1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-05 21:57:51 +03:00

814 Commits

Author SHA1 Message Date
Andrew Tridgell
81c9b98ecd s4-join: use the command line loadparm in provision during a join
this allows a join with an empty smb.conf to override locations of
files correctly with --option

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-11 02:57:04 +00:00
Andrew Tridgell
13020349e1 s4-join: raise mininum password length to 32 in new join code 2010-11-10 09:53:18 +11:00
Matthias Dieter Wallnöfer
fd9fc251fb s4:provision.py - strip trailing whitespaces 2010-11-09 13:25:12 +01:00
Matthias Dieter Wallnöfer
bd5039546e s4:provision - switch to "clearTextPassword" for setting passwords
This is the default password set/change attribute for s4 specific purposes
(otherwise in respect to Windows it's "unicodePwd"). We move away from
"userPassword" since on Windows it's not activated by default - and s4 will
follow soon.
2010-11-09 13:22:00 +01:00
Andrew Tridgell
cc5e231355 s4-pydrs: validate the DsGetNCChanges response
check that object_count matches up with first_object
2010-11-08 11:13:28 +11:00
Andrew Tridgell
e59bf5efb5 s4-join: modify join behaviour according to domain level
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Nov  7 23:32:16 UTC 2010 on sn-devel-104
2010-11-07 23:32:16 +00:00
Andrew Tridgell
fc5fecb0b7 s4-drs: allow override of the replica_flags 2010-11-07 22:50:05 +00:00
Andrew Tridgell
2d52eea028 s4-join: fixed SPNs, invocationId and dnshostname and python join
- we need the GN/ SPN for replication. 
- fixed the string form of the invocationId
- lowercase the dnshostname

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-06 14:36:26 +11:00
Andrew Tridgell
724599de63 samba-tool: deprecate samba-tool vampire command 2010-11-06 14:36:26 +11:00
Andrew Tridgell
11ae1046a0 s4-join: fixed secure_channel_type
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Nov  5 13:24:32 UTC 2010 on sn-devel-104
2010-11-05 13:24:32 +00:00
Andrew Tridgell
351312d8b8 s4-join: don't print all the NDR packets by default 2010-11-05 23:42:09 +11:00
Andrew Tridgell
506ffcf86f s4-join: added DC join to the python join code
this will replace the old vampire code
2010-11-05 23:42:08 +11:00
Andrew Tridgell
278778c927 s4-pydrs: added rodc option to python drs replication 2010-11-05 23:42:08 +11:00
Andrew Tridgell
cbded38ed5 s4-pydsdb: added DsReplicaAttribute()
this allows us to form a DsReplicaAttribute structure from python
2010-11-05 23:42:08 +11:00
Jelmer Vernooij
cd172e7724 talloc: Add python talloc module, move convenience functions to it.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Fri Nov  5 02:48:21 UTC 2010 on sn-devel-104
2010-11-05 02:48:21 +00:00
Jelmer Vernooij
6bd903ebe0 provision: Look for in source setup data first, in case an older version
of samba 4 is installed in the system.
2010-11-03 19:13:36 +00:00
Jelmer Vernooij
654fdce6a2 samba: Make in_source_tree() public. 2010-11-03 19:13:36 +00:00
Matthias Dieter Wallnöfer
7578e04fb8 s4:provision - adapt the "provision" so that SIDs are only set on entry creation
SID modifications are denied.
2010-11-01 12:25:24 +01:00
Matthias Dieter Wallnöfer
572774a7a0 s4:provision - remove the "servicePrincipalName" creation on the DC object
This is now done by the "samba_spnupdate" script.
2010-10-31 18:44:07 +00:00
Matthieu Patou
b548674c29 provision: fix wrong tests
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Oct 30 17:31:23 UTC 2010 on sn-devel-104
2010-10-30 17:31:23 +00:00
Matthieu Patou
dc0000e1a8 provision: when deriving netbiosname from hostname force the netbiosname to be compliant
It means no space/_/-/@.... and less than 16 chars.

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Oct 30 14:26:22 UTC 2010 on sn-devel-104
2010-10-30 14:26:22 +00:00
Matthias Dieter Wallnöfer
8b9a08e10f s4:provision.py - add the correct "CN=Sites" security descriptor
This should help to fix bug #7403.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104
2010-10-23 20:16:59 +00:00
Matthias Dieter Wallnöfer
245642a36b s4:schema.py - reformat and fix the security descriptor
- Now it matches Windows's order
- It contained a superfluous entry (an "Administrator" user grant)
2010-10-23 19:35:06 +00:00
Matthias Dieter Wallnöfer
a9b58f6246 s4:samdb.py - remove a pointless comment
We are only looking for the default DN - but the method name already tells
us this.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Oct 19 10:03:12 UTC 2010 on sn-devel-104
2010-10-19 10:03:12 +00:00
Matthias Dieter Wallnöfer
8c4f6bcd67 s4:samdb.py - use a more standard way to get to the domain realm/dns name
We do always use the canonical name as a base if we don't have it around yet.
2010-10-19 09:21:04 +00:00
Lukasz Zalewski
87fd2fd157 Addition of userPrincipalName attribute when new account is created 2010-10-19 09:21:04 +00:00
Andrew Bartlett
f9c7365e53 s4-provisionbackend Allow a fixed URI to be specified for LDAP backend
This is added to make the 'existing' LDAP backend class more useful,
and to allow debuging of our OpenLDAP backend class with wireshark, by
forcing the traffic over loopback TCP, which is much easier to sniff.

Andrew Bartlett
2010-10-19 18:57:06 +11:00
Andrew Bartlett
4d9b12ae8f s4-provision Remove serverdn parameter from Schema()
We don't need to know the server DN here any more, and it
makes no sense for many callers.

Andrew Bartlett
2010-10-19 18:57:00 +11:00
Kamen Mazdrashki
5218bcf76f s4-provision: Reset "debuglevel" after "provision" take place
Otherwise "provision" resets our current debug level and
we don't get debug messages we may expect onwards

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Oct  5 11:32:50 UTC 2010 on sn-devel-104
2010-10-05 11:32:50 +00:00
Matthias Dieter Wallnöfer
dda6c354f6 s4:dsdb python stuff - introduce also here the "show_recycled" control
But also here beside "show_deleted" to not loose compatibility with older
provisions.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-10-03 15:23:18 +00:00
Andrew Tridgell
29e1a847dd s4-selftest: silence warnings about bind chown 2010-10-02 21:11:52 -07:00
Andrew Tridgell
762ad1c4ba s4-test: silence the Failed to chown message in make test 2010-10-02 21:11:52 -07:00
Kamen Mazdrashki
da0f3bd229 s4-getopt.py: Make Anonymous creds when no credentials
are supplied on command line and caller doesn't want us
to guess credentials from environment
2010-10-03 01:24:57 +03:00
Kamen Mazdrashki
302e1d29d8 s4-python-test: Common implementation for getting environment variable value
Unit-test based python tests require certain input parameters
to be set in environment, otherwise they can't be run
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
6546127b64 s4-python-samba: Remove trailing ';'s 2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
7acbb7346f s4-python-test: Implement global connect_samdb() function
This helper makes proper ldb url to connect to
and is a shorthand for test to create SamDB connections
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
46ac1c3b47 s4-samba.samdb: Fix masking names from outer context
- 'filter' is built-in
- 'ldb' is a module name we imported
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
0cb476fb26 s4-python-samba: 'file' is a built-in 2010-10-03 01:24:55 +03:00
Kamen Mazdrashki
edfb8c64f6 s4-samba.samdb: Fix leading indention and trailing ';' 2010-10-03 01:24:55 +03:00
Kamen Mazdrashki
e9620c5fd2 s4-python-samba: Fix few cosmetics
- we have sys module already imported
- _glue module is part of samba package so be more precise how to import
2010-10-03 01:24:55 +03:00
Andrew Tridgell
176ecce9a6 s4-provision: wipe the old keytabs when provisioning
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 14:36:12 -07:00
Andrew Tridgell
67a04613e9 s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytab
we need to fetch the msDS-keyVersionNumber from the writeable DC

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 14:36:12 -07:00
Andrew Tridgell
739a4e4e23 s4-drsutils: expose DsBind() call in drs_utils.py
this will be used by samba_spnupdate
2010-09-29 03:55:04 +00:00
Andrew Tridgell
93be0d6178 s4-provision: fixed the generation of the krb5.conf for vampire
we need a correct krb5.conf for nsupdate from bind9
2010-09-27 01:53:45 +00:00
Matthieu Patou
a8f8f277ff s4 provision: start with gpo of version 0 and be consistent between different policies 2010-09-26 06:22:43 +04:00
Matthieu Patou
dfa468fd08 s4 provision: Make GPO folder group writable
The group of this folder is domain administrator and it seems sensible
that all domain administrators have the right to modify the gpo (they
have it at the NT ACLs level ...)
2010-09-26 06:22:43 +04:00
Matthieu Patou
69ef2b3705 upgradeprovision: use the same case for hostname in reference provision as in the current provision
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Sep 26 01:21:52 UTC 2010 on sn-devel-104
2010-09-26 01:21:52 +00:00
Andrew Tridgell
b8444b64a3 s4-provision: switch to dns-HOSTNAME instead of dns
We now use a host specific account name for the DNS account, which is
the account used for dynamic DNS updates. We also setup the
servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN}
and DNS/${DNSNAME} for compatibility with both the old and new SPNs

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-26 01:21:49 +00:00
Andrew Tridgell
c53210bf06 s4-net: added --ipaddress option to net commands
this allows override of server IP address, bypassing NBT or DNS name
resolution of DCs

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
2010-09-25 10:38:45 -07:00
Matthias Dieter Wallnöfer
76c346dfc1 s4:provision - rootdse - remove static "ldapServiceName" attribute
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-24 09:25:43 +10:00