1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-19 23:17:05 +03:00

414 Commits

Author SHA1 Message Date
Jelmer Vernooij
d09f151638 samba-tool user: Fix typos, improve messages. 2012-10-18 22:34:29 +02:00
Alexander Wuerstlein
64886e312f Warn when setting UID/GID without idmap_ldb:use rfc2307 = Yes
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Oct 18 09:51:35 CEST 2012 on sn-devel-104
2012-10-18 09:51:35 +02:00
Alexander Wuerstlein
bfdaaf2327 Set RFC2307 attributes in samba-tool create
Optionally set RFC2307 (NIS Schema) attributes in samba-tool create.
Mainly needed for UID mapping to be usable.
Not all attributes are set-able, only harmless and non-overlapping
ones (uid, uidNumber, gidNumber, loginShell, gecos). Description and
homeDirectory should already be set, userPassword seems problematic.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18 17:10:58 +11:00
Andrew Bartlett
9eb022c8c6 provision: No longer use the wheel group in new AD Domains
The issue here is that if we set S-1-5-32-544 (administrators) to a
GID only, then users cannot force a mandetory profile to be owned by
administrators (which is a requirement).

There is no particularly useful reason for us to enforce this matching
a system group.

Andrew Bartlett
2012-10-18 17:10:58 +11:00
Karolin Seeger
f9a4a9bfe1 samba-tool: Some more unifications...
in the usage message.

Karolin
2012-10-09 17:12:07 +02:00
Stefan Metzmacher
309434a773 s4:samba-tool: allow 'samba-tool --version'
metze
2012-10-08 16:13:06 +02:00
Stefan Metzmacher
2fce71c89a s4:samba-tool: use normal option parsing in SuperCommand
We use the epilog to print the subcommands.

metze
2012-10-08 16:13:06 +02:00
Stefan Metzmacher
8d4943dcf9 s4:samba-tool: add optional epilog to _create_parser()
metze
2012-10-08 16:13:06 +02:00
Karolin Seeger
acea51cc37 samba-tool: Unify usage messages.
Karolin

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Oct  8 14:26:52 CEST 2012 on sn-devel-104
2012-10-08 14:26:51 +02:00
Karolin Seeger
a2f3ec0577 samba-tool: Clarify usage of --help.
Karolin
2012-10-08 11:47:22 +02:00
Karolin Seeger
171bf9827b samba-tool: Fix typo in usage.
Karolin
2012-10-08 11:14:42 +02:00
Matthieu Patou
c1677e3b2f s4-provision: do not skip setting the acls on sysvol
Autobuild-User(master): Matthieu Patou <mat@samba.org>
Autobuild-Date(master): Wed Oct  3 10:26:06 CEST 2012 on sn-devel-104
2012-10-03 10:26:06 +02:00
Jelmer Vernooij
2a797f29aa s4-python: Various formatting fixes.
* Trailing whitespace
* use of "==" where "is" should be used
* double spaces
2012-09-27 18:45:12 +02:00
Ricky Nance
ee0012de1a samba-tool domain provision: DNS forwarder default
Provision would break with an exception if there was no value given for the DNS forwarder, this simply sets a default to "none".

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>

Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Thu Sep 27 04:35:33 CEST 2012 on sn-devel-104
2012-09-27 04:35:33 +02:00
Jelmer Vernooij
c5e83ee9a5 samba-tool: Hide 'samba-tool domain samba3upgrade'.
This subcommand is provided for backwards compatibility only; new use of
it should be discouraged. Its new name is 'samba-tool domain
classicupgrade'.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=9047
2012-09-26 07:58:31 +02:00
Jelmer Vernooij
f44ad36718 samba-tool domain provision: DNS forwarder is not a boolean.
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date(master): Tue Sep 25 00:48:43 CEST 2012 on sn-devel-104
2012-09-25 00:48:42 +02:00
Jelmer Vernooij
fd8d4ec347 replace: Support setproctitle().
This uses the setproctitle() from libc, libsetproctitle or libbsd.
If none is available it provides a dummy implementation.
2012-09-24 23:06:07 +02:00
Jelmer Vernooij
6641d76562 samba-tool domain-provision: Avoid python2.5-isms. 2012-09-24 23:06:07 +02:00
Jelmer Vernooij
61ce3e871a samba-tool domain-provision: Fix docstring. 2012-09-24 23:06:07 +02:00
Daniele Dario
48e6da64fd Correct command help message
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Sep 20 16:55:17 CEST 2012 on sn-devel-104
2012-09-20 16:55:17 +02:00
Jelmer Vernooij
0ff2ea56d9 samba.netcmd: Formatting fixes, break lines. 2012-09-16 14:20:11 +02:00
Kai Blin
fee75752fb s4 provision: Ask for the dns forwarder IP address during interactive provision
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12 16:51:29 +02:00
Kai Blin
56058ea597 s4 dns: use the internal DNS server per default 2012-09-12 16:51:29 +02:00
Stefan Metzmacher
a4fc79f8fc s4:samba-tool: add 'samba-tool domain provision'
This is mostly a copy of the standalone source4/setup/provision.

metze
2012-09-11 08:35:49 +02:00
Stefan Metzmacher
ca3f285390 s4:python/netcmd: give the Commad implementations access to the raw arguments
metze
2012-09-11 08:23:56 +02:00
Stefan Metzmacher
7f98cf1698 s4:samba-tool: remove unused code in testparm.py
metze
2012-09-11 08:23:56 +02:00
Andrew Bartlett
f9cee8d832 samba_tool: Improve samba-tool ntacl get/set to use the local sam.ldb SID
This gets the SID for the local machine correctly.

We also add options for --use-ntvfs and --use-s3fs to help control
exactly which database is being read and written.

Andrew Bartlett
2012-09-05 14:12:20 +02:00
Andrew Bartlett
7b5ba30138 samba_tool: Fix ntacl get to correctly output in sddl 2012-09-05 14:12:19 +02:00
Andrew Bartlett
9983ad7a80 s3-passdb: Rename pdb_samba4 to samba_dsdb and autoconfigure when we are a AD DC
The name samba_dsdb is not ideal, but it matches the primary ldb
module we use, and more importantly it avoids having '4' in the name.
We should slowly avoid using the term samba4 in long-term places like
the smb.conf because it is confusing to users given we are shipping
Samba 4.0 as an AD DC as well as all the other supported roles (domain
member/standalone server/classic DC)

Additionally, samba4 will be an odd name when we eventually release
Samba 5.0!

samba4 remains accepted as an alias to ensure existing smb.conf files
load, but to allow changes here in the future, we set the value during
the smb.conf load, and not during the provision when we are an AD DC.

This simplifies the default smb.conf for the vast majority of our
users and reduces the number of things listed in smb.conf files that
we later have to work around if we wish to change the
name/implementation of the passdb glue module again.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Sep  4 04:45:16 CEST 2012 on sn-devel-104
2012-09-04 04:45:16 +02:00
Andrew Bartlett
ebcdc4a36b s4-samba-tool: Add samba-tool ntacl sysvolcheck command
This command verifies that the current on-disk ACLs match the directory and
the defaults from provision.

Unlike sysvolreset, this does not change any of the permissions.

Andrew Bartlett
2012-08-23 15:02:26 +02:00
Andrew Bartlett
8f909199c4 s4-samba-tool: Add 'samba-tool ntacl sysvolreset' tool
This will reset the NT ACL on the sysvol share to the default from
provision, with GPO objects matching the LDAP ACL (as required).

Andrew Bartlett
2012-08-23 15:02:26 +02:00
Andrew Bartlett
97b13799ce s4-classicupgrade: Add --use-ntvfs option
This is an odd option, but is needed because I wish to add assertions about
ACL setting that will not work in make test without the vfs_fake_acls module
loaded.

Andrew Bartlett
2012-08-22 01:31:57 +02:00
Stefan Metzmacher
4e5e302a10 s4:samba-tool/drs: print the dns name of the server belonging to a connection
Pair-Programmed-With: Björn Baumbach <bb@sernet.de>

metze
2012-08-14 17:17:29 +02:00
Andrew Bartlett
2dfb2a4e45 s4-samba-tool ldapcmp: Fix synopsis
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Mon Jul 30 06:25:46 CEST 2012 on sn-devel-104
2012-07-30 06:25:46 +02:00
Andrew Bartlett
14bd5ca68f s4-samba-tool ldapcmp: Add ridNextRID and rIDPreviousAllocationPool as per-DC attributes 2012-07-30 12:30:28 +10:00
Andrew Bartlett
1c86ab9c50 s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to a DC
This command is like dcpromo in that it upgrades the existing workstation account
to be a domain controller.

The SID (and therefore any file ownerships) is preserved.

Andrew Bartlett
2012-07-06 08:10:18 +02:00
Amitay Isaacs
01a425e534 samba-tool: gpo: Update copyright
Autobuild-User(master): Amitay Isaacs <amitay@samba.org>
Autobuild-Date(master): Tue Jul  3 09:10:21 CEST 2012 on sn-devel-104
2012-07-03 09:10:21 +02:00
Amitay Isaacs
5c9ecb4082 samba-tool: gpo: Improve error messages
Signed-off-by: Amitay Isaacs <amitay@gmail.com>
2012-07-03 15:20:42 +10:00
Amitay Isaacs
df4a6e3a3f samba-tool: gpo: Add del subcommand to delete GPO
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03 15:20:42 +10:00
Amitay Isaacs
8768f4fc34 samba-tool: gpo: Add listcontainers subcommand to list containers using given GPO
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03 15:20:42 +10:00
Amitay Isaacs
0365df93e6 samba-tool: gpo: Use utility function dc_url() to set the connection url
In create and fetch subcommands, we also need to know DC hostname. So first
find a DC and use DC hostname to construct connection url. If ldap:// url is
specified with -H, then use that to construct DC hostname.
2012-07-03 15:20:42 +10:00
Amitay Isaacs
a9c4336733 samba-tool: gpo: Refactor code using utility functions 2012-07-03 15:20:42 +10:00
Amitay Isaacs
5ca24346bf samba-tool: gpo: Add utility functions get_gpo_containers and del_gpo_link
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch
2012-07-03 15:20:42 +10:00
Amitay Isaacs
807ff1e343 samba-tool: Fix indentation
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03 15:20:41 +10:00
Amitay Isaacs
e93ed5f69a samba-tool: gpo: Use gpo (id) instead of gpo_dn (DN)
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03 15:20:41 +10:00
Amitay Isaacs
963f0df179 samba-tool: gpo: Correct the attribute name from gPlink to gPLink
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03 15:20:41 +10:00
Amitay Isaacs
7563032acd samba-tool: gpo: Fix policy DN
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03 15:20:41 +10:00
Andrew Bartlett
01f52239dc s4-join: Import DNS zones in AD DC join 2012-06-25 00:26:41 +10:00
Andrew Bartlett
f199c5dbc0 s4-classicupgrade: Allow DNS backend to be specified 2012-06-24 23:46:09 +10:00
Jelmer Vernooij
cbd660d013 samdb: Accept a list of member variables rather than a comma-separated string. 2012-06-21 18:05:33 +02:00