54 Commits

Author	SHA1	Message	Date
Andrew Bartlett	20f0e18854	r11990: Set the password set time as 'now', so it isn't expired back in 2004. ... Andrew Bartlett (This used to be commit b3929230b2)	2007-10-10 13:46:55 -05:00
Andrew Bartlett	efa0106627	r11357: Add more standard 'servicePrincaipalName' entries to our host account ... in provision. Andrew Bartlett (This used to be commit 8ed6156280)	2007-10-10 13:45:24 -05:00
Andrew Tridgell	6b7d7f22e7	r10955: finally worked out why our computer accounts were being identified as users in mmc. ... The problem was that the samdb module was auto-adding objectClass=user for these accounts. That would be OK, as computer accounts are supposed to be in that objectClass, but mmc cares about the order of the values in the objectClass attribute! It looks for the last value, and takes that as the value to use when deciding how to manipulate the record. So, this patch adds an explicit objectClass=user to the record when it gets created, which tells the samdb module to not add it as well. That fixes the order. I suspect we are missing something else though - is objectClass supposed to auto-sort based on the schema? (This used to be commit 68c5f807fd)	2007-10-10 13:39:48 -05:00
Andrew Bartlett	66b2a04346	r8790: Finish the migration of aliases and privilages with SamSync, by adding ... templating support for foreignSecurityPrincipals to the samdb module. This is an extension beyond what microsoft does, and has been very useful :-) The setup scripts have been modified to use the new template, as has the SAMR and LSA code. Other cleanups in LSA remove the assumption that the short domain name is the first component of the realm. Also add a lot of useful debug messages, to make it clear how/why the SamSync may have gone wrong. Many of these should perhaps be hooked into an error string. Andrew Bartlett (This used to be commit 1f071b0609)	2007-10-10 13:30:05 -05:00