1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-15 05:57:49 +03:00

322 Commits

Author SHA1 Message Date
Stefan Metzmacher
d0e221c4e0 r20568: split out the rootdse ldif
and set the isSyncronized = TRUE when we done

metze
(This used to be commit 5875ce1ac6ff694d07787ff0cf81b3429580311b)
2007-10-10 14:37:02 -05:00
Stefan Metzmacher
7d461ed481 r20565: configure the list of global ldb modules also in js code
metze
(This used to be commit cbebe559a2563a3ab9dd2e002c79676a803b71a4)
2007-10-10 14:36:59 -05:00
Stefan Metzmacher
8a2636af4a r20560: make it possible to configure the backend and modules
for all partitions and make it not use LDAP in the variable names
because it isn't specific to the ldap backend case.

metze
(This used to be commit 3e337ec2764038e4ff05c3e926220abaa5583702)
2007-10-10 14:36:57 -05:00
Stefan Metzmacher
8f0a0ebcb3 r20557: use ${DOMAINDN} instead of ${BASEDN}
metze
(This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-10-10 14:36:56 -05:00
Stefan Metzmacher
2c266fb217 r20554: - use ${ROOTDN} for the rootDomainNamingContext
- the ${CONFIGDN} is a child of the ${ROOTDN}

metze
(This used to be commit ebbd8a83c982efdc58e53798d1fd191f08731005)
2007-10-10 14:36:55 -05:00
Stefan Metzmacher
8b70764038 r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded paths
under ${BASEDN}

metze
(This used to be commit 09ca6aae12d8e10b76971cf269f7c62f228a4c87)
2007-10-10 14:36:54 -05:00
Stefan Metzmacher
28b078ea03 r20551: use variable instead of hardcoded value for the default site
metze
(This used to be commit 21f433018afbb7b94089969f7ee9acda40ee1a70)
2007-10-10 14:36:53 -05:00
Andrew Bartlett
e8dfa06d45 r20495: Further notes on joining with fedora DS.
Add in a hook for adding an ACI, needed to allow anonymous access
until we hook across a SYSTEM token to the LDAP server.

Andrew Bartlett
(This used to be commit f45504e2714680978f101b4a98516686a17531df)
2007-10-10 14:36:00 -05:00
Andrew Bartlett
bf4c652af7 r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.
Add a new module entrypoint to handle the new, interesting and
different mappings required for Fedora DS.

Andrew Bartlett
(This used to be commit 600c7f1a68c175b835ce45d13794a6f66bcc8493)
2007-10-10 14:35:59 -05:00
Andrew Bartlett
9fc3e164df r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to load
into an exsting LDAP server.  (Allow some parts to pre-exist, and try
to blow away less data).

Andrew Bartlett
(This used to be commit 99faff0ad8fa12d596c599064a0125a6b3365134)
2007-10-10 14:35:54 -05:00
Stefan Metzmacher
d9a1d365e3 r20332: add mastered-By and msDs-mastered-By attributes to the domain object
the config and schema head objects already have them

metze
(This used to be commit 6d43c1963856c5140ca3447aa2f9a276035eff8c)
2007-10-10 14:29:42 -05:00
Andrew Bartlett
bddd8ed5c4 r20152: Commit missing files from last night's commit. We no longer maintain
a distinction between PDC and BDC in the configuration files, only as
an entry in the ldb.

Andrew Bartlett
(This used to be commit dc9eee7cb37e4a6828c2cba23b0d836df9eac7b5)
2007-10-10 14:29:15 -05:00
Andrew Bartlett
e350ca0bcb r19336: Merge from release branch: new Mapped OIDs, in own subtree.
Andrew Bartlett
(This used to be commit ac5abff4b66619c29357adb7e013700bdf686709)
2007-10-10 14:21:12 -05:00
Andrew Bartlett
064b605fab r19315: Record some OID allocations.
Andrew Bartlett
(This used to be commit 0ceffb52eb218cd2beff0054679a07f137f0f23a)
2007-10-10 14:21:07 -05:00
Andrew Bartlett
227831537a r19311: Try to keep the schema map files fairly similar (hope for less weird bugs).
Andrew Bartlett
(This used to be commit a1f14d10fd0779eba244d63529600556ba9e9292)
2007-10-10 14:21:06 -05:00
Andrew Bartlett
e0294c9f66 r19310: Add another conflicting oid
Cope with there being no attributes to skip in the ad2oLscheam tool

Andrew Bartlett
(This used to be commit 942d7ad0c3534770ad05977b180e1c8111a5b6a6)
2007-10-10 14:21:06 -05:00
Andrew Bartlett
d70fbdbefa r19258: Don't delete the contents of the partitions twice, and in particular
don't delete their contents until we have specified the new partition
locations.

However, preserve the important part of tridge's change, that is to
ensure that no database index is present when the mass delete occours.
In my testing, it is best to leave the index until the provision is
compleated.

Andrew Bartlett
(This used to be commit 962219df7dc53ce6f6889f4b71ee19850c7ff7b5)
2007-10-10 14:20:58 -05:00
Andrew Tridgell
557ca55ed7 r19253: its not so useful to index on objectclass. Much better to search on
objectCategory

provision now takes 2.4 secs, down from 24s on my laptop
(This used to be commit 3d3144cc06b9987adb3f17e43f2858e7c416b6ae)
2007-10-10 14:20:58 -05:00
Andrew Bartlett
7135bb9e63 r19216: Merge from SAMBA_4_0_RELEASE:
Move default for subobj.LDAPMODULES into scripting/libjs/provision.js
so that SWAT can provision again.

Andrew Bartlett
(This used to be commit a4aafe307d6d1396fa79b0c48b0a36cbf682f0ce)
2007-10-10 14:20:54 -05:00
Andrew Bartlett
08478f8f92 r19115: Add the mapping required between Samba4's AD schema OIDs and what
Fedora DS can support.

Andrew Bartlett
(This used to be commit bdeb10de2e751e7f0b12d5658ad55a4e7827bbd5)
2007-10-10 14:20:36 -05:00
Andrew Bartlett
736e797983 r18979: With these extra indexes (also added for the normal case) and a
DB_CONFIG file, we now get reasonable enought performance to pass
'make test' against OpenLDAP.

We do have to double the maximum runtime for the torture client however.

Andrew Bartlett
(This used to be commit 5b3c8cc036c1180c9e96d9aaacd3f2e0a83460e5)
2007-10-10 14:20:26 -05:00
Andrew Bartlett
df7ec4a31a r18933: Add helpful emacs marker
(This used to be commit 5fd53ea6a3a6d7638a9f542f46623a19143ff81d)
2007-10-10 14:20:22 -05:00
Simo Sorce
6c48dc8612 r18440: "builtinDomain" is not a child of "domain"
(This used to be commit b34646f202d4e8016e627c4bb88842c21d6b2e10)
2007-10-10 14:18:30 -05:00
Simo Sorce
b2355bf077 r18316: Build the parent too
(This used to be commit 1fcf725bc0a10454be8d276920ac14f346eb4a21)
2007-10-10 14:18:07 -05:00
Andrew Bartlett
ba1c80524a r17982: One final hack...
When against a real, schema-checking LDAP backend, we need
extensibleObject on the baseDN entry (as entryUUID isn't run for
creating this basic ldif) output.
(This used to be commit befac43f59c4688f6c6827eb2e4e916c1056a740)
2007-10-10 14:17:01 -05:00
Simo Sorce
6c68f1ae9e r17926: add trustedDomain class
(This used to be commit 43e95f4572778fec70ea4a62b6b4d20d8f96a2f8)
2007-10-10 14:16:54 -05:00
Andrew Bartlett
2b99336a56 r17876: Require one less patch for the LDAP backend to work.
This lets the modules or backend generate the host and domain GUID,
rather than the randguid() function.  These can still be specified
from the command line.

Andrew Bartlett
(This used to be commit 32996ca9d62568006f8bee85a1f2f37c64c04fb5)
2007-10-10 14:16:50 -05:00
Simo Sorce
25ba47eaf8 r17839: do not reference possibleInferiors we have not extracted
trim duplicate may attributes
(This used to be commit 4975659fd70abdbae42ee378b7be766102f4df55)
2007-10-10 14:16:47 -05:00
Andrew Bartlett
7783080810 r17705: Use the paged_searches module by default against the LDAP backend, if
selected.

Andrew Bartlett
(This used to be commit 3bb0a0d91eeb64db1ad2eeb13eab50f338caeb46)
2007-10-10 14:16:28 -05:00
Andrew Bartlett
7fcafb7a9e r17682: Add newline to end of file
(This used to be commit 0e97b71386601a80f4bc264ee54e90a3a8a5841d)
2007-10-10 14:16:23 -05:00
Simo Sorce
7cb4dcf146 r17662: some more enhancements to our schema extraction tool,
with a nasty hack in minschema.js that I really hate
(This used to be commit 74c40719f2965e2bc055e539f0933d95df070fbf)
2007-10-10 14:16:21 -05:00
Simo Sorce
3f229bd583 r17653: fix typo
(This used to be commit aca800bdcc5f402c1fc241e9e9c495933c85b715)
2007-10-10 14:16:20 -05:00
Simo Sorce
d7799784af r17652: add oMSyntax to these attributes
(This used to be commit 425fda84e2a4636c87b30df9df3f2c998202c933)
2007-10-10 14:16:20 -05:00
Simo Sorce
cb4ebd8917 r17651: Commit the set of classess used to generate our schema
and update the schema with the latest additions
(This used to be commit 09a32726111200e421b6fcacf1586bfbe6024fa6)
2007-10-10 14:16:20 -05:00
Andrew Bartlett
49b335c756 r17600: Finish the schema conversion tool, and add a mapping file, used to map
OIDs and skip built-in attributes.

Andrew Bartlett
(This used to be commit cb2b9d800d1228d41f7872a7b7c8ea5f07816c61)
2007-10-10 14:16:16 -05:00
Andrew Bartlett
0cc8a1780d r17528: This is an additional item of schema we require.
Where is the script we used to create this schema file in the first
place?

Andrew Bartlett
(This used to be commit dec2b6961ab28ecf84daa6ef329f98e6ee0927b9)
2007-10-10 14:15:33 -05:00
Andrew Bartlett
8f42f1292c r17526: Move timestamp generation into the objectGUID module. It probably
needs to be renamed (operation_add?).

This allows me to match the behaviour and substitute with the
entryUUID module for remote LDAP connections.

Andrew Bartlett
(This used to be commit af02b4d7c631bb15bf5a5f73f9fdc23075d50f60)
2007-10-10 14:15:33 -05:00
Simo Sorce
71041a5007 r17504: Do not use the invented unixID but use the rfc2307 uidNumber and gidNumber attributes instead
Do not change unixName right now, we don't have an attribute to use in the posixGroup class,
and I think we should remove its usage altogether and look up users and groups by their uid/gid only.

Simo.
(This used to be commit d57b521aadf24a277152ec1ff1dac3210bd14316)
2007-10-10 14:15:30 -05:00
Andrew Bartlett
6e4940cf79 r17499: Open the main database only the minimum times during a provision.
This causes things to operate as just one transaction (locally), and
to make a minimum of TCP connections when connecting to a remote LDAP
server.

Taking advantage of this, create another file to handle loading the
Samba4 specific schema extensions.  Also comment out 'middleName' and
reassign the OID to one in the Samba4 range, as it is 'stolen' from a
netscape range that is used in OpenLDAP and interenet standards for
'ref'.

Andrew Bartlett
(This used to be commit 009d0905947dec9bab81d8e6de5cb424807ffd35)
2007-10-10 14:15:30 -05:00
Andrew Bartlett
05aa6b85ce r17377: This attribute is maintained by the modules, don't override it.
Andrew Bartlett
(This used to be commit d942a8b2b6dcdc8d406d2c5b00983f0191e2a30d)
2007-10-10 14:15:20 -05:00
Andrew Bartlett
cf7ccba67e r17352: Don't do a modify on the objectClasses, as OpenLDAP doesn't like
this.  Instead, handle this one in the add.

Andrew Bartlett
(This used to be commit ab355e1f5f0747225b4c3fc2e65ffb044fe03040)
2007-10-10 14:15:18 -05:00
Andrew Bartlett
bd8fd50982 r17351: Remove extra LDB partition we don't actually use (these are in the
main database, under cn=templates).

Andrew Bartlett
(This used to be commit b1d061d36a4e8715576dc8cb1c4216c111d09035)
2007-10-10 14:15:18 -05:00
Andrew Bartlett
7b99b2048e r17330: Enable the partitions module.
This module redirects various samdb requests into different modules,
depending on the prefix.  It also makes moving to an LDAP backend
easier, as it is just a different partition backend.

This adds yet another stage to the provision process, as we must setup
the partitions before we setup the magic attributes.

Andrew Bartlett
(This used to be commit 31225b9cb6ef6fcb7bd831043999b1b44ef1b128)
2007-10-10 14:15:15 -05:00
Simo Sorce
cb85a76d77 r17208: Add a away to test the ldb module.
Actually you can't test both classic and ldb together, but you can replace the standard
script/tests/mktestsetup.sh file with this one and run make test to see share_ldb in action
(This used to be commit d4c2b893504feb3a232e74d14584405b3aaaf942)
2007-10-10 14:10:19 -05:00
Andrew Bartlett
673cce7817 r16768: Add a simple script to set a user's password. This should grow into a
real smbpasswd command some day.

Andrew Bartlett
(This used to be commit 8d0582796608b757fde776e69ea5d70b2b13eb36)
2007-10-10 14:09:44 -05:00
Andrew Bartlett
f77c410084 r16264: Add, but do not yet enable, the partitions module.
This required changes to the rootDSE module, to allow registration of
partitions.  In doing so I renamed the 'register' operation to
'register_control' and 'register_partition', which changed a few more
modules.

Due to the behaviour of certain LDAP servers, we create the baseDN
entry in two parts: Firstly, we allow the admin to export a simple
LDIF file to add to their server.  Then we perform a modify to add the
remaining attributes.

To delete all users in partitions, we must now search and delete all
objects in the partition, rather than a simple search from the root.
Against LDAP, this might not delete all objects, so we allow this to
fail.

In testing, we found that the 'Domain Controllers' container was
misnamed, and should be 'CN=', rather than 'OU='.

To avoid the Templates being found in default searches, they have been
moved to CN=Templates from CN=Templates,${BASEDN}.

Andrew Bartlett
(This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2007-10-10 14:09:09 -05:00
Andrew Bartlett
5f44da36e7 r16166: Remove hexidecimal constants from the Samba4 provision files.
This change is required for compatibility with the OSX client, in
particular, but returning 0x80000002 rather than -2147483646 violates
what LDAP clients expect in general.

Andrew Bartlett
(This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2007-10-10 14:09:03 -05:00
Andrew Bartlett
2ab5bafd72 r16082: Index objectCategory like objectClass, as it is searched on a lot.
Andrew Bartlett
(This used to be commit 954785db03455daf2ff9b2828e31cb7efffe4f11)
2007-10-10 14:08:57 -05:00
Andrew Bartlett
b31c685ec2 r16028: Re-add the objectclass module, in the new async scheme.
Add a test to show that we need this, and to prove it works (for add
at least).

Andrew Bartlett
(This used to be commit f72079029abb594677bf8c2b63e40c07e910004f)
2007-10-10 14:08:51 -05:00
Simo Sorce
0c7b82e5f6 r15942: Remove the sync internal ldb calls altogether.
This means that some modules have been disabled as well as they
have not been ported to the async interface

One of them is the ugly objectclass module.
I hope that the change in samldb module will make the MMC happy
without the need of this crappy module, we need proper handling
in a decent schema module.

proxy and ldb_map have also been disabled
ldb_sqlite3 need to be ported as well (currenlty just broken).
(This used to be commit 51083de795bdcbf649de926e86969adc20239b6d)
2007-10-10 14:08:43 -05:00