Giampaolo Lauria
ff7f323903
samba-tool: added setpassword to user
...
This is part of the samba-tool work to fit the object-action model
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21 10:32:22 +10:00
Giampaolo Lauria
30ba5d0490
samba-tool: fix summary of the fsmo command to be clearer
...
fsmo command is for general FSMO management
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21 10:32:22 +10:00
Andrew Tridgell
fc476ec8ac
dbcheck: use samdb_schema for getting the backlink
...
this is not available on an ldap samdb
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
2087eb1602
ldb: use base searches for @ special DNs
...
subtree searches on these DNs don't work any more
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
eb7c2af83b
dbcheck: only do the provision dbcheck if there are objects to check
...
when in FILL_DRS mode, there are no objects to check yet
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
182fd31be5
s4-provision: fixed the GUIDs in the provision using dbcheck
...
some DNs are are not setup with GUIDs during the provision because of
circular dependencies between objects. This adds a dbcheck pass to the
provision to fix those DNs
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
303b57c295
dbcheck: only fix replPropertyMetaData if we included it in the search
...
if we didn't find a replPropertyMetaData attribute at all then don't
try fixing it
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
5064d73672
dbcheck: added checks for missing and orphansed backlinks
...
this checks for missing backlinks or backlinks without a forward link
and optionally fixes them
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
534c1ca00e
dbcheck: fixed ldap check with no database specified
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
0ab3086b46
dbcheck: added --reindex option
...
this allows you to force a reindex of the database
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
6bc1957a54
samba-tool: fixed ldapcmp to run as non-root
...
this avoids the need for access to the secrets database
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
d9e2317f49
dbcheck: added checking of backlinks
...
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-13 12:51:05 +02:00
Andrew Tridgell
94b820af56
pydsdb: added get_backlink_from_lDAPDisplayName()
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-13 12:51:05 +02:00
Stefan Metzmacher
e10d7d9941
s4:provision: place the sysvol share under "state dir" instead of "lock dir"
...
metze
2011-07-12 14:58:38 +02:00
Stefan Metzmacher
c0eb56d159
s4:param: add "state dir" and "cache dir" options
...
metze
2011-07-12 14:58:34 +02:00
Andrew Tridgell
330c00a14d
dbcheck: use get_lDAPDisplayName_by_attid()
...
this is better than doing a schema search inside the dbcheck code
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Jul 11 07:43:18 CEST 2011 on sn-devel-104
2011-07-11 07:43:18 +02:00
Andrew Tridgell
02562a0ca9
dsdb: added get_lDAPDisplayName_by_attid
...
this allows conversion from a DRS attribute ID to a LDAP display name
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-11 14:32:45 +10:00
Andrew Tridgell
082a9cc728
dbcheck: improved error checking in fixup of missing metdata
...
when fixing missing attributes in replPropertyMetaData, allow user to
confirm changes, and check for exceptions
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11 14:32:45 +10:00
Andrew Tridgell
396beee776
s4-provision: use samba.unix2nttime() instead of hard coding NTTIME offsets
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11 14:32:45 +10:00
Matthieu Patou
61fc7f285e
s4-samba-tool: dbcheck, check and fix broken metadata
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11 14:32:44 +10:00
Matthieu Patou
bbd4e27745
s4-python: Add functions to get linkid and systemflags of an attribute
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11 14:32:44 +10:00
Matthieu Patou
c3106a6091
s4-provision: fix the value of creation timestamp to be a MS timestamp
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11 14:32:44 +10:00
Andrew Tridgell
e14725c8fe
dbcheck: check all objects, including deleted objects
...
this makes dbcheck search over all objects, deleted or not. This
matters because when another DC replicates from this DC it replicates
the deleted objects as well, so invalid attributes in deleted objects
can cause problems on the new DC (for example, windows can get stuck
or even crash during the replication)
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11 14:32:44 +10:00
Andrew Tridgell
faec2588f5
dbcheck: added confirm_all support for remaining checks
...
this allows the user to choose all/none for all the remaining database
checks
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11 14:32:44 +10:00
Andrew Tridgell
059941b6e7
dbcheck: use specified DB schema for non-LDAP URLs
...
when connecting to a local database with -H we can use that databases
schema
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11 14:32:44 +10:00
Kai Blin
749d022a0c
s4 provision: Add some of the AD-specific DNS records to the directory
...
Signed-off-by: Kai Blin <kai@samba.org>
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Thu Jul 7 02:29:53 CEST 2011 on sn-devel-104
2011-07-07 02:29:53 +02:00
Kai Blin
a8d3bdb48d
s4 provision: split up DNS provisioning into generic and samba-specific ldifs
...
Signed-off-by: Kai Blin <kai@samba.org>
2011-07-07 00:10:27 +02:00
Andrew Tridgell
c9a6dd56e4
s4-dbcheck: support the 'none' option for prompts
...
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Jul 5 08:22:40 CEST 2011 on sn-devel-104
2011-07-05 08:22:40 +02:00
Andrew Tridgell
bce1be36dc
s4-pycommon: support 'none' as an option in confirm
...
this allows the user to ask for none of the changes of this type
Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-05 07:10:03 +02:00
Andrew Tridgell
c6985f1e7e
dbcheck: only use a paged search when checking a ldap database
...
paged searches don't work against a local database (they return only
the first N objects)
2011-07-05 07:10:03 +02:00
Andrew Tridgell
5f1c443a77
dbcheck: check for unknown attributes and offer to remove them
...
this asks the user if they want to remove an unknown attribute. You
can also choose 'all' which will auto-confirm all questions about
removing unknown attributes.
2011-07-05 07:10:03 +02:00
Andrew Tridgell
c9497bd77f
s4-pycommon: allow an optional 'all' choice for confirm dialogs
...
when asking the user to confirm an action, allow for an 'all'
choice, which will be used to allow the user to confirm all future
requests of the same type
2011-07-05 07:10:03 +02:00
Stefan Metzmacher
dee41bcdf2
s4:samba-tool: add "delegation" subcommands for S4U2Proxy and related stuff
...
For now this only works on the local sam.ldb, but it shouldn't be hard
to improve it to talk to remove servers.
Pair-Programmed-With: Björn Baumbach <bb@sernet.de>
metze
2011-06-24 19:06:44 +02:00
Stefan Metzmacher
4b26fc0980
s4:python/samba/samdb: add toggle_userAccountFlags() helper function
...
And let enable_account() use it.
Pair-Programmed-With: Björn Baumbach <bb@sernet.de>
metze
2011-06-24 19:06:44 +02:00
Andrew Bartlett
3d08e844fc
param: Remove remaining references to announce as and announce version
2011-06-24 13:08:04 +10:00
Matthieu Patou
a9e4592336
s4-dbcheck: fix uninitialized errstr in err_dn_target_mismatch
...
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Wed Jun 22 21:22:27 CEST 2011 on sn-devel-104
2011-06-22 21:22:27 +02:00
Matthieu Patou
ef7940f7be
s4-dbcheck: remove unused include
2011-06-22 20:13:08 +02:00
Andrew Tridgell
2f4251c389
dbchecker: cope with a broken link to Deleted Objects
...
if a DN link to Deleted Objects has a bad GUID, we need to use
show_deleted
2011-06-22 20:13:08 +02:00
Andrew Tridgell
4fe9ebc2e3
dbchecker: fixed argument error for -H and DN
2011-06-22 20:13:08 +02:00
Andrew Tridgell
6b939f4a9c
dbchecker: when fixing a bad GUID in a DN, search by the string DN
2011-06-22 20:13:08 +02:00
Andrew Tridgell
9676c26fdd
samba-tool: added --attrs option to dbcheck
...
this allows checking of a specific list of attributes
2011-06-22 20:13:08 +02:00
Andrew Tridgell
7fff636bce
samba-tool: make the dbcheck class available outside of samba-tool
...
this will be used in provision, and probably in upgradeprovision as
well
2011-06-22 20:13:08 +02:00
Andrew Tridgell
9be9f0e43c
samba-tool: added --quiet option to dbcheck
...
this will be used to allow for other tools (such as provision) to call
into dbcheck without generating a lot of noise
2011-06-22 20:13:08 +02:00
Andrew Tridgell
6d1fe054dd
samba-tool: allow for running dbcheck against a remove ldap server
...
this is useful for running it against a Windows server
2011-06-22 11:16:26 +02:00
Andrew Tridgell
ff8cdeecfc
samba-tool: expanded dbcheck DN checking
...
this now checks for bad GUID elements in DN links, and offers to fix
them when possible
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22 11:16:26 +02:00
Andrew Tridgell
9e766f019b
samba-tool: added missing GUID component checks to dbcheck
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Jun 22 07:59:30 CEST 2011 on sn-devel-104
2011-06-22 07:59:30 +02:00
Andrew Tridgell
202f0a4b57
pydsdb: added get_syntax_oid_from_lDAPDisplayName()
...
this gives you access to the syntax oid of an attribute
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22 14:47:08 +10:00
Andrew Tridgell
c4a7908f46
samba-tool: try to keep dbcheck.py in a logical ordering
...
keep individual error handlers together and separate from driver code
2011-06-22 14:47:07 +10:00
Rusty Russell
5eecc85423
tdb2: create tdb2 versions of various testing TDBs.
...
Soon, TDB2 will handle tdb1 files, but until then, we substitute.
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2011-06-20 11:18:36 +02:00
Matthieu Patou
9c94943d26
s4-sambatool: extract the confirm function in a separte module for reuse
2011-06-19 23:21:09 +02:00