1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-11 19:17:08 +03:00

1788 Commits

Author SHA1 Message Date
Andrew Bartlett
c2b094ffbc s4-s3-upgrade: Max/min password age policy is in seconds, not days
This cases upgraded domains to have a too-long password expiry, which in extreme
cases can cause the KDC to misfunction.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Sun May  6 14:49:39 CEST 2012 on sn-devel-104
2012-05-06 14:49:39 +02:00
Jelmer Vernooij
7ed9ebab83 provision: remove reference to no longer existing template files. 2012-05-03 13:41:24 +02:00
Andrew Bartlett
86b1dd845a s4-samba-tool: make new samba-tool group listmembers use samAccountName
This is the unique username value.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu May  3 01:57:41 CEST 2012 on sn-devel-104
2012-05-03 01:57:41 +02:00
Andrew Bartlett
a0a83802fb s4-s3upgrade: Force ldapsam:trusted = yes
While this setting is not the default in Samba3, any domain that is
in a suitable condition to upgrade to Samba4 should already be in the
layout that ldapsam:trusted uses.  It can be turned off by setting
ldapsam:trusted=false in the smb.conf.

Many upgrades to Samba4 happen on a different host to the old Samba3 domain
and this avoids the need to configure nss_ldap only for the duration of
the upgrade.

Andrew Bartlett
2012-05-03 08:09:09 +10:00
Lukasz Zalewski
9cd664b2e9 Extension to the samba-tool group subcommand functionality to allow listing of the members of an AD group 2012-05-03 08:09:09 +10:00
Andrew Bartlett
d2c8ebe2c7 s4-s3upgrade: Try harder to get group memberships on upgrade
This fixes an issue where some group types were not upgraded, as we
did not upgrade alias memberships.

It also uses enum_group_memberships() to try and find the memberships
from the other direction, by asking which groups a user is a member
of.  As Samba3 (and NT4) does not implement nested groups, this should
be safe.

Andrew Bartlett
2012-05-03 08:09:09 +10:00
Andrew Bartlett
7b55ec290e s4-provision: Fix up --use-s3fs to create the directory for xattr.tdb
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May  2 04:45:05 CEST 2012 on sn-devel-104
2012-05-02 04:45:03 +02:00
Andrew Bartlett
051042229d s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'
The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so
the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services.

Andrew Bartlett
2012-05-02 10:53:50 +10:00
Andrew Bartlett
0d5d45c2df s4-s3upgrade: print the error message from passdb.error exceptions
This gives more information on why a group membership lookup failed.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Apr 24 04:34:44 CEST 2012 on sn-devel-104
2012-04-24 04:34:44 +02:00
Andrew Bartlett
4ded55ebcd s4-python: Ensure we handle the no-eadb case for system xattrs in get/setntacl
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu Apr 19 20:51:16 CEST 2012 on sn-devel-104
2012-04-19 20:51:16 +02:00
Daniele Dario
f1f00e5ba0 Added number of FSMO roles owned by the server we are trying to demote. 2012-04-19 19:15:05 +02:00
Simo Sorce
e21029a270 waf: Fix mispelling
Autobuild-User: Simo Sorce <idra@samba.org>
Autobuild-Date: Thu Apr 19 17:36:41 CEST 2012 on sn-devel-104
2012-04-19 17:36:41 +02:00
Andrew Bartlett
7ca706de8c dbcheck: Add a check that every FSMO role has a valid owner
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu Apr 19 07:49:54 CEST 2012 on sn-devel-104
2012-04-19 07:49:54 +02:00
Andrew Bartlett
6b2753d71e s4-samba-tool: Fix samba-tool fsmo seize
This is currently untested, and a restructure broke it.

Andrew Bartlett
2012-04-19 14:19:09 +10:00
Andrew Bartlett
a2b7a9e2a2 s4-s3upgrade: Do not ever set a domain-wide maxPwdAge of 0
This means no-expiry in s3, and so we must treat it like -1.

Andrew Bartlett
2012-04-19 14:19:09 +10:00
Andrew Bartlett
a5905bfb39 s4-s3upgrade: Ignore (with warning) groups that are listed but we cannot list members for 2012-04-19 09:59:40 +10:00
Andrew Tridgell
c69c07efec dbcheck: added fix for incorrect RMD_FLAGS
this fixes the case where a DN link has RMD_FLAGS=0 for a link inside
a deleted object

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Apr 18 09:19:41 CEST 2012 on sn-devel-104
2012-04-18 09:19:41 +02:00
Matthias Dieter Wallnöfer
8c9c6f869d s4:dbchecker.py - integrate the "objectClass" fixing code
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2012-04-18 07:48:05 +02:00
Andrew Bartlett
538893d183 s3fs: Use xattr_tdb format for xattr storage
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed Apr 18 05:39:01 CEST 2012 on sn-devel-104
2012-04-18 05:39:01 +02:00
Andrew Bartlett
628a24172f s4-python: Add python wrapper for xattr_tdb format xattr storage
This uses the format used by the vfs_xattr_tdb module.  The s4
posix:eadb format is kept, just in a new file and module.

Andrew Bartlett
2012-04-18 12:05:00 +10:00
Stefan Metzmacher
4460ba5288 s4:ldapcmp.py: pass down outf and errf
Not all classes are derived from class 'Command'.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Apr 17 10:06:47 CEST 2012 on sn-devel-104
2012-04-17 10:06:47 +02:00
Matthieu Patou
f35d20119a Add an option to have s3fs as file server for samba4
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
2012-04-16 09:38:17 +02:00
Amitay Isaacs
06a0101082 s4-provision: Update configuration lines for dlz_bind9
This adds configuration lines for BIND versions 9.8.x and 9.9.x.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Mon Apr 16 03:52:14 CEST 2012 on sn-devel-104
2012-04-16 03:52:14 +02:00
Alexander Bokovoy
bcc16f1911 s4-libnet: split export_keytab in a separate python module to avoid pulling in HDB dependency
Signed-off-by: Andreas Schneider <asn@samba.org>

Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Thu Apr 12 15:23:19 CEST 2012 on sn-devel-104
2012-04-12 15:23:19 +02:00
Matthias Dieter Wallnöfer
438971e214 LDB/s4 - do not use the "(dn=...)" syntax on filters anymore
Make it AD-compatible using "(distinguishedName=...)".

Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-03-26 00:57:29 +02:00
Björn Baumbach
217d04138b s4-samba-tool: add password verification in change user pass
Signed-off-by: Michael Adam <obnox@samba.org>

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed Mar 21 17:43:35 CET 2012 on sn-devel-104
2012-03-21 17:43:35 +01:00
Björn Baumbach
5b4d5bee44 s4-samba-tool: add password verification in add user
Signed-off-by: Michael Adam <obnox@samba.org>
2012-03-21 16:11:25 +01:00
Michael Adam
ee0e1ca5d8 s4:selftest: add test for "samba-tool group list"
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Mon Mar 19 02:30:39 CET 2012 on sn-devel-104
2012-03-19 02:30:39 +01:00
Michael Adam
704f0683f0 s4:samba-tool: add simple command "group list" 2012-03-18 23:41:40 +01:00
Michael Adam
f4458a5cef s4:selftest: add a new testsuite for the "samba-tool group" command 2012-03-18 23:41:40 +01:00
Matthieu Patou
31cab612fc Factorize code from findprovisionusnranges in order to solve bug #8504 2012-03-17 00:18:39 -07:00
Michael Adam
15eaaa095f s4:samba-tool: remove remains of patch conflict resolution
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Fri Mar 16 19:13:32 CET 2012 on sn-devel-104
2012-03-16 19:13:32 +01:00
Jelmer Vernooij
3530ac0149 samba.tests.source: Verify that only executable python files (and only executable files) have a shebang line. 2012-03-15 16:03:36 +01:00
Michael Adam
edfdbb82bb s4:selftest: remove python shebang accidentially re-added to the "samba-tool user" test
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Thu Mar 15 16:17:54 CET 2012 on sn-devel-104
2012-03-15 16:17:54 +01:00
Michael Adam
d430c88cfe s4:selftest: fix message typo in test for "samba-tool user list"
Spotted by kukks - thanks.

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Thu Mar 15 14:24:29 CET 2012 on sn-devel-104
2012-03-15 14:24:29 +01:00
Michael Adam
94af1581ef s4:selftest: fix a message-typo in the "samba-tool user" testsuite.
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed Mar 14 21:19:11 CET 2012 on sn-devel-104
2012-03-14 21:19:11 +01:00
Michael Adam
a85d86129a s4:selftest: add a new test for "samba-tool user list" 2012-03-14 19:39:18 +01:00
Andreas Schneider
8458043457 s4-python: Add missing python source file encoding.
See http://www.python.org/dev/peps/pep-0263/

Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Tue Mar 13 19:31:09 CET 2012 on sn-devel-104
2012-03-13 19:31:09 +01:00
Andreas Schneider
4faba7615a s4-python: Remove env from non-executable webserver script. 2012-03-13 17:52:30 +01:00
Andreas Schneider
e5425743c2 s4-python: Remove env from non-executable samba_tool scripts. 2012-03-13 17:52:30 +01:00
Andreas Schneider
f9fda92376 s4-python: Remove env from non-executable dcerpc scripts. 2012-03-13 17:52:30 +01:00
Andreas Schneider
070828f791 s4-python: Remove execute flag from non-executable rpc_talloc script. 2012-03-13 17:52:30 +01:00
Andreas Schneider
ab1e52e09d s4-python: Remove env from non-executable blackbox test scripts. 2012-03-13 17:52:30 +01:00
Andreas Schneider
3caf954b85 s4-python: Remove execute flag from ndrdump blackbox script. 2012-03-13 17:52:29 +01:00
Andreas Schneider
cae282b5c2 s4-python: Remove env from non-executable test scripts. 2012-03-13 17:52:29 +01:00
Andreas Schneider
82c2bca89b s4-python: Remove env from non-executable netcmd scripts. 2012-03-13 17:52:29 +01:00
Andreas Schneider
3c9238e1b9 s4-python: Remove execute flag from netcmd scripts. 2012-03-13 17:52:29 +01:00
Andreas Schneider
b787ba789e s4-python: Remove env from non-executable samba scripts. 2012-03-13 17:52:29 +01:00
Andreas Schneider
66f16d57dc s4-python: Remove execute flag of upgradehelpers.py. 2012-03-13 17:52:29 +01:00
Jelmer Vernooij
90681153ad samba-tool: Write diagnostics to stderr rather than stdout. 2012-03-11 23:57:04 +01:00