ce1ac6ff694d07787ff0cf81b3429580311b)
2007-10-10 14:37:02 -05:00
Stefan Metzmacher
7d461ed481 r20565: configure the list of global ldb modules also in js code
metze
(This used to be commit cbebe559a2563a3ab9dd2e002c79676a803b71a4)
2007-10-10 14:36:59 -05:00
Stefan Metzmacher
8a2636af4a r20560: make it possible to configure the backend and modules
for all partitions and make it not use LDAP in the variable names
because it isn't specific to the ldap backend case.

metze
(This used to be commit 3e337ec2764038e4ff05c3e926220abaa5583702)
2007-10-10 14:36:57 -05:00
Stefan Metzmacher
8f0a0ebcb3 r20557: use ${DOMAINDN} instead of ${BASEDN}
metze
(This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-10-10 14:36:56 -05:00
Stefan Metzmacher
2c266fb217 r20554: - use ${ROOTDN} for the rootDomainNamingContext
- the ${CONFIGDN} is a child of the ${ROOTDN}

metze
(This used to be commit ebbd8a83c982efdc58e53798d1fd191f08731005)
2007-10-10 14:36:55 -05:00
Stefan Metzmacher
8b70764038 r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded paths
under ${BASEDN}

metze
(This used to be commit 09ca6aae12d8e10b76971cf269f7c62f228a4c87)
2007-10-10 14:36:54 -05:00
Stefan Metzmacher
28b078ea03 r20551: use variable instead of hardcoded value for the default site
metze
(This used to be commit 21f433018afbb7b94089969f7ee9acda40ee1a70)
2007-10-10 14:36:53 -05:00
Andrew Bartlett
e8dfa06d45 r20495: Further notes on joining with fedora DS.
Add in a hook for adding an ACI, needed to allow anonymous access
until we hook across a SYSTEM token to the LDAP server.

Andrew Bartlett
(This used to be commit f45504e2714680978f101b4a98516686a17531df)
2007-10-10 14:36:00 -05:00
Andrew Bartlett
bf4c652af7 r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.
Add a new module entrypoint to handle the new, interesting and
different mappings required for Fedora DS.

Andrew Bartlett
(This used to be commit 600c7f1a68c175b835ce45d13794a6f66bcc8493)
2007-10-10 14:35:59 -05:00
Andrew Bartlett
9fc3e164df r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to load
into an exsting LDAP server.  (Allow some parts to pre-exist, and try
to blow away less data).

Andrew Bartlett
(This used to be commit 99faff0ad8fa12d596c599064a0125a6b3365134)
2007-10-10 14:35:54 -05:00
Stefan Metzmacher
d9a1d365e3 r20332: add mastered-By and msDs-mastered-By attributes to the domain object
the config and schema head objects already have them

metze
(This used to be commit 6d43c1963856c5140ca3447aa2f9a276035eff8c)
2007-10-10 14:29:42 -05:00
Andrew Bartlett
bddd8ed5c4 r20152: Commit missing files from last night's commit. We no longer maintain
a distinction between PDC and BDC in the configuration files, only as
an entry in the ldb.

Andrew Bartlett
(This used to be commit dc9eee7cb37e4a6828c2cba23b0d836df9eac7b5)
2007-10-10 14:29:15 -05:00
Andrew Bartlett
e350ca0bcb r19336: Merge from release branch: new Mapped OIDs, in own subtree.
Andrew Bartlett
(This used to be commit ac5abff4b66619c29357adb7e013700bdf686709)
2007-10-10 14:21:12 -05:00
Andrew Bartlett
064b605fab r19315: Record some OID allocations.
Andrew Bartlett
(This used to be commit 0ceffb52eb218cd2beff0054679a07f137f0f23a)
2007-10-10 14:21:07 -05:00
Andrew Bartlett
227831537a r19311: Try to keep the schema map files fairly similar (hope for less weird bugs).
Andrew Bartlett
(This used to be commit a1f14d10fd0779eba244d63529600556ba9e9292)
2007-10-10 14:21:06 -05:00
Andrew Bartlett
e0294c9f66 r19310: Add another conflicting oid
Cope with there being no attributes to skip in the ad2oLscheam tool

Andrew Bartlett
(This used to be commit 942d7ad0c3534770ad05977b180e1c8111a5b6a6)
2007-10-10 14:21:06 -05:00
Andrew Bartlett
d70fbdbefa r19258: Don't delete the contents of the partitions twice, and in particular
don't delete their contents until we have specified the new partition
locations.

However, preserve the important part of tridge's change, that is to
ensure that no database index is present when the mass delete occours.
In my testing, it is best to leave the index until the provision is
compleated.

Andrew Bartlett
(This used to be commit 962219df7dc53ce6f6889f4b71ee19850c7ff7b5)
2007-10-10 14:20:58 -05:00
Andrew Tridgell
557ca55ed7 r19253: its not so useful to index on objectclass. Much better to search on
objectCategory

provision now takes 2.4 secs, down from 24s on my laptop
(This used to be commit 3d3144cc06b9987adb3f17e43f2858e7c416b6ae)
2007-10-10 14:20:58 -05:00
Andrew Bartlett
7135bb9e63 r19216: Merge from SAMBA_4_0_RELEASE:
Move default for subobj.LDAPMODULES into scripting/libjs/provision.js
so that SWAT can provision again.

Andrew Bartlett
(This used to be commit a4aafe307d6d1396fa79b0c48b0a36cbf682f0ce)
2007-10-10 14:20:54 -05:00
Andrew Bartlett
08478f8f92 r19115: Add the mapping required between Samba4's AD schema OIDs and what
Fedora DS can support.

Andrew Bartlett
(This used to be commit bdeb10de2e751e7f0b12d5658ad55a4e7827bbd5)
2007-10-10 14:20:36 -05:00
Andrew Bartlett
736e797983 r18979: With these extra indexes (also added for the normal case) and a
DB_CONFIG file, we now get reasonable enought performance to pass
'make test' against OpenLDAP.

We do have to double the maximum runtime for the torture client however.

Andrew Bartlett
(This used to be commit 5b3c8cc036c1180c9e96d9aaacd3f2e0a83460e5)
2007-10-10 14:20:26 -05:00
Andrew Bartlett
df7ec4a31a r18933: Add helpful emacs marker
(This used to be commit 5fd53ea6a3a6d7638a9f542f46623a19143ff81d)
2007-10-10 14:20:22 -05:00
Simo Sorce
6c48dc8612 r18440: "builtinDomain" is not a child of "domain"
(This used to be commit b34646f202d4e8016e627c4bb88842c21d6b2e10)
2007-10-10 14:18:30 -05:00
Simo Sorce
b2355bf077 r18316: Build the parent too
(This used to be commit 1fcf725bc0a10454be8d276920ac14f346eb4a21)
2007-10-10 14:18:07 -05:00