Oliver Liebel
752b2206cb
Fixed --ol-mmr-url helpline
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-18 11:27:57 +11:00
Oliver Liebel
947560fe37
Fixed OL-MMR make test
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-18 11:27:51 +11:00
Matthias Dieter Wallnöfer
5e06110bc1
Reintroduce "s4:provision Improve the handling of provision errors""
...
This mainly reverts commit f0bc02d74c
.
Jelmer pointed out a way how we can achieve the same error handling with an
older syntax also on Python 2.4+.
2010-03-14 10:34:26 +01:00
Matthias Dieter Wallnöfer
f0bc02d74c
Revert "s4:provision Improve the handling of provision errors"
...
This reverts partially commit 027123199e
.
Andrew, this is not Python 2.4+ compatible
2010-03-13 12:37:45 +01:00
Endi S. Dewata
ade93755d5
s4:provision - Updated FDS schema mapping.
2010-03-11 15:30:25 +11:00
Andrew Bartlett
027123199e
s4:provision Improve the handling of provision errors
...
The backtraces were too confusing for our users, and didn't tell them
what to do to fix the problem. By printing the string (rather than a
backtrace), and including in the error what to do, and what file to
remove, we give them a chance.
Andrew Bartlett
2010-03-11 15:28:53 +11:00
Matthias Dieter Wallnöfer
73e7aa863b
s4:provision.reg - call us Windows 2008 from the current version point of view
2010-03-06 18:51:41 +01:00
Endi S. Dewata
c54699faf2
s4:provision - Moved default FDS SASL mappings deletion from post_setup() to init().
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02 14:07:15 +11:00
Endi S. Dewata
02533c9f1b
s4:provision - Use netbios name for FDS instance name.
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02 14:07:01 +11:00
Matthias Dieter Wallnöfer
2caa2a045d
s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"
2010-02-26 21:00:10 +01:00
Andrew Tridgell
336ebeabad
s4-provision: added dns_update_list
...
This contains the list of DNS names we should have as a DC
2010-02-26 14:27:39 +11:00
Andrew Tridgell
c796b6c52e
s4-provision: fixed port number for gc ldap DNS SRV entry
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-26 13:59:17 +11:00
Andrew Tridgell
9a72806dc9
Revert "s4:AD content - adequate some revision levels to match Windows Server 2008"
...
This reverts commit 973ea19867
.
This change breaks DRS dcpromo.
2010-02-26 13:22:12 +11:00
Matthias Dieter Wallnöfer
017e401ded
s4:AD content - Implement the new password settings container
2010-02-21 21:19:57 +01:00
Matthias Dieter Wallnöfer
973ea19867
s4:AD content - adequate some revision levels to match Windows Server 2008
2010-02-21 21:19:56 +01:00
Matthias Dieter Wallnöfer
e592deeb1a
s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008
...
Those replace the FRS ones.
2010-02-21 21:19:56 +01:00
Eduardo Lima
9c46f425a2
s4-drs: enable the recyclebin optional feature
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-16 00:12:09 +11:00
Andrew Tridgell
4aaa7fe43b
s4-provision: fixed --function-level option to provision
...
we need the DS_DOMAIN_* levels imported
2010-02-12 01:08:11 +11:00
Andrew Tridgell
c986bfb22e
s4-provision: pre-create a named.conf.update file
...
The named.conf.update file will be filled in at runtime by Samba to
contain the list of bind9 grant rules for granting DNS dynamic update
permissions on the domain.
2010-02-11 21:04:12 +11:00
Andrew Tridgell
5a72eca574
s4-provision: move zone file to dns subdirectory
...
This allows the permissions to be correctly set for bind to write to
a journal file. It also sets the right group ownership and permissions
on the files that bind needs to access.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-11 21:04:11 +11:00
Andrew Bartlett
f299fe565a
s4:provision Just 'do the right thing' with empty smb.conf files
...
For some reason, JHT keeps on creating an empty smb.conf file,
expecting it to be the same as a non-existant one. It is easier to
just realise what he meant.
Andrew Bartlett
2010-02-10 16:18:21 +11:00
Jelmer Vernooij
0b7910b8bf
upgrade_from_s3: Remove unused imports.
2010-01-25 15:18:01 +01:00
Endi S. Dewata
d69d07ce62
s4-provision: Added msDS-NcType into samba4Top object class
...
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-23 22:41:28 +01:00
Endi S. Dewata
ce709389e6
s4-provision: Disable populating FDS during instance creation.
...
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-23 22:40:51 +01:00
Matthieu Patou
c637c52876
provision: use message and do not display warning if the user choosed delibarately posix:eadb
2010-01-21 07:11:17 +13:00
Matthieu Patou
d4514a6539
provision: introduce use-xattr parameter for defining where to store attributes
...
This option allow simple user (non root) to invoke provision without facing an error
while insuring that ACL on shared files will always be set
2010-01-21 07:11:17 +13:00
Matthieu Patou
e78626dc2e
s4: Set acls correctly on all sysvol and scripts shares
2010-01-21 07:11:15 +13:00
Matthieu Patou
028c9b1c15
s4: regroup gpo modification in one function, set acl on files accordingly with ACL in LDAP
2010-01-21 07:11:14 +13:00
Andrew Tridgell
84b47d3334
s4-provision: added w2k8r2 ldap capabilities
2010-01-16 14:10:44 +11:00
Andrew Tridgell
a9808ae83d
s4-provision: added "check-names ignore;" to allow for _msdcs A records
2010-01-16 14:10:44 +11:00
Matthias Dieter Wallnöfer
b1d2bb3e51
s4:provision_users.ldif - Add a comment that some objects under "Users" are now located elsewhere
...
This is needed due to the new RID/SID distribution system
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
face5d3030
s4:provision_users.ldif - Add objects for IIS
...
Some WSPP locations point out that beginning with Windows Server 2008 they're
also per default present.
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
9ac39b659f
s4:provision_users.ldif - Add additional BUILTIN objects
...
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
2a05dd6fcc
s4:provision_users.ldif - add the restant part of the objects needing for RODC support
...
RODC = Read Only Domain Controllers
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
71357053bb
s4:provision_users.ldif - Fix up errors on existing entries
...
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
81053e9124
s4:provision_users.ldif - Simple reordering
...
Sorted according the SID - easier for later enhancements.
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
a0d7f3e344
s4:provision_users.ldif - Remove system objects from the wrong place
...
Objects like the "Cryptographic Operators", "Event Log Readers" don't belong
here but into the builtin domain.
2010-01-14 10:58:06 +01:00
Andrew Tridgell
73422e7dd8
Revert "s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode"
...
This reverts commit 5c174c68cc
.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:08:30 +11:00
Andrew Tridgell
3af84c1cde
Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now"
...
This reverts commit 61dfd3dc1d
.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:07:53 +11:00
Andrew Tridgell
306de3051d
Revert "s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group"
...
This reverts commit 9ee895fcf6
.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:06:58 +11:00
Andrew Tridgell
aa4501538a
Revert "s4:provision_users.ldif - Add objects for IIS"
...
This reverts commit 91e2100287
.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:05:50 +11:00
Matthias Dieter Wallnöfer
91e2100287
s4:provision_users.ldif - Add objects for IIS
...
Some WSPP locations point out that they're defacto-standards for Windows Server deployments starting with 2008. So we should add them to s4 too.
2010-01-10 22:48:05 +01:00
Matthias Dieter Wallnöfer
e72787f0af
s4:provision_self_join_modify.ldif - Point out that account "dns" is s4 specific
2010-01-10 22:48:04 +01:00
Matthias Dieter Wallnöfer
9ee895fcf6
s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group
2010-01-10 22:48:04 +01:00
Matthias Dieter Wallnöfer
61dfd3dc1d
s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now
...
This belongs to the AD IIS stuff where I don't know yet if we should import it.
2010-01-10 11:07:16 +01:00
Matthias Dieter Wallnöfer
5c174c68cc
s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode
...
Additionally I had to fix some bugs (especially wrong "groupTypes") and
reordered the objects using the SID (this is easier when enhancing the file).
2010-01-10 10:50:46 +01:00
Matthias Dieter Wallnöfer
fca0c4de2a
s4:provision_self_join.ldif - Adapt comment after implementation of distributed RIDs
2010-01-08 18:18:21 +01:00
Andrew Tridgell
ad11deb9bd
s4-schema: fixes for W2K8-R2 schema
...
The schema from WSPP had a number of typos that prevented it from
working. These changes allow it to work with Samba, and allow w2k8r2
to run DCPROMO against Samba successfully
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:54 +11:00
Andrew Tridgell
ebec49965b
s4-schema: added msDS-NcType to schema container
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
ce21151d22
s4-schema: fixed attributes of aggregate schema
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00