1
0
mirror of https://github.com/samba-team/samba.git synced 2025-08-05 12:22:11 +03:00
Commit Graph

105 Commits

Author SHA1 Message Date
a117fd6d11 s4-dsdb: Ensure we have indexing enabled during the provision
Because we set the schema before we connected the ldb to a file, the @INDEX records
were not added until next startup.  This cost 100% more time in running provision on
my laptop.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Aug  9 08:20:36 CEST 2012 on sn-devel-104
2012-08-09 08:20:36 +02:00
70de501d6a s4-provision: Provide YP/NIS subtree to allow ADUC to see and set rfc2307 attrs
When provisioning with --use_rfc2307=yes populate the subtree:
CN=ypServ30,CN=RpcServices,CN=System,${DOMAINDN} This makes it
possible to manipulate the posix attributes via ADUC

(commit message adjusted by abartlet)

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-07-13 06:00:17 +02:00
33ff033204 s4-provision: Give better clues on what Samba needs for s3fs ACL support
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Jun 21 14:07:55 CEST 2012 on sn-devel-104
2012-06-21 14:07:55 +02:00
352dbddb6d s4-idmap: Add parameter 'idmap_ldb:use rfc2307' and correct implementation errors 2012-06-20 16:22:41 +10:00
2b50e8c534 s4-provision: Remove --slapd-path option
This just leaves a default enough for the test code to still check the start
of the provision.  This may well be removed in future, and we wish to reduce
the extra options to provision.

Andrew Bartlett
2012-06-20 16:22:41 +10:00
706a998c1f s4-provision: Remove last unused remenants of the 'sid generator' configuration
This was part of the now-abandoned S4 AD LDAP backend project.

Andrew Bartlett
2012-06-20 16:22:41 +10:00
39766b75a4 s4-lib/param: FLAG DAY for the default FILE SERVER
This commit changes the default file server to be s3fs.  Existing
installs wishing to keep the ntvfs file server need to set this in
their smb.conf:

server services = +smb -s3fs
dcerpc endpoint services = +winreg +srvsvc

Andrew Bartlett
2012-06-16 08:18:10 +02:00
67bdf4fa11 lib/param: Use server role = 'standalone server' to be consistant with member server
standalne is left as an alias.

Andrew Bartlett
2012-06-15 09:18:33 +02:00
b8815dc23d lib/param: Create a seperate server role for "active directory domain controller"
This will allow us to detect from the smb.conf if this is a Samba4 AD
DC which will allow smarter handling of (for example) accidentially
starting smbd rather than samba.

To cope with upgrades from existing Samba4 installs, 'domain
controller' is a synonym of 'active directory domain controller' and
new parameters 'classic primary domain controller' and 'classic backup
domain controller' are added.

Andrew Bartlett
2012-06-15 09:18:33 +02:00
cec6ebf4c3 s4:provision: fix use of non-existent word (existant) 2012-06-12 07:21:44 +02:00
dc799d4b42 s4-provision: Test for posix ACLs in the actual sysvol path
This avoids issues in the previous location where lp may not be initialised at this point
and instead simply waits until we have a known sysvol path, and test for ACL support
there.

Andrew Bartlett
2012-06-05 04:27:36 +02:00
d2b635cc2f s4-provision: Place xattr.tdb in the actual state directory
This patch does two things: it fixes up the spelling of "state dir" to
"state directory" so that we actually find the smb.conf parameter, and
we move it to after we process the global settings in case this is
changed in the future.

Andrew Bartlett
2012-06-05 04:27:36 +02:00
3e92bff13d s4-provision: Use the s3fs file server by default in migrations
This covers both migrations from s3 and joining a domain as a new DC.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May 30 14:57:22 CEST 2012 on sn-devel-104
2012-05-30 14:57:22 +02:00
0678eb6cdf s4-provision Ensure we have posix ACLs before we permit a s3fs-based Samba4 to be configured 2012-05-08 04:51:59 +02:00
7ed9ebab83 provision: remove reference to no longer existing template files. 2012-05-03 13:41:24 +02:00
7b55ec290e s4-provision: Fix up --use-s3fs to create the directory for xattr.tdb
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May  2 04:45:05 CEST 2012 on sn-devel-104
2012-05-02 04:45:03 +02:00
051042229d s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'
The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so
the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services.

Andrew Bartlett
2012-05-02 10:53:50 +10:00
538893d183 s3fs: Use xattr_tdb format for xattr storage
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed Apr 18 05:39:01 CEST 2012 on sn-devel-104
2012-04-18 05:39:01 +02:00
f35d20119a Add an option to have s3fs as file server for samba4
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
2012-04-16 09:38:17 +02:00
438971e214 LDB/s4 - do not use the "(dn=...)" syntax on filters anymore
Make it AD-compatible using "(distinguishedName=...)".

Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-03-26 00:57:29 +02:00
00a5366fdb s4-provision: Use "state directory" from lp, as it is always set
This fixes new provisions when --targetdir is not provided.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Thu Mar  1 11:41:02 CET 2012 on sn-devel-104
2012-03-01 11:41:02 +01:00
687e065036 provision: Write configuration without help of templates.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon Feb 27 00:52:46 CET 2012 on sn-devel-104
2012-02-27 00:52:46 +01:00
852418133e provision: Simplify make_smbconf a bit. 2012-02-26 23:19:07 +01:00
3bfccdfbc8 provision: Fix order for error formatting. 2012-02-26 23:19:07 +01:00
e27e519bb8 provision: Raise proper error when shares are missing rather than AssertionError. 2012-02-26 23:19:07 +01:00
411119db50 provision: Share more code for determine_netbios_name() with samba.valid_netbios_name().
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Feb 26 22:24:42 CET 2012 on sn-devel-104
2012-02-26 22:24:42 +01:00
6b320d63f3 provision: Properly close opened files. 2012-02-26 20:52:05 +01:00
171dc5ad4f provision: Reuse determine_netbios_name. 2012-02-26 20:52:05 +01:00
16a4fa9704 provision: Factor out determination of new netbios name. 2012-02-26 20:52:05 +01:00
6664541156 provision: Split out result reporting for backends. 2012-02-26 16:27:06 +01:00
eeb5f66d90 provision: Put adminpass details in ProvisionResult. 2012-02-26 16:27:06 +01:00
3e6fa054f9 provision/tests: Test for phpldapadminconfig path. 2012-02-26 16:27:06 +01:00
21f443eb82 provision: Leave result reporting up to caller. 2012-02-26 16:27:06 +01:00
fe3274d9cb provision: Start splitting out provision result reporting from actual provisioning.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Feb 25 22:13:10 CET 2012 on sn-devel-104
2012-02-25 22:13:10 +01:00
2fd10469c1 provision: Properly close ldb transactions. 2012-02-25 20:39:05 +01:00
d06eeb7949 Factor out sanitize_server_role. 2012-02-25 20:39:05 +01:00
66f13ea1e9 Partially revert 1f0298dd1b
It's fine to catch keyboard interrupts and other kinds of errors when it's done just for resource management, where the error is reraised later.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Feb 25 17:29:34 CET 2012 on sn-devel-104
2012-02-25 17:29:34 +01:00
f5d706b0ee provision: Remove unused imports. 2012-02-25 15:58:07 +01:00
8ca39dfbe1 s4:provision: only print the adminpass if it was generated (not user-provided) 2012-02-16 12:07:50 +01:00
09b865b2f0 s4:provision: generate the adminpass provision() instead of provision_fill()
so that the adminpass can be logged at the end
(otherwise we get "None")
2012-02-16 12:07:49 +01:00
32cf164d99 s4:provision: don't log the ldap admin password - it is internal only 2012-02-16 12:07:49 +01:00
803dc389d1 s4:provision: add "+dns" to server services if the dns backend is SAMBA_INTERNAL
Signed-off-by: Kai Blin <kai@samba.org>

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Jan 10 21:17:45 CET 2012 on sn-devel-104
2012-01-10 21:17:45 +01:00
f489c681ea s4:provision: add the possibility to provision "server services" in smb.conf
Signed-off-by: Kai Blin <kai@samba.org>
2012-01-10 19:19:21 +01:00
a876d519fe s4:provision: improve a message
Signed-off-by: Kai Blin <kai@samba.org>
2012-01-10 19:19:06 +01:00
a648563cb7 s4-provision: Extract common utility routines in separate file 2011-12-13 00:55:32 +11:00
341979cc9a s4-provision: Create a samdb copy for access by dlz_bind9 module
This creates a copy of rootdse, configuration and schema partitions
for dlz_bind9 use in dns/ directory.  Since dlz_bind9 requires write
access to DNS partitions (DomainDnsZones and ForestDnsZones), those
partitions are hard-linked (or symlinked) to the actual partitions.
An empty domain partition is created so samdb layer can work.
2011-11-29 16:00:36 +11:00
6822eae323 s4-provision: Extract security descriptors in separate file
Need to use domain security descriptor from sambadns.py also.
2011-11-29 16:00:36 +11:00
29cd8ae6fd s4-provision permit server role to be the ROLE_ strings from s3
Also convert between the aliases in one single place.

Andrew Bartlett

Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:09 +01:00
a807c83641 s4-provision: Set security descriptor for DNS records 2011-11-09 16:49:08 +11:00
696a70c9fa s4-provision Remove options for LDAP backend to reduce user confusion
We do not support the LDAP backend any more, but keep the code in case someone
comes up with an interesting use case that could leverage this in a very
particular situation.  In order to keep the code, we must test it, so
we keep just this much of the support around.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov  8 04:33:49 CET 2011 on sn-devel-104
2011-11-08 04:33:49 +01:00