1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-20 08:23:50 +03:00
Commit Graph

72 Commits

Author SHA1 Message Date
Andrew Bartlett
31e755c2ce r10314: Apply the controvertial 'server role =' patch after discussion on the list:
This patch removes the 'domain logon' and 'domain master' controls from
Samba4, in favour of a 'server role =' that users can actually
understand.

We can expand the list of roles as needed, and nobody has to figure out
what a 'domain master' actually means.

Andrew Bartlett
2007-10-10 13:38:16 -05:00
Jelmer Vernooij
87f25fe49c r10190: Do some very basic input checking when provisioning. 2007-10-10 13:38:06 -05:00
Jelmer Vernooij
a143234ac7 r9951: Add another value to the default HKLM.
Convert Samba3 policy "refuse machine pw change" to registry value.
2007-10-10 13:36:24 -05:00
Jelmer Vernooij
7666993fa9 r9898: Add extra registry key used by WinXP (see r9894) 2007-10-10 13:36:21 -05:00
Jelmer Vernooij
d2db164d6f r9834: More tests for the upgrade from Samba3 2007-10-10 13:36:17 -05:00
Jelmer Vernooij
96ccbd6402 r9829: Registry key and value names are case insensitive 2007-10-10 13:36:16 -05:00
Jelmer Vernooij
488d737fb0 r9816: Work on testsuite for upgrade
Add 'paths' object to provision code.
2007-10-10 13:35:04 -05:00
Jelmer Vernooij
27eefbd905 r9805: Add 'data' property to param EJS object
Write out new smb.conf file. Parameters that have disappeared
between Samba 3 and 4 will optionally be prefixed with 'samba3:'
2007-10-10 13:35:03 -05:00
Jelmer Vernooij
b7c09df9e5 r9793: Be more verbose, check for errors in upgrade script. 2007-10-10 13:35:02 -05:00
Jelmer Vernooij
eb9d615bcd r9786: Move ldb_map into ldb/modules/
Move samba3sam to dsdb/
2007-10-10 13:35:01 -05:00
Jelmer Vernooij
8baa2ac377 r9754: Upgrading with the command line utility now works, at least partially (-:
Upgrading using SWAT should work as well now.
2007-10-10 13:34:56 -05:00
Jelmer Vernooij
435e4c6389 r9744: - [upgrade.js] Start working on smb.conf conversion.
- [ldb_map] Support storing non-mappable data in a fallback LDB
2007-10-10 13:34:55 -05:00
Jelmer Vernooij
d569465dc4 r9735: More work on generating a valid Samba4 configuration using the
Samba3 data (both console and SWAT)
2007-10-10 13:34:55 -05:00
Andrew Tridgell
804f2485d0 r9646: fixed error message 2007-10-10 13:34:37 -05:00
Rafal Szczesniak
1990793b23 r9477: Convert popt options to an ejs object. Doesn't seem to break anything
except of popt help (-h) option (unexpected ?).

rafal
2007-10-10 13:34:20 -05:00
Andrew Tridgell
3f30c6118b r9319: updated newuser script for new OO style for nss object
thanks to Hotarut for spotting this
2007-10-10 13:33:24 -05:00
Andrew Tridgell
f8949869bc r9219: by default be a DC, as the provisioning scripts assume that in other parts 2007-10-10 13:31:32 -05:00
Andrew Bartlett
e6abd9f704 r8999: Use the timestamps module to ensure we update times.
Andrew Bartlett
2007-10-10 13:31:05 -05:00
Rafal Szczesniak
5bf5559e0f r8902: Revert the small change as Andrew Bartlett asked. Now, let's go
and fix howto.txt.

rafal
2007-10-10 13:30:16 -05:00
Rafal Szczesniak
a59594d2d8 r8898: Fix provision script to actually work, since location of smbscript
has changed.

rafal
2007-10-10 13:30:16 -05:00
Andrew Tridgell
3228644cf8 r8857: please don't get fancy with embedded boolean statements in js
code. Especially as this is a new language for most Samba developers,
it is far better to err strongly on the side of readability rather
than trying to save a line of code by using fancy tricks
2007-10-10 13:30:12 -05:00
Andrew Bartlett
1f071b0609 r8790: Finish the migration of aliases and privilages with SamSync, by adding
templating support for foreignSecurityPrincipals to the samdb module.
This is an extension beyond what microsoft does, and has been very
useful :-)

The setup scripts have been modified to use the new template, as has
the SAMR and LSA code.

Other cleanups in LSA remove the assumption that the short domain name
is the first component of the realm.

Also add a lot of useful debug messages, to make it clear how/why the
SamSync may have gone wrong.  Many of these should perhaps be hooked
into an error string.

Andrew Bartlett
2007-10-10 13:30:05 -05:00
Andrew Tridgell
f6d24d063a r8778: index on nCName in sam.ldb. This was costing us about 75% of the time in each smb login 2007-10-10 13:30:04 -05:00
Andrew Bartlett
0cc58f5c3c r8740: Extend the rdn_name module to handle adding the rdn as an attribute. ie:
dn: cn=foo,ou=bar
objectClass: person

implies

dn: cn=foo,ou=bar
objectClass: person
cn: foo
(as well as a pile more default attributes)

We also correct the case in the attirbute to match that in the DN
(win2k3 behaviour) and I have a testsuite (in ejs) to prove it.

This module also found a bug in our provision.ldif, so and reduces
code complexity in the samdb module.

Andrew Bartlett
2007-10-10 13:30:00 -05:00
Andrew Bartlett
2303e24be7 r8677: The first part of the domain name may not be equal to the netbios domain name.
Remove the use of flatname from the main domain object, we no longer
reference it.

Andrew Bartlett
2007-10-10 13:29:53 -05:00
Andrew Bartlett
ed1f2e029c r8667: Further simply the provision script, by removing the 'name' attribute.
This is now calculated on the fly for every add and modify.

Andrew Bartlett
2007-10-10 13:29:52 -05:00
Andrew Bartlett
3462cbadb2 r8662: Revert change to CN=Cert Publishers, this group still needs to
override the template for these attributes.

Andrew Bartlett
2007-10-10 13:29:51 -05:00
Andrew Bartlett
4a8ef7197f r8660: Use templates for the initial provision of user and computer accounts.
This ensures the templating code is used, and also makes it clearer
what I need to duplicate in the vampire area.

Also fix a silly bug in the template application code (the samdb
module) that caused templates to be compleatly unused (my fault, from
my commit last night).

Andrew Bartlett
2007-10-10 13:29:51 -05:00
Andrew Bartlett
940ed9827f r8650: Use the timestamps and a new objectguid module rather than placing
boilerplate attributes in every entry in provision.ldif.

The next step will be to use templates.

Andrew Bartlett
2007-10-10 13:29:50 -05:00
Andrew Tridgell
c2691ef712 r8643: - make lp_configfile() work again
- get rid of redundeny dyn_CONFIGFILE argument to lp_load()

- fixed provisioning to work with completely pristine install,
  creating an initial smb.conf is none is present

- added lp.set() and lp.reload() to loadparm ejs object interface
2007-10-10 13:29:48 -05:00
Andrew Tridgell
b6ef32ddd1 r8558: move newuser logic into the provision.js lib 2007-10-10 13:29:37 -05:00
Andrew Tridgell
d7e4dcaaaa r8459: move to the more portable script execution method 2007-10-10 13:23:05 -05:00
Andrew Tridgell
b775884474 r8415: get rid of the last 2 runtime perl scripts 2007-10-10 13:23:00 -05:00
Andrew Tridgell
b90aa3c5a7 r8410: converted the newuser script to js 2007-10-10 13:22:59 -05:00
Simo Sorce
4eb5863042 r8373: New wildcard matching code.
This code applies correct ldap standard wildcard matching code
removes WILDCARD matching from tdb @ATTRIBUTES, that's now handled independently
adds some more tests for wildcard matching
fixes dn comparison code in ldb_match
2007-10-10 13:20:13 -05:00
Andrew Tridgell
7476cb9413 r8372: - split out provisioning logic into a separate ejs library
- added a provisioning web page
2007-10-10 13:20:13 -05:00
Andrew Tridgell
abbf9c703c r8355: - added a vsprintf() function
- removed the --outputdir option from provision, as its not used any
  more (as ejs knows the real paths)
2007-10-10 13:20:10 -05:00
Andrew Tridgell
506e07d6e0 r8350: fixed the --root option to provision 2007-10-10 13:20:10 -05:00
Andrew Tridgell
f27a681769 r8347: replace the perl provision script with a ejs script
I don't mind depending on perl at compile time, but I want to avoid
depending on it at runtime. This also will make it easy to add web
install wizard
2007-10-10 13:20:09 -05:00
Andrew Tridgell
6d416656a0 r8345: make the dn on the hklm ldif valid
Jelmer, can you check this is OK?
2007-10-10 13:20:09 -05:00
Andrew Tridgell
c2946003e0 r8338: - added a substitute_var() js library function for doing hash driven
substitution of variables in strings

- the js provision script now correctly processes provision.ldif
2007-10-10 13:20:08 -05:00
Andrew Tridgell
1d9632877c r8332: not done yet, but a lot closer 2007-10-10 13:20:07 -05:00
Andrew Tridgell
333b32025f r8319: the start of a provision script in ejs. This is why I've been adding
so many functions lately.

so far it just parses options, works out the host IP, and user and group names
2007-10-10 13:20:06 -05:00
Andrew Tridgell
fc93ade9cd r8315: fixed the generation of the serial number in the dns zone file (bind9
doesn't like it being too long)
2007-10-10 13:20:05 -05:00
Andrew Tridgell
5adbab0afe r8289: fallback to the group 'other' for users
this might fix the testing on solaris10
2007-10-10 13:19:32 -05:00
Stefan Metzmacher
d24f39a5d7 r8225: make nETBIOSName case insensitive, so that lower case netbios domain REALM's
are working in the hdb-ldb module

metze
2007-10-10 13:19:21 -05:00
Stefan Metzmacher
cfb7245597 r8158: - use the timestring for the serial number of the bind zone file
- add --krbtgtpass and --machinepass options, with them you can easy set them to default
  values for testing so that you don't need to setup a new keytab file when you rerun provision.pl

metze
2007-10-10 13:19:15 -05:00
Andrew Tridgell
39cfb6f739 r8056: make the realm lowercase in our ldb (better matches w2k3) 2007-10-10 13:19:03 -05:00
Andrew Tridgell
1ba296b9d0 r8055: added canonicalName to our domainDns record 2007-10-10 13:19:03 -05:00
Andrew Bartlett
90e94a4630 r7988: Store the KVNO for the machine account, and set it up in the provision.
Andrew Bartlett
2007-10-10 13:18:56 -05:00