1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-23 20:59:10 +03:00
Commit Graph

412 Commits

Author SHA1 Message Date
e549759efe Fix blackbox tests on IPv6-only hosts. 2008-10-20 10:18:02 +02:00
fc54ca014b Move the password_hash module up the module stack.
This makes it operate in all partitions (minor), but more importantly
places it above some other modules that implement some extra schema
checks.  (The linked_attributes module objects to unknown attributes,
which inclues clearTextPassword, which we need internally but is not
in the schema).

Andrew Bartlett
2008-10-16 12:31:19 +11:00
7f1c02cd7a Enable winreg Python tests - authentication works now. 2008-09-30 15:24:46 +02:00
fae2fce47e s4:provision: don't do the full provision in the become_dc
metze
2008-09-27 02:12:22 +02:00
ef9169bfa6 Make it clear that the MMR password can differ from the admin passsword
In the future, we might simply randomly generate this, or allow the
admin to specify it seperate to the admin password.  However, both are
highly sensitive, as they imply read access to the krbtgt.

Andrew Bartlett
(This used to be commit 57d19ad002)
2008-09-08 15:09:06 +10:00
b76f383eef Use DIGEST-MD5 authentication for OpenLDAP replication
This avoids passing rootdn passwords or replicated data in cleartext
across the network.

Signed-of-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 67373c143a)
2008-09-08 14:39:54 +10:00
9817f3d785 Add a setexpiry operation in samdb.py
This makes it easy to set the expiry (or no expiry) for a samdb user
(This used to be commit 25171f18a4)
2008-08-30 07:32:44 +10:00
8237c0ba83 The index handling is now configured from the schema load, not by a
template.

Andrew Bartlett
(This used to be commit b36c6a21ad)
2008-08-21 12:59:16 +10:00
41493cbe68 Update OpenLDAP MMR configuration per comments by Oliver Liebel
<oliver@itc.li>

This changes the RIDs to be <serverID><DBID>, to ease later debugging.

The need to specify the port on the MMR URLs is now included in the
help.

Andrew Bartlett
(This used to be commit a5cbe8c09c)
2008-08-20 12:21:36 +10:00
b33f4541f6 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit fc6b4f03eb)
2008-08-19 14:11:51 +10:00
7ef21658fb Fix up new OpenLDAP MMR code.
This changes the MMR password from hard-coded value of 'linux',
adds tests and fixes the Fedora DS backend.

Currently the MMR password matches the admin password, but we can
change this to be another random value if required.

Also require the port to be specified on the command line, so we don't
hard-code a port of 9000.

Andrew Bartlett
(This used to be commit 08257c6d6c)
2008-08-19 14:10:14 +10:00
805dd85291 Generate Multi-Master Replication configuration for OpenLDAP
This patches provision-backend and the related scripts to generate the
correct configuration blobs for N-way multi-master replication using
OpenLDAP.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 6ed0b3f247)
2008-08-19 12:03:04 +10:00
47d80366be Fix templates.ldb reprovision handling.
This sets the attributes in a seperate transaction, and allows a
forced delete of the whole file.

Andrew Bartlett
(This used to be commit 423db2468b)
2008-08-19 11:43:41 +10:00
47124efe42 Add helper object Hostconfig to make it easier to get to e.g. the
SAM database.
(This used to be commit be75b2a36e)
2008-08-01 21:12:37 +02:00
1c94f3e95d Use new style python classes.
(This used to be commit 2a39aae0ce)
2008-08-01 21:00:09 +02:00
fff006bd84 Move domain DN determination out of newuser function.
(This used to be commit cbac27e6fa)
2008-08-01 20:47:22 +02:00
3b4ff07ded Actually fix missing substitution variables.
(This used to be commit 783412ecb2)
2008-08-01 20:47:03 +02:00
2fbe25b39d Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
(This used to be commit c87a8ba1fe)
2008-08-01 20:17:56 +02:00
3573420d7d Fix some forgotten substitute variables in provision, add check to prevent this sort of regression in the future.
(This used to be commit a461118f3b)
2008-08-01 20:17:29 +02:00
e80115deb9 We don't use EXTENSIBLEOBJECT any more.
(This used to be commit 4b137085c8)
2008-07-28 20:51:02 +10:00
08795db6d6 Make it even clearer what to do next in the LDAP backend setup
(This used to be commit bace931ad6)
2008-07-28 20:26:14 +10:00
45d60f5bd9 Always print the slapd startup command
(This used to be commit b1d05e7d14)
2008-07-28 20:18:17 +10:00
cff30c6da6 Remove unused function and make sensitive directories private.
(This used to be commit e23333d163)
2008-07-28 08:04:15 +10:00
1f285560bc Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit b12dd8ee54)
2008-07-25 11:58:51 +10:00
11798902dc Complain if we are told to use an ldap backend, without the type
(This used to be commit e9c3c9ad82)
2008-07-25 08:45:16 +10:00
c9c296b6bb Install'named.txt' to private/ as documentation.
This document is much more use when subbed with all the right things.

Andrew Bartlett
(This used to be commit 136a855998)
2008-07-22 11:09:18 +10:00
fb3e663678 Improve DNS and Group poicy configurations.
- fixes bug #4813 (simplify DNS setup)
  - This reworks the named.conf to be a fully fledged include
  - This also moves the documentation into named.txt
 - improves bug #4900 (Group policy support in Samba)
   - by creating an empty GPT.INI
 - fixes bug #5582 (DNS: Enhanced zone file)
   - This is now closer to the zone file AD creates

committed by Andrew Bartlett
(This used to be commit 74d684f6b3)
2008-07-22 11:06:47 +10:00
3408a2d18f Make a seperate template for the refint configuration too
(This used to be commit d2a527acc5)
2008-07-18 18:58:56 +10:00
cfc2063f23 Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP

Andrew Bartlett
(This used to be commit 6d6e03834a)
2008-07-18 18:44:07 +10:00
fe9fa62a05 Reorder whitespace in generated slapd.conf
This helps us see the real groupings in the generated memberOf
handling.

Andrew Bartlett
(This used to be commit ec70ebb831)
2008-07-16 14:04:24 +10:00
e400b3ec4e Fix asking for credentials for non-LDAP provisions.
(This used to be commit 78416f4840)
2008-07-15 18:44:58 +10:00
0f1eea2672 Rework provision to handle both simple and SASL binds.
Fedora DS is still setup for simple binds only, at this point.
(it also fails on other issues).

Andrew Bartlett
(This used to be commit b24c572d5a)
2008-07-15 15:46:32 +10:00
a6b842f963 Connect to the LDAP backend with SASL credentials.
This reworks our LDAP backend code to move from anonymous access to a
shared-secret SASL-protected connection.  (SASL selects NTLM or
DIGEST-MD5 on my system).

To get this working, we must pre-populate the LDAP backend with a DN
to store ths SASL secret on, and we use back-ldif for this.

This gives us a reasonable basis to deploy a replicated OpenLDAP
backend solution.

Andrew Bartlett
(This used to be commit cd0745253c)
2008-07-15 15:15:12 +10:00
44ea6a26fd rename sambaPassword -> userPassword.
This attribute is used in a very similar way (virtual attribute
updating the password) in AD on Win2003, so eliminate the difference.

This should not cause a problem for on-disk passwords, as by default
we do not store the plaintext at all.

Andrew Bartlett
(This used to be commit 1cf0d75149)
2008-07-12 15:26:42 +10:00
9ea25cacf1 Add a blackbox test for the provision-backend script.
This test (as most tests do :-) found a few bugs, also fixed in this
commit.

Andrew Bartlett
(This used to be commit d96a6482da)
2008-06-19 11:05:20 +10:00
370f95acfc Try to get a bit further with provisioning
(This used to be commit 649f6c0c10)
2008-06-16 17:52:50 -04:00
2772871146 Fix samdb python test.
(This used to be commit 0e3d488cc1)
2008-05-30 14:15:40 +02:00
21377a7ea9 Fix the samba4.dcerpc.bare.python test.
The loadparm context isn't really optional, as otherwise we can't find
the right server to connect to.

Andrew Bartlett
(This used to be commit 2b5acb5e95)
2008-05-30 15:26:10 +10:00
d579540085 Fix rpcecho test.
(This used to be commit df8399ba9d)
2008-05-30 15:09:59 +10:00
b9babfe4cc Fix up provision and samdb tests.
This fixes up the provision to operate with a target directory - it
must override the smb.conf in this case.

Andrew Bartlett
(This used to be commit 89fc39f7ed)
2008-05-30 14:26:47 +10:00
6f7b2b6933 Fix samdb test and enable it.
(This used to be commit 6b202d3780)
2008-05-29 17:38:12 +02:00
e16f0e15b4 Update after changes to the provision API, make sure temp dir gets cleaned
up.
(This used to be commit 064e9ddb37)
2008-05-29 17:31:16 +02:00
90aeca8ebd Check test directory is cleaned up by Python tests.
(This used to be commit c338269b4b)
2008-05-29 17:29:56 +02:00
b7c8e020a6 Print prefixMap in a human-readable format.
This should allow the prefixMap to be edited, until we find the right
way to autogenerate it.

Andrew Bartlett
(This used to be commit 24ae9a55ec)
2008-05-29 18:38:17 +10:00
815c0ef2ed provision: Add missing string parameter token when assigning ldap_backend.
(This used to be commit 7d26145a7f)
2008-05-28 22:43:25 -05:00
5df9e0576e Fix missing colon.
(This used to be commit 6b1576f544)
2008-05-25 14:41:54 +02:00
74126bc6d0 Expose transfer and abstract syntax.
(This used to be commit a875e07a37)
2008-05-25 04:54:38 +02:00
928ecbaebb Add support for secondary contexts from Python.
(This used to be commit 16d1ad0505)
2008-05-25 04:23:03 +02:00
21ce0ff006 Allow connecting to a DCE/RPC interface with Python for which we don't have IDL.
(This used to be commit e3178d522c)
2008-05-24 22:56:49 +02:00
75e7962d2e Add convenience functions for setting Python objects from errors.
(This used to be commit f1de723b89)
2008-05-24 22:13:32 +02:00