1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-14 12:59:07 +03:00
Commit Graph

360 Commits

Author SHA1 Message Date
db6bd2a3d6 Fix DNs - only one more samba3sam test failing now. 2008-09-21 03:42:27 +02:00
6f6e42ce60 Generate with 1.3.36. 2008-09-18 23:55:50 +02:00
3b5330e909 Fix check. 2008-09-17 17:00:36 +02:00
4f266dff13 Only try with -LPYTHONDIR/lib when python-config output didn't work.
(This used to be commit 62d76356c1)
2008-09-09 23:49:07 +02:00
1d8973a82e Attempt to correctly find python on host sunx
(This used to be commit 59b62280d2)
2008-09-09 23:35:17 +02:00
ef9169bfa6 Make it clear that the MMR password can differ from the admin passsword
In the future, we might simply randomly generate this, or allow the
admin to specify it seperate to the admin password.  However, both are
highly sensitive, as they imply read access to the krbtgt.

Andrew Bartlett
(This used to be commit 57d19ad002)
2008-09-08 15:09:06 +10:00
b76f383eef Use DIGEST-MD5 authentication for OpenLDAP replication
This avoids passing rootdn passwords or replicated data in cleartext
across the network.

Signed-of-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 67373c143a)
2008-09-08 14:39:54 +10:00
1929b2fb51 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
(This used to be commit c273d63f94)
2008-09-04 12:49:29 +10:00
fbbe799e4e Regenerate SWIG file.
(This used to be commit e8ba65c4db)
2008-09-03 22:55:24 +02:00
24a9181f25 Avoid using version call for version string.
(This used to be commit 1897cef508)
2008-09-03 22:29:53 +02:00
9817f3d785 Add a setexpiry operation in samdb.py
This makes it easy to set the expiry (or no expiry) for a samdb user
(This used to be commit 25171f18a4)
2008-08-30 07:32:44 +10:00
8237c0ba83 The index handling is now configured from the schema load, not by a
template.

Andrew Bartlett
(This used to be commit b36c6a21ad)
2008-08-21 12:59:16 +10:00
41493cbe68 Update OpenLDAP MMR configuration per comments by Oliver Liebel
<oliver@itc.li>

This changes the RIDs to be <serverID><DBID>, to ease later debugging.

The need to specify the port on the MMR URLs is now included in the
help.

Andrew Bartlett
(This used to be commit a5cbe8c09c)
2008-08-20 12:21:36 +10:00
b33f4541f6 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit fc6b4f03eb)
2008-08-19 14:11:51 +10:00
7ef21658fb Fix up new OpenLDAP MMR code.
This changes the MMR password from hard-coded value of 'linux',
adds tests and fixes the Fedora DS backend.

Currently the MMR password matches the admin password, but we can
change this to be another random value if required.

Also require the port to be specified on the command line, so we don't
hard-code a port of 9000.

Andrew Bartlett
(This used to be commit 08257c6d6c)
2008-08-19 14:10:14 +10:00
805dd85291 Generate Multi-Master Replication configuration for OpenLDAP
This patches provision-backend and the related scripts to generate the
correct configuration blobs for N-way multi-master replication using
OpenLDAP.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 6ed0b3f247)
2008-08-19 12:03:04 +10:00
47d80366be Fix templates.ldb reprovision handling.
This sets the attributes in a seperate transaction, and allows a
forced delete of the whole file.

Andrew Bartlett
(This used to be commit 423db2468b)
2008-08-19 11:43:41 +10:00
47124efe42 Add helper object Hostconfig to make it easier to get to e.g. the
SAM database.
(This used to be commit be75b2a36e)
2008-08-01 21:12:37 +02:00
1c94f3e95d Use new style python classes.
(This used to be commit 2a39aae0ce)
2008-08-01 21:00:09 +02:00
fff006bd84 Move domain DN determination out of newuser function.
(This used to be commit cbac27e6fa)
2008-08-01 20:47:22 +02:00
3b4ff07ded Actually fix missing substitution variables.
(This used to be commit 783412ecb2)
2008-08-01 20:47:03 +02:00
2fbe25b39d Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
(This used to be commit c87a8ba1fe)
2008-08-01 20:17:56 +02:00
3573420d7d Fix some forgotten substitute variables in provision, add check to prevent this sort of regression in the future.
(This used to be commit a461118f3b)
2008-08-01 20:17:29 +02:00
e80115deb9 We don't use EXTENSIBLEOBJECT any more.
(This used to be commit 4b137085c8)
2008-07-28 20:51:02 +10:00
08795db6d6 Make it even clearer what to do next in the LDAP backend setup
(This used to be commit bace931ad6)
2008-07-28 20:26:14 +10:00
45d60f5bd9 Always print the slapd startup command
(This used to be commit b1d05e7d14)
2008-07-28 20:18:17 +10:00
cff30c6da6 Remove unused function and make sensitive directories private.
(This used to be commit e23333d163)
2008-07-28 08:04:15 +10:00
1f285560bc Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit b12dd8ee54)
2008-07-25 11:58:51 +10:00
11798902dc Complain if we are told to use an ldap backend, without the type
(This used to be commit e9c3c9ad82)
2008-07-25 08:45:16 +10:00
c9c296b6bb Install'named.txt' to private/ as documentation.
This document is much more use when subbed with all the right things.

Andrew Bartlett
(This used to be commit 136a855998)
2008-07-22 11:09:18 +10:00
fb3e663678 Improve DNS and Group poicy configurations.
- fixes bug #4813 (simplify DNS setup)
  - This reworks the named.conf to be a fully fledged include
  - This also moves the documentation into named.txt
 - improves bug #4900 (Group policy support in Samba)
   - by creating an empty GPT.INI
 - fixes bug #5582 (DNS: Enhanced zone file)
   - This is now closer to the zone file AD creates

committed by Andrew Bartlett
(This used to be commit 74d684f6b3)
2008-07-22 11:06:47 +10:00
3408a2d18f Make a seperate template for the refint configuration too
(This used to be commit d2a527acc5)
2008-07-18 18:58:56 +10:00
cfc2063f23 Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP

Andrew Bartlett
(This used to be commit 6d6e03834a)
2008-07-18 18:44:07 +10:00
fe9fa62a05 Reorder whitespace in generated slapd.conf
This helps us see the real groupings in the generated memberOf
handling.

Andrew Bartlett
(This used to be commit ec70ebb831)
2008-07-16 14:04:24 +10:00
e400b3ec4e Fix asking for credentials for non-LDAP provisions.
(This used to be commit 78416f4840)
2008-07-15 18:44:58 +10:00
0f1eea2672 Rework provision to handle both simple and SASL binds.
Fedora DS is still setup for simple binds only, at this point.
(it also fails on other issues).

Andrew Bartlett
(This used to be commit b24c572d5a)
2008-07-15 15:46:32 +10:00
a6b842f963 Connect to the LDAP backend with SASL credentials.
This reworks our LDAP backend code to move from anonymous access to a
shared-secret SASL-protected connection.  (SASL selects NTLM or
DIGEST-MD5 on my system).

To get this working, we must pre-populate the LDAP backend with a DN
to store ths SASL secret on, and we use back-ldif for this.

This gives us a reasonable basis to deploy a replicated OpenLDAP
backend solution.

Andrew Bartlett
(This used to be commit cd0745253c)
2008-07-15 15:15:12 +10:00
44ea6a26fd rename sambaPassword -> userPassword.
This attribute is used in a very similar way (virtual attribute
updating the password) in AD on Win2003, so eliminate the difference.

This should not cause a problem for on-disk passwords, as by default
we do not store the plaintext at all.

Andrew Bartlett
(This used to be commit 1cf0d75149)
2008-07-12 15:26:42 +10:00
9ea25cacf1 Add a blackbox test for the provision-backend script.
This test (as most tests do :-) found a few bugs, also fixed in this
commit.

Andrew Bartlett
(This used to be commit d96a6482da)
2008-06-19 11:05:20 +10:00
370f95acfc Try to get a bit further with provisioning
(This used to be commit 649f6c0c10)
2008-06-16 17:52:50 -04:00
4c144bbc9e Clarify error when SWIG can't be found - it's not required unless you
intend to do development.
(This used to be commit 0f57fcaa2e)
2008-06-11 00:11:11 +02:00
230503ad84 Add working Python bindings for NBT.
(This used to be commit 9c88f5e1de)
2008-06-11 00:05:58 +02:00
be14efbdf9 Revert Jelmer's CFLAGS commit e2b71a0ecb
This commit broke the build, because not all files (libreplace, popt)
were updated.

Andrew Bartlett
(This used to be commit 3faacf4351)
2008-05-31 08:35:55 +10:00
2772871146 Fix samdb python test.
(This used to be commit 0e3d488cc1)
2008-05-30 14:15:40 +02:00
5107f093c2 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-defs
Conflicts:

	source/samba4-skip
(This used to be commit 7b0e0eb346)
2008-05-30 12:18:07 +02:00
21377a7ea9 Fix the samba4.dcerpc.bare.python test.
The loadparm context isn't really optional, as otherwise we can't find
the right server to connect to.

Andrew Bartlett
(This used to be commit 2b5acb5e95)
2008-05-30 15:26:10 +10:00
d579540085 Fix rpcecho test.
(This used to be commit df8399ba9d)
2008-05-30 15:09:59 +10:00
b9babfe4cc Fix up provision and samdb tests.
This fixes up the provision to operate with a target directory - it
must override the smb.conf in this case.

Andrew Bartlett
(This used to be commit 89fc39f7ed)
2008-05-30 14:26:47 +10:00
39f50afc57 Move CFLAGS handling out of smb_build.
(This used to be commit e2b71a0ecb)
2008-05-30 02:07:28 +02:00
6f7b2b6933 Fix samdb test and enable it.
(This used to be commit 6b202d3780)
2008-05-29 17:38:12 +02:00