sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-25 06:04:04 +03:00
Code
138,206 Commits 60 Branches 1,146 Tags
Commit Graph

998 Commits

Author SHA1 Message Date
Matthias Dieter Wallnöfer
350c61922e s4:provision.ldif - "passwordSettingsContainer" add "showInAdvancedViewOnly" 2010-05-13 13:03:44 +02:00
Matthias Dieter Wallnöfer
bbb5825a6f s4:provision.ldif - fix up "NTDS Quotas" "systemFlags" 2010-05-13 13:03:43 +02:00
Matthias Dieter Wallnöfer
b2bd02e11e s4:provision_users.ldif - fix up Administrator's "userAccountControl" 2010-05-13 13:03:43 +02:00
Matthias Dieter Wallnöfer
8c796715c1 s4:provision_basedn_modify.ldif - fix up "maxPwdAge" 2010-05-13 13:03:31 +02:00
Matthias Dieter Wallnöfer
5e4d91f7aa s4:provision_users.ldif - Fix typos in user/group objects 2010-05-13 11:17:52 +02:00
Matthias Dieter Wallnöfer
726fb35f9f s4:dsdb: add new controls 
- Add a new control for getting status informations (domain informations,
  password change status) directly from the module
- Add a new control for allowing direct hash changes
- Introduce an addtional control "change_old password checked" for the password
 2010-05-10 17:54:15 +02:00
Stefan Metzmacher
1913e03bd4 s4:setup: mark DSDB_CONTROL_DN_STORAGE_FORMAT_OID 1.3.6.1.4.1.7165.4.3.4 as allocated 
metze
 2010-05-10 17:54:15 +02:00
Stefan Metzmacher
6ee53309a1 s4:blackbox password tests - more complex passwords 2010-05-10 12:20:26 +02:00
Matthias Dieter Wallnöfer
e4ce727c8d s3:provision_basedn_modify.ldif - add "msDS-NcType" attribute and fix comments 2010-05-10 09:21:17 +02:00
Marcel Ritter
e6f59613fe Install spn_update_list to setup/ dir 
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
 2010-04-27 21:05:00 +02:00
Andrew Tridgell
fa26383884 s4-dsdb: added samba_spnupdate 
this script adds all our required servicePrincipalName entries at
runtime. The admin can add more entries to spn_update_list as needed
 2010-04-27 19:27:18 +10:00
Andrew Tridgell
570c89287e s4-dns: explain what the file is for 2010-04-27 19:27:18 +10:00
Andrew Tridgell
be35a40e03 s4-dns: fixed dc.dc duplication in DNS update list 2010-04-27 11:01:23 +10:00
Andrew Bartlett
bd08249d68 s4:provision Remove moduleload for 'hdb' (wrong name). 
The backends are not normally modules anyway
 2010-04-22 19:55:06 +10:00
Andrew Bartlett
e11f92ba73 s4:provision Make OpenLDAP backend more robust 
With the extra moduleload lines (which succeed if it's already
staticly linked), we now work with OpenLDAP overlays as modules.

Andrew Bartlett
 2010-04-22 18:37:19 +10:00
Andrew Bartlett
466fbe278a s4:provison Pass nosync in for the OpenLDAP cn=config too 2010-04-22 18:37:19 +10:00
Andrew Bartlett
cbb818222a s4:OpenLDAP-backend Use the new rdnval module in OpenLDAP 
This is rather than rdn_name, which tries to do the job on the client
side.  We need to leave this module in the stack for Fedora DS (and of
course the LDB backend).

Andrew Bartlett
 2010-04-22 18:37:18 +10:00
Andrew Bartlett
a50f6aad85 s4:provision Use more reasonable values for DB_CONFIG 
With the OpenLDAP backend, the old DB_CONFIG caused OpenLDAP to abort
on startup, and was very inefficient.  This new one, kindly supplied
by Matthew Backes <mbackes@symas.com> uses a more reasonable set of
buffer sizes.

Andrew Bartlett
 2010-04-22 18:37:18 +10:00
Andrew Tridgell
5e695dec2a s4-upgradeprovision: fixed --realm option duplicate in upgrade_from_s3 2010-04-21 13:35:56 +10:00
Andrew Tridgell
8fdfcde56c s4-provision: cope with --realm being in getopt.py 
we still need to allow for interactive querying of the realm

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-04-21 13:35:56 +10:00
Matthieu Patou
b8d6f1ce89 s4 provision: Remove hard coded ACL for GPO objects 
It is no longer needed to hard code ACL for GPO object as we have now code
that calculate ACL from defaultSecurityDescriptor and inheritance correctly.

In fact the resulting ACL returned by this hard coded value is a bit wrong as
some ACE are duplicated.

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
 2010-04-15 18:45:40 +02:00
Stefan Metzmacher
f1ecdb980b s4:setup/wscript_build: install dns_update_list into ${SETUPDIR} 
metze
 2010-04-15 18:37:40 +02:00
Jelmer Vernooij
dd4ef4e106 s4-python: More cleanups. 2010-04-08 23:20:36 +02:00
Jelmer Vernooij
d7a46ee129 s4-python: Simplify code, improve formatting. 2010-04-08 23:20:36 +02:00
Thomas Nagy
7f3116a63d build: allow the waf build to work with python 3.0 and 3.1 
Python 3.x is a bit fussier about print statements and indentation.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2010-04-08 07:46:39 +10:00
Andrew Tridgell
f9eae32f4b s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them 2010-04-06 20:27:11 +10:00
Andrew Tridgell
bd7bf0e1a9 s4-waf: install the rest of our python files 2010-04-06 20:27:10 +10:00
Andrew Tridgell
a2a4fee8c6 s4-waf: forgot these files 2010-04-06 20:27:09 +10:00
Jelmer Vernooij
31a517e172 s4-python: Move dsdb constants to a separate python module. 2010-04-04 00:14:23 +02:00
Andrew Tridgell
088096d1ba python: use '#!/usr/bin/env python' to cope with varying install locations 
this should be much more portable
 2010-03-25 14:37:19 +11:00
Oliver Liebel
752b2206cb Fixed --ol-mmr-url helpline 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2010-03-18 11:27:57 +11:00
Oliver Liebel
947560fe37 Fixed OL-MMR make test 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2010-03-18 11:27:51 +11:00
Matthias Dieter Wallnöfer
5e06110bc1 Reintroduce "s4:provision Improve the handling of provision errors"" 
This mainly reverts commit f0bc02d74c16bc013e9fdab46ef271cf45873453.

Jelmer pointed out a way how we can achieve the same error handling with an
older syntax also on Python 2.4+.
 2010-03-14 10:34:26 +01:00
Matthias Dieter Wallnöfer
f0bc02d74c Revert "s4:provision Improve the handling of provision errors" 
This reverts partially commit 027123199e13cc02ae4edadd8f0dd0f0660e1193.

Andrew, this is not Python 2.4+ compatible
 2010-03-13 12:37:45 +01:00
Endi S. Dewata
ade93755d5 s4:provision - Updated FDS schema mapping. 2010-03-11 15:30:25 +11:00
Andrew Bartlett
027123199e s4:provision Improve the handling of provision errors 
The backtraces were too confusing for our users, and didn't tell them
what to do to fix the problem.  By printing the string (rather than a
backtrace), and including in the error what to do, and what file to
remove, we give them a chance.

Andrew Bartlett
 2010-03-11 15:28:53 +11:00
Matthias Dieter Wallnöfer
73e7aa863b s4:provision.reg - call us Windows 2008 from the current version point of view 2010-03-06 18:51:41 +01:00
Endi S. Dewata
c54699faf2 s4:provision - Moved default FDS SASL mappings deletion from post_setup() to init(). 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2010-03-02 14:07:15 +11:00
Endi S. Dewata
02533c9f1b s4:provision - Use netbios name for FDS instance name. 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2010-03-02 14:07:01 +11:00
Matthias Dieter Wallnöfer
2caa2a045d s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs" 2010-02-26 21:00:10 +01:00
Andrew Tridgell
336ebeabad s4-provision: added dns_update_list 
This contains the list of DNS names we should have as a DC
 2010-02-26 14:27:39 +11:00
Andrew Tridgell
c796b6c52e s4-provision: fixed port number for gc ldap DNS SRV entry 
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-02-26 13:59:17 +11:00
Andrew Tridgell
9a72806dc9 Revert "s4:AD content - adequate some revision levels to match Windows Server 2008" 
This reverts commit 973ea198677c581064fad62cdac30baac7103ef8.

This change breaks DRS dcpromo.
 2010-02-26 13:22:12 +11:00
Matthias Dieter Wallnöfer
017e401ded s4:AD content - Implement the new password settings container 2010-02-21 21:19:57 +01:00
Matthias Dieter Wallnöfer
973ea19867 s4:AD content - adequate some revision levels to match Windows Server 2008 2010-02-21 21:19:56 +01:00
Matthias Dieter Wallnöfer
e592deeb1a s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008 
Those replace the FRS ones.
 2010-02-21 21:19:56 +01:00
Eduardo Lima
9c46f425a2 s4-drs: enable the recyclebin optional feature 
Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2010-02-16 00:12:09 +11:00
Andrew Tridgell
4aaa7fe43b s4-provision: fixed --function-level option to provision 
we need the DS_DOMAIN_* levels imported
 2010-02-12 01:08:11 +11:00
Andrew Tridgell
c986bfb22e s4-provision: pre-create a named.conf.update file 
The named.conf.update file will be filled in at runtime by Samba to 
contain the list of bind9 grant rules for granting DNS dynamic update
permissions on the domain.
 2010-02-11 21:04:12 +11:00
Andrew Tridgell
5a72eca574 s4-provision: move zone file to dns subdirectory 
This allows the permissions to be correctly set for bind to write to
a journal file. It also sets the right group ownership and permissions
on the files that bind needs to access.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-02-11 21:04:11 +11:00