1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-29 21:47:30 +03:00

354 Commits

Author SHA1 Message Date
Andrew Bartlett
9ea25cacf1 Add a blackbox test for the provision-backend script.
This test (as most tests do :-) found a few bugs, also fixed in this
commit.

Andrew Bartlett
(This used to be commit d96a6482dad54d1d27a87107865e833a9c32cf53)
2008-06-19 11:05:20 +10:00
Jelmer Vernooij
31a2a98d83 Remove unused import, function.
(This used to be commit f134a701e7c2d64a684d55691fd66e2aaeb15812)
2008-06-11 00:10:43 +02:00
Andrew Tridgell
aa35cef57f setpassword should be executable
(This used to be commit b8f2e6321dd06508f9cc48e8d76d20232cb7d60e)
2008-06-03 09:36:46 +10:00
Andrew Bartlett
b34bc408e7 Don't pass an smb.conf to provision tests.
These tests will create their own smb.conf in their prefix anyway.

Andrew Bartlett
(This used to be commit c0322e8e27d67655b7498b27df0829aa5682a345)
2008-05-30 14:36:24 +10:00
Andrew Bartlett
617ef56aa3 Remove extra spaces on prefixMap input and output.
Metze requested that the format not include spaces, and the input parser
already expects this.

Andrew Bartlett
(This used to be commit 3b1f5d10360ed1b26980d748a7c9be6db5977bd3)
2008-05-29 20:16:18 +10:00
Andrew Bartlett
b7c8e020a6 Print prefixMap in a human-readable format.
This should allow the prefixMap to be edited, until we find the right
way to autogenerate it.

Andrew Bartlett
(This used to be commit 24ae9a55ec326807afd8d5bfa0a422a6668bd7c3)
2008-05-29 18:38:17 +10:00
Jelmer Vernooij
4b701a265f Fix imports for provision-backend.
This needs a blackbox test...
(This used to be commit 268c1de095411991ffb22ee835bfb88f8bce235a)
2008-05-23 04:31:10 +02:00
Andrew Kroeger
8172f3eb22 GPO: Do not provision Default Domain Policy as initially enforced. (bz #5480)
This only solves part of bz #5480.  The settings for Enforced & Link Enabled
now match the default settings of a Windows DC, but they are still "locked"
and cannot be changed via the GUI.
(This used to be commit 761e667e45475d3a7d5a41558b400ba4c94c4650)
2008-05-21 21:14:06 -05:00
Andrew Kroeger
6576a022b8 enableaccount: Use correct command name in usage output.
(This used to be commit 4ca8f32a37196c81547679b2ee8d00cb77a01269)
2008-05-21 20:46:15 -05:00
Andrew Kroeger
bf3f3af926 provision: Generate krb5.conf template separate from named.conf template.
(This used to be commit ebf130e9e57b640129cf0d05dbd7d210b71ea371)
2008-05-21 20:46:15 -05:00
Jelmer Vernooij
84a3290c8f Fix python imports.
(This used to be commit 453206665677821b254c18cc67192e007b892f04)
2008-05-22 01:47:36 +02:00
Jelmer Vernooij
7e33677047 use one blackbox script per executable.
(This used to be commit cd8c8226784c96d7f1dbae006a4853eb50c7b2e2)
2008-05-22 01:47:22 +02:00
Jelmer Vernooij
49706ab19b Move more modules inside of the samba package.
(This used to be commit 9b39e99f48266a54ed0b8890c2efde218b4b118a)
2008-05-21 23:59:34 +02:00
Jelmer Vernooij
1929675813 Fix reference to removed smbpython.
(This used to be commit 58f956dc4591137489cba16f360f2d24d91dadc1)
2008-05-21 15:39:00 +02:00
Andrew Bartlett
40ff67e454 Merge branch 'v4-0-local' of git://git.id10ts.net/samba into 4-0-local
(This used to be commit 0e429dd1fb15137a2a7c25e051b9af8c4ed8c7f3)
2008-05-21 14:34:43 +10:00
Andrew Bartlett
343fea32cc Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
Fix config.mk due to changing syntax.

Conflicts:

	source/libcli/config.mk
	source/nbt_server/config.mk
(This used to be commit 6a1c76f29f78183f44dfac6f468c5e728d2cb2cf)
2008-05-20 08:03:35 +10:00
Andrew Kroeger
25ea110c38 provision: Create instructions for enabling DNS GSS-TSIG updates.
Added code to the python provisioning to create the named.conf file that was
previously generated by the EJS provisioning.

Updated the named.conf template to provide the additional details necessary
to get things working.
(This used to be commit 0b7a6bfcba1b906dc4d461882b4c3fe3c91c44e0)
2008-05-18 01:54:57 -05:00
Andrew Kroeger
18aa2d58ed provision: Allow DNS GSS-TSIG updates to work.
This change ensures the KVNO of the principal in secrets.ldb (which is also
exported to the dns.keytab) matches the KVNO associated with the "dns" user.
Without explicitly setting msDS-KeyVersionNumber, the KVNO exported into the
dns.keytab was 0.

KVNO needs to be > 0, as the client libs (at least MIT libs on Fedora)
consider KVNO == 0 as a sign to ignore that particular key.
(This used to be commit 572efc8e65457a982a8cbb04d3b10e3aae22d574)
2008-05-18 01:54:56 -05:00
Jelmer Vernooij
4accab35c6 Merge branch 'nosmbpython' into v4-0-test
(This used to be commit 9683f7434c7ea01631d8adae9d43274c77ff51de)
2008-05-12 03:54:53 +02:00
Andrew Bartlett
ff7c537e27 Remove JavaScript provision-backend script
The library it relied on has already been removed.

Andrew Bartlett
(This used to be commit 97427731a520283fdd3c8e582ac1f8be7699013e)
2008-05-12 09:46:50 +10:00
Jelmer Vernooij
0be941a383 Remove python extension from upgrade script.
(This used to be commit 5268649b7ef60a2caae9cdf66dfeaf6d2037aba3)
2008-05-11 14:32:06 +02:00
Jelmer Vernooij
47d2218922 Set sys.path for running inside source tree.
(This used to be commit b507109bb676715f7d9616e13b0e19305e9c2559)
2008-05-11 05:45:49 +02:00
Jelmer Vernooij
babdcc6135 Use system python rather than smbpython.
(This used to be commit d3df51cd01e53383dcc05923d248db03bc6f62e9)
2008-05-11 05:29:20 +02:00
Andrew Bartlett
0d1fe706e3 Remove vampire.py as the 'net' binary is the right interface.
As some future point we might get these scripting interfaces into
better shape, and provide a python interface to this functionality
again.

Andrew Bartlett
(This used to be commit 717dcb2c54b1e22b7c8efb322deec55abb7689c2)
2008-04-25 09:25:14 +01:00
Andrew Tridgell
6a40411fcc change the default idmap range to 3M -> 4M
This gives us a lot more headroom, and means that we have a lower
chance of running into real local users
(This used to be commit b2dac6645c3bce45ab2178b9f5b4e017486b5b8e)
2008-04-18 15:41:54 +02:00
Andrew Tridgell
b967afca64 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
(This used to be commit e891157b4ec7b2f845fb20c4106d80bf169f2072)
2008-04-15 09:54:41 +02:00
Andrew Tridgell
9cd04363f5 make the SMB2 negotiated read and write size settable in smb.conf
parametic options:

  smb2:max read size = NNN  
  smb2:max write size = NNN

The defaults are 65536, which is what Vista sets, and what we
previously set
(This used to be commit 9e60164cae42b5dd95720e48301a2ac57e95482a)
2008-04-14 19:09:57 +02:00
Andrew Bartlett
5a37b3fc5d Fix newuser and setpassword scripts, and port to idmap.
The new idmap world does not use the unixUser any more, so we need to
set up the entry (if wanted) in the idmap database.  Users without a
backing unix user will get an allocated uid by idmap later.

Andrew Bartlett
(This used to be commit 8bd8bc1475ddf22d4702dcd17028a9043a5e629f)
2008-04-14 11:51:02 +02:00
Andrew Bartlett
6b013c90fd Actually test the different 'fill levels' in the provision process.
This should cover a few more codepaths in the provision script.

Andrew Bartlett
(This used to be commit 75c8dc6c6f3134bb78356630f24617aaeb869344)
2008-04-11 19:38:36 +10:00
Andrew Bartlett
e8a3621a8f Be consistant in using ${SEVERDN}.
This ensures we don't fall out of sync with the provision scripts.

Andrew Bartlett
(This used to be commit 566c60b4649e2b94bf467993acd4bf72c7368e5a)
2008-04-09 14:51:22 +10:00
Andrew Bartlett
b2805c50ee Re-add support for the --ldap-backend-port option to provision-backend
This option allows Fedora DS multi-master replication to work.  I've
tried to update the wiki and scripts to the largely consistant with
each other.

Andrew Bartlett
(This used to be commit 42393c830733b2cc99ebccdafe944fcf3d82734f)
2008-04-08 17:28:25 +10:00
Andrew Bartlett
c764791100 Clean up provision and rootdse module to hard-code less stuff.
In particular, allow for the server DN to be in a different site
(possible outcome of a DRS replication).

Andrew Bartlett
(This used to be commit 9ee4e39fe178317f42fd9a0adceea24b55dfe0f1)
2008-04-04 12:25:19 +11:00
Andrew Bartlett
67bf4bab3d Fix conflicts in setup/provision script.
(This used to be commit 696b58f5dd8370b7ee0670c7a3e5db10234b41ff)
2008-04-02 12:31:24 +11:00
Andrew Bartlett
4ccb384327 Fix merge of my host GUID removal and the IPv6 addition to provision
Merge branch 'v4-0-ipv6' of git://git.id10ts.net/samba into 4-0-abartlet

Andrew Bartlett
(This used to be commit d3336684f084f984500dd0893dd01bcfc5be0ab1)
2008-04-02 12:03:03 +11:00
Andrew Kroeger
3c0c6acc59 provision: Add support for IPv6 (bz #4593).
(This used to be commit 8585a3c77d5dfe97bca3f08716fc06ac2819f578)
2008-04-01 19:51:24 -05:00
Andrew Bartlett
2ab6dd9ea5 Remove references to setting the host GUID, as the repl_meta_data
module prohibits it anyway.

Andrew Bartlett
(This used to be commit c5b287c056855892f30fbbf32efe7d65da31ce91)
2008-04-02 11:38:58 +11:00
Andrew Bartlett
238a1a52f1 Rework 'compleated' message in provision to be more useful.
In particular, this should draw attention to accidential 'standalone'
server provisions and therefore cause less frustration.

Andrew Bartlett
(This used to be commit e906ae041a2b589ffceff97b74f7c4b01386382a)
2008-03-29 17:17:56 +11:00
Andrew Bartlett
142fbfb3c1 Fix and test python scripts and kerberos
This fixes up the python credentials interface in a number of areas,
with the aim of supporting '-k yes' as a command line option.  (This
enables the use of kerberos).

As such, I've had to change the get_credentials call to take a
loadparm context, so that the credentials can be initialised
correctly.

The test_kinit script has been modified to prove that this continues
to work, as well as to provide greater code coverage of the kerberos
paths.

Andrew Bartlett
(This used to be commit 727ef40c2b56910028ef3c1092b8eab1bfa6ce63)
2008-03-28 21:57:15 +11:00
Andrew Kroeger
8f8c56bfbc Convert some more files to GPLv3.
(This used to be commit ebe5e8399422eb7e2ff4deb546338823e2718907)
2008-03-28 01:08:49 -05:00
Andrew Bartlett
71e79728ec Add tool for enabling accounts
(This used to be commit 2e14b4ea64ba7e223f29b5b535b1b1be326f711c)
2008-03-28 03:46:23 +11:00
Andrew Bartlett
786deaf928 Make the setup/newuser and setup/setpassword scripts actually work...
These need a testsuite, but this will come soon.

Andrew Bartlett
(This used to be commit fbcaa622bd1929399e32326349e96b6676a49b96)
2008-03-28 12:08:54 +11:00
Andrew Bartlett
d5a71ed633 Remove old js versions of newuser and provision.
Andrew Bartlett
(This used to be commit 861a85985d2d27f58cb8fa2fef0d445c7dac94c6)
2008-03-26 15:42:20 +11:00
Andrew Bartlett
89870f2d9a Explain why this attribute should be skipped.
Andrew Bartlett
(This used to be commit 7503f93f2f07f81ada1b5d9ec8fdd3d5509376ae)
2008-03-20 15:14:49 +11:00
Andrew Bartlett
d7299d82c3 Rework memberof handling in slapd.conf (used for OpenLDAP backend)
Instead of using an include file, put the generated configurationd
directly into slapd.conf.

Andrew Bartlett
(This used to be commit 95ac786136aebfe5ededeb3fb81cbd4e296e3988)
2008-03-15 19:03:04 +11:00
Andrew Bartlett
0c88240236 Rework to have member server 'domains' be CN=NETBIOSNAME
This reworks quite a few parts of our provision system to use
CN=NETBIOSNAME as the domain for member servers.

This makes it clear that these domains are not in the DNS structure,
while complying with our own schema (found by OpenLDAP's schema
validation).

Andrew Bartlett
(This used to be commit bda6a38b055fed2394e65cdc0b308a1442116402)
2008-03-13 11:36:58 +11:00
Andrew Bartlett
07a7c8fa0d Update the provision scripts and selftest for LDAP
This should allow us to provision onto an OpenLDAP backend again.

Also ensure we always have a sysvol and netlogon share in the selftest
environment.

Andrew Bartlett
(This used to be commit b2d9b03ba3434e76d4d476233a198728523d17f9)
2008-03-13 09:55:06 +11:00
Andrew Bartlett
69d66e6fb0 Upgrade provision-backend to python.
This required a large rework of the provision code, so as to move much
of the 'guess' logic into subprocedures, rather than just inline in
the provision code.

Andrew Bartlett
(This used to be commit a0754c2a857217ca831c2295b17255d8f38dfbc2)
2008-03-13 08:08:05 +11:00
Andrew Bartlett
9703948850 Fix provision script to work without smb.conf location specified.
Andrew Bartlett
(This used to be commit b4da374a998caac18c288a0a6e3fcd2c50cbffa7)
2008-03-11 14:41:10 +11:00
Andrew Bartlett
b5a5fcdc62 Extend testsuite to cover specifying a domain SID.
Andrew Bartlett
(This used to be commit edb7af0685983543c321e3d8b90f6ae07af2e4e3)
2008-03-11 14:21:53 +11:00
Andrew Kroeger
07cb435d40 accountExpires: Windows default is 9223372036854775807, not -1.
(This used to be commit be47cc7fdfa3cae0508e564f38b793aa27b6eb92)
2008-03-07 05:59:55 -06:00