1
0
mirror of https://github.com/samba-team/samba.git synced 2025-10-24 15:33:20 +03:00
Commit Graph

48 Commits

Author SHA1 Message Date
Andrew Bartlett
2303e24be7 r8677: The first part of the domain name may not be equal to the netbios domain name.
Remove the use of flatname from the main domain object, we no longer
reference it.

Andrew Bartlett
2007-10-10 13:29:53 -05:00
Andrew Bartlett
ed1f2e029c r8667: Further simply the provision script, by removing the 'name' attribute.
This is now calculated on the fly for every add and modify.

Andrew Bartlett
2007-10-10 13:29:52 -05:00
Andrew Bartlett
3462cbadb2 r8662: Revert change to CN=Cert Publishers, this group still needs to
override the template for these attributes.

Andrew Bartlett
2007-10-10 13:29:51 -05:00
Andrew Bartlett
4a8ef7197f r8660: Use templates for the initial provision of user and computer accounts.
This ensures the templating code is used, and also makes it clearer
what I need to duplicate in the vampire area.

Also fix a silly bug in the template application code (the samdb
module) that caused templates to be compleatly unused (my fault, from
my commit last night).

Andrew Bartlett
2007-10-10 13:29:51 -05:00
Andrew Bartlett
940ed9827f r8650: Use the timestamps and a new objectguid module rather than placing
boilerplate attributes in every entry in provision.ldif.

The next step will be to use templates.

Andrew Bartlett
2007-10-10 13:29:50 -05:00
Andrew Tridgell
c2691ef712 r8643: - make lp_configfile() work again
- get rid of redundeny dyn_CONFIGFILE argument to lp_load()

- fixed provisioning to work with completely pristine install,
  creating an initial smb.conf is none is present

- added lp.set() and lp.reload() to loadparm ejs object interface
2007-10-10 13:29:48 -05:00
Andrew Tridgell
b6ef32ddd1 r8558: move newuser logic into the provision.js lib 2007-10-10 13:29:37 -05:00
Andrew Tridgell
d7e4dcaaaa r8459: move to the more portable script execution method 2007-10-10 13:23:05 -05:00
Andrew Tridgell
b775884474 r8415: get rid of the last 2 runtime perl scripts 2007-10-10 13:23:00 -05:00
Andrew Tridgell
b90aa3c5a7 r8410: converted the newuser script to js 2007-10-10 13:22:59 -05:00
Simo Sorce
4eb5863042 r8373: New wildcard matching code.
This code applies correct ldap standard wildcard matching code
removes WILDCARD matching from tdb @ATTRIBUTES, that's now handled independently
adds some more tests for wildcard matching
fixes dn comparison code in ldb_match
2007-10-10 13:20:13 -05:00
Andrew Tridgell
7476cb9413 r8372: - split out provisioning logic into a separate ejs library
- added a provisioning web page
2007-10-10 13:20:13 -05:00
Andrew Tridgell
abbf9c703c r8355: - added a vsprintf() function
- removed the --outputdir option from provision, as its not used any
  more (as ejs knows the real paths)
2007-10-10 13:20:10 -05:00
Andrew Tridgell
506e07d6e0 r8350: fixed the --root option to provision 2007-10-10 13:20:10 -05:00
Andrew Tridgell
f27a681769 r8347: replace the perl provision script with a ejs script
I don't mind depending on perl at compile time, but I want to avoid
depending on it at runtime. This also will make it easy to add web
install wizard
2007-10-10 13:20:09 -05:00
Andrew Tridgell
6d416656a0 r8345: make the dn on the hklm ldif valid
Jelmer, can you check this is OK?
2007-10-10 13:20:09 -05:00
Andrew Tridgell
c2946003e0 r8338: - added a substitute_var() js library function for doing hash driven
substitution of variables in strings

- the js provision script now correctly processes provision.ldif
2007-10-10 13:20:08 -05:00
Andrew Tridgell
1d9632877c r8332: not done yet, but a lot closer 2007-10-10 13:20:07 -05:00
Andrew Tridgell
333b32025f r8319: the start of a provision script in ejs. This is why I've been adding
so many functions lately.

so far it just parses options, works out the host IP, and user and group names
2007-10-10 13:20:06 -05:00
Andrew Tridgell
fc93ade9cd r8315: fixed the generation of the serial number in the dns zone file (bind9
doesn't like it being too long)
2007-10-10 13:20:05 -05:00
Andrew Tridgell
5adbab0afe r8289: fallback to the group 'other' for users
this might fix the testing on solaris10
2007-10-10 13:19:32 -05:00
Stefan Metzmacher
d24f39a5d7 r8225: make nETBIOSName case insensitive, so that lower case netbios domain REALM's
are working in the hdb-ldb module

metze
2007-10-10 13:19:21 -05:00
Stefan Metzmacher
cfb7245597 r8158: - use the timestring for the serial number of the bind zone file
- add --krbtgtpass and --machinepass options, with them you can easy set them to default
  values for testing so that you don't need to setup a new keytab file when you rerun provision.pl

metze
2007-10-10 13:19:15 -05:00
Andrew Tridgell
39cfb6f739 r8056: make the realm lowercase in our ldb (better matches w2k3) 2007-10-10 13:19:03 -05:00
Andrew Tridgell
1ba296b9d0 r8055: added canonicalName to our domainDns record 2007-10-10 13:19:03 -05:00
Andrew Bartlett
90e94a4630 r7988: Store the KVNO for the machine account, and set it up in the provision.
Andrew Bartlett
2007-10-10 13:18:56 -05:00
Andrew Tridgell
cff7507f59 r7940: use local path first for ldbadd in provisioning 2007-10-10 13:18:53 -05:00
Andrew Tridgell
79d174005e r7939: fix default hostname in provision 2007-10-10 13:18:53 -05:00
Andrew Tridgell
45d08e94d2 r7921: fixed newuser script (letting samldb module allocate the sid) 2007-10-10 13:18:50 -05:00
Andrew Tridgell
2b39736c35 r7917: macosx doesn't have a group called 'users' 2007-10-10 13:18:50 -05:00
Andrew Tridgell
54d698c488 r7907: the old solaris perl doesn't handle mkdir() without a mode 2007-10-10 13:18:48 -05:00
Andrew Tridgell
5781c83ba4 r7900: the existing ltdb indexing code does in fact cope with binary fields, so re-enable
indexing on objectSid
2007-10-10 13:18:47 -05:00
Andrew Tridgell
836e5782fd r7867: a couple of bug fixes for newuser.pl from kukks
I'm looking forward to deleting this file when we can add users using
the web intgerface (and maybe ejs scripts for the command line)
2007-10-10 13:18:45 -05:00
Andrew Tridgell
d40bc2fa8d r7860: switch our ldb storage format to use a NDR encoded objectSid. This is
quite a large change as we had lots of code that assumed that
objectSid was a string in S- format.

metze and simo tried to convince me to use NDR format months ago, but
I didn't listen, so its fair that I have the pain of fixing all the
code now :-)

This builds on the ldb_register_samba_handlers() and ldif handlers
code I did earlier this week. There are still three parts of this
conversion I have not finished:

 - the ltdb index records need to use the string form of the objectSid
   (to keep the DNs sane). Until that it done I have disabled indexing on
   objectSid, which is a big performance hit, but allows us to pass
   all our tests while I rejig the indexing system to use a externally
   supplied conversion function

 - I haven't yet put in place the code that allows client to use the
   "S-xxx-yyy" form for objectSid in ldap search expressions. w2k3
   supports this, presumably by looking for the "S-" prefix to
   determine what type of objectSid form is being used by the client. I
   have been working on ways to handle this, but am not happy with
   them yet so they aren't part of this patch

 - I need to change pidl to generate push functions that take a
   "const void *" instead of a "void*" for the data pointer. That will
   fix the couple of new warnings this code generates.

Luckily it many places the conversion to NDR formatted records
actually simplified the code, as it means we no longer need as many
calls to dom_sid_parse_talloc(). In some places it got more complex,
but not many.
2007-10-10 13:18:44 -05:00
Andrew Tridgell
941509ee58 r7727: we need to mark some attributes as INTEGER, so that the standard searches
that w2k does work. For example, w2k asks for sAMAccountType=805306369 which
will only match if we know its an integer
2007-10-10 13:18:27 -05:00
Andrew Tridgell
30445483e4 r7499: ensure that the account we run tests as ("Administrator") maps to the
unixName that we are running as in the test suite. Otherwise files are
created as a user without any entry in the sam, so the ACL doesn't
allow that user read permission when it should. This should fix the
RAW-ACLS test in the build farm.
2007-10-10 13:18:00 -05:00
Stefan Metzmacher
8ea59f2372 r6884: the invocationID is only used as objectGUID on the NTDS Settings object on the
first DC in the forest!

metze
2007-10-10 13:16:55 -05:00
Andrew Bartlett
c25e78b4b3 r6883: Move to what simo assures me is the 'correct' way to find the NetBIOS
and long names for a domain.

Add servicePrincipalName mapping table (administrator configurable),
in the same spot as microsoft uses.

Andrew Bartlett
2007-10-10 13:16:55 -05:00
Simo Sorce
4401c74fbc r6868: the @ATTRIBUTES object format has changed 2007-10-10 13:16:52 -05:00
Andrew Tridgell
f0c37555ff r6751: dnsDomain should be CASE_INSENSITIVE (winxp will sometimes do a cldap query with this
in uppercase)
2007-10-10 13:16:41 -05:00
Andrew Bartlett
cd61ff80f8 r6698: Our domain join code requires that the secureChannelType be set. Type
6 is BDC, which is correct for a self-join.

Andrew Bartlett
2007-10-10 13:16:35 -05:00
Stefan Metzmacher
db2f5619f8 r6697: fix from Sven (wAmpIre) Velt
metze
2007-10-10 13:16:35 -05:00
Stefan Metzmacher
af16ecb7ac r6571: create a simple smb.conf by provision.pl
metze
2007-10-10 13:16:26 -05:00
Andrew Bartlett
8ee208a926 r6565: Cludge, cludge, cludge...
We need to pass the 'secure channel type' to the NETLOGON layer, which
must match the account type.

(Yes, jelmer objects to this inclusion of the kitchen sink ;-)

Andrew Bartlett
2007-10-10 13:16:26 -05:00
Jelmer Vernooij
7d2d4a57e0 r6564: - Fix bug in socket_wrapper
- Add options --quiet and --outputdir options to the provisioning script
- Add simple 'make test' and 'make test-swrap'
2007-10-10 13:16:26 -05:00
Andrew Bartlett
1a1f0bd33c r6534: Patch from lieschen to fix our vital user creation tools :-)
Andrew Bartlett
2007-10-10 13:16:24 -05:00
Tim Potter
e2f127b4d8 r6361: Update howto and provisioning script with the moves made in r6207. 2007-10-10 13:11:34 -05:00
Stefan Metzmacher
c35887ca64 r6207: - clean up source topdir
- move provision stuff to setup/
- remove unused scripts

metze
2007-10-10 13:11:26 -05:00