1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-20 14:03:59 +03:00

998 Commits

Author SHA1 Message Date
Andrew Bartlett
f8c1258d01 r8677: The first part of the domain name may not be equal to the netbios domain name.
Remove the use of flatname from the main domain object, we no longer
reference it.

Andrew Bartlett
(This used to be commit 2303e24be74570187b23c3d31d0433263c83ba7e)
2007-10-10 13:29:53 -05:00
Andrew Bartlett
2a0cf520e3 r8667: Further simply the provision script, by removing the 'name' attribute.
This is now calculated on the fly for every add and modify.

Andrew Bartlett
(This used to be commit ed1f2e029c840d2b3ecb49dbe6e8cd67588eeeed)
2007-10-10 13:29:52 -05:00
Andrew Bartlett
1211496eba r8662: Revert change to CN=Cert Publishers, this group still needs to
override the template for these attributes.

Andrew Bartlett
(This used to be commit 3462cbadb285313dfd88234b144d1921d2bcc880)
2007-10-10 13:29:51 -05:00
Andrew Bartlett
6173fad231 r8660: Use templates for the initial provision of user and computer accounts.
This ensures the templating code is used, and also makes it clearer
what I need to duplicate in the vampire area.

Also fix a silly bug in the template application code (the samdb
module) that caused templates to be compleatly unused (my fault, from
my commit last night).

Andrew Bartlett
(This used to be commit 4a8ef7197ff938942832034453f843cb8a50f2d1)
2007-10-10 13:29:51 -05:00
Andrew Bartlett
24d2107324 r8650: Use the timestamps and a new objectguid module rather than placing
boilerplate attributes in every entry in provision.ldif.

The next step will be to use templates.

Andrew Bartlett
(This used to be commit 940ed9827f5ab83b668a60a2b0110567dd54c3e2)
2007-10-10 13:29:50 -05:00
Andrew Tridgell
2f5f01567b r8643: - make lp_configfile() work again
- get rid of redundeny dyn_CONFIGFILE argument to lp_load()

- fixed provisioning to work with completely pristine install,
  creating an initial smb.conf is none is present

- added lp.set() and lp.reload() to loadparm ejs object interface
(This used to be commit c2691ef7126ddcee5f95970b78759b40a049d0a7)
2007-10-10 13:29:48 -05:00
Andrew Tridgell
09fb6d2280 r8558: move newuser logic into the provision.js lib
(This used to be commit b6ef32ddd1fdca0d40a12f34fa5f7a484b3c2071)
2007-10-10 13:29:37 -05:00
Andrew Tridgell
8858542b26 r8459: move to the more portable script execution method
(This used to be commit d7e4dcaaaa37c4992f763e37ca2d655e4d267283)
2007-10-10 13:23:05 -05:00
Andrew Tridgell
bca5b59fdf r8415: get rid of the last 2 runtime perl scripts
(This used to be commit b775884474bd28c0c3d45546b1bf3ac52601ed24)
2007-10-10 13:23:00 -05:00
Andrew Tridgell
afb160e20c r8410: converted the newuser script to js
(This used to be commit b90aa3c5a7cd7e91a8fc804c3cd9f2155761cf28)
2007-10-10 13:22:59 -05:00
Simo Sorce
c9b0e86a43 r8373: New wildcard matching code.
This code applies correct ldap standard wildcard matching code
removes WILDCARD matching from tdb @ATTRIBUTES, that's now handled independently
adds some more tests for wildcard matching
fixes dn comparison code in ldb_match
(This used to be commit 4eb5863042011988d85092d7dde3d809aa15bd59)
2007-10-10 13:20:13 -05:00
Andrew Tridgell
adb7fd18e5 r8372: - split out provisioning logic into a separate ejs library
- added a provisioning web page
(This used to be commit 7476cb94132cf2849ec19360468904ca6fe8de2c)
2007-10-10 13:20:13 -05:00
Andrew Tridgell
26a55c330a r8355: - added a vsprintf() function
- removed the --outputdir option from provision, as its not used any
  more (as ejs knows the real paths)
(This used to be commit abbf9c703c17c2edc2d978dade3619a96c38d0d9)
2007-10-10 13:20:10 -05:00
Andrew Tridgell
dd750b98af r8350: fixed the --root option to provision
(This used to be commit 506e07d6e064375aaee20133d722b6b44d63b083)
2007-10-10 13:20:10 -05:00
Andrew Tridgell
23f79c5c9a r8347: replace the perl provision script with a ejs script
I don't mind depending on perl at compile time, but I want to avoid
depending on it at runtime. This also will make it easy to add web
install wizard
(This used to be commit f27a68176984c6856fad2e3a028458eb96943f80)
2007-10-10 13:20:09 -05:00
Andrew Tridgell
08b78230d2 r8345: make the dn on the hklm ldif valid
Jelmer, can you check this is OK?
(This used to be commit 6d416656a02d02c6e60d980ba406a4b72e84811b)
2007-10-10 13:20:09 -05:00
Andrew Tridgell
2dce83de0c r8338: - added a substitute_var() js library function for doing hash driven
substitution of variables in strings

- the js provision script now correctly processes provision.ldif
(This used to be commit c2946003e06c4898ba0444cd0b69d3203753be94)
2007-10-10 13:20:08 -05:00
Andrew Tridgell
3e5649f79f r8332: not done yet, but a lot closer
(This used to be commit 1d9632877c088837b5c2a7497473e09913775488)
2007-10-10 13:20:07 -05:00
Andrew Tridgell
07c2a1c09a r8319: the start of a provision script in ejs. This is why I've been adding
so many functions lately.

so far it just parses options, works out the host IP, and user and group names
(This used to be commit 333b32025fc2a33d2a145bbce9cdfefa252ec77a)
2007-10-10 13:20:06 -05:00
Andrew Tridgell
9ab58c5e01 r8315: fixed the generation of the serial number in the dns zone file (bind9
doesn't like it being too long)
(This used to be commit fc93ade9cdfe97bdcd2383fa256877580707181c)
2007-10-10 13:20:05 -05:00
Andrew Tridgell
c9c49b11f9 r8289: fallback to the group 'other' for users
this might fix the testing on solaris10
(This used to be commit 5adbab0afe85f5f856ab5fcc7a285a22f1752de3)
2007-10-10 13:19:32 -05:00
Stefan Metzmacher
b82f504072 r8225: make nETBIOSName case insensitive, so that lower case netbios domain REALM's
are working in the hdb-ldb module

metze
(This used to be commit d24f39a5d746b9eabc4d5f6f6070a85be084d82c)
2007-10-10 13:19:21 -05:00
Stefan Metzmacher
a3c7f79931 r8158: - use the timestring for the serial number of the bind zone file
- add --krbtgtpass and --machinepass options, with them you can easy set them to default
  values for testing so that you don't need to setup a new keytab file when you rerun provision.pl

metze
(This used to be commit cfb72455970c182aaba67bf9cf9775a854f143ff)
2007-10-10 13:19:15 -05:00
Andrew Tridgell
eab25a4d01 r8056: make the realm lowercase in our ldb (better matches w2k3)
(This used to be commit 39cfb6f739f33a33dcbee708a9a2e5f1c6c12287)
2007-10-10 13:19:03 -05:00
Andrew Tridgell
c7377de49f r8055: added canonicalName to our domainDns record
(This used to be commit 1ba296b9d0ed1cf0961bdd3cde03f1ce56e1d72b)
2007-10-10 13:19:03 -05:00
Andrew Bartlett
f62a70fe54 r7988: Store the KVNO for the machine account, and set it up in the provision.
Andrew Bartlett
(This used to be commit 90e94a4630c24282cd93ee05e258877b38e24a57)
2007-10-10 13:18:56 -05:00
Andrew Tridgell
6861c9069a r7940: use local path first for ldbadd in provisioning
(This used to be commit cff7507f593816a831a14f03862f7bdb24c15d4f)
2007-10-10 13:18:53 -05:00
Andrew Tridgell
a6b242639d r7939: fix default hostname in provision
(This used to be commit 79d174005e3508745ea8b0bda2321abd184bf68b)
2007-10-10 13:18:53 -05:00
Andrew Tridgell
122bb5642c r7921: fixed newuser script (letting samldb module allocate the sid)
(This used to be commit 45d08e94d27f837ab7788471b07e8c0c9b061c39)
2007-10-10 13:18:50 -05:00
Andrew Tridgell
40f1ddfded r7917: macosx doesn't have a group called 'users'
(This used to be commit 2b39736c35168b2e6b1ef094de4d83b604ea39f1)
2007-10-10 13:18:50 -05:00
Andrew Tridgell
2f454d2905 r7907: the old solaris perl doesn't handle mkdir() without a mode
(This used to be commit 54d698c4888ce453926aed6102621d20fe744031)
2007-10-10 13:18:48 -05:00
Andrew Tridgell
3284fe8571 r7900: the existing ltdb indexing code does in fact cope with binary fields, so re-enable
indexing on objectSid
(This used to be commit 5781c83ba4ef919520e9668a40aafc8f74fe5700)
2007-10-10 13:18:47 -05:00
Andrew Tridgell
a6e921fc81 r7867: a couple of bug fixes for newuser.pl from kukks
I'm looking forward to deleting this file when we can add users using
the web intgerface (and maybe ejs scripts for the command line)
(This used to be commit 836e5782fda9edef6746adc6453d8a40df2a1765)
2007-10-10 13:18:45 -05:00
Andrew Tridgell
bdee131f30 r7860: switch our ldb storage format to use a NDR encoded objectSid. This is
quite a large change as we had lots of code that assumed that
objectSid was a string in S- format.

metze and simo tried to convince me to use NDR format months ago, but
I didn't listen, so its fair that I have the pain of fixing all the
code now :-)

This builds on the ldb_register_samba_handlers() and ldif handlers
code I did earlier this week. There are still three parts of this
conversion I have not finished:

 - the ltdb index records need to use the string form of the objectSid
   (to keep the DNs sane). Until that it done I have disabled indexing on
   objectSid, which is a big performance hit, but allows us to pass
   all our tests while I rejig the indexing system to use a externally
   supplied conversion function

 - I haven't yet put in place the code that allows client to use the
   "S-xxx-yyy" form for objectSid in ldap search expressions. w2k3
   supports this, presumably by looking for the "S-" prefix to
   determine what type of objectSid form is being used by the client. I
   have been working on ways to handle this, but am not happy with
   them yet so they aren't part of this patch

 - I need to change pidl to generate push functions that take a
   "const void *" instead of a "void*" for the data pointer. That will
   fix the couple of new warnings this code generates.

Luckily it many places the conversion to NDR formatted records
actually simplified the code, as it means we no longer need as many
calls to dom_sid_parse_talloc(). In some places it got more complex,
but not many.
(This used to be commit d40bc2fa8ddd43560315688eebdbe98bdd02756c)
2007-10-10 13:18:44 -05:00
Andrew Tridgell
a828bccd39 r7727: we need to mark some attributes as INTEGER, so that the standard searches
that w2k does work. For example, w2k asks for sAMAccountType=805306369 which
will only match if we know its an integer
(This used to be commit 941509ee58253b671bb74b2d8d8667cc6a1a4328)
2007-10-10 13:18:27 -05:00
Andrew Tridgell
47ab0ed8ed r7499: ensure that the account we run tests as ("Administrator") maps to the
unixName that we are running as in the test suite. Otherwise files are
created as a user without any entry in the sam, so the ACL doesn't
allow that user read permission when it should. This should fix the
RAW-ACLS test in the build farm.
(This used to be commit 30445483e4facb0a1d8a5979a2eac6c166193c09)
2007-10-10 13:18:00 -05:00
Stefan Metzmacher
c69e1cf003 r6884: the invocationID is only used as objectGUID on the NTDS Settings object on the
first DC in the forest!

metze
(This used to be commit 8ea59f23728450cd42c221e69f375d6e390c4a79)
2007-10-10 13:16:55 -05:00
Andrew Bartlett
db169af3b7 r6883: Move to what simo assures me is the 'correct' way to find the NetBIOS
and long names for a domain.

Add servicePrincipalName mapping table (administrator configurable),
in the same spot as microsoft uses.

Andrew Bartlett
(This used to be commit c25e78b4b34384a3a79a920f50f01be696a048ba)
2007-10-10 13:16:55 -05:00
Simo Sorce
81a8af53b4 r6868: the @ATTRIBUTES object format has changed
(This used to be commit 4401c74fbc630d7ab7983c5f901483f3d7ddd8fb)
2007-10-10 13:16:52 -05:00
Andrew Tridgell
51a3cfe35e r6751: dnsDomain should be CASE_INSENSITIVE (winxp will sometimes do a cldap query with this
in uppercase)
(This used to be commit f0c37555ff30c3e5ff4680d0b33bc105ebd3a0b1)
2007-10-10 13:16:41 -05:00
Andrew Bartlett
e5124bffca r6698: Our domain join code requires that the secureChannelType be set. Type
6 is BDC, which is correct for a self-join.

Andrew Bartlett
(This used to be commit cd61ff80f886bcb4a8c6b681879ee269604e98f3)
2007-10-10 13:16:35 -05:00
Stefan Metzmacher
e4cdc5d750 r6697: fix from Sven (wAmpIre) Velt
metze
(This used to be commit db2f5619f8114b6454cc2541d80129e1ca5fa1a9)
2007-10-10 13:16:35 -05:00
Stefan Metzmacher
b686e0b926 r6571: create a simple smb.conf by provision.pl
metze
(This used to be commit af16ecb7ac6015b2f7fa70fc73e1ab69776c8079)
2007-10-10 13:16:26 -05:00
Andrew Bartlett
85e9412c47 r6565: Cludge, cludge, cludge...
We need to pass the 'secure channel type' to the NETLOGON layer, which
must match the account type.

(Yes, jelmer objects to this inclusion of the kitchen sink ;-)

Andrew Bartlett
(This used to be commit 8ee208a926d2b15fdc42753b1f9ee586564c6248)
2007-10-10 13:16:26 -05:00
Jelmer Vernooij
7fca1d46ce r6564: - Fix bug in socket_wrapper
- Add options --quiet and --outputdir options to the provisioning script
- Add simple 'make test' and 'make test-swrap'
(This used to be commit 7d2d4a57e0e58a51c76c2e86ea447e81a1d79544)
2007-10-10 13:16:26 -05:00
Andrew Bartlett
13d31a4871 r6534: Patch from lieschen to fix our vital user creation tools :-)
Andrew Bartlett
(This used to be commit 1a1f0bd33c8e9ad89df0073aa9c2e42822ec7903)
2007-10-10 13:16:24 -05:00
Tim Potter
4f030437d0 r6361: Update howto and provisioning script with the moves made in r6207.
(This used to be commit e2f127b4d822c98668e20e724a4ca91b320092b3)
2007-10-10 13:11:34 -05:00
Stefan Metzmacher
cf52d62ec9 r6207: - clean up source topdir
- move provision stuff to setup/
- remove unused scripts

metze
(This used to be commit c35887ca649675f28ca986713a08082420418d74)
2007-10-10 13:11:26 -05:00