1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-15 16:23:49 +03:00
Commit Graph

215 Commits

Author SHA1 Message Date
Andrew Bartlett
dcff83ebe4 r23560: - Activate metze's schema modules (from metze's schema-loading-13 patch).
- samba3sam.js: rework the samba3sam test to not use objectCategory,
  as it's has special rules (dnsName a simple match)
- ldap.js: Test the ordering of the objectClass attributes for the baseDN
- schema_init.c: Load the mayContain and mustContain (and system...) attributes when
  reading the schema from ldb
- To make the schema load not suck in terms of performance, write the
  schema into a static global variable
- ldif_handlers.c: Match objectCategory for equality and canonicolisation
  based on the loaded schema, not simple tring manipuation
- ldb_msg.c: don't duplicate attributes when adding attributes to a list
- kludge_acl.c: return allowedAttributesEffective based on schema results
  and privilages

Andrew Bartlett
2007-10-10 14:53:27 -05:00
Andrew Bartlett
bb583463bf r23361: Merge from SAMBA_4_0_RELEASE:
Print the smb.conf path being created in provision.

Andrew Bartlett
2007-10-10 14:53:11 -05:00
Andrew Bartlett
430c998dc9 r23351: Merge from SAMBA_4_0_RELEASE:
Fix a nasty issue we had with SWAT.  We could not provision into a
different domain, as we didn't re-calcuate the DOMAINDN after the user
changed it in the form.

Andrew Bartlett
2007-10-10 14:53:11 -05:00
Andrew Bartlett
f687bc92ae r23264: Make it more clear what this is actually setting up 2007-10-10 14:53:07 -05:00
Andrew Bartlett
0f457b1d2e r23189: Work towards a totally scripted setup of LDAP backends, so others can
easily try this out.

I also intend to use this for the selftest, but I'm chasing issues
with the OpenlDAP (but not Fedora DS) backend.

Andrew Bartlett
2007-10-10 14:53:02 -05:00
Andrew Bartlett
01d54d13dc r23177: Add in a new provision-backend script. This helps set up the OpenLDAP or Fedora DS backend.
This required a new mkdir() call in ejs.

We can now provision just the schema for ad2oLschema to operate on
(with provision_schema(), without performing the whole provision, just
to wipe it again (adjustments to 'make test' to come soon).

Andrew Bartlett
2007-10-10 14:53:00 -05:00
Andrew Bartlett
5b6f704b24 r23032: Remove calls to println(), and ensure we print the ldb errstring().
Andrew Bartlett
2007-10-10 14:52:42 -05:00
Andrew Tridgell
b9f8650b20 r23012: we need a POLICYGUID in provision 2007-10-10 14:52:39 -05:00
Andrew Bartlett
ee7b06fc83 r22756: Make it easier to setup an LDAP replica. Provision with
--partitions-only (suggestions for a better name welcome) will setup
the partitions records, but no any data in those partitions.  This can
then point at the already configured remote LDAP server.

Andrew Bartlett
2007-10-10 14:52:15 -05:00
Andrew Bartlett
860dfa4ea1 r22478: Update the LDAP backend code to handle initialisation of multiple
partitions onto the target LDAP server.

Make the LDAP provision run before smbd starts, then stop the LDAP
server.  This ensures this occurs synchronously, We then restart it
for the 'real run' (with slapd's stdin being the FIFO).

This required fixing a few things in the provision scripts, with more
containers being created via a add/modify pair.

Andrew Bartlett
2007-10-10 14:51:31 -05:00
Jelmer Vernooij
ef794f03d5 r21673: Fix Samba 3 data read tests. I can't figure out why the upgrade one is broken, so that one is still disabled. 2007-10-10 14:49:08 -05:00
Andrew Bartlett
ea4c2ea22f r21513: I don't know how long this has been wrong, but fix this up so we can
re-provision (as is required for the TEST_LDAP=yes version of make
test).

Andrew Bartlett
2007-10-10 14:48:48 -05:00
Simo Sorce
35886b4ae6 r21351: Change ldb ejs bindings return codes.
We were returning just true/false and discarding error number and string.

This checking probably breaks swat, will fix it in next round as swat
is what made me look into this as I had no way to get back error messages
to show to the users.

Simo.
2007-10-10 14:48:18 -05:00
Stefan Metzmacher
838d307e6c r21294: this is useless, now that there's no operation in between...
metze
2007-10-10 14:48:03 -05:00
Andrew Bartlett
6ce557a1af r21135: Instead of having hooks to update keytabs as an explicit thing, update
them as a hook on ldb modify, via a module.

This should allow the secrets.ldb to be edited by the admin, and to
have things update in the on-disk keytab just as an in-memory keytab
would.

This isn't really a dsdb plugin, but I don't have any other good ideas
about where to put it.

Andrew Bartlett
2007-10-10 14:44:31 -05:00
Stefan Metzmacher
306ea74f85 r20953: add templates in provision_become_dc()
metze
2007-10-10 14:44:01 -05:00
Stefan Metzmacher
edc37501d6 r20922: use the show_deleted module by default
metze
2007-10-10 14:43:52 -05:00
Stefan Metzmacher
a096a97415 r20806: make it possible to configure the secrets.ldb url
via "secrets database = my_secrets.ldb"

metze
2007-10-10 14:43:33 -05:00
Stefan Metzmacher
c78e345fea r20805: don't use hardcoded values for secrects.keytab and sam.ldb
metze
2007-10-10 14:43:32 -05:00
Simo Sorce
6976f283fc r20689: "pdc" and "bdc" have been replaced by "domain controller" 2007-10-10 14:40:23 -05:00
Stefan Metzmacher
55f845377c r20683: load indexes before applying replicated objects,
as for every object the repl_meta_data module needs to look
up the object by objectGUID

metze
2007-10-10 14:40:21 -05:00
Stefan Metzmacher
0f387d58e6 r20575: apply records to the test_samdb.ldb (my birthday present to myself...:-)
we need to modify some modules to only handle originating changes...

metze
2007-10-10 14:37:05 -05:00
Stefan Metzmacher
e84b0c7d40 r20572: - prepare a test_samdb.ldb in the NET-API-BECOME-DC torture test
- we call a ejs script from the torture test for this task
  so that we can use the provision template ldif's.

metze
2007-10-10 14:37:03 -05:00
Stefan Metzmacher
5875ce1ac6 r20568: split out the rootdse ldif
and set the isSyncronized = TRUE when we done

metze
2007-10-10 14:37:02 -05:00
Stefan Metzmacher
cbebe559a2 r20565: configure the list of global ldb modules also in js code
metze
2007-10-10 14:36:59 -05:00
Stefan Metzmacher
3e337ec276 r20560: make it possible to configure the backend and modules
for all partitions and make it not use LDAP in the variable names
because it isn't specific to the ldap backend case.

metze
2007-10-10 14:36:57 -05:00
Stefan Metzmacher
2a6e6a2695 r20557: use ${DOMAINDN} instead of ${BASEDN}
metze
2007-10-10 14:36:56 -05:00
Stefan Metzmacher
09622f0122 r20555: fix typo...
metze
2007-10-10 14:36:55 -05:00
Stefan Metzmacher
ebbd8a83c9 r20554: - use ${ROOTDN} for the rootDomainNamingContext
- the ${CONFIGDN} is a child of the ${ROOTDN}

metze
2007-10-10 14:36:55 -05:00
Stefan Metzmacher
09ca6aae12 r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded paths
under ${BASEDN}

metze
2007-10-10 14:36:54 -05:00
Andrew Bartlett
5781d0f41a r20505: I had the wrong ldif name here.
Andrew Bartlett
2007-10-10 14:36:02 -05:00
Andrew Bartlett
f45504e271 r20495: Further notes on joining with fedora DS.
Add in a hook for adding an ACI, needed to allow anonymous access
until we hook across a SYSTEM token to the LDAP server.

Andrew Bartlett
2007-10-10 14:36:00 -05:00
Andrew Bartlett
600c7f1a68 r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.
Add a new module entrypoint to handle the new, interesting and
different mappings required for Fedora DS.

Andrew Bartlett
2007-10-10 14:35:59 -05:00
Andrew Bartlett
99faff0ad8 r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to load
into an exsting LDAP server.  (Allow some parts to pre-exist, and try
to blow away less data).

Andrew Bartlett
2007-10-10 14:35:54 -05:00
Stefan Metzmacher
0fcdc8c243 r19427: print out the currect name
metze
2007-10-10 14:21:29 -05:00
Simo Sorce
57ee79c155 r19334: Commit commented provisioning code to activate the schema 2007-10-10 14:21:11 -05:00
Andrew Bartlett
9b77d285d8 r19318: Because we don't test the vampire code in SWAT very regularly, it bit-rotted.
Fix up interfaces and interaction between the two..

Andrew Bartlett
2007-10-10 14:21:08 -05:00
Andrew Bartlett
962219df7d r19258: Don't delete the contents of the partitions twice, and in particular
don't delete their contents until we have specified the new partition
locations.

However, preserve the important part of tridge's change, that is to
ensure that no database index is present when the mass delete occours.
In my testing, it is best to leave the index until the provision is
compleated.

Andrew Bartlett
2007-10-10 14:20:58 -05:00
Andrew Tridgell
b62437214c r19252: - fixed 'erase' argument to setup_ldb()
- when wiping a ldb, wipe within each naming context first. By not
  wiping the naming contexts we didn't wipe the partitions, which
  caused a massive slowdown in re-provisioning due to re-indexing of
  the schema.
2007-10-10 14:20:58 -05:00
Andrew Bartlett
a4aafe307d r19216: Merge from SAMBA_4_0_RELEASE:
Move default for subobj.LDAPMODULES into scripting/libjs/provision.js
so that SWAT can provision again.

Andrew Bartlett
2007-10-10 14:20:54 -05:00
Andrew Bartlett
9b2003618b r18977: Seperate these asserts, so we know which fired.
Andrew Bartlett
2007-10-10 14:20:26 -05:00
Derrell Lipman
34bffbaebf r18880: JSON-RPC work in progress 2007-10-10 14:20:17 -05:00
Andrew Tridgell
7005806aa6 r18567: fixed the winreg js code for the new names of the fields in winreg.idl
When changing a field name in idl, please remember to check for use of
those functions in any js code as well.
2007-10-10 14:18:47 -05:00
Andrew Tridgell
96db975024 r18334: AIX 5.1 doesn't have any of 'users', 'guest', 'other' or 'unknown'
it does have 'usr'
2007-10-10 14:18:11 -05:00
Andrew Bartlett
77b810f548 r18248: Bail out with a error message if this search fails for some reason.
Andrew Bartlett
2007-10-10 14:17:55 -05:00
Andrew Bartlett
1a111817a3 r18072: Really delete things in the base partition, after we changed where the
default search scope points to.

Andrew Bartlett
2007-10-10 14:17:11 -05:00
Andrew Bartlett
befac43f59 r17982: One final hack...
When against a real, schema-checking LDAP backend, we need
extensibleObject on the baseDN entry (as entryUUID isn't run for
creating this basic ldif) output.
2007-10-10 14:17:01 -05:00
Andrew Bartlett
32996ca9d6 r17876: Require one less patch for the LDAP backend to work.
This lets the modules or backend generate the host and domain GUID,
rather than the randguid() function.  These can still be specified
from the command line.

Andrew Bartlett
2007-10-10 14:16:50 -05:00
Andrew Bartlett
d5814b689e r17704: Add comments suggesting how to get the LDAP backend working.
Shutdown and reload the LDB, so the entryUUID module knows to read the
schema (will be changed once we have a central schema store and
notifications).

Andrew Bartlett
2007-10-10 14:16:28 -05:00
Andrew Bartlett
8a6908200b r17548: It is a good idea to commit the fix (from mkhl) before the test that
shows the need for...

Martin Kuhl writes:

The ejs function `substitute_var' returns `undefined' when the first
argument ends in a pattern that should be substituted.

For that reason, the second assertion fails in the following test-case:

,----
| libinclude("base.js");
|
| var obj = new Object();
| obj.FOO = "foo";
| obj.BAR = "bar";
| var str1 = "${FOO}:${BAR}";
| var str2 = "${FOO}:${BAR} "; // note the space after the brace
| var sub1 = substitute_var(str1, obj);
| var sub2 = substitute_var(str2, obj);
|
| assert(str1 + " " == str2);
| assert(sub1 + " " == sub2);
`----

The problem is that the function `split' returns a single-element
array in both cases:
a) the string to split doesn't contain the split pattern
b) the string ends with the split pattern

To work around this, the following patch tests this condition and
returns `undefined' only if the string to split (`list[i]') really
didn't contain a closing brace.
2007-10-10 14:15:37 -05:00