1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-15 16:59:09 +03:00
Commit Graph

666 Commits

Author SHA1 Message Date
53d7c4c7a2 Fix permissions - net subcommand modules don't need to be executable. 2010-01-16 19:53:48 +13:00
a4eaa11134 Fixed a problem with incorrect default SD owner/group. 2010-01-13 15:16:38 +02:00
5d1aa4c5b7 Comparison tool for LDAP servers (using Ldb)
This tool is integrated with Samba4 Ldb. It provides a useful output
where you can find easy differences in objects or attributes within
naming context (Domain, Configuration or Schema).

Added functionality for two sets of credentials.
2010-01-13 12:06:17 +02:00
8a09dc1266 s4-schema: fixed the SDDL for the schema root security descriptor
This was preventing a DCPROMO client from allowing outgoing
replication
2010-01-09 21:59:33 +11:00
38909a4ae5 s4-schema: switch to W2K8-R2 schema
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
d371b0eabe s4-schema: added adminDisplayName and adminDescription
These are missing from the WSPP schemas

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
a7fffe8da0 s4-provision: do a self join for all server types
We need a machine account so the RID allocation code can work. It
seems better to use the same code paths for a domain controller and
standalone server to avoid testing headaches with little used code.
2010-01-08 13:03:05 +11:00
1f25d0a5ad s4-provision: re-open sam.ldb after creating the schema
This enables the full schema during the rest of the provision, which
means indexing is enabled (along with index error checking, such as
duplicate SIDs)
2010-01-08 13:03:03 +11:00
53d10d139e s4-provision: don't hard wire the creation of the RID Set object
We now create it automatically in the samldb module when the first
user is created. 

The creation of the dns user also had to move to the _modify.ldif as
it now relies on the fSMO role being setup for the RID Manager

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:03:00 +11:00
fcfb5d7b63 s4-provision: allow provision modifies to add records
we need to recognise a changetype of 'add'
2010-01-08 13:02:59 +11:00
5eb3b919c5 s4-provision: the DC object itself needs a fixed objectSID
We can't allocate a objectSID until we have rIDSetReferences, but that
is in the DC object, so we have to force the objectSID of the DC

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:02:58 +11:00
3239872bbc s4-net: fixed pwsettings command
Don't override user settings with current settings
2009-12-31 17:33:33 +11:00
66f81d18ce samba: Fix whitespace, remove pointless 'pass' statement.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:31 +11:00
ea5af6e30c pyldb: Add dom_sid.split in favor of less powerful dom_sid_to_rid().
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:30 +11:00
7effe2d2e3 net: Support 'super' commands implemented in Python.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:28 +11:00
9e5ef916d4 net: Move 'newuser' to 'net newuser'
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:27 +11:00
73594c248f net: Fix tests and documentation of setexpiry.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:25 +11:00
345b25d059 net: Move setexpiry to 'net setexpiry'
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:24 +11:00
b531696a5b net: Move 'setpassword' to 'net setpassword'.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31 17:33:22 +11:00
588b3e6181 python: When updating sys.path to include the Samba python path, avoid throwing away the changes made by site.py. 2009-12-29 16:26:20 +01:00
e2c4d8281d s4/net: Allow options before arguments for Python commands. 2009-12-29 16:26:20 +01:00
433f58f5a7 s4/net: Pass all arguments through to the Python commands. 2009-12-29 16:26:20 +01:00
e60a40e287 s4/net: Add domainlevel subcommand. 2009-12-29 16:26:20 +01:00
732a7630e9 Use CommandError exception to deal with problems during net commands. 2009-12-29 16:26:19 +01:00
eaf4a9afb2 s4/net: Make pwsettings a net subcommand. 2009-12-29 16:26:19 +01:00
8c19cd2dea netcmd: Add some basic tests. 2009-12-29 16:26:19 +01:00
9e603dfb95 s4/net: Support parsing arguments in Python commands. 2009-12-29 16:26:19 +01:00
9b1a210311 net: Support usage/help of subcommands implemented in Python. 2009-12-29 16:26:19 +01:00
c064549e2e net: Support implementing subcommands in python. 2009-12-29 16:26:18 +01:00
dbda2c2db5 s4-provision: added a note about where invocationIDs come from
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-21 23:41:04 +11:00
c3d1e5ca0c s4:provision Give a more useful error message in guess_names
The problem here is that as we start to get 'real users' they still
decide to do silly things, like load empty but existing smb.conf
files.  Let's give them a better chance to discover what they did
wrong.

Andrew Bartlett
2009-12-18 14:27:43 +11:00
bf2c1e9c4f s4: load the domain level of the current provision and create a provision with the same domain level
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01 12:17:32 +11:00
3ca61d9a01 s4:upgrade.py - remove my copyright
First I wanted to add also other changes but then I didn't introduce them.
Therefore remove my copyright again.
2009-11-28 18:50:27 +01:00
68f7b84140 s4:upgrade.py - readd accidentally removed empty lines
Jelmer pointed out that this is against the PEP8 norm
2009-11-28 18:29:49 +01:00
ecfd1dfcbd s4:samba3.py/upgrade.py: Revert
This reverts commit 2175c0ed06.
This reverts commit 6c3e2417a0.
This reverts commit dbb8989e05.
This reverts commit 82adfa39b7.
This reverts commit f299efa8f0.

After a small discussion with Jelmer we agreed that this isn't the right way
to fix the problem. We should wait for a real patch rather to rely on temporal
hacks.
2009-11-28 15:34:43 +01:00
db41a0afc6 s4: fix SD update and password change in upgrade script
- reserve a new Samba OID for recalculate SD control
- fix the update SD function
- fix handling of kvno in the update_machine_account_password function
- fix handling of handles in RPC winreg server

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-11-28 09:56:06 +11:00
f749e22cca s4:provision.py - remove hardcoded SIDs and RIDs
After rework of the SDDL modules this is possible. In future: Never hardcode
them anymore! Always use the abbreviations.
2009-11-27 22:46:05 +01:00
2175c0ed06 s4:samba3.py - deactivate also the assertion on line 599 2009-11-27 20:03:36 +01:00
33188999b5 s4:provision.py - cosmetic 2009-11-27 17:39:02 +01:00
6c3e2417a0 s4:samba3.py (and test) - deactivate the tests until those parameters are fixed 2009-11-27 16:42:11 +01:00
08b3c396d7 s4:upgrade.py - Umlaut problem 2009-11-27 16:42:11 +01:00
0cc45b47dc s4:upgrade.py - rework to make the upgrade s3 -> s4 possible again
Able to read basic settings "workgroup", "realm", "netbios name" and the
function mode from the s3 "smb.conf" and use them for the provision of s4.
2009-11-27 16:06:07 +01:00
dbb8989e05 s4:upgrade.py - the import of WINS databases don't seem to work always
Disable it for now until the cause has been found
2009-11-27 15:02:18 +01:00
70b3161090 s4:samba3.py - ignore comments in "smb.conf" files 2009-11-27 15:00:41 +01:00
82adfa39b7 s4:samba3.py - don't read those informations out from the TDB
At the moment those three calls are broken
2009-11-27 14:59:12 +01:00
f299efa8f0 s4:samba3.py - support the TDB version 3 2009-11-27 14:58:37 +01:00
a5d854afbc s4:provision - Fix up the provision of "standalone" and "member" mode
Both modes weren't possible anymore since 1.) the secrets entry wasn't created,
2.) a lookup in winbindd was done using "lp_workgroup()" rather than
"lp_sam_name()" (since on the mentioned two configurations we use the netbios
name as domainname - and not the workgroup).
2009-11-27 14:51:14 +01:00
a7fa3a9703 s4:provision.py - cosmetic output correction 2009-11-27 13:07:52 +01:00
09338e60bc s4:provision Make setting the domain SID in the self join optional 2009-11-27 16:05:04 +11:00
3ed0cae14b s4: Fix missing TLS dir when targetdir is not the default one 2009-11-24 15:21:56 +11:00