sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code
105,585 Commits 60 Branches 1,145 Tags 452 MiB
8315d4d03a
Commit Graph

12 Commits

Author SHA1 Message Date
Endi S. Dewata
02533c9f1b s4:provision - Use netbios name for FDS instance name. 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2010-03-02 14:07:01 +11:00
Endi S. Dewata
ce709389e6 s4-provision: Disable populating FDS during instance creation. 
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
 2010-01-23 22:40:51 +01:00
Endi S. Dewata
8e5f5e3f05 s4:provision - Removed dependency on full Samba 3 schema from FDS 2009-11-16 07:57:40 +11:00
Endi S. Dewata
e035433bab s4 - SID allocation using FDS DNA plugin 2009-11-02 16:36:54 +11:00
Endi S. Dewata
8097280b46 s4 - Mapped AD schema to existing FDS schema. 2009-11-02 16:36:53 +11:00
Endi S. Dewata
cf77bf3382 s4:provision - replaced linked_attributes with FDS plugins 
When FDS is used as a backend, Samba should not use the
linked_attributes LDB module, but instead use the built-in
DS plugins for attribute linking, indexing, and referential
integrity.
 2009-10-16 14:08:11 +02:00
Endi Sukma Dewata
b1dabb1133 s4: Use SASL authentication against Fedora DS. 
1. During instance creation the provisioning script will import the SASL
   mapping for samba-admin. It's done here due to missing config schema
   preventing adding the mapping via ldapi.

2. After that it will use ldif2db to import the cn=samba-admin user as
   the target of SASL mapping.

3. Then it will start FDS and continue to do provisioning using the
   Directory Manager with simple bind.

4. The SASL credentials will be stored in secrets.ldb, so when Samba
   server runs later it will use the SASL credentials.

5. After the provisioning is done (just before stopping the slapd)
   it will use the DM over direct ldapi to delete the default SASL
   mappings included automatically by FDS, leaving just the new
   samba-admin mapping.

6. Also before stopping slapd it will use the DM over direct ldapi to
   set the ACL on the root entries of the user, configuration, and
   schema partitions. The ACL will give samba-admin the full access
   to these partitions.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2009-09-10 09:52:22 +10:00
Andrew Bartlett
5c4a4b4566 r25616: Fedora DS now has a way to install the schema and extra configuration 
as part of the setup inf file.

Andrew Bartlett
(This used to be commit 6c8987464e)
 2007-12-21 05:42:54 +01:00
Andrew Bartlett
90b49dc520 r23717: We need to remove the _ in LDAP_MANAGERPASS for the 
--ldap-manager-pass= option to work.

Andrew Bartlett
(This used to be commit fbcb1ec141)
 2007-10-10 14:59:07 -05:00
Andrew Bartlett
97172e1120 r23716: Clarify LDAP Manager DN and fix slapd startup syntax. 
Andrew Bartlett
(This used to be commit 17dad5d8c3)
 2007-10-10 14:59:06 -05:00
Andrew Bartlett
86a4886e39 r23189: Work towards a totally scripted setup of LDAP backends, so others can 
easily try this out.

I also intend to use this for the selftest, but I'm chasing issues
with the OpenlDAP (but not Fedora DS) backend.

Andrew Bartlett
(This used to be commit 0f457b1d2e)
 2007-10-10 14:53:02 -05:00
Andrew Bartlett
5fb459e4fa r23177: Add in a new provision-backend script. This helps set up the OpenLDAP or Fedora DS backend. 
This required a new mkdir() call in ejs.

We can now provision just the schema for ad2oLschema to operate on
(with provision_schema(), without performing the whole provision, just
to wipe it again (adjustments to 'make test' to come soon).

Andrew Bartlett
(This used to be commit 01d54d13dc)
 2007-10-10 14:53:00 -05:00