1
0
mirror of https://github.com/samba-team/samba.git synced 2025-05-01 22:50:23 +03:00

208 Commits

Author SHA1 Message Date
Andrew Bartlett
ef9169bfa6 Make it clear that the MMR password can differ from the admin passsword
In the future, we might simply randomly generate this, or allow the
admin to specify it seperate to the admin password.  However, both are
highly sensitive, as they imply read access to the krbtgt.

Andrew Bartlett
(This used to be commit 57d19ad002c523fb9a09694e6710ab7f588d44ec)
2008-09-08 15:09:06 +10:00
Oliver Liebel
b76f383eef Use DIGEST-MD5 authentication for OpenLDAP replication
This avoids passing rootdn passwords or replicated data in cleartext
across the network.

Signed-of-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 67373c143a1d8a9f310fd116dbf81c1dd123b75f)
2008-09-08 14:39:54 +10:00
Andrew Tridgell
9817f3d785 Add a setexpiry operation in samdb.py
This makes it easy to set the expiry (or no expiry) for a samdb user
(This used to be commit 25171f18a4b242b5a731f4ac1eefc51cc82efd74)
2008-08-30 07:32:44 +10:00
Andrew Bartlett
8237c0ba83 The index handling is now configured from the schema load, not by a
template.

Andrew Bartlett
(This used to be commit b36c6a21ad12fdc1b53efdc3f29cde7614b4fa9e)
2008-08-21 12:59:16 +10:00
Andrew Bartlett
41493cbe68 Update OpenLDAP MMR configuration per comments by Oliver Liebel
<oliver@itc.li>

This changes the RIDs to be <serverID><DBID>, to ease later debugging.

The need to specify the port on the MMR URLs is now included in the
help.

Andrew Bartlett
(This used to be commit a5cbe8c09c6f14f95ff9ba9b8782e2100fc55695)
2008-08-20 12:21:36 +10:00
Andrew Bartlett
b33f4541f6 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit fc6b4f03ebba015a13a6ab93221b0bc3ef8ef2ed)
2008-08-19 14:11:51 +10:00
Andrew Bartlett
7ef21658fb Fix up new OpenLDAP MMR code.
This changes the MMR password from hard-coded value of 'linux',
adds tests and fixes the Fedora DS backend.

Currently the MMR password matches the admin password, but we can
change this to be another random value if required.

Also require the port to be specified on the command line, so we don't
hard-code a port of 9000.

Andrew Bartlett
(This used to be commit 08257c6d6ce809fcd53f9b2b4d558fef616b74ce)
2008-08-19 14:10:14 +10:00
Oliver Liebel
805dd85291 Generate Multi-Master Replication configuration for OpenLDAP
This patches provision-backend and the related scripts to generate the
correct configuration blobs for N-way multi-master replication using
OpenLDAP.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 6ed0b3f2475022288f636605492ca27fde97cd52)
2008-08-19 12:03:04 +10:00
Andrew Bartlett
47d80366be Fix templates.ldb reprovision handling.
This sets the attributes in a seperate transaction, and allows a
forced delete of the whole file.

Andrew Bartlett
(This used to be commit 423db2468ba3dac89cebc59c8498c0b08c5f3d7b)
2008-08-19 11:43:41 +10:00
Jelmer Vernooij
47124efe42 Add helper object Hostconfig to make it easier to get to e.g. the
SAM database.
(This used to be commit be75b2a36ee49f66ada3ec3ababa82d74085d559)
2008-08-01 21:12:37 +02:00
Jelmer Vernooij
1c94f3e95d Use new style python classes.
(This used to be commit 2a39aae0cef310a79427feb1b85f6794ea36849a)
2008-08-01 21:00:09 +02:00
Jelmer Vernooij
fff006bd84 Move domain DN determination out of newuser function.
(This used to be commit cbac27e6faa99ebaa3e6d653017c968db836560a)
2008-08-01 20:47:22 +02:00
Jelmer Vernooij
3b4ff07ded Actually fix missing substitution variables.
(This used to be commit 783412ecb27d646b171993da0ac2f11a821901d3)
2008-08-01 20:47:03 +02:00
Jelmer Vernooij
2fbe25b39d Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
(This used to be commit c87a8ba1fef1ba508ad6527d0bae4bcdd5b3cb69)
2008-08-01 20:17:56 +02:00
Jelmer Vernooij
3573420d7d Fix some forgotten substitute variables in provision, add check to prevent this sort of regression in the future.
(This used to be commit a461118f3b668779f907c4d77cebe1e76fa4e39f)
2008-08-01 20:17:29 +02:00
Andrew Bartlett
e80115deb9 We don't use EXTENSIBLEOBJECT any more.
(This used to be commit 4b137085c8b89773d4639372bbffd516a41dfc8f)
2008-07-28 20:51:02 +10:00
Andrew Bartlett
08795db6d6 Make it even clearer what to do next in the LDAP backend setup
(This used to be commit bace931ad674b5071d53bf9c99c383f1d8957e1b)
2008-07-28 20:26:14 +10:00
Andrew Bartlett
45d60f5bd9 Always print the slapd startup command
(This used to be commit b1d05e7d14c65133e8ab0ff9d41a26fa7e3d41d3)
2008-07-28 20:18:17 +10:00
Andrew Bartlett
cff30c6da6 Remove unused function and make sensitive directories private.
(This used to be commit e23333d16397606d38e90684d2d916b5b967cde4)
2008-07-28 08:04:15 +10:00
Andrew Bartlett
1f285560bc Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit b12dd8ee5443ebfc204d1684f541d68ffb351197)
2008-07-25 11:58:51 +10:00
Andrew Bartlett
11798902dc Complain if we are told to use an ldap backend, without the type
(This used to be commit e9c3c9ad8289ee48efa998ab6b486250dcd40b52)
2008-07-25 08:45:16 +10:00
Andrew Bartlett
c9c296b6bb Install'named.txt' to private/ as documentation.
This document is much more use when subbed with all the right things.

Andrew Bartlett
(This used to be commit 136a85599815670c807f212d7d4003ec53a13729)
2008-07-22 11:09:18 +10:00
Matthias Dieter Wallnöfer
fb3e663678 Improve DNS and Group poicy configurations.
- fixes bug #4813 (simplify DNS setup)
  - This reworks the named.conf to be a fully fledged include
  - This also moves the documentation into named.txt
 - improves bug #4900 (Group policy support in Samba)
   - by creating an empty GPT.INI
 - fixes bug #5582 (DNS: Enhanced zone file)
   - This is now closer to the zone file AD creates

committed by Andrew Bartlett
(This used to be commit 74d684f6b329d7dd573cdc55e16bb8e629474b02)
2008-07-22 11:06:47 +10:00
Andrew Bartlett
3408a2d18f Make a seperate template for the refint configuration too
(This used to be commit d2a527acc5ee6fe9b943657dc9c3ace920b2d619)
2008-07-18 18:58:56 +10:00
Andrew Bartlett
cfc2063f23 Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP

Andrew Bartlett
(This used to be commit 6d6e03834a1a77a8ceba41fbe8c9d49680065ba3)
2008-07-18 18:44:07 +10:00
Andrew Bartlett
fe9fa62a05 Reorder whitespace in generated slapd.conf
This helps us see the real groupings in the generated memberOf
handling.

Andrew Bartlett
(This used to be commit ec70ebb8310e563324233662f8e779c55fb87514)
2008-07-16 14:04:24 +10:00
Andrew Bartlett
e400b3ec4e Fix asking for credentials for non-LDAP provisions.
(This used to be commit 78416f4840df4f8d1f9cc5e46a48b19c86888050)
2008-07-15 18:44:58 +10:00
Andrew Bartlett
0f1eea2672 Rework provision to handle both simple and SASL binds.
Fedora DS is still setup for simple binds only, at this point.
(it also fails on other issues).

Andrew Bartlett
(This used to be commit b24c572d5a38c1f6906751c2ad2f809e1995b510)
2008-07-15 15:46:32 +10:00
Andrew Bartlett
a6b842f963 Connect to the LDAP backend with SASL credentials.
This reworks our LDAP backend code to move from anonymous access to a
shared-secret SASL-protected connection.  (SASL selects NTLM or
DIGEST-MD5 on my system).

To get this working, we must pre-populate the LDAP backend with a DN
to store ths SASL secret on, and we use back-ldif for this.

This gives us a reasonable basis to deploy a replicated OpenLDAP
backend solution.

Andrew Bartlett
(This used to be commit cd0745253c4a9ec59a035e830e54d74a05b71aaa)
2008-07-15 15:15:12 +10:00
Andrew Bartlett
44ea6a26fd rename sambaPassword -> userPassword.
This attribute is used in a very similar way (virtual attribute
updating the password) in AD on Win2003, so eliminate the difference.

This should not cause a problem for on-disk passwords, as by default
we do not store the plaintext at all.

Andrew Bartlett
(This used to be commit 1cf0d751493b709ef6b2234ec8847a7499f48ab3)
2008-07-12 15:26:42 +10:00
Andrew Bartlett
9ea25cacf1 Add a blackbox test for the provision-backend script.
This test (as most tests do :-) found a few bugs, also fixed in this
commit.

Andrew Bartlett
(This used to be commit d96a6482dad54d1d27a87107865e833a9c32cf53)
2008-06-19 11:05:20 +10:00
Simo Sorce
370f95acfc Try to get a bit further with provisioning
(This used to be commit 649f6c0c1084828dda7d50bd2904208192de77da)
2008-06-16 17:52:50 -04:00
Jelmer Vernooij
2772871146 Fix samdb python test.
(This used to be commit 0e3d488cc108174ca0f875aab16b9771c2933f19)
2008-05-30 14:15:40 +02:00
Andrew Bartlett
21377a7ea9 Fix the samba4.dcerpc.bare.python test.
The loadparm context isn't really optional, as otherwise we can't find
the right server to connect to.

Andrew Bartlett
(This used to be commit 2b5acb5e95b46dd39c6f54b5bb7e15ddb180f7ec)
2008-05-30 15:26:10 +10:00
Andrew Bartlett
d579540085 Fix rpcecho test.
(This used to be commit df8399ba9dee9d1c706a3e56451c9f2cade96dae)
2008-05-30 15:09:59 +10:00
Andrew Bartlett
b9babfe4cc Fix up provision and samdb tests.
This fixes up the provision to operate with a target directory - it
must override the smb.conf in this case.

Andrew Bartlett
(This used to be commit 89fc39f7edb214065aff461bc225f41443eae3c7)
2008-05-30 14:26:47 +10:00
Jelmer Vernooij
6f7b2b6933 Fix samdb test and enable it.
(This used to be commit 6b202d3780f8ff50e0bdfa4a749c43b5639e4880)
2008-05-29 17:38:12 +02:00
Jelmer Vernooij
e16f0e15b4 Update after changes to the provision API, make sure temp dir gets cleaned
up.
(This used to be commit 064e9ddb3786bd7df8785b39754b1e6674496b66)
2008-05-29 17:31:16 +02:00
Jelmer Vernooij
90aeca8ebd Check test directory is cleaned up by Python tests.
(This used to be commit c338269b4b9f2bf4d3386880c1d733a8e47e2c8d)
2008-05-29 17:29:56 +02:00
Andrew Bartlett
b7c8e020a6 Print prefixMap in a human-readable format.
This should allow the prefixMap to be edited, until we find the right
way to autogenerate it.

Andrew Bartlett
(This used to be commit 24ae9a55ec326807afd8d5bfa0a422a6668bd7c3)
2008-05-29 18:38:17 +10:00
Andrew Kroeger
815c0ef2ed provision: Add missing string parameter token when assigning ldap_backend.
(This used to be commit 7d26145a7fba22b2e1c7c57053aab3180a22089d)
2008-05-28 22:43:25 -05:00
Jelmer Vernooij
5df9e0576e Fix missing colon.
(This used to be commit 6b1576f544e2ea2b5ea0b234b724c4989dd49cca)
2008-05-25 14:41:54 +02:00
Jelmer Vernooij
74126bc6d0 Expose transfer and abstract syntax.
(This used to be commit a875e07a37568b7e51c290074d5e3834c2caa4d6)
2008-05-25 04:54:38 +02:00
Jelmer Vernooij
928ecbaebb Add support for secondary contexts from Python.
(This used to be commit 16d1ad050546ae6500153438db8d3c857e6f3ad5)
2008-05-25 04:23:03 +02:00
Jelmer Vernooij
21ce0ff006 Allow connecting to a DCE/RPC interface with Python for which we don't have IDL.
(This used to be commit e3178d522c95871f1db35d7e058906502387a553)
2008-05-24 22:56:49 +02:00
Jelmer Vernooij
75e7962d2e Add convenience functions for setting Python objects from errors.
(This used to be commit f1de723b89251cbc8140b838941f304a34871bf3)
2008-05-24 22:13:32 +02:00
Jelmer Vernooij
05194ccdf8 Add tests for new NDR pack/unpack functionality in Python DCE/RPC bindings.
(This used to be commit 468d35827fd055c82c6d43d6ce6d3d561abed54d)
2008-05-24 19:50:09 +02:00
Jelmer Vernooij
f76697ce89 Add convenience functions for packing/unpacking structs in python.
(This used to be commit c5d7d48b32bcebf8a0495cbd4556e30587fa589f)
2008-05-24 18:57:15 +02:00
Jelmer Vernooij
73b789b6d2 Add docstrings to a couple more python modules.
(This used to be commit b4560c90e5e8d3a35367d3a21d361dc4c9c0de23)
2008-05-24 04:01:57 +02:00
Jelmer Vernooij
a203ee1ab1 Fix indentation, add docstring in provisioning script.
(This used to be commit 86a8a085496c292b390c0d6362e3e4d9980df83f)
2008-05-23 16:43:26 +02:00