1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-16 20:23:50 +03:00
Commit Graph

643 Commits

Author SHA1 Message Date
Andrew Bartlett
fbcb1ec141 r23717: We need to remove the _ in LDAP_MANAGERPASS for the
--ldap-manager-pass= option to work.

Andrew Bartlett
2007-10-10 14:59:07 -05:00
Andrew Bartlett
17dad5d8c3 r23716: Clarify LDAP Manager DN and fix slapd startup syntax.
Andrew Bartlett
2007-10-10 14:59:06 -05:00
Andrew Bartlett
cc7900210a r23715: Make the provision-backend script print out the exact commands to run,
to set up the LDAP backend.

Andrew Bartlett
2007-10-10 14:59:06 -05:00
Andrew Bartlett
3111bbdf64 r23703: Start to get Samba4 to again work with LDAP backends, after I turned
on metze's schema work.

Andrew Bartlett
2007-10-10 14:59:06 -05:00
Andrew Bartlett
b7e727186e r23680: Make it easier to setup a domain member server - the 'server role'
will now control the auth methods, but an override is still available,
ex:

auth methods:domain controller = <methods>

Andrew Bartlett
2007-10-10 14:59:00 -05:00
Andrew Bartlett
dcff83ebe4 r23560: - Activate metze's schema modules (from metze's schema-loading-13 patch).
- samba3sam.js: rework the samba3sam test to not use objectCategory,
  as it's has special rules (dnsName a simple match)
- ldap.js: Test the ordering of the objectClass attributes for the baseDN
- schema_init.c: Load the mayContain and mustContain (and system...) attributes when
  reading the schema from ldb
- To make the schema load not suck in terms of performance, write the
  schema into a static global variable
- ldif_handlers.c: Match objectCategory for equality and canonicolisation
  based on the loaded schema, not simple tring manipuation
- ldb_msg.c: don't duplicate attributes when adding attributes to a list
- kludge_acl.c: return allowedAttributesEffective based on schema results
  and privilages

Andrew Bartlett
2007-10-10 14:53:27 -05:00
Andrew Bartlett
bb583463bf r23361: Merge from SAMBA_4_0_RELEASE:
Print the smb.conf path being created in provision.

Andrew Bartlett
2007-10-10 14:53:11 -05:00
Andrew Bartlett
430c998dc9 r23351: Merge from SAMBA_4_0_RELEASE:
Fix a nasty issue we had with SWAT.  We could not provision into a
different domain, as we didn't re-calcuate the DOMAINDN after the user
changed it in the form.

Andrew Bartlett
2007-10-10 14:53:11 -05:00
Andrew Bartlett
f687bc92ae r23264: Make it more clear what this is actually setting up 2007-10-10 14:53:07 -05:00
Andrew Bartlett
0f457b1d2e r23189: Work towards a totally scripted setup of LDAP backends, so others can
easily try this out.

I also intend to use this for the selftest, but I'm chasing issues
with the OpenlDAP (but not Fedora DS) backend.

Andrew Bartlett
2007-10-10 14:53:02 -05:00
Andrew Bartlett
01d54d13dc r23177: Add in a new provision-backend script. This helps set up the OpenLDAP or Fedora DS backend.
This required a new mkdir() call in ejs.

We can now provision just the schema for ad2oLschema to operate on
(with provision_schema(), without performing the whole provision, just
to wipe it again (adjustments to 'make test' to come soon).

Andrew Bartlett
2007-10-10 14:53:00 -05:00
Rafal Szczesniak
b16787a561 r23126: this was sitting on my laptop for a while...
change the way the ejs object is being created and return listing
context (with status) rather than collecting all entries gathered
from libnet call.

rafal
2007-10-10 14:52:52 -05:00
Rafal Szczesniak
2f16ff04d2 r23125: add host manager subcontext function.
rafal
2007-10-10 14:52:52 -05:00
Rafal Szczesniak
385a094443 r23124: add host subcontext providing (at the moment) list of domains
hosted on the server.

rafal
2007-10-10 14:52:51 -05:00
Rafal Szczesniak
0ecb8fd81e r23065: revert local includes to prevent security problems (at least
temporarily...)

rafal
2007-10-10 14:52:47 -05:00
Rafal Szczesniak
278d26576a r23047: Allow local inclusion of js files as well as from predefined
path(s).

rafal
2007-10-10 14:52:44 -05:00
Andrew Bartlett
5b6f704b24 r23032: Remove calls to println(), and ensure we print the ldb errstring().
Andrew Bartlett
2007-10-10 14:52:42 -05:00
Andrew Tridgell
b9f8650b20 r23012: we need a POLICYGUID in provision 2007-10-10 14:52:39 -05:00
Andrew Tridgell
ad6a672ec3 r23011: initialisation functions must return NTSTATUS, otherwise we get bus
errors on platforms like sparc. This is why sun1 died during
provision.
2007-10-10 14:52:38 -05:00
Stefan Metzmacher
df7863ea1c r22993: - make it possible to load a dsdb_schema from ldif via the ejs bindings
- make it possible to set ntds_objectGUID and ntds_invocationId via the ejy bindings

metze
2007-10-10 14:52:37 -05:00
Andrew Bartlett
ee7b06fc83 r22756: Make it easier to setup an LDAP replica. Provision with
--partitions-only (suggestions for a better name welcome) will setup
the partitions records, but no any data in those partitions.  This can
then point at the already configured remote LDAP server.

Andrew Bartlett
2007-10-10 14:52:15 -05:00
Stefan Metzmacher
b54584dfab r22748: fix memleaks by passing an mem_ctx to
irpc_servers_byname()

metze
2007-10-10 14:52:09 -05:00
Stefan Metzmacher
f65fcd764b r22622: make it possible to pass the config file via 'SMB_CONF_PATH' envvar
very usefull for make testenv!

this makes it also possible to pass a config file to smbscript

metze
2007-10-10 14:51:54 -05:00
Stefan Metzmacher
e9fe3c40e1 r22575: move script/tests/ -> selftest/
as discussed with jelmer and abartlet

metze
2007-10-10 14:51:46 -05:00
Andrew Bartlett
860dfa4ea1 r22478: Update the LDAP backend code to handle initialisation of multiple
partitions onto the target LDAP server.

Make the LDAP provision run before smbd starts, then stop the LDAP
server.  This ensures this occurs synchronously, We then restart it
for the 'real run' (with slapd's stdin being the FIFO).

This required fixing a few things in the provision scripts, with more
containers being created via a add/modify pair.

Andrew Bartlett
2007-10-10 14:51:31 -05:00
Stefan Metzmacher
7f07895cac r22406: this dependencies should also be private
metze
2007-10-10 14:51:15 -05:00
Rafal Szczesniak
4e8d9d3f60 r22323: - add credentials property to NetContext object
- change a comment (matches the idea better)

rafal
2007-10-10 14:51:02 -05:00
Jelmer Vernooij
ef794f03d5 r21673: Fix Samba 3 data read tests. I can't figure out why the upgrade one is broken, so that one is still disabled. 2007-10-10 14:49:08 -05:00
Jelmer Vernooij
7f451cbb8d r21541: Export mgmt, samr and atsvc for use in samba-gtk. 2007-10-10 14:48:55 -05:00
Andrew Bartlett
ea4c2ea22f r21513: I don't know how long this has been wrong, but fix this up so we can
re-provision (as is required for the TEST_LDAP=yes version of make
test).

Andrew Bartlett
2007-10-10 14:48:48 -05:00
Andrew Bartlett
2b3df7f38d r21496: A number of ldb control and LDAP changes, surrounding the
'phantom_root' flag in the search_options control

- Add in support for LDB controls to the js layer
- Test the behaviour
- Implement support for the 'phantom_root' flag in the partitions module
- Make the LDAP server set the 'phantom_root' flag in the search_options control
  - This replaces the global_catalog flag passed down as an opaque pointer
- Rework the string-format control parsing function into
  ldb_parse_control_strings(), returning errors by ldb_errorstring()
  method, rather than with printf to stderr
- Rework some of the ldb_control handling logic

Andrew Bartlett
2007-10-10 14:48:44 -05:00
Simo Sorce
76b377d5ad r21419: Give some more clue about what's going on 2007-10-10 14:48:29 -05:00
Simo Sorce
35886b4ae6 r21351: Change ldb ejs bindings return codes.
We were returning just true/false and discarding error number and string.

This checking probably breaks swat, will fix it in next round as swat
is what made me look into this as I had no way to get back error messages
to show to the users.

Simo.
2007-10-10 14:48:18 -05:00
Stefan Metzmacher
838d307e6c r21294: this is useless, now that there's no operation in between...
metze
2007-10-10 14:48:03 -05:00
Andrew Bartlett
6ce557a1af r21135: Instead of having hooks to update keytabs as an explicit thing, update
them as a hook on ldb modify, via a module.

This should allow the secrets.ldb to be edited by the admin, and to
have things update in the on-disk keytab just as an in-memory keytab
would.

This isn't really a dsdb plugin, but I don't have any other good ideas
about where to put it.

Andrew Bartlett
2007-10-10 14:44:31 -05:00
Stefan Metzmacher
306ea74f85 r20953: add templates in provision_become_dc()
metze
2007-10-10 14:44:01 -05:00
Stefan Metzmacher
edc37501d6 r20922: use the show_deleted module by default
metze
2007-10-10 14:43:52 -05:00
Stefan Metzmacher
e668d3bd69 r20910: fix crash bug
metze
2007-10-10 14:43:51 -05:00
Stefan Metzmacher
575938753b r20908: - fix uninitialized usage of 'ctx'
- remove unused mem_ctx variable
- copy the userman_domain string as child of obj

metze
2007-10-10 14:43:50 -05:00
Rafal Szczesniak
05d307546f r20885: - I forgot the page size passed to enumeration function is actually
size of a buffer for result returned, not number of entries
- pass libnet function returned status to UserListCtx creation
  to properly mark the last chunk of the list

rafal
2007-10-10 14:43:45 -05:00
Rafal Szczesniak
fd0650283b r20882: Formatting.
rafal
2007-10-10 14:43:44 -05:00
Rafal Szczesniak
eebd00ba2b r20881: Sorting out NetUsrCtx methods. Still a couple of things left.
rafal
2007-10-10 14:43:44 -05:00
Stefan Metzmacher
ad110d22fb r20813: fix the build with autodependencies
metze
2007-10-10 14:43:34 -05:00
Stefan Metzmacher
a096a97415 r20806: make it possible to configure the secrets.ldb url
via "secrets database = my_secrets.ldb"

metze
2007-10-10 14:43:33 -05:00
Stefan Metzmacher
c78e345fea r20805: don't use hardcoded values for secrects.keytab and sam.ldb
metze
2007-10-10 14:43:32 -05:00
Stefan Metzmacher
e2cdd882b5 r20792: fix the build, sorry...
metze
2007-10-10 14:40:56 -05:00
Stefan Metzmacher
5828632931 r20791: the ejsnet stuff can be a normal smbcalls module...
mimir: when you want to register more functions
       please do that in the smb_setup_ejs_net() function

metze
2007-10-10 14:40:55 -05:00
Jelmer Vernooij
42bb335bd5 r20786: Fix the build. 2007-10-10 14:40:55 -05:00
Rafal Szczesniak
77ede0656c r20783: Ejsnet files are now moved into a separate directory. I need to commit
this as the change is getting bigger and bigger.

Jelmer, Metze, I don't know enough of our build system so please check
if .mk files are ok.

rafal
2007-10-10 14:40:54 -05:00
Rafal Szczesniak
10968c3f4b r20782: Place ejsnet files in a separate directory.
rafal
2007-10-10 14:40:53 -05:00