1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-25 06:04:04 +03:00

382 Commits

Author SHA1 Message Date
Andrew Bartlett
b39676089e Remove default 'showInAdvancedViewOnly' values.
This means we only show and set the values when they are not the
values the schema and objectclass module would impose.

Andrew Bartlett
(This used to be commit c2f2e01357c1b087aa1261fb2cac8687426d5a78)
2008-01-18 18:10:18 +11:00
Andrew Bartlett
53c1cdd11a Don't set 'name' in the LDIF, this is handled by the rdn_name module.
Andrew Bartlett
(This used to be commit e9003feb1b9eb3d5b82e82910b63306e5ecc2908)
2008-01-18 17:08:34 +11:00
Andrew Bartlett
873c7457c6 Don't manually specify instanceID in the template files.
The instanceid module creates this automaticlly, so we don't need this
any more.

Andrew Bartlett
(This used to be commit f6dbdf34e8a790f460b705100e45ee3928b6b1b3)
2008-01-18 13:30:20 +11:00
Andrew Bartlett
958b0e8ad1 Use syncrepl on all OpenLDAP databases (creates contextCSN attribute)
This module needs to be loaded on each database, not just the main
partition.  We use it to create the usn for the entries.

Andrew Bartlett
(This used to be commit ffb12aad8a80bb90d66dc66baba81b856622a6bb)
2008-01-18 13:28:52 +11:00
Andrew Bartlett
064eb82870 Remove --ldap-base from the python provision script
(This is a merge from the ejs script)

Andrew Bartlett
(This used to be commit d822dfa017b84895222ace8c44935fb872930548)
2008-01-18 13:25:01 +11:00
Andrew Bartlett
f1e177a7b8 provision: simplfy by removing old code to manually create baseDNs.
Previously, we would create the first record in the DB as an LDIF
file, with the expectation that the administrator would use slapadd to
create the database.

We now do everything over LDAP, which is far simpler, and allows the
LDB module chain to do its work, without special cases.

Also fix naming of the output schema when suggesting the comamnd line
to run ad2oLschema in provision-backend.

Andrew Bartlett
(This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f)
2008-01-17 12:00:27 +11:00
Andrew Bartlett
b44f322f5d OpenLDAP backend: Place the refint overlay after the memberof overlay
This still doesn't work for me, but is the recommended order.

Andrew Bartlett
(This used to be commit 4c869c54c2b8125fc88e58bbfddf1975476978a5)
2008-01-17 10:35:08 +11:00
Andrew Bartlett
9ff3986226 Start generating a configuration for the refint overlay. This
OpenLDAP module should ensure that after a subtree rename, attributes
are still consistant.

Andrew Bartlett
(This used to be commit f7f765c29b1aca1179a47bdd8712917c3f244f15)
2008-01-16 09:26:14 +11:00
Andrew Bartlett
3f7ec9bf19 Add in new module to normalise DNs being returned from OpenLDAP. This
fixes the case of the attribute in teh DN.

Fix option spelling for example re-provision

Andrew Bartlett
(This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
2008-01-11 10:44:49 +11:00
Andrew Bartlett
3688b7669a Make Samba4 and Fedora DS happier
Recent changes to Samba4 have made the Fedora DS backend fail.  This
is a start on fixing that.

Andrew Bartlett
(This used to be commit 48dc07902ffb792532ff216e507e53103d448b7b)
2008-01-11 09:54:22 +11:00
Jelmer Vernooij
20bf9e1f7f r26691: registry: Add subkeys required for Server Manager Alerts and Peplication. See bugs 4934 and 4935.
(This used to be commit fdd2ba336b4cf742f6e59253beab5dd226a87a85)
2008-01-07 16:42:02 -06:00
Andrew Bartlett
d59ac4d6e9 r26686: Fix bug 5143 by Jason Tarbet. This prevented an easy cut-and-paste of
the provision options used.

Andrew Bartlett
(This used to be commit 51cd93344dfeb3556fada523e38bbcd7e51fbbe1)
2008-01-06 23:57:02 -06:00
Andrew Bartlett
108fd49c41 r26636: Remove useless 'backend' parameter, and make the memberof overlay use global.
Andrew Bartlett
(This used to be commit 3b6f461e9a1b0fee7a589b8d171f4fcec6340ca4)
2007-12-31 22:06:01 -06:00
Andrew Bartlett
0189176cd5 r26635: The OpenLDAP folks have been very accommodating, and their memberof plugin allows the error being returned to be adjusted.
Andrew Bartlett
(This used to be commit f2731fddf07dfda5d69ad19851dab8f82b05f1a5)
2007-12-31 21:33:05 -06:00
Jelmer Vernooij
a61e25f174 r26622: python: Update license version, clarify copyright.
(This used to be commit 3ee62094074d74b6c69948730f2892f0a430f40b)
2007-12-28 10:33:02 -06:00
Jelmer Vernooij
65837a784b r26621: vampire: Add simple Python-based vampire script
(This used to be commit 46580d51d3e40ef83754fceefa392fe1df38e37d)
2007-12-28 10:33:01 -06:00
Andrew Bartlett
8ff2de3f29 r26610: Write out a memberof.conf, to run the memberof plugin on all linked
attributes, as found in the schema.

Index 'cn', as otherwise exact match searches on this attribute always
fail (need to figure out what is so special about cn in OpenLDAP).

Andrew Bartlett
(This used to be commit 5a4a2d10bc5729d4adac4b173b0dc05e2e076c32)
2007-12-26 22:21:01 -06:00
Jelmer Vernooij
43a03b0fb4 r26598: Simplify the way Python tests are run.
(This used to be commit d649f73431fc993e31522e7fc8e1e35e0a4421d8)
2007-12-26 11:57:08 -06:00
Jelmer Vernooij
533cc583ed r26596: Fixed upgrade.py.
Added blackbox tests for provision and upgrade Python scripts.
Clean up temporary files created by the Python tests.
(This used to be commit 2227fb6df62240cae64d27a1920d878316f819fc)
2007-12-26 11:57:08 -06:00
Jelmer Vernooij
7c146c42d2 r26593: - More work on the python versions of samba3dump and the samba3sam tests.
- Initial work converting the upgrade code to Python.
- Removed the old EJS upgrade code because it has been broken for a long time.
(This used to be commit 150cf39fbd4fe088546870fb0d8f20c0d9eb4aca)
2007-12-26 11:57:07 -06:00
Jelmer Vernooij
b7ffc3b404 r26562: Fix provisioning using Python.
(This used to be commit b07ca944ba62a3f3de58c06b66533c0953a32de9)
2007-12-24 01:51:00 -06:00
Jelmer Vernooij
595ec370da r26535: Get rid of all-knowing ProvisionSettings object.
(This used to be commit 40bf88c8a70e8379a6081cb6050034bcd7ae56eb)
2007-12-21 05:51:56 +01:00
Jelmer Vernooij
80529722e3 r26526: Fix argument value.
(This used to be commit af28f0c56d8e5ccc6ce8916d5bbdf9045e1fb47e)
2007-12-21 05:51:49 +01:00
Jelmer Vernooij
1c29a63d44 r26523: Refactor provisioning code.
(This used to be commit ac1083178f9e521dcd5d3d8b5199abcb00159adf)
2007-12-21 05:51:44 +01:00
Jelmer Vernooij
63f53094ef r26520: More Python updates.
(This used to be commit a8b1fe15ac853082961132ede061fe1556ae29f7)
2007-12-21 05:51:31 +01:00
Jelmer Vernooij
57b8a8fd42 r26517: Add functions for setting and getting parameters on a LoadParm.
Pass loadparm context along to Ldb contexts.
Other minor Python improvements.
(This used to be commit 7a15b486bae8fb774058b2d94cc12b7b01ee6ac0)
2007-12-21 05:51:23 +01:00
Jelmer Vernooij
e33749af5b r26509: Don't make boolean options eat the next argument.
(This used to be commit b4ae4cbfe5b66364f437a76aa0a4f82e9bc39ce1)
2007-12-21 05:51:14 +01:00
Jelmer Vernooij
323c174be3 r26506: Start running (really trivial) tests for upgrade script.
(This used to be commit 73bd4a9566d15f85a971e3a87cefbec2e2eece1c)
2007-12-21 05:51:12 +01:00
Jelmer Vernooij
f89c7a6e5e r26505: Add python bindings for some samdb-related functions, improve provisioning in python.
(This used to be commit d2402251666738c0372bbbaeaa1d26c06e254033)
2007-12-21 05:51:09 +01:00
Jelmer Vernooij
32f439bfa4 r26503: Change order of arguments in param interface so it's easier to make the
section name optional. Fix several smaller bits and pieces in the Python code.
(This used to be commit 1b89311e5fa4fcde060df50e580dc221205cc8ca)
2007-12-21 05:51:06 +01:00
Jelmer Vernooij
0a01f50f98 r26475: Add ldb.set_credentials function.
(This used to be commit dbebb4ef477d2c8de7b8d1e5cde9b9dada47044f)
2007-12-21 05:50:35 +01:00
Andrew Bartlett
03f178a728 r26424: Patch and hits from Howard Chu <hyc@symas.com> for our automated setup
of OpenLDAP.

This makes it consistant with the Fedora DS setup, and doesn't mix
both hdb and bdb.

Andrew Bartlett
(This used to be commit 1ffada95d269c8f7d054bec7f6eaff8449995d40)
2007-12-21 05:49:51 +01:00
Jelmer Vernooij
1a562591ec r26370: Import upgrade script in Python.
(This used to be commit 277f2165241dafe68e31a8197194c94d9d4a535e)
2007-12-21 05:49:07 +01:00
Jelmer Vernooij
c926cddfad r26366: Import provision scripts in Python.
(This used to be commit 090c799f98adf2c4186daca445c81b4e26e91f2f)
2007-12-21 05:49:06 +01:00
Andrew Bartlett
8edcbc8474 r26305: Update template files and testsuite to try and work with current
openldap, and fully support different LDAP server locations.

Andrew Bartlett
(This used to be commit a00bb942537f0f638c2a8295770749cb4b5d9ef3)
2007-12-21 05:48:19 +01:00
Andrew Bartlett
f5860b5a85 r26298: Use metze's schema loading code to pre-initialise the schema into the
samdb before we start writing entries into it.

In doing so, I realised we still used 'dnsDomain', which is not part
of the standard schema (now removed).

We also set the 'wrong' side of the linked attributes for the
masteredBy on each partition - this is now set in provision_self_join
and backlinks via the linked attributes code.

When we have the schema loaded, we must also have a valid domain SID
loaded, so that the objectclass module works.  This required some ejs
glue.

Andrew Bartlett
(This used to be commit b0de08916e8cb59ce6a2ea94bbc9ac0679830ac1)
2007-12-21 05:48:15 +01:00
Andrew Bartlett
a2a4aba5fd r26245: Make it easier to handle the LDAP backend, with it's differing needs,
by seperating the modules list into parts.  That way, we can remove
the modules that the backend will provide.

Andrew Bartlett
(This used to be commit d67e5c7896f6d3064298897ae4d3204498824b06)
2007-12-21 05:47:24 +01:00
Andrew Bartlett
adef944c43 r26137: Rename the entryUUID module to better match it's purpose: being a
simple ldap mapping (a complex mapping will follow).

Fix the module to handle 'name' better, rather than using the 'name'
attribute built into OpenLDAP, rename to samba4RDN.  We need to see if
this can be handled in the backend.

Also rename the functions and inernal module name to entryuuid for
consistancy.

Andrew Bartlett
(This used to be commit a7be80766f4270d63433bbd6a976ebf302ed3433)
2007-12-21 05:46:19 +01:00
Andrew Bartlett
bd6a651b38 r25960: Enable checks on the validity of the search base on sam.ldb in Samba4.
Remove bogus check to return NO_SUCH_ENTRY in ldap_backend.c, as this
error is now correctly emited from ldb.

Andrew Bartlett
(This used to be commit ed57862b90812e5a38ca81935b131338112fb19f)
2007-12-21 05:45:19 +01:00
Andrew Bartlett
3f2ca10d2d r25940: Rework the samldb and templates handling.
Templates just don't belong in the sam.ldb, as they don't obey any of
the other rules.  This moves them to a seperate templates.ldb.

In samldb, this patch reworks the duplicate SID and Name detection
code, to use ldb_search_exp_fmt() rather than gendb_search.  This
returns far more useful errors, which we now handle and report better.

The call to samdb_search_for_parent_domain() has been moved in samldb,
to allow both the account and SID uniqueness checks to be in the same
domain.  This function also returns better errors.

dcesrv_drsuapi.c is updated for the new prototype of
samdb_search_for_parent_domain()

Andrew Bartlett
(This used to be commit f1ab90c88c782c693b41795d70368650806543b5)
2007-12-21 05:45:10 +01:00
Andrew Bartlett
716391f106 r25921: Now also listen on ldapi by default in the LDAP server
Create a phpLDAPadmin configuration file example to use ldapi to talk
to Samba4

Andrew Bartlett
(This used to be commit 54f4c8ba6127757fd272bd97e301188eb69977ed)
2007-12-21 05:45:03 +01:00
Andrew Bartlett
27c9f6c235 r25891: Test that we get the correct return value when we attempt to reference
invalid entries with a linked attribute.

Make Samba4 pass that test, by fixing a silly bug in the
linked_attributes module.  (By passing down the 'original' request
structure, tdb would override our handle, and therefore we would never
be called for the 'wait', which collects the errors).

Fix up the provision templates to handle the newly required
referential integrity.

Andrew Bartlett
(This used to be commit 0377d85bbdcb2c4f110b0519005f0d1d10bc0c0b)
2007-12-21 05:44:41 +01:00
Andrew Bartlett
47f6988c6d r25753: Move cn=rootdse to @ROOTDSE to avoid being caught up in schema restrictions.
Andrew Bartlett
(This used to be commit f3390c9054244c0e4381007b36bbac9a17800570)
2007-12-21 05:43:45 +01:00
Andrew Bartlett
7c721a1f49 r25747: Implement linked attributes, for add operations.
Much more work is still required here, particularly to handle this
better during the provision, and to handle modifies and deletes, but
this is a start.

Andrew Bartlett
(This used to be commit 2ba99d58e9fe1f8e4b15a58a2fdfce6e876f99b4)
2007-12-21 05:43:41 +01:00
Andrew Bartlett
5c4a4b4566 r25616: Fedora DS now has a way to install the schema and extra configuration
as part of the setup inf file.

Andrew Bartlett
(This used to be commit 6c8987464e198430885b9e71b54fed6758886fdd)
2007-12-21 05:42:54 +01:00
Andrew Bartlett
999d47e41e r25452: Move the creation of the server entry to the self join, as this makes
no sense on a member server.

Andrew Bartlett
(This used to be commit 70467fa4c5d25b83c48dbbeb8236d5acb4550e77)
2007-10-10 15:07:37 -05:00
Andrew Bartlett
43890c4c58 r25451: Rework the display of provision options to use printf syntax, and
avoid %s in the substituted strings from becoming a problem.

Andrew Bartlett
(This used to be commit 3c4f107239eb6b2f4022a4eac06c5dd3ace71174)
2007-10-10 15:07:37 -05:00
Andrew Bartlett
b6678a276c r25450: Make it easier to test with a particular version of OpenLDAP, by
setting OPENLDAP_PATH, move to using hdb as the backend (allows
subtree renames), and re-enable the --quiet option.

Andrew Bartlett
(This used to be commit a186a0fa68cdcfb3abd430534657e5e278a5ebda)
2007-10-10 15:07:37 -05:00
Andrew Bartlett
2606996653 r25354: Thanks to Amin Azez <azez@ufomechanic.net> for finally getting me to
fix a provision without an smb.conf already setup.

Andrew Bartlett
(This used to be commit a00044d2294b482ea83e9d7392eb8113a9c94b6e)
2007-10-10 15:07:16 -05:00
Andrew Bartlett
e12730322c r25303: Print out the options the provision script generated. This should
help users produce predictable setups.

Andrew Bartlett
(This used to be commit 9789bd3c0a3f75f19fa523b251736cf6cdc157ce)
2007-10-10 15:07:10 -05:00