1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

2128 Commits

Author SHA1 Message Date
Matthieu Patou
24477cacc9 ktpass: also use userPrincipalName for locating the principal
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Fri Nov 12 20:24:23 UTC 2010 on sn-devel-104
2010-11-12 20:24:23 +00:00
Matthieu Patou
f4e9f125e0 ktpass: fix the search path for when running in samba's source dir 2010-11-12 19:40:21 +00:00
Matthieu Patou
e0f64b77eb python: use the ldbMessage + modify notation instead of modify_ldif that we try to avoid 2010-11-12 19:40:21 +00:00
Matthieu Patou
5a6f3f14fb Fix typo 2010-11-12 19:40:21 +00:00
Matthieu Patou
f5ea6f4b4c unit tests: add testing for dns account password change 2010-11-12 19:40:21 +00:00
Matthieu Patou
81eb7985e6 upgradeprovision: use relaxed control while adding missing object container 2010-11-12 19:40:21 +00:00
Matthieu Patou
a9c430bdd2 upgradeprovision: fix pb with dns-hostname, regenerate a correct keytab 2010-11-12 19:40:21 +00:00
Matthieu Patou
8227d1f68e upgradeprovision: use the relax/(upgrade)provision when modifying object
For certain attribute we use the relax/provision control so that we
try to respect checks as this is not a good idea to always force
unwanted behavior.
2010-11-12 19:40:21 +00:00
Matthieu Patou
757764ab1b upgradeprovision: use the (upgrade)provision control also 2010-11-12 19:40:21 +00:00
Matthieu Patou
add39bc40b upgradeprovision: update revision for forestupdate and domainupdate objects 2010-11-12 19:40:21 +00:00
Matthieu Patou
d1feb03889 Add a script to make backup of samba provision 2010-11-12 19:40:21 +00:00
Andrew Bartlett
a9baabed56 s4-provision UTF16 encode the password in sam.ldb, not secrets.ldb
The password in secrets.ldb is UTF8, while clearTextPassword in
sam.ldb is UTF16.

This corrects commit bd5039546e, which
had these the wrong way around.

Andrew Bartlett
2010-11-11 09:55:06 +00:00
Matthias Dieter Wallnöfer
2403aaa759 s4:upgradehelpers.py - use "clearTextPassword" rather than "userPassword"
It's the default internal s4 password change attribute
2010-11-11 09:12:25 +01:00
Matthias Dieter Wallnöfer
7c59ecec50 s4:speedtest.py - use "unicodePwd" for setting user's password
It's available on all AD hosts (including Windows 2000) and on all configurations!
2010-11-11 09:12:25 +01:00
Matthias Dieter Wallnöfer
0e945697f5 s4:speedtest.py - remove duplicated code 2010-11-11 09:12:25 +01:00
Matthias Dieter Wallnöfer
0a29e552cb s4:speedtest.py - fix script name in the help text 2010-11-11 09:12:25 +01:00
Matthias Dieter Wallnöfer
ed1ca1c49e s4:speedtest.py - make it executable 2010-11-11 09:12:25 +01:00
Andrew Tridgell
21fe96e8f9 s4-provision: include command line provision options in the generated smb.conf
this saves the smb.conf using lp.dump_globals() to ensure that any
command line options (for example directory overrides) are saved in
the generated smb.conf 

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-11 02:57:04 +00:00
Andrew Tridgell
60cb372bd6 s4-devel: useful script for testing join with empty smb.conf
this sets up all the needed --options for a join with a prefix other
than the one compiled in
2010-11-11 02:57:04 +00:00
Andrew Tridgell
81c9b98ecd s4-join: use the command line loadparm in provision during a join
this allows a join with an empty smb.conf to override locations of
files correctly with --option

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-11 02:57:04 +00:00
Andrew Tridgell
13020349e1 s4-join: raise mininum password length to 32 in new join code 2010-11-10 09:53:18 +11:00
Matthias Dieter Wallnöfer
fd9fc251fb s4:provision.py - strip trailing whitespaces 2010-11-09 13:25:12 +01:00
Matthias Dieter Wallnöfer
bd5039546e s4:provision - switch to "clearTextPassword" for setting passwords
This is the default password set/change attribute for s4 specific purposes
(otherwise in respect to Windows it's "unicodePwd"). We move away from
"userPassword" since on Windows it's not activated by default - and s4 will
follow soon.
2010-11-09 13:22:00 +01:00
Andrew Tridgell
cc5e231355 s4-pydrs: validate the DsGetNCChanges response
check that object_count matches up with first_object
2010-11-08 11:13:28 +11:00
Andrew Tridgell
e59bf5efb5 s4-join: modify join behaviour according to domain level
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Nov  7 23:32:16 UTC 2010 on sn-devel-104
2010-11-07 23:32:16 +00:00
Andrew Tridgell
fc5fecb0b7 s4-drs: allow override of the replica_flags 2010-11-07 22:50:05 +00:00
Matthias Dieter Wallnöfer
c89bc8394d s4:upgradeprovision - remove some "recalculate_sd" uses
We need "recalculate_sd" only when no external "nTSecurityDescriptor" change
is performed. Otherwise the recalculation is performed automatically.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Nov  7 18:52:42 UTC 2010 on sn-devel-104
2010-11-07 18:52:42 +00:00
Andrew Tridgell
2d52eea028 s4-join: fixed SPNs, invocationId and dnshostname and python join
- we need the GN/ SPN for replication. 
- fixed the string form of the invocationId
- lowercase the dnshostname

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-06 14:36:26 +11:00
Andrew Tridgell
a162b1a2d8 s4-join: switch over to the new DC join in make test 2010-11-06 14:36:26 +11:00
Andrew Tridgell
724599de63 samba-tool: deprecate samba-tool vampire command 2010-11-06 14:36:26 +11:00
Andrew Tridgell
11ae1046a0 s4-join: fixed secure_channel_type
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Nov  5 13:24:32 UTC 2010 on sn-devel-104
2010-11-05 13:24:32 +00:00
Andrew Tridgell
351312d8b8 s4-join: don't print all the NDR packets by default 2010-11-05 23:42:09 +11:00
Andrew Tridgell
34ce183d6c s4: net -> samba-tool 2010-11-05 23:42:08 +11:00
Andrew Tridgell
506ffcf86f s4-join: added DC join to the python join code
this will replace the old vampire code
2010-11-05 23:42:08 +11:00
Andrew Tridgell
278778c927 s4-pydrs: added rodc option to python drs replication 2010-11-05 23:42:08 +11:00
Andrew Tridgell
cbded38ed5 s4-pydsdb: added DsReplicaAttribute()
this allows us to form a DsReplicaAttribute structure from python
2010-11-05 23:42:08 +11:00
Jelmer Vernooij
cd172e7724 talloc: Add python talloc module, move convenience functions to it.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Fri Nov  5 02:48:21 UTC 2010 on sn-devel-104
2010-11-05 02:48:21 +00:00
Kamen Mazdrashki
e7aa7a0c33 s4-devel: Verify prefixMap is saved correctly in LDB on disk 2010-11-04 12:16:04 +00:00
Zahari Zahariev
832cd99ea7 Speed test with user objects
This is a modest speed test that aims to show performance difference
between Samba4 vs MS Active Directory. It should be used with Samba-style
credentials and no arguments like every other python unittest.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>

Autobuild-User: Anatoliy Atanasov <anatoliy@samba.org>
Autobuild-Date: Thu Nov  4 00:11:20 UTC 2010 on sn-devel-104
2010-11-04 00:11:20 +00:00
Jelmer Vernooij
6bd903ebe0 provision: Look for in source setup data first, in case an older version
of samba 4 is installed in the system.
2010-11-03 19:13:36 +00:00
Jelmer Vernooij
654fdce6a2 samba: Make in_source_tree() public. 2010-11-03 19:13:36 +00:00
Matthias Dieter Wallnöfer
7578e04fb8 s4:provision - adapt the "provision" so that SIDs are only set on entry creation
SID modifications are denied.
2010-11-01 12:25:24 +01:00
Andrew Tridgell
43f7c9ca26 s4-test: we don't need to set LDB_MODULES_PATH any more 2010-11-01 18:55:19 +11:00
Matthias Dieter Wallnöfer
572774a7a0 s4:provision - remove the "servicePrincipalName" creation on the DC object
This is now done by the "samba_spnupdate" script.
2010-10-31 18:44:07 +00:00
Matthias Dieter Wallnöfer
971ce6c5ed s4:scripting/bin/samba_spnupdate - also support adding all possible "servicePrincipalName"s 2010-10-31 18:44:06 +00:00
Jelmer Vernooij
3deece5591 s4: Remove the old perl/m4/make/mk-based build system.
The new waf-based build system now has all the same functionality, and
the old build system has been broken for quite some time.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-31 02:01:44 +00:00
Matthieu Patou
b548674c29 provision: fix wrong tests
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Oct 30 17:31:23 UTC 2010 on sn-devel-104
2010-10-30 17:31:23 +00:00
Matthieu Patou
dc0000e1a8 provision: when deriving netbiosname from hostname force the netbiosname to be compliant
It means no space/_/-/@.... and less than 16 chars.

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Oct 30 14:26:22 UTC 2010 on sn-devel-104
2010-10-30 14:26:22 +00:00
Matthieu Patou
d8e246cf8a Add a script for formating test result of st/subunit
This script show the time of each test and tests are sorted by execution
time (from the slowest to the quickest)

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Tue Oct 26 20:42:11 UTC 2010 on sn-devel-104
2010-10-26 20:42:11 +00:00
Jelmer Vernooij
a702c07e02 talloc: change pytalloc-util to be a public library. 2010-10-26 10:17:19 -07:00
Jelmer Vernooij
0ceb5018f3 waf: Remove unused EXT_LIB_PYTHON. 2010-10-26 10:17:19 -07:00
Jelmer Vernooij
1ae0981ce8 talloc: Move pytalloc to lib/talloc. 2010-10-26 10:17:18 -07:00
Jelmer Vernooij
8cf61377aa waf: Remove lib prefix from libraries manually. 2010-10-26 10:17:17 -07:00
Jelmer Vernooij
d9cbcdd410 s4: Drop duplicate 'lib' prefix for private libraries. 2010-10-26 10:17:16 -07:00
Jelmer Vernooij
833480d3ad s4: Rename LIBSAMBA-* to libsamba-* 2010-10-24 00:20:04 +00:00
Jelmer Vernooij
9065f9644b s4: Rename LIBNETIF to libnetif. 2010-10-23 22:24:06 +00:00
Matthias Dieter Wallnöfer
8b9a08e10f s4:provision.py - add the correct "CN=Sites" security descriptor
This should help to fix bug #7403.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104
2010-10-23 20:16:59 +00:00
Matthias Dieter Wallnöfer
245642a36b s4:schema.py - reformat and fix the security descriptor
- Now it matches Windows's order
- It contained a superfluous entry (an "Administrator" user grant)
2010-10-23 19:35:06 +00:00
Andrew Tridgell
1748d10e47 s4-python: python_samba needs pyext 2010-10-21 19:03:27 +11:00
Andrew Tridgell
af36485ae5 s4-python: added a samba_python grouping library
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21 19:03:26 +11:00
Matthias Dieter Wallnöfer
a9b58f6246 s4:samdb.py - remove a pointless comment
We are only looking for the default DN - but the method name already tells
us this.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Oct 19 10:03:12 UTC 2010 on sn-devel-104
2010-10-19 10:03:12 +00:00
Matthias Dieter Wallnöfer
8c4f6bcd67 s4:samdb.py - use a more standard way to get to the domain realm/dns name
We do always use the canonical name as a base if we don't have it around yet.
2010-10-19 09:21:04 +00:00
Lukasz Zalewski
87fd2fd157 Addition of userPrincipalName attribute when new account is created 2010-10-19 09:21:04 +00:00
Andrew Bartlett
f9c7365e53 s4-provisionbackend Allow a fixed URI to be specified for LDAP backend
This is added to make the 'existing' LDAP backend class more useful,
and to allow debuging of our OpenLDAP backend class with wireshark, by
forcing the traffic over loopback TCP, which is much easier to sniff.

Andrew Bartlett
2010-10-19 18:57:06 +11:00
Andrew Bartlett
4d9b12ae8f s4-provision Remove serverdn parameter from Schema()
We don't need to know the server DN here any more, and it
makes no sense for many callers.

Andrew Bartlett
2010-10-19 18:57:00 +11:00
Jelmer Vernooij
5324b943e7 wafsamba: Fix handling of pyembed/pyext. 2010-10-10 23:54:04 +00:00
Jelmer Vernooij
c15e919a09 wafsamba: Clarify needs_python argument name, use pyembed/pyext where
applicable.

Allow using both pyembed and pyext, to prevent unresolved symbols.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Oct 10 03:54:01 UTC 2010 on sn-devel-104
2010-10-10 03:54:01 +00:00
Andrew Tridgell
c24240bcd2 waf: fixed some python3.x portability issues
these have crept into the tree over time. Maybe we should add testing
of a range of python versions to autobuild?
2010-10-06 11:13:05 +00:00
Kamen Mazdrashki
5218bcf76f s4-provision: Reset "debuglevel" after "provision" take place
Otherwise "provision" resets our current debug level and
we don't get debug messages we may expect onwards

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Oct  5 11:32:50 UTC 2010 on sn-devel-104
2010-10-05 11:32:50 +00:00
Matthias Dieter Wallnöfer
dda6c354f6 s4:dsdb python stuff - introduce also here the "show_recycled" control
But also here beside "show_deleted" to not loose compatibility with older
provisions.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-10-03 15:23:18 +00:00
Andrew Tridgell
29e1a847dd s4-selftest: silence warnings about bind chown 2010-10-02 21:11:52 -07:00
Andrew Tridgell
762ad1c4ba s4-test: silence the Failed to chown message in make test 2010-10-02 21:11:52 -07:00
Kamen Mazdrashki
197a1514d6 s4-ldapcmp.py: Don't guess credentials for second Credentials object
This allow us to fallback to first credentials given.

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Sat Oct  2 23:05:20 UTC 2010 on sn-devel-104
2010-10-02 23:05:20 +00:00
Kamen Mazdrashki
da0f3bd229 s4-getopt.py: Make Anonymous creds when no credentials
are supplied on command line and caller doesn't want us
to guess credentials from environment
2010-10-03 01:24:57 +03:00
Kamen Mazdrashki
302e1d29d8 s4-python-test: Common implementation for getting environment variable value
Unit-test based python tests require certain input parameters
to be set in environment, otherwise they can't be run
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
6546127b64 s4-python-samba: Remove trailing ';'s 2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
7acbb7346f s4-python-test: Implement global connect_samdb() function
This helper makes proper ldb url to connect to
and is a shorthand for test to create SamDB connections
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
46ac1c3b47 s4-samba.samdb: Fix masking names from outer context
- 'filter' is built-in
- 'ldb' is a module name we imported
2010-10-03 01:24:56 +03:00
Kamen Mazdrashki
0cb476fb26 s4-python-samba: 'file' is a built-in 2010-10-03 01:24:55 +03:00
Kamen Mazdrashki
edfb8c64f6 s4-samba.samdb: Fix leading indention and trailing ';' 2010-10-03 01:24:55 +03:00
Kamen Mazdrashki
e9620c5fd2 s4-python-samba: Fix few cosmetics
- we have sys module already imported
- _glue module is part of samba package so be more precise how to import
2010-10-03 01:24:55 +03:00
Andrew Tridgell
694f2876c9 s4-spn: don't try and send an empty SPN list
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 20:11:15 -07:00
Andrew Tridgell
176ecce9a6 s4-provision: wipe the old keytabs when provisioning
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 14:36:12 -07:00
Andrew Tridgell
67a04613e9 s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytab
we need to fetch the msDS-keyVersionNumber from the writeable DC

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-30 14:36:12 -07:00
Zahari Zahariev
73763b3678 LDAPCmp feature to compare nTSecurityDescriptors
New feature that enables LDAPCmp users to find unmatched or
missing ACEs in objects for the three naming contexts between
DCs in one domain (default) or different domains. Comparing
security descriptors is not the default action but attribute
compatison. So to activate the new mode there is --sd switch.
However there are two view modes to the new --sd action which
are 'section' (default) or 'collision'. In 'section' mode you
can only find differences connected to missing or value
unmatched ACEs but not disorder unmatch if ACE values and count
are the same. All of the mentioned differences plus disorder
ACE unmatch you can observe under 'collision' view however
it is more verbose.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
2010-09-30 09:41:20 -07:00
Andrew Tridgell
92586abac0 s4-dns: send A record updates via TKEY 2010-09-30 00:59:16 +00:00
Andrew Tridgell
768df75ed9 s4-devel: added new options to getncchanges script
added --pas, --dest-dsa and --replica-flags options

Pair-Programmed-With: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
2010-09-29 16:36:22 -07:00
Andrew Tridgell
31310826e0 s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS call
we can't do SPN updates via sam writes and replication, as the sam is
read-only
2010-09-29 03:55:04 +00:00
Andrew Tridgell
739a4e4e23 s4-drsutils: expose DsBind() call in drs_utils.py
this will be used by samba_spnupdate
2010-09-29 03:55:04 +00:00
Andrew Tridgell
06022dad70 s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers
Our helper scripts can fail on Fedora with the PDT timezone (Western
USA). This is the same issue we found with Heimdal earlier today, the
24 second difference between GMT and UTC, but this time in MIT
Kerberos as linked into bind9.

By forcing TZ=GMT in these scripts we avoid the problem

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-29 03:55:04 +00:00
Andrew Tridgell
6237d56027 s4-dns: added --update-list option to samba_dnsupdate
this allows us to use it for RODC netlogon updates
2010-09-27 22:55:05 -07:00
Andrew Tridgell
a40dcd161c s4-dns: use the generated krb5.conf in samba_dnsupdate
this gives one less thing that an admin can get wrong

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Sep 27 02:35:29 UTC 2010 on sn-devel-104
2010-09-27 02:35:29 +00:00
Andrew Tridgell
93be0d6178 s4-provision: fixed the generation of the krb5.conf for vampire
we need a correct krb5.conf for nsupdate from bind9
2010-09-27 01:53:45 +00:00
Andrew Tridgell
f3ceec9b1b s4-spn: don't try to do SPN updates as a RODC
we don't have the permissions to do it
2010-09-26 06:29:06 +00:00
Matthieu Patou
c680a42504 upgradeprovision: fix a typo 2010-09-26 06:22:43 +04:00
Matthieu Patou
873bd98904 upgradeprovision: Fix a bug with renamed entries
The SD was not refetched for renamed entries, resulting with a try to
add an additional SD when there was already one.
2010-09-26 06:22:43 +04:00
Matthieu Patou
43274c9071 upgradeprovision: fix a bug with not updated links 2010-09-26 06:22:43 +04:00
Matthieu Patou
a8f8f277ff s4 provision: start with gpo of version 0 and be consistent between different policies 2010-09-26 06:22:43 +04:00
Matthieu Patou
76d87b7fb5 s4 upgradeprovision: fix a bug with empty reference objects
Thanks to lukas@eecs.qmul.ac.uk for poiting it to me
2010-09-26 06:22:43 +04:00
Matthieu Patou
3c95d4d313 s4 upgradeprovision: Copy versionNumber if not present it helps to make gpo valid 2010-09-26 06:22:43 +04:00