1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

1437 Commits

Author SHA1 Message Date
Endi S. Dewata
1fc19ee7d0 s4:dsdb - Fixed attribute dereferencing for FDS 2009-11-02 16:36:53 +11:00
Matthieu Patou
071275010e s4: Create a script for updating a running provision with change introduced since the initial provision 2009-11-02 16:36:52 +11:00
Andrew Tridgell
e7d9f5eea5 s4-python: fixed annoyance where control-C doesn't kill our python scripts
We want our scripts to die immediately when a user hits
control-C. Otherwise we not only annoy the hell out of the user, we
also risk db corruption as the control-C could get delivered as an
exception which gets mis-interpreted (eg. as a missing db object). We
use transactions for all our databases, so the right thing to do in
all our command line tools is to die immediately.
2009-10-25 13:15:18 +11:00
Andrew Tridgell
3050f83288 s4-python: we need to include Python.h first
If we don't include Python.h first then we get a pile of warnings due
to broken redefines of XOPEN_SOURCE in the Python includes.
2009-10-23 16:23:01 +11:00
Andrew Bartlett
e5b86d2674 s4:dsdb Split schema loading and schema data management
By splitting the module this way, we can load the schema at startup, after
the partitions module is operational, but we leave the 'mess with details of
entries in the partitions' module to operate only on the partitions module.

Loading the schema later allows us to set the @ATTRIBUTES correctly on all
the databases.

Andrew Bartlett
2009-10-23 15:41:00 +11:00
Matthias Dieter Wallnöfer
2b82b8e2d3 s4:provision - Reintroduce accidentally removed parameters and checks from "guess_names"
abartlet pointed out that those are essential for a safe and consistent provision.
2009-10-22 09:17:27 +02:00
Matthias Dieter Wallnöfer
33f3d54de4 s4:provision - rework the "guess_names" and "make_smbconf" method
- Cleans it up from unnecessary "lower()/upper()" and parameters which can be
  derived through "lp" calls.
- Substitute the "HOSTNAME" caption in the "smb.conf" templates with
  "NETBIOS_NAME" which fits better.
- Now the "realm" and "domain" parameter of the provision are totally case
  insensitive and the script itself up/downcases them appropriately depending
  on the use (e.g. "realm" upcase for KERBEROS, lowcase for DNS domainname).
2009-10-21 23:43:04 +02:00
Matthias Dieter Wallnöfer
47fcde1922 s4:provision - important fix for DNS domainname: lower realm 2009-10-21 18:46:44 +02:00
Andrew Bartlett
4c36cac5ad s4:provision Use schema to casefold partitions on 'upgrade'.
This helps us upgrade from sam.ldb files before the dynamic partitions
work, and ensures we use the right casefolding functions.

Andrew Bartlett
2009-10-21 22:43:55 +11:00
Andrew Bartlett
27c28d34a7 s4:Handle reprovision with existing partitions
The issue here is that if we don't put the partitions metadata in the
database before we wipe it, we won't wipe the partitions contents, and
so the provision will later fail (entry already exists)

Andrew Bartlett
2009-10-21 22:43:51 +11:00
Andrew Bartlett
d4048b2e17 s4:provision Set @OPTIONS in the provision_init.ldif
The new partitions code knows to copy these items in when creating a
new parition, so we can set it from the start.

Andrew Bartlett
2009-10-21 22:43:50 +11:00
Andrew Bartlett
c59f00805c s4:dsdb Rework modules create new partitions at runtime
This is done by passing an extended operation to the partitions module
to extend the @PARTITION record and to extend the in-memory list of
partitions.

This also splits things up into module parts that belong above and below
repl_meta_data

Also slit the partitions module into two files due to the complexity
of the code

Andrew Barltett
2009-10-21 22:43:50 +11:00
Andrew Tridgell
f794e8d43d s4-provision: added the default privileges db
privileges are now stored in a separate database
2009-10-17 13:01:02 +11:00
Endi S. Dewata
aaca10b3e1 s4:provision - fixed invalid creationTime format 2009-10-16 14:08:11 +02:00
Endi S. Dewata
cf77bf3382 s4:provision - replaced linked_attributes with FDS plugins
When FDS is used as a backend, Samba should not use the
linked_attributes LDB module, but instead use the built-in
DS plugins for attribute linking, indexing, and referential
integrity.
2009-10-16 14:08:11 +02:00
Matthias Dieter Wallnöfer
fb13eb7db8 s4:w32err_code.py script - put it under "scripting/bin"
I think this is a better location for this script. Since the subdirectory
"script" of "source4" contains only scripts for "make install" and "make
uninstall".
2009-10-15 12:48:20 +02:00
Andrew Tridgell
7dcabdec74 s4-script: flush DNS after adding new addresses 2009-10-15 10:00:46 +11:00
Andrew Tridgell
b41290c10d s4-devel: for devel scripts its better to use bin/ than $PREFIX/bin
This avoids having to do make install after each change when using the
drs devel scripts
2009-10-15 08:49:21 +11:00
Matthias Dieter Wallnöfer
9000b7bb94 s4:provision.py - simplify the "realm" variable handling a bit
(Remove unneeded "upper"s)
2009-10-12 19:21:55 +02:00
Andrew Bartlett
1dfa2ed423 s4:provision Remove all references to samba4LocalDomain
This was a bad idea all along, as Simo said at the time.  With the
full MS schema and enforcement of it, it is an even worse idea.

This fixes the provision of the member server in 'make test'

Andrew Bartlett
2009-10-12 16:50:49 +11:00
Andrew Bartlett
0bfc3023a1 s4:provision Clarify that we set, rather than modify, objectGUID values 2009-10-12 16:50:49 +11:00
Andrew Bartlett
40b09f689b s4:drs-development Scripts to assist testing of DRS replication with AD
These scripts, originally by tridge, allow developers to easily
reproduce the same domain join senerio time after time.

They need documentation, and the template named.conf and zone files
for hosting an AD domain are not provided.  However, I hope to have
the provision script provide these shortly.

They assume a local 'bind' set up to read PREFIX/private/named.conf
(as per the provision instructions).

Ensure you edit the 'vars' file to match your local setup.

Andrew Bartlett
2009-10-06 11:10:33 +11:00
Andrew Bartlett
6a1eb13aab s4:provision Remove unused parameters from provision scripts 2009-10-06 11:07:06 +11:00
Matthias Dieter Wallnöfer
0d05a2412a s4:provision - Cosmetic - right indentations 2009-10-02 12:45:09 +02:00
Andrew Bartlett
984ea88156 s4:dsdb rework instanceType module - put instanceType in provision
The instanceType needs to be specified in future because that's how
the partitions are actually created.
2009-10-02 12:45:07 +02:00
Andrew Bartlett
46c2af3612 s4:dsdb Add 'lazy_commit' module to swallow the 'lazy commit' OID
This allows this control to be specified as critical.  We support the
control because we choose to always be durable in our transactions.

We really, really need a 'duplicate request' API, as at the
moment we can't do this without a large, error-prone set of code that
cannot cope with new request fields or types.

Andrew Bartlett
2009-10-02 12:45:06 +02:00
Andrew Bartlett
4c235ca787 s4:provision Ensure we add the schema with the 'relax' control
(allows addition of systemOnly classes)
2009-10-02 12:45:05 +02:00
Matthieu Patou
8bf517d340 s4: Improve provisioning: use relax control
Give the possibility to specify controls when loading ldif files.
  Relax control is specified by default for all ldb_add_diff (request Andrew B).
  Set domainguid if specified at the creation of object instead of modifying afterward
  Allow to specify objectGUID for NTDS object of the first DC this option is used during provision upgrade.
2009-10-02 12:45:01 +02:00
Matthias Dieter Wallnöfer
bf0855e8e3 s4:provision - Change the default forest/domain function level back to Windows 2003 Native 2009-10-02 14:22:06 +10:00
Matthias Dieter Wallnöfer
9e7fb6a673 s4:samba.tests.samdb - remove last relicts of the templates 2009-09-30 16:01:32 +02:00
Matthias Dieter Wallnöfer
a3f353722c Revert "python: create a script for reorgnizing an LDB file."
This reverts commit 11a7842854c0be8c427a2dbf0a8fc3761cda6298.

abartlet claims that this patch could lead to data loss (look at technical
mailing list)
2009-09-30 16:00:44 +02:00
Matthias Dieter Wallnöfer
cb50af5fe1 s4:provision - Lets the user choose between the supported forest/domain function levels
Adds a parameter "--function-level" which allows to specify the domain and
forest function level.
2009-09-30 16:00:07 +02:00
Jelmer Vernooij
a6d4eec3a5 samba.tests.provision: Remove broken become_dc test. 2009-09-26 02:38:09 +02:00
Jelmer Vernooij
96dd5719d4 Add init file for DCE/RPC tests. 2009-09-24 15:03:59 +02:00
Jelmer Vernooij
0450a5bf90 PEP8 2009-09-24 15:03:59 +02:00
Jelmer Vernooij
5cf25fd225 Revert "s4:python fixed subunit tests of dcerpc"
This reverts commit ffd48a79ee34dc90c0f6f16564c3a0de8b53d3d2.
2009-09-24 15:03:58 +02:00
Nadezhda Ivanova
10c6f3f71a Initial Implementation of the DS objects access checks.
Currently disabled. The search will be greatly modified,
also the object tree stuff will be simplified.
2009-09-21 17:27:50 -07:00
Nadezhda Ivanova
13b979b03d Merge branch 'master' of git://git.samba.org/samba 2009-09-21 14:26:15 -07:00
Andrew Bartlett
1afc7c453c s4:kerberos Fix the salt to match Windows 2008.
The previous commit changed the wrong end - we must fix our server,
not our client.

Andrew Bartlett
2009-09-21 12:28:38 -07:00
Andrew Bartlett
8738b83a44 s4:provision Make our default salt match our server behaviour
We need to look into salting algorithms further.

Andrew Bartlett
2009-09-21 11:59:33 -07:00
Matthias Dieter Wallnöfer
63f280cfef s4:provision - Fix up ProvisioningError class as suggested by Jelmer 2009-09-21 17:20:49 +02:00
Matthias Dieter Wallnöfer
7373bb79d4 s4:samdb/tools - That should fix now the last failures 2009-09-21 13:53:47 +02:00
Andrew Bartlett
23ffccd5d7 s4:provision Make us Windows 2008 level by defualt again
Also add a note to clarify that this should not be changed without
discussion and consensus.  We don't want this bouncing around.

Paramater support to allow optional selection of Win2003 mode welcomed.

Andrew Bartlett
2009-09-20 23:05:30 -07:00
Nadezhda Ivanova
025590e7a4 Merge branch 'master' of git://git.samba.org/samba 2009-09-20 17:43:46 -07:00
Andrew Bartlett
bfddb6816f s4:provision Use code to store domain join in 'net join' as well
This ensures we only have one codepath to store the secret, and
therefore that we have a single choke point for setting the
saltPrincipal, which we were previously skipping.

Andrew Bartlett
2009-09-20 16:29:38 -07:00
Andrew Bartlett
509a2bb97c s4:provision split provision of DNS zone and self join keytab 2009-09-20 16:29:37 -07:00
Nadezhda Ivanova
6283f2caaa Initial implementation of security descriptor creation in DS
TODO's:
ACE sorting and clarifying the inheritance of object specific ace's.
2009-09-20 15:16:17 -07:00
Matthias Dieter Wallnöfer
c1527612b9 s4:python tools - try to fix some test problems 2009-09-20 23:49:05 +02:00
Nadezhda Ivanova
05653fce78 Fixed a difference in domain sid type when SID is provided by user. 2009-09-20 10:12:04 -07:00
Stefan Metzmacher
93e1e8bec9 s4:provision: add the 'resolve_oids' on the top of the module stack
metze
2009-09-20 06:44:18 +02:00