1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

618 Commits

Author SHA1 Message Date
Oliver Liebel
752b2206cb Fixed --ol-mmr-url helpline
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-18 11:27:57 +11:00
Oliver Liebel
947560fe37 Fixed OL-MMR make test
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-18 11:27:51 +11:00
Matthias Dieter Wallnöfer
5e06110bc1 Reintroduce "s4:provision Improve the handling of provision errors""
This mainly reverts commit f0bc02d74c.

Jelmer pointed out a way how we can achieve the same error handling with an
older syntax also on Python 2.4+.
2010-03-14 10:34:26 +01:00
Matthias Dieter Wallnöfer
f0bc02d74c Revert "s4:provision Improve the handling of provision errors"
This reverts partially commit 027123199e.

Andrew, this is not Python 2.4+ compatible
2010-03-13 12:37:45 +01:00
Endi S. Dewata
ade93755d5 s4:provision - Updated FDS schema mapping. 2010-03-11 15:30:25 +11:00
Andrew Bartlett
027123199e s4:provision Improve the handling of provision errors
The backtraces were too confusing for our users, and didn't tell them
what to do to fix the problem.  By printing the string (rather than a
backtrace), and including in the error what to do, and what file to
remove, we give them a chance.

Andrew Bartlett
2010-03-11 15:28:53 +11:00
Matthias Dieter Wallnöfer
73e7aa863b s4:provision.reg - call us Windows 2008 from the current version point of view 2010-03-06 18:51:41 +01:00
Endi S. Dewata
c54699faf2 s4:provision - Moved default FDS SASL mappings deletion from post_setup() to init().
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02 14:07:15 +11:00
Endi S. Dewata
02533c9f1b s4:provision - Use netbios name for FDS instance name.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02 14:07:01 +11:00
Matthias Dieter Wallnöfer
2caa2a045d s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs" 2010-02-26 21:00:10 +01:00
Andrew Tridgell
336ebeabad s4-provision: added dns_update_list
This contains the list of DNS names we should have as a DC
2010-02-26 14:27:39 +11:00
Andrew Tridgell
c796b6c52e s4-provision: fixed port number for gc ldap DNS SRV entry
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-26 13:59:17 +11:00
Andrew Tridgell
9a72806dc9 Revert "s4:AD content - adequate some revision levels to match Windows Server 2008"
This reverts commit 973ea19867.

This change breaks DRS dcpromo.
2010-02-26 13:22:12 +11:00
Matthias Dieter Wallnöfer
017e401ded s4:AD content - Implement the new password settings container 2010-02-21 21:19:57 +01:00
Matthias Dieter Wallnöfer
973ea19867 s4:AD content - adequate some revision levels to match Windows Server 2008 2010-02-21 21:19:56 +01:00
Matthias Dieter Wallnöfer
e592deeb1a s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008
Those replace the FRS ones.
2010-02-21 21:19:56 +01:00
Eduardo Lima
9c46f425a2 s4-drs: enable the recyclebin optional feature
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-16 00:12:09 +11:00
Andrew Tridgell
4aaa7fe43b s4-provision: fixed --function-level option to provision
we need the DS_DOMAIN_* levels imported
2010-02-12 01:08:11 +11:00
Andrew Tridgell
c986bfb22e s4-provision: pre-create a named.conf.update file
The named.conf.update file will be filled in at runtime by Samba to 
contain the list of bind9 grant rules for granting DNS dynamic update
permissions on the domain.
2010-02-11 21:04:12 +11:00
Andrew Tridgell
5a72eca574 s4-provision: move zone file to dns subdirectory
This allows the permissions to be correctly set for bind to write to
a journal file. It also sets the right group ownership and permissions
on the files that bind needs to access.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-11 21:04:11 +11:00
Andrew Bartlett
f299fe565a s4:provision Just 'do the right thing' with empty smb.conf files
For some reason, JHT keeps on creating an empty smb.conf file,
expecting it to be the same as a non-existant one.  It is easier to
just realise what he meant.

Andrew Bartlett
2010-02-10 16:18:21 +11:00
Jelmer Vernooij
0b7910b8bf upgrade_from_s3: Remove unused imports. 2010-01-25 15:18:01 +01:00
Endi S. Dewata
d69d07ce62 s4-provision: Added msDS-NcType into samba4Top object class
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-23 22:41:28 +01:00
Endi S. Dewata
ce709389e6 s4-provision: Disable populating FDS during instance creation.
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-23 22:40:51 +01:00
Matthieu Patou
c637c52876 provision: use message and do not display warning if the user choosed delibarately posix:eadb 2010-01-21 07:11:17 +13:00
Matthieu Patou
d4514a6539 provision: introduce use-xattr parameter for defining where to store attributes
This option allow simple user (non root) to invoke provision without facing an error
  while insuring that ACL on shared files will always be set
2010-01-21 07:11:17 +13:00
Matthieu Patou
e78626dc2e s4: Set acls correctly on all sysvol and scripts shares 2010-01-21 07:11:15 +13:00
Matthieu Patou
028c9b1c15 s4: regroup gpo modification in one function, set acl on files accordingly with ACL in LDAP 2010-01-21 07:11:14 +13:00
Andrew Tridgell
84b47d3334 s4-provision: added w2k8r2 ldap capabilities 2010-01-16 14:10:44 +11:00
Andrew Tridgell
a9808ae83d s4-provision: added "check-names ignore;" to allow for _msdcs A records 2010-01-16 14:10:44 +11:00
Matthias Dieter Wallnöfer
b1d2bb3e51 s4:provision_users.ldif - Add a comment that some objects under "Users" are now located elsewhere
This is needed due to the new RID/SID distribution system
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
face5d3030 s4:provision_users.ldif - Add objects for IIS
Some WSPP locations point out that beginning with Windows Server 2008 they're
also per default present.

Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
9ac39b659f s4:provision_users.ldif - Add additional BUILTIN objects
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
2a05dd6fcc s4:provision_users.ldif - add the restant part of the objects needing for RODC support
RODC = Read Only Domain Controllers

Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
71357053bb s4:provision_users.ldif - Fix up errors on existing entries
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
81053e9124 s4:provision_users.ldif - Simple reordering
Sorted according the SID - easier for later enhancements.
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
a0d7f3e344 s4:provision_users.ldif - Remove system objects from the wrong place
Objects like the "Cryptographic Operators", "Event Log Readers" don't belong
here but into the builtin domain.
2010-01-14 10:58:06 +01:00
Andrew Tridgell
73422e7dd8 Revert "s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode"
This reverts commit 5c174c68cc.

This series of commits broke 'make test'.

Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:08:30 +11:00
Andrew Tridgell
3af84c1cde Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now"
This reverts commit 61dfd3dc1d.

This series of commits broke 'make test'.

Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:07:53 +11:00
Andrew Tridgell
306de3051d Revert "s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group"
This reverts commit 9ee895fcf6.

This series of commits broke 'make test'.

Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:06:58 +11:00
Andrew Tridgell
aa4501538a Revert "s4:provision_users.ldif - Add objects for IIS"
This reverts commit 91e2100287.

This series of commits broke 'make test'.

Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:05:50 +11:00
Matthias Dieter Wallnöfer
91e2100287 s4:provision_users.ldif - Add objects for IIS
Some WSPP locations point out that they're defacto-standards for Windows Server deployments starting with 2008. So we should add them to s4 too.
2010-01-10 22:48:05 +01:00
Matthias Dieter Wallnöfer
e72787f0af s4:provision_self_join_modify.ldif - Point out that account "dns" is s4 specific 2010-01-10 22:48:04 +01:00
Matthias Dieter Wallnöfer
9ee895fcf6 s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group 2010-01-10 22:48:04 +01:00
Matthias Dieter Wallnöfer
61dfd3dc1d s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now
This belongs to the AD IIS stuff where I don't know yet if we should import it.
2010-01-10 11:07:16 +01:00
Matthias Dieter Wallnöfer
5c174c68cc s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode
Additionally I had to fix some bugs (especially wrong "groupTypes") and
reordered the objects using the SID (this is easier when enhancing the file).
2010-01-10 10:50:46 +01:00
Matthias Dieter Wallnöfer
fca0c4de2a s4:provision_self_join.ldif - Adapt comment after implementation of distributed RIDs 2010-01-08 18:18:21 +01:00
Andrew Tridgell
ad11deb9bd s4-schema: fixes for W2K8-R2 schema
The schema from WSPP had a number of typos that prevented it from
working. These changes allow it to work with Samba, and allow w2k8r2
to run DCPROMO against Samba successfully

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:54 +11:00
Andrew Tridgell
ebec49965b s4-schema: added msDS-NcType to schema container
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
ce21151d22 s4-schema: fixed attributes of aggregate schema
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00