Andrew Tridgell
a40dcd161c
s4-dns: use the generated krb5.conf in samba_dnsupdate
...
this gives one less thing that an admin can get wrong
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Sep 27 02:35:29 UTC 2010 on sn-devel-104
2010-09-27 02:35:29 +00:00
Andrew Tridgell
93be0d6178
s4-provision: fixed the generation of the krb5.conf for vampire
...
we need a correct krb5.conf for nsupdate from bind9
2010-09-27 01:53:45 +00:00
Andrew Tridgell
f3ceec9b1b
s4-spn: don't try to do SPN updates as a RODC
...
we don't have the permissions to do it
2010-09-26 06:29:06 +00:00
Matthieu Patou
c680a42504
upgradeprovision: fix a typo
2010-09-26 06:22:43 +04:00
Matthieu Patou
873bd98904
upgradeprovision: Fix a bug with renamed entries
...
The SD was not refetched for renamed entries, resulting with a try to
add an additional SD when there was already one.
2010-09-26 06:22:43 +04:00
Matthieu Patou
43274c9071
upgradeprovision: fix a bug with not updated links
2010-09-26 06:22:43 +04:00
Matthieu Patou
a8f8f277ff
s4 provision: start with gpo of version 0 and be consistent between different policies
2010-09-26 06:22:43 +04:00
Matthieu Patou
76d87b7fb5
s4 upgradeprovision: fix a bug with empty reference objects
...
Thanks to lukas@eecs.qmul.ac.uk for poiting it to me
2010-09-26 06:22:43 +04:00
Matthieu Patou
3c95d4d313
s4 upgradeprovision: Copy versionNumber if not present it helps to make gpo valid
2010-09-26 06:22:43 +04:00
Matthieu Patou
dfa468fd08
s4 provision: Make GPO folder group writable
...
The group of this folder is domain administrator and it seems sensible
that all domain administrators have the right to modify the gpo (they
have it at the NT ACLs level ...)
2010-09-26 06:22:43 +04:00
Matthieu Patou
69ef2b3705
upgradeprovision: use the same case for hostname in reference provision as in the current provision
...
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Sep 26 01:21:52 UTC 2010 on sn-devel-104
2010-09-26 01:21:52 +00:00
Andrew Tridgell
b8444b64a3
s4-provision: switch to dns-HOSTNAME instead of dns
...
We now use a host specific account name for the DNS account, which is
the account used for dynamic DNS updates. We also setup the
servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN}
and DNS/${DNSNAME} for compatibility with both the old and new SPNs
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-26 01:21:49 +00:00
Kamen Mazdrashki
7e1e7b16f6
s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connections
2010-09-26 02:25:10 +03:00
Kamen Mazdrashki
9e6fa8553c
s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a time
...
If no arguments given, ldapcmp will compare all NCs
2010-09-26 02:25:03 +03:00
Andrew Tridgell
c53210bf06
s4-net: added --ipaddress option to net commands
...
this allows override of server IP address, bypassing NBT or DNS name
resolution of DCs
Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
2010-09-25 10:38:45 -07:00
Matthias Dieter Wallnöfer
76c346dfc1
s4:provision - rootdse - remove static "ldapServiceName" attribute
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:43 +10:00
Matthias Dieter Wallnöfer
ccc67a03d6
s4:provision - rootdse - remove static "dnsHostName" attribute
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:43 +10:00
Matthias Dieter Wallnöfer
65ca9e691b
s4:provision.py - support still not fully provisioned trees regarding the rootDSE module
...
We simply override the NTDS settings path manually
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:42 +10:00
Matthias Dieter Wallnöfer
439d7ff935
s4:provision.py - make more use of "names.serverdn" on NTDS settings location
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:42 +10:00
Matthias Dieter Wallnöfer
f45848e33a
s4:python/samba/join.py - add a comment to point out that NCs have to be assigned dynamically
...
We could also have DNS partitions (only to make one example).
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:42 +10:00
Matthias Dieter Wallnöfer
8223342e50
s4:python/samba/join.py - use constant for DC function level
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:42 +10:00
Andrew Tridgell
c0ff93b033
s4-drs: we don't need to decode to utf8 in python dcerpc strings any more
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-23 07:17:57 +00:00
Jelmer Vernooij
7378b6d2a2
s4-selftest: Move credentials tests to standard python directory.
2010-09-22 22:29:09 -07:00
Jelmer Vernooij
cc5b673e18
s4-selftest: Move samba3sam test to standard python directory.
2010-09-22 22:29:09 -07:00
Jelmer Vernooij
3d0e6db9dc
selftest: Fix idlist running.
2010-09-22 22:29:09 -07:00
Jelmer Vernooij
1c3c9a483b
s4-param: Fix more memory leaks, invalid memory context.
2010-09-22 17:48:24 -07:00
Jelmer Vernooij
3fea9df85a
s4-param: Check type when converting python object to lp_ctx, fix some
...
memory leaks.
2010-09-22 17:48:23 -07:00
Jelmer Vernooij
63031a2a78
pygensec: Implement start_mech_by_name().
2010-09-22 17:48:23 -07:00
Jelmer Vernooij
5a75fb194a
ndrdump: Move blackbox test to standard python namespace.
2010-09-22 17:48:23 -07:00
Kamen Mazdrashki
e3b81c6062
s4-ldapcmp: Enable comparisons between LDBs too
...
This will enable us to compare two LDBs or and LDB with running
AD server. Comparing LDB against running running server
may come into handy when one want to see if 'net vampire'
command does what it does the right way
2010-09-22 15:07:24 +03:00
Jelmer Vernooij
e12e661f35
s4-selftest: Move more tests to scripting/python, simplifies running of tests.
2010-09-21 22:54:38 -07:00
Jelmer Vernooij
118c6548bb
selftest: Fix run for systems without testtools installed.
2010-09-21 22:54:37 -07:00
Jelmer Vernooij
58cfbc510c
rpc_talloc: Update test now that we create fewer references.
2010-09-20 22:40:47 -07:00
Jelmer Vernooij
7fc40d2ed3
pytestrpc: Be more verbose.
2010-09-20 22:40:47 -07:00
Jelmer Vernooij
f161fa3ac8
testrpc: Convert from a single unit test to a simple test script, be
...
more verbose.
2010-09-20 22:40:46 -07:00
Jelmer Vernooij
a7393449eb
pidl: Fix segfault when accessing unicode objects.
2010-09-20 22:40:46 -07:00
Kamen Mazdrashki
0740d0ae85
s4-devel-getncchanges: Add common Samba options as a group to be displayed
...
Those options are processed but never shown with --help argument
2010-09-21 00:15:23 +03:00
Andrew Tridgell
01371d968e
s4-rodc: override client site from cldap response
2010-09-19 13:36:02 -07:00
Andrew Tridgell
8beed3679d
s4-dns: fixed the dns_domain_info_type for netlogon DNS calls
...
w2k8r2 does check this field (WSPP docs need an update)
2010-09-19 13:36:02 -07:00
Andrew Tridgell
6642ae9703
s4-dns: added --all-names option to samba_dnsupdate
...
this forces the re-registration of all names
2010-09-19 13:36:02 -07:00
Andrew Tridgell
f6fa73bbd3
s4-rodc: added RODC DNS update support to samba_dnsupdate
...
for DNS updates that have a netlogon equivalent, send via netlogon
2010-09-19 11:29:32 -07:00
Andrew Tridgell
e72a1e2055
s4-pydsdb: added am_rodc() method on samdb
2010-09-19 11:29:32 -07:00
Andrew Tridgell
2666cc9c16
s4-pydsdb: don't force am_rodc unless it is set by caller
...
we should normally get the rodc flag by looking at the database, not
by forcing it in the database connect
2010-09-19 11:29:32 -07:00
Kamen Mazdrashki
c3489a7918
s4-ldapcmp: Fix options parsing for common Samba options
...
And also set 'creds2' to be equal to 'creds' in case
username2 paramater is not supplied on cmd line
2010-09-18 15:09:46 +03:00
Andrew Tridgell
90d685afe5
s4-devel: developer script for adding DNS entries via netlogon RPC
...
this calls the netlogon DsrUpdateReadOnlyServerDnsRecords call to add
DNS entries for a RODC via RPC calls. The call is routed via a IRPC
call to winbind, as winbind is the one with the schannel credential
chaining setup.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-17 19:02:19 +10:00
Andrew Tridgell
7e729c4f6a
s4-dns: use a non-forwardable ticket in samba_dnsupdate
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-16 16:08:46 +10:00
Andrew Tridgell
eeafe1eb65
s4-pydrs: fix for python 2.4
...
thanks to Kamen and David Gonzalez for spotting this
2010-09-16 16:08:45 +10:00
Andrew Tridgell
aabd89d8f7
s4-pyjoin: use new pynet finddc interface
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-16 07:24:01 +10:00
Andrew Tridgell
59d415f43f
s4-finddc: use NBT lookup for a 1C name if joining a short domain name
...
once we get the 1C lookup reply, use a CLDAP query to find the details
for the server
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-15 15:39:36 +10:00
Andrew Tridgell
4e9f449106
s4-join: give a clear error when using short domain form
...
we now require the full domain name, for the DNS/CLDAP lookup
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-15 15:39:36 +10:00