1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-31 17:18:04 +03:00
Commit Graph

100 Commits

Author SHA1 Message Date
Jelmer Vernooij
eeb5f66d90 provision: Put adminpass details in ProvisionResult. 2012-02-26 16:27:06 +01:00
Jelmer Vernooij
3e6fa054f9 provision/tests: Test for phpldapadminconfig path. 2012-02-26 16:27:06 +01:00
Jelmer Vernooij
21f443eb82 provision: Leave result reporting up to caller. 2012-02-26 16:27:06 +01:00
Jelmer Vernooij
fe3274d9cb provision: Start splitting out provision result reporting from actual provisioning.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Feb 25 22:13:10 CET 2012 on sn-devel-104
2012-02-25 22:13:10 +01:00
Jelmer Vernooij
2fd10469c1 provision: Properly close ldb transactions. 2012-02-25 20:39:05 +01:00
Jelmer Vernooij
d06eeb7949 Factor out sanitize_server_role. 2012-02-25 20:39:05 +01:00
Jelmer Vernooij
66f13ea1e9 Partially revert 1f0298dd1b
It's fine to catch keyboard interrupts and other kinds of errors when it's done just for resource management, where the error is reraised later.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Feb 25 17:29:34 CET 2012 on sn-devel-104
2012-02-25 17:29:34 +01:00
Jelmer Vernooij
f5d706b0ee provision: Remove unused imports. 2012-02-25 15:58:07 +01:00
Andrew Bartlett
c623b4bbb8 s4-provision: Fix typo in 9b9fdeefb4
This was not found to to a bug in the selftest system.

Andrew Bartlett
2012-02-23 19:19:54 +11:00
Amitay Isaacs
6daf04eb6e s4-provision: dns: Add txt DNS record 2012-02-21 23:08:35 +11:00
Amitay Isaacs
597449235e s4-provision: dns: Do not re-calculate ntdsguid, use from names 2012-02-21 23:08:35 +11:00
Amitay Isaacs
9b9fdeefb4 s4-provision: dns: Refactor population of dns data code
Code is split in 4 functions
 - create_dns_legacy
 - fill_dns_data_legacy
 - create_dns_partitions
 - fill_dns_data_partitions

This is useful to upgrade dns provision from file based DNS backend
to AD based DNS backend.
2012-02-21 23:08:35 +11:00
Michael Adam
8ca39dfbe1 s4:provision: only print the adminpass if it was generated (not user-provided) 2012-02-16 12:07:50 +01:00
Michael Adam
09b865b2f0 s4:provision: generate the adminpass provision() instead of provision_fill()
so that the adminpass can be logged at the end
(otherwise we get "None")
2012-02-16 12:07:49 +01:00
Michael Adam
32cf164d99 s4:provision: don't log the ldap admin password - it is internal only 2012-02-16 12:07:49 +01:00
Amitay Isaacs
1f0298dd1b python: Change except: statement to except Exception:
This way we only catch true exceptions and keyboard interrupts
are not caught here.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
2012-01-24 03:32:40 +01:00
Michael Adam
803dc389d1 s4:provision: add "+dns" to server services if the dns backend is SAMBA_INTERNAL
Signed-off-by: Kai Blin <kai@samba.org>

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Jan 10 21:17:45 CET 2012 on sn-devel-104
2012-01-10 21:17:45 +01:00
Michael Adam
f489c681ea s4:provision: add the possibility to provision "server services" in smb.conf
Signed-off-by: Kai Blin <kai@samba.org>
2012-01-10 19:19:21 +01:00
Michael Adam
a876d519fe s4:provision: improve a message
Signed-off-by: Kai Blin <kai@samba.org>
2012-01-10 19:19:06 +01:00
Amitay Isaacs
90f06d69f0 s4-provision: Fix the problem of DnsProperty values not being set correctly
DnsProperty can have empty 'data' member. To parse Dnsproperty with
empty data, dnsp.idl has a hack as follows:

  [switch_is(wDataLength?id:DSPROPERTY_ZONE_EMPTY)] dnsPropertyData data;

This implies, to set 'data' value, wDataLength has to be set to a non-zero
value first.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Jan  3 05:26:32 CET 2012 on sn-devel-104
2012-01-03 05:26:32 +01:00
Andreas Schneider
79f9a2240e s4-provision: Fix tdbdump path lookup in make test.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-02 19:10:04 +01:00
Amitay Isaacs
1eef73e776 s4-provision: Set dNSProperty attribute for dns zones 2011-12-23 16:17:09 +11:00
Amitay Isaacs
21424056bb s4-provision: Do not guess partition file names, use @PARTITION record
This is to avoid duplicating the logic of generating partition file
names. (partition file names are encoded partially as per RFC1738).

Also, use tdb_copy() instead of filesystem copy function to copy
database files, which guarantees correct database copy.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Dec 13 03:28:03 CET 2011 on sn-devel-104
2011-12-13 03:28:03 +01:00
Amitay Isaacs
a648563cb7 s4-provision: Extract common utility routines in separate file 2011-12-13 00:55:32 +11:00
Amitay Isaacs
eee2191076 s4-provision: CN=MicrosoftDNS,CN=System container is in forest and not domain 2011-12-13 00:55:32 +11:00
Amitay Isaacs
8eef716598 s4-provision: Fix the security ace for DnsAdmins group on DNS records
Find the objectSid for DnsAdmins group and use that instead of a fixed sid.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Nov 29 07:38:06 CET 2011 on sn-devel-104
2011-11-29 07:38:05 +01:00
Amitay Isaacs
341979cc9a s4-provision: Create a samdb copy for access by dlz_bind9 module
This creates a copy of rootdse, configuration and schema partitions
for dlz_bind9 use in dns/ directory.  Since dlz_bind9 requires write
access to DNS partitions (DomainDnsZones and ForestDnsZones), those
partitions are hard-linked (or symlinked) to the actual partitions.
An empty domain partition is created so samdb layer can work.
2011-11-29 16:00:36 +11:00
Amitay Isaacs
6822eae323 s4-provision: Extract security descriptors in separate file
Need to use domain security descriptor from sambadns.py also.
2011-11-29 16:00:36 +11:00
Andrew Bartlett
29cd8ae6fd s4-provision permit server role to be the ROLE_ strings from s3
Also convert between the aliases in one single place.

Andrew Bartlett

Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:09 +01:00
Amitay Isaacs
8507adb8d0 provision: Set the security descriptor while creating partitions
With Matthieu's patch, the setting of security descriptor on
partition dn at create time works correctly.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
2011-11-16 08:54:25 +01:00
Amitay Isaacs
0c2f91c6b2 s4-provision: Create ldap records for DNS partitions similar to windows
this allows easy comparison between windows and samba ldap trees

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Wed Nov  9 08:27:46 CET 2011 on sn-devel-104
2011-11-09 08:27:46 +01:00
Amitay Isaacs
a807c83641 s4-provision: Set security descriptor for DNS records 2011-11-09 16:49:08 +11:00
Amitay Isaacs
7dbd2ec757 s4-provision: site is passed as an argument to setup_ad_dns()
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Nov  8 06:07:46 CET 2011 on sn-devel-104
2011-11-08 06:07:46 +01:00
Andrew Bartlett
696a70c9fa s4-provision Remove options for LDAP backend to reduce user confusion
We do not support the LDAP backend any more, but keep the code in case someone
comes up with an interesting use case that could leverage this in a very
particular situation.  In order to keep the code, we must test it, so
we keep just this much of the support around.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov  8 04:33:49 CET 2011 on sn-devel-104
2011-11-08 04:33:49 +01:00
Kai Blin
55e448fe2d s4 provision/dns: Move DNS-related setup to sambadns module
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Fri Nov  4 09:15:54 CET 2011 on sn-devel-104
2011-11-04 09:15:54 +01:00
Kai Blin
eeb370f77a s4 provision/dns: Move secretsdb_setup_dns to the AD DNS specific setup 2011-11-04 07:38:44 +01:00
Jelmer Vernooij
3ce126f352 s4-python: samba.provision: Require schema to be passed in - code path which handles schema not being specified is broken anyway. 2011-11-02 18:35:38 +01:00
Amitay Isaacs
a8c7b28435 s4-provision: Provision DNS records with correct rank
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-10-20 05:53:05 +02:00
Kai Blin
8c076862ad s4 provision: DNS backend should be set by caller
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Mon Oct 17 09:51:12 CEST 2011 on sn-devel-104
2011-10-17 09:51:12 +02:00
Kai Blin
d58f266d19 s4 provision/dns: Clean up os level handling 2011-10-17 08:16:12 +02:00
Kai Blin
6382721ce0 s4 provision/dns: Clean up backend handling 2011-10-17 08:16:12 +02:00
Kai Blin
41d48626e2 s4 provision: Reword opinionated dns backend help text, add NONE backend 2011-10-17 08:16:12 +02:00
Kai Blin
292554c396 s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILE 2011-10-17 08:16:12 +02:00
Andrew Tridgell
f79d6ee929 s4-provision: use get_config_basedn() in DNS setup
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-19 10:57:03 +10:00
Andrew Bartlett
aa960d8fa7 s4-provision Add initial support for joining as a new subdomain
To do this we need to reorganise a lot of the provision code, so that
we can create the framework for the inbound replicaton of the config
and schema partitions and then add in the new subdomain locally.

Andrew Bartlett
2011-09-19 10:57:02 +10:00
Andrew Tridgell
eb0060766f s4-subdomain: fixed invocationID and hostIPs in subdomain join
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13 15:38:34 +10:00
Andrew Bartlett
c271b71420 s4-provision Perform 'modify' operations as system
We need this so that we can modify the cn=configuration partition when
we are setting up a new subdomain.

The serverReference on our ${SERVERDN} is in that partition, and
without this change creating a new subdomain fails due to ACLs.

Andrew Bartlett
2011-09-13 15:37:12 +10:00
Andrew Bartlett
846e342648 s4-provision Split addition of users and well known principals
If we are provisioning a subdomain, then these are already in
cn=configuration.

Andrew Bartlett
2011-09-13 15:37:12 +10:00
Andrew Bartlett
6635bb70d3 s4-provision Add initial support for joining as a new subdomain
To do this we need to reorganise a lot of the provision code, so that
we can create the framework for the inbound replicaton of the config
and schema partitions and then add in the new subdomain locally.

Andrew Bartlett
2011-09-13 15:37:11 +10:00
Amitay Isaacs
662818b123 s4-provision: Fix the informational message from dns provisioning
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-12 20:42:19 +10:00