1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-10 15:17:05 +03:00

104 Commits

Author SHA1 Message Date
Nadezhda Ivanova
a38d04a7a8 s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format
Useful for testing purposes.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Feb 10 15:28:04 CET 2011 on sn-devel-104
2011-02-10 15:28:04 +01:00
Kamen Mazdrashki
d0867e5c6c s4/samba-tool/drs: Make use of Command.message() method instead of using 'print' 2011-02-09 11:57:12 +02:00
Kamen Mazdrashki
ad48c70db6 s4/samba-tool/drs: Move get_dsServiceName function at module level to be re-used 2011-02-09 11:57:12 +02:00
Kamen Mazdrashki
f3db67e14f s4/samba-tool: 'drs options' command implementation
Current implementation handle only one flag change per call
2011-02-09 11:57:11 +02:00
Kamen Mazdrashki
da3a2c68b0 s4/samba-tool: Add --sync-forced flag to 'drs replicate' command
We are going to need this to trigger replication when
inbound replication is disabled for a given DC

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Wed Feb  2 09:03:22 CET 2011 on sn-devel-104
2011-02-02 09:03:22 +01:00
Nadezhda Ivanova
35d8b80800 s4-tools: Fixed a bug in ldapcmp - DACL was not retrieved correctly if the object had no SACL.
--Pair-Programmed-With: Zahari Zahariev
2011-01-17 17:38:04 +01:00
Nadezhda Ivanova
3ecce7f2ee s4-tools: Added a --sort-aces option to ldapcmp
This option sorts the ACE lists during SD comparison in collision view to make it easier to
determine of a difference is only in ACE order, and if not, where do differences start.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Mon Jan 17 14:09:09 CET 2011 on sn-devel-104
2011-01-17 14:09:09 +01:00
Andrew Tridgell
a0bc538a8f s4-samba-tool: fixed the gpo command to use the right DN for access checks 2011-01-14 16:39:33 +11:00
Andrew Bartlett
29fb42a48b s4-samba_tool Added ACL checking to python GPO management tool 2011-01-14 16:39:32 +11:00
Zahari Zahariev
6a0a0478ad s4/ldapcmp: Two new options are added to the tool
The new ones are --base and --scope they give us the opportunity to
compare DN subsets of the partitions. Now we are also able to compare
any two objects even if they have different DNs. This is exteremely
helpful when you are after nasty nTSecurityDescriptor bug.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Fri Jan  7 13:22:26 CET 2011 on sn-devel-104
2011-01-07 13:22:26 +01:00
Anatoliy Atanasov
c9757371db s4/ldapcmp: Correct fix for creds2
We need to set domain and workstation to creds2 otherwise we get Segfault
because they are not initialized correctly.
2011-01-05 16:16:59 +02:00
Anatoliy Atanasov
2e30897503 Revert "s4/ldapcmp: Fix the parsing of the second set of credentials"
This reverts commit 1cbce84683ef4fa49b85d87988c5e8db7057530a.
Wrong assumption about a segmentation fault
2011-01-05 16:14:14 +02:00
Anatoliy Atanasov
3f0db2e53b Revert "s4/ldapcmp: Check if creds2 is actualy set by the command line"
This reverts commit f8275bae5d7b471967be7222170d049c18b8882f.
Wrong assumption about a segmentation fault.
2011-01-05 16:14:14 +02:00
Anatoliy Atanasov
f8275bae5d s4/ldapcmp: Check if creds2 is actualy set by the command line
When parsing the command line for the second set of credentials
the parser returns wrong user if the second set of parameters isn't set.
So check if the password is set instead.

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Tue Jan  4 18:11:26 CET 2011 on sn-devel-104
2011-01-04 18:11:26 +01:00
Anatoliy Atanasov
1cbce84683 s4/ldapcmp: Fix the parsing of the second set of credentials
We need this second set of credentials so we can do comparison
between DCs in two different domains.

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Tue Jan  4 16:36:06 CET 2011 on sn-devel-104
2011-01-04 16:36:06 +01:00
Andrew Tridgell
545932fda5 samba-tools: more reasonable defaults for samba-tool commands
- fallback to machine account where possible

- default to local hostname where this is reasonable
2010-12-08 05:26:05 +01:00
Andrew Tridgell
249afc8906 samba-tools: export doesn't need any credentials
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-12-08 05:26:05 +01:00
Andrew Tridgell
b7172e7a71 s4-drs: cope with invalid NTDS DNs from DsReplicaInfo()
w2k3 sometimes returns a deleted DN

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Dec  1 07:48:19 CET 2010 on sn-devel-104
2010-12-01 07:48:18 +01:00
Andrew Bartlett
c1fa6be925 s4-samba-tool Show when we have created the user successfully 2010-12-01 16:09:58 +11:00
Andrew Tridgell
c2fb350218 s4-drs: the options attribute is optional on NTDSDSA objects 2010-12-01 16:09:58 +11:00
Andrew Tridgell
37bfc4ec38 s4-samba-tool: fixed exception handling in subcommands
this switches to the new pattern of:

 except Exception, e:
 	raise CommandError("some error message", e)
2010-11-29 18:04:42 +11:00
Andrew Tridgell
6250690310 s4-samba-tool: fixed ldb exception handling in domainlevel command
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-29 18:04:42 +11:00
Andrew Tridgell
a1f96923e6 s4-samba-tool: improved exception handling in samba-tool
we now do reasonable printing on a wide range of common exception
classes, and always force a backtrace on an exception if the debug
level is >= 3

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-11-29 18:04:42 +11:00
Andrew Tridgell
abe9ac53f0 s4-ldapcmp: make ldapcmp a samba-tool command
The ldapcmp tool is very useful, and should be available to Samba
admins, not just developers. This makes it a samba-tool command, which
also gives it the nicer command line handling that samba-tool has
2010-11-29 18:04:42 +11:00
Andrew Tridgell
6982a00ded s4-gpo: started on samba-tool gpo list command 2010-11-29 18:04:42 +11:00
Andrew Tridgell
7a826d02a3 s4-samba-tool: started on gpo subcommands in python
this adds the listall GPO command. Currently the python variants are
available as "samba-tool gpo2 SUBCOMMAND". These will replace the
"samba-tool gpo" commands when complete
2010-11-29 18:04:41 +11:00
Matthias Dieter Wallnöfer
ce55d7c9f0 Revert "s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object"
This reverts commit b87c3703cf890bd55340a201536073bd2be1e1d8.
Andrew Bartlett told me that exactly the opposite is true - the "objectCategory"
lookup is performing better.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Nov 28 14:18:41 CET 2010 on sn-devel-104
2010-11-28 14:18:40 +01:00
Andrew Tridgell
60bf020394 s4-samba-tool: support help, and show description of commands
when you don't specify a subcommand, show the description of the
subcommands in the list of available subcommands. Also show the list
of subcommands when you use 'help', '--help' or '-h' as a subcommand

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Nov 28 01:56:46 CET 2010 on sn-devel-104
2010-11-28 01:56:46 +01:00
Andrew Tridgell
2a4c6da783 s4-drs: fixed credit for C version 2010-11-28 01:11:06 +01:00
Matthias Dieter Wallnöfer
b87c3703cf s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object
Small optimisation: we don't need to look for "nTDSDSARO" since it's a subclass
of "ntDSDSA".

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 27 23:35:13 CET 2010 on sn-devel-104
2010-11-27 23:35:13 +01:00
Andrew Tridgell
3d8d382fe5 s4-samba-tool: switched over to python version of samba-tool drs 2010-11-28 00:16:38 +11:00
Andrew Tridgell
d06bf954ba s4-samba-tool: added python implementation of samba-tool drs commands
much simpler than the C code, and this brings us one step closer to a
python samba-tool
2010-11-28 00:16:38 +11:00
Andrew Bartlett
2e44d0d329 samba-tool pwsettings Allow setting 'store cleartext'
This allows the 'store cleartext' password policy flag to be (un)set.

Andrew Bartlett
2010-11-16 16:32:55 +11:00
Andrew Tridgell
724599de63 samba-tool: deprecate samba-tool vampire command 2010-11-06 14:36:26 +11:00
Andrew Tridgell
506ffcf86f s4-join: added DC join to the python join code
this will replace the old vampire code
2010-11-05 23:42:08 +11:00
Andrew Tridgell
278778c927 s4-pydrs: added rodc option to python drs replication 2010-11-05 23:42:08 +11:00
Andrew Tridgell
c53210bf06 s4-net: added --ipaddress option to net commands
this allows override of server IP address, bypassing NBT or DNS name
resolution of DCs

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
2010-09-25 10:38:45 -07:00
Andrew Tridgell
59d415f43f s4-finddc: use NBT lookup for a 1C name if joining a short domain name
once we get the 1C lookup reply, use a CLDAP query to find the details
for the server

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-15 15:39:36 +10:00
Andrew Tridgell
4e9f449106 s4-join: give a clear error when using short domain form
we now require the full domain name, for the DNS/CLDAP lookup

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-15 15:39:36 +10:00
Matthias Dieter Wallnöfer
64af772b38 s4:fsmo.py - fix an obvious typo 2010-09-12 19:23:04 +02:00
Andrew Tridgell
b9c0b59034 s4-rodc: get the domain name from the partitions DN
don't rely on the netbios domain name being the first part of the
realm

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-09 21:39:24 +10:00
Andrew Tridgell
9f5dcb2235 s4-net: use CommandError() in net rodc
this integrates better with the net command

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-09-02 13:37:07 +10:00
Andrew Tridgell
057a47130d s4-net: fixed docstring on spn command
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-26 22:50:20 +10:00
Andrew Tridgell
d8f48c7ffc s4-net: added "net rodc preload" command
this command will preload the credentials for an account from the full
domain controller

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-26 22:50:20 +10:00
Andrew Tridgell
b4a048d763 s4-net: role should be case insensitive for join
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-23 15:55:39 +10:00
Andrew Tridgell
bd7f9813de s4-net: added initial implemention of RODC join
This does the join using python code

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-23 15:55:39 +10:00
Andrew Tridgell
a2cb6ef017 s4-net: moved the net join command to python
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-23 15:55:39 +10:00
Andrew Tridgell
d7d19fdc84 s4-net: better error message on net setpassword 2010-08-22 14:57:34 +10:00
Andrew Tridgell
82c171aa55 s4-net: use an encrypted ldap session when setting passwords
this allows for "net setpassword -H ldap://server -Uusername%password USERNAME"
to set a password remotely on a windows DC

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-17 21:21:51 +10:00
Matthieu Patou
cad04dabbb s4 net: Add spn module to list/add/remove spn on objects
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-07-10 11:18:17 +02:00