1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-14 01:57:53 +03:00

322 Commits

Author SHA1 Message Date
Andrew Bartlett
67bf4bab3d Fix conflicts in setup/provision script.
(This used to be commit 696b58f5dd8370b7ee0670c7a3e5db10234b41ff)
2008-04-02 12:31:24 +11:00
Andrew Bartlett
4ccb384327 Fix merge of my host GUID removal and the IPv6 addition to provision
Merge branch 'v4-0-ipv6' of git://git.id10ts.net/samba into 4-0-abartlet

Andrew Bartlett
(This used to be commit d3336684f084f984500dd0893dd01bcfc5be0ab1)
2008-04-02 12:03:03 +11:00
Andrew Kroeger
3c0c6acc59 provision: Add support for IPv6 (bz #4593).
(This used to be commit 8585a3c77d5dfe97bca3f08716fc06ac2819f578)
2008-04-01 19:51:24 -05:00
Andrew Bartlett
2ab6dd9ea5 Remove references to setting the host GUID, as the repl_meta_data
module prohibits it anyway.

Andrew Bartlett
(This used to be commit c5b287c056855892f30fbbf32efe7d65da31ce91)
2008-04-02 11:38:58 +11:00
Andrew Bartlett
238a1a52f1 Rework 'compleated' message in provision to be more useful.
In particular, this should draw attention to accidential 'standalone'
server provisions and therefore cause less frustration.

Andrew Bartlett
(This used to be commit e906ae041a2b589ffceff97b74f7c4b01386382a)
2008-03-29 17:17:56 +11:00
Andrew Bartlett
142fbfb3c1 Fix and test python scripts and kerberos
This fixes up the python credentials interface in a number of areas,
with the aim of supporting '-k yes' as a command line option.  (This
enables the use of kerberos).

As such, I've had to change the get_credentials call to take a
loadparm context, so that the credentials can be initialised
correctly.

The test_kinit script has been modified to prove that this continues
to work, as well as to provide greater code coverage of the kerberos
paths.

Andrew Bartlett
(This used to be commit 727ef40c2b56910028ef3c1092b8eab1bfa6ce63)
2008-03-28 21:57:15 +11:00
Andrew Kroeger
8f8c56bfbc Convert some more files to GPLv3.
(This used to be commit ebe5e8399422eb7e2ff4deb546338823e2718907)
2008-03-28 01:08:49 -05:00
Andrew Bartlett
71e79728ec Add tool for enabling accounts
(This used to be commit 2e14b4ea64ba7e223f29b5b535b1b1be326f711c)
2008-03-28 03:46:23 +11:00
Andrew Bartlett
786deaf928 Make the setup/newuser and setup/setpassword scripts actually work...
These need a testsuite, but this will come soon.

Andrew Bartlett
(This used to be commit fbcaa622bd1929399e32326349e96b6676a49b96)
2008-03-28 12:08:54 +11:00
Andrew Bartlett
d5a71ed633 Remove old js versions of newuser and provision.
Andrew Bartlett
(This used to be commit 861a85985d2d27f58cb8fa2fef0d445c7dac94c6)
2008-03-26 15:42:20 +11:00
Andrew Bartlett
89870f2d9a Explain why this attribute should be skipped.
Andrew Bartlett
(This used to be commit 7503f93f2f07f81ada1b5d9ec8fdd3d5509376ae)
2008-03-20 15:14:49 +11:00
Andrew Bartlett
d7299d82c3 Rework memberof handling in slapd.conf (used for OpenLDAP backend)
Instead of using an include file, put the generated configurationd
directly into slapd.conf.

Andrew Bartlett
(This used to be commit 95ac786136aebfe5ededeb3fb81cbd4e296e3988)
2008-03-15 19:03:04 +11:00
Andrew Bartlett
0c88240236 Rework to have member server 'domains' be CN=NETBIOSNAME
This reworks quite a few parts of our provision system to use
CN=NETBIOSNAME as the domain for member servers.

This makes it clear that these domains are not in the DNS structure,
while complying with our own schema (found by OpenLDAP's schema
validation).

Andrew Bartlett
(This used to be commit bda6a38b055fed2394e65cdc0b308a1442116402)
2008-03-13 11:36:58 +11:00
Andrew Bartlett
07a7c8fa0d Update the provision scripts and selftest for LDAP
This should allow us to provision onto an OpenLDAP backend again.

Also ensure we always have a sysvol and netlogon share in the selftest
environment.

Andrew Bartlett
(This used to be commit b2d9b03ba3434e76d4d476233a198728523d17f9)
2008-03-13 09:55:06 +11:00
Andrew Bartlett
69d66e6fb0 Upgrade provision-backend to python.
This required a large rework of the provision code, so as to move much
of the 'guess' logic into subprocedures, rather than just inline in
the provision code.

Andrew Bartlett
(This used to be commit a0754c2a857217ca831c2295b17255d8f38dfbc2)
2008-03-13 08:08:05 +11:00
Andrew Bartlett
9703948850 Fix provision script to work without smb.conf location specified.
Andrew Bartlett
(This used to be commit b4da374a998caac18c288a0a6e3fcd2c50cbffa7)
2008-03-11 14:41:10 +11:00
Andrew Bartlett
b5a5fcdc62 Extend testsuite to cover specifying a domain SID.
Andrew Bartlett
(This used to be commit edb7af0685983543c321e3d8b90f6ae07af2e4e3)
2008-03-11 14:21:53 +11:00
Andrew Kroeger
07cb435d40 accountExpires: Windows default is 9223372036854775807, not -1.
(This used to be commit be47cc7fdfa3cae0508e564f38b793aa27b6eb92)
2008-03-07 05:59:55 -06:00
Andrew Bartlett
a7e1fa0bef Try to fix up part of the upgrade test.
There are still problems with the upgrade test, but these are not
related to the provision system.

Andrew Bartlett
(This used to be commit d331bc400fb138bc43be88d0ca8ab3bcd590d2cd)
2008-03-07 19:20:39 +11:00
Andrew Bartlett
14c5f968e1 Rework provision scripts for more testing
This fixes up some issues with testdir (was not honoured) and
increases test coverage.

We now check all the major provision modes.  In doing so, to make it
possible to call from the multiple layers of 'sh', I have allowed 'dc'
to alias 'domain controller' and 'member' to alias 'member server'.
Fighting shell quoting in the test system was just too hard...

Also fix upgrade.py

Andrew Bartlett
(This used to be commit 0923de12282b0e063dd73bc3e056dd5c3663c190)
2008-03-07 10:57:52 +11:00
Andrew Bartlett
7e0ef3fd0e Make Samba4 pass the NET-API-BECOMEDC test against Win2k3 (again).
To make Samba4, using the python provision system, pass this test
required some major rework.  Untested code is broken code, and some of
the refactoring for a seperate provision test (which also now passes)
broke things.

Similarly, the iconv work has compiled, but these codepaths have never
been run (NULL pointer de-reference).

In working to use a local, rather than global, loadparm context, and
to support using a target directory, a few things needed to be
reworked, particularly around path handling.

Andrew Bartlett
(This used to be commit 1169e8d7bee20477b0efbfea3534ac63c83fb3d6)
2008-03-06 21:55:26 +11:00
Andrew Bartlett
736ae6a566 Don't hardcode objectCategory into the schema, even in the schema.
We now load the schema early enough that we can generate this too!

Andrew Bartlett
(This used to be commit 1adc74c65a3219fc110964ccdf9a9d60a84831da)
2008-03-04 11:27:57 +11:00
Andrew Bartlett
b33873ae5d Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
(This used to be commit ba864cfd7ce4b69179431131cac9661cbf48bf32)
2008-02-28 10:33:54 +11:00
Andrew Bartlett
446fb38765 Users and computers now share the same template.
Slowly work away at the samldb module again, it is clear that AD does
not use much of a templating system.  samAccountType is managed, as
far as I can tell, when groupType or userAccountControl changes.

Andrew Bartlett
(This used to be commit 447d5a795441aa6beab2f057c5ac1bc3c04e08c4)
2008-02-28 08:43:10 +11:00
Matthias Dieter Wallnöfer
b42e3fb232 Fix cases, add version number. (#4935)
(This used to be commit d2eb404ba1711abf6bb2718f8bb1dbbd104e7d4d)
2008-02-27 13:47:34 +01:00
Kai Blin
895874d966 idmap: Handle uid->SID mapping
(This used to be commit 6ac6de8476ba036eb041e054bc37e4503dc2fde8)
2008-02-21 11:21:59 +01:00
Jelmer Vernooij
ee6f838d3a Make setup/provision the name of the python provision script now that that is the default.
(This used to be commit a0a05c5a3d614d0f2936ecfcab5273a2ef7d61a8)
2008-02-21 01:22:20 +01:00
Andrew Bartlett
0b1a24681e Be consistant about --ldap-backend-type
Make the EJS provision and the selftest scripts both use the new
syntax for speicifying the ldap backend type.

Andrew Bartlett
(This used to be commit b1d2584277304be3f2a640465cbf6b2a3ec571cc)
2008-02-21 10:43:13 +11:00
Jelmer Vernooij
9f01303d15 Add python version of newuser.py.
(This used to be commit f70aef8e51e1a2f186fe71edaa4c81a39b837573)
2008-02-13 01:22:09 +01:00
Jelmer Vernooij
0f4c940919 Add blackbox test for provisioning code to make sure it can be run more than once in a row.
(This used to be commit 42466d960c86b692ef5e03c045ba24591c5c6f84)
2008-02-12 01:39:31 +01:00
Jelmer Vernooij
196a926710 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
(This used to be commit d4fb8b0d8644cddfa39655fac87a96edc71b2a73)
2008-02-09 03:11:04 +01:00
Jelmer Vernooij
bd0bfe6833 Fix provision python test.
(This used to be commit b173fa6bd2b24b5a3e7b4fbcb926f6c9771c10ba)
2008-02-09 03:09:56 +01:00
Andrew Bartlett
b2d47f9794 From a request from Peter Huang, include IPsec sechema.
(We may need to include more defaults in the template, but I want to
start small for now).

Andrew Bartlett
(This used to be commit a466dda118f785bf784548106637577a5e25a30e)
2008-02-09 09:59:45 +11:00
Andrew Bartlett
0efa783849 Remove unused parameter from provision()
Andrew Bartlett
(This used to be commit c8b0a8a196d8d187a86aef497953d0105436aff8)
2008-02-08 17:12:54 +11:00
Jelmer Vernooij
dbf400c3da python/provision: Create private dir if it didn't exist yet.
(This used to be commit 66df250ff355d3c1b7f0252fc1f95a8c79a28c6d)
2008-01-25 01:41:06 +01:00
Jelmer Vernooij
37f35d2a03 python/provision: Reconcile code partitions-only provisioning and generic provisioning, some other minor refactoring of the provisioning.
Pair-programmed by Andrew and me using obby :-)
(This used to be commit 688adcbb635af87fcfedb869b7f1857a947fd2f9)
2008-01-25 01:02:13 +01:00
Andrew Bartlett
48e79659d1 Make the repl_meta_data module the default for domain controllers.
Andrew Bartlett
(This used to be commit ae2ea1bd0cd2b326b09b372428969f2cf52ce519)
2008-01-24 16:17:45 +11:00
Andrew Bartlett
1557e7b930 Kill another sub that the modules will handle for us.
(This used to be commit e9bb130d63e86fafc4cbf379e2e237354b88bcf8)
2008-01-24 11:33:37 +11:00
Andrew Bartlett
08f94e2754 Remove useless subs from the ejs provision
The less things we manually place into the templates, the easier the
conversion to python will be.

Andrew Bartlett
(This used to be commit f65e5c164476b80468aa19452b108db17c642f8b)
2008-01-24 11:26:21 +11:00
Jelmer Vernooij
decdf5954d python: Add convenience function for getting command line loadparm context
and default to using system smb.conf.
(This used to be commit b3afde0f00ab5093b577b139a062c233d4db2524)
2008-01-23 23:38:57 +01:00
Andrew Bartlett
b39676089e Remove default 'showInAdvancedViewOnly' values.
This means we only show and set the values when they are not the
values the schema and objectclass module would impose.

Andrew Bartlett
(This used to be commit c2f2e01357c1b087aa1261fb2cac8687426d5a78)
2008-01-18 18:10:18 +11:00
Andrew Bartlett
53c1cdd11a Don't set 'name' in the LDIF, this is handled by the rdn_name module.
Andrew Bartlett
(This used to be commit e9003feb1b9eb3d5b82e82910b63306e5ecc2908)
2008-01-18 17:08:34 +11:00
Andrew Bartlett
873c7457c6 Don't manually specify instanceID in the template files.
The instanceid module creates this automaticlly, so we don't need this
any more.

Andrew Bartlett
(This used to be commit f6dbdf34e8a790f460b705100e45ee3928b6b1b3)
2008-01-18 13:30:20 +11:00
Andrew Bartlett
958b0e8ad1 Use syncrepl on all OpenLDAP databases (creates contextCSN attribute)
This module needs to be loaded on each database, not just the main
partition.  We use it to create the usn for the entries.

Andrew Bartlett
(This used to be commit ffb12aad8a80bb90d66dc66baba81b856622a6bb)
2008-01-18 13:28:52 +11:00
Andrew Bartlett
064eb82870 Remove --ldap-base from the python provision script
(This is a merge from the ejs script)

Andrew Bartlett
(This used to be commit d822dfa017b84895222ace8c44935fb872930548)
2008-01-18 13:25:01 +11:00
Andrew Bartlett
f1e177a7b8 provision: simplfy by removing old code to manually create baseDNs.
Previously, we would create the first record in the DB as an LDIF
file, with the expectation that the administrator would use slapadd to
create the database.

We now do everything over LDAP, which is far simpler, and allows the
LDB module chain to do its work, without special cases.

Also fix naming of the output schema when suggesting the comamnd line
to run ad2oLschema in provision-backend.

Andrew Bartlett
(This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f)
2008-01-17 12:00:27 +11:00
Andrew Bartlett
b44f322f5d OpenLDAP backend: Place the refint overlay after the memberof overlay
This still doesn't work for me, but is the recommended order.

Andrew Bartlett
(This used to be commit 4c869c54c2b8125fc88e58bbfddf1975476978a5)
2008-01-17 10:35:08 +11:00
Andrew Bartlett
9ff3986226 Start generating a configuration for the refint overlay. This
OpenLDAP module should ensure that after a subtree rename, attributes
are still consistant.

Andrew Bartlett
(This used to be commit f7f765c29b1aca1179a47bdd8712917c3f244f15)
2008-01-16 09:26:14 +11:00
Andrew Bartlett
3f7ec9bf19 Add in new module to normalise DNs being returned from OpenLDAP. This
fixes the case of the attribute in teh DN.

Fix option spelling for example re-provision

Andrew Bartlett
(This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
2008-01-11 10:44:49 +11:00
Andrew Bartlett
3688b7669a Make Samba4 and Fedora DS happier
Recent changes to Samba4 have made the Fedora DS backend fail.  This
is a start on fixing that.

Andrew Bartlett
(This used to be commit 48dc07902ffb792532ff216e507e53103d448b7b)
2008-01-11 09:54:22 +11:00