1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

15 Commits

Author SHA1 Message Date
Andrew Bartlett
f0418a1600 s4:setup: don't set objectCategory: CN=Domain-DNS,${SCHEMADN}
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-17 12:29:27 +11:00
Stefan Metzmacher
05994005a3 s4:setup: add wellknownObjects to the domain object
metze
2008-10-02 18:56:09 +02:00
Andrew Kroeger
8172f3eb22 GPO: Do not provision Default Domain Policy as initially enforced. (bz #5480)
This only solves part of bz #5480.  The settings for Enforced & Link Enabled
now match the default settings of a Windows DC, but they are still "locked"
and cannot be changed via the GUI.
(This used to be commit 761e667e45475d3a7d5a41558b400ba4c94c4650)
2008-05-21 21:14:06 -05:00
Andrew Bartlett
e8a3621a8f Be consistant in using ${SEVERDN}.
This ensures we don't fall out of sync with the provision scripts.

Andrew Bartlett
(This used to be commit 566c60b4649e2b94bf467993acd4bf72c7368e5a)
2008-04-09 14:51:22 +10:00
Andrew Bartlett
1557e7b930 Kill another sub that the modules will handle for us.
(This used to be commit e9bb130d63e86fafc4cbf379e2e237354b88bcf8)
2008-01-24 11:33:37 +11:00
Andrew Bartlett
f5860b5a85 r26298: Use metze's schema loading code to pre-initialise the schema into the
samdb before we start writing entries into it.

In doing so, I realised we still used 'dnsDomain', which is not part
of the standard schema (now removed).

We also set the 'wrong' side of the linked attributes for the
masteredBy on each partition - this is now set in provision_self_join
and backlinks via the linked attributes code.

When we have the schema loaded, we must also have a valid domain SID
loaded, so that the objectclass module works.  This required some ejs
glue.

Andrew Bartlett
(This used to be commit b0de08916e8cb59ce6a2ea94bbc9ac0679830ac1)
2007-12-21 05:48:15 +01:00
Andrew Tridgell
c0aa1f0d9e r22972: added the basic ldif needed to support group policies in Samba4. WinXP
clients do correctly see our group policies, but the gpmc admin tool
doesn't yet work to allow you to edit the policies
(This used to be commit 4c6e01a585f59caf7d2d87833f5eedc018ed8acc)
2007-10-10 14:52:34 -05:00
Stefan Metzmacher
8f0a0ebcb3 r20557: use ${DOMAINDN} instead of ${BASEDN}
metze
(This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-10-10 14:36:56 -05:00
Stefan Metzmacher
8b70764038 r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded paths
under ${BASEDN}

metze
(This used to be commit 09ca6aae12d8e10b76971cf269f7c62f228a4c87)
2007-10-10 14:36:54 -05:00
Stefan Metzmacher
d9a1d365e3 r20332: add mastered-By and msDs-mastered-By attributes to the domain object
the config and schema head objects already have them

metze
(This used to be commit 6d43c1963856c5140ca3447aa2f9a276035eff8c)
2007-10-10 14:29:42 -05:00
Andrew Bartlett
bddd8ed5c4 r20152: Commit missing files from last night's commit. We no longer maintain
a distinction between PDC and BDC in the configuration files, only as
an entry in the ldb.

Andrew Bartlett
(This used to be commit dc9eee7cb37e4a6828c2cba23b0d836df9eac7b5)
2007-10-10 14:29:15 -05:00
Andrew Bartlett
2b99336a56 r17876: Require one less patch for the LDAP backend to work.
This lets the modules or backend generate the host and domain GUID,
rather than the randguid() function.  These can still be specified
from the command line.

Andrew Bartlett
(This used to be commit 32996ca9d62568006f8bee85a1f2f37c64c04fb5)
2007-10-10 14:16:50 -05:00
Andrew Bartlett
05aa6b85ce r17377: This attribute is maintained by the modules, don't override it.
Andrew Bartlett
(This used to be commit d942a8b2b6dcdc8d406d2c5b00983f0191e2a30d)
2007-10-10 14:15:20 -05:00
Andrew Bartlett
cf7ccba67e r17352: Don't do a modify on the objectClasses, as OpenLDAP doesn't like
this.  Instead, handle this one in the add.

Andrew Bartlett
(This used to be commit ab355e1f5f0747225b4c3fc2e65ffb044fe03040)
2007-10-10 14:15:18 -05:00
Andrew Bartlett
f77c410084 r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions.  In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.

Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server.  Then we perform a modify to add the
remaining attributes.

To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.

In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.

To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.

Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2007-10-10 14:09:09 -05:00