Andrew Bartlett
1a76c80466
This is Samba4 alpha11!
2010-01-11 14:58:11 +11:00
Andrew Tridgell
73422e7dd8
Revert "s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode"
...
This reverts commit 5c174c68ccba7506147feab1d09ad676792139b3.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:08:30 +11:00
Andrew Tridgell
3af84c1cde
Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now"
...
This reverts commit 61dfd3dc1dce2c0dd6693de80930af312ad3e39f.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:07:53 +11:00
Andrew Tridgell
306de3051d
Revert "s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group"
...
This reverts commit 9ee895fcf6327b1c2f5ee09fa565bd62974e9c58.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:06:58 +11:00
Andrew Tridgell
aa4501538a
Revert "s4:provision_users.ldif - Add objects for IIS"
...
This reverts commit 91e210028790397996659116446e6add452707f6.
This series of commits broke 'make test'.
Matthias, please make sure you run a _full_ make test before every
push.
2010-01-11 10:05:50 +11:00
Matthias Dieter Wallnöfer
2cedefabc9
s4:upgradeprovision - fix up the script regarding linked attributes
...
We have to try to add new objects until between two iterations we didn't make
any progress. Either we are then done (no objects remaining) or we are
incapable to do this fully automatically.
The latter can happen if important system objects (builtin groups, users...)
moved (e.g. consider one of my recent comments). Then the new object can't be
added if it contains the same "sAMAccountName" attribute as the old one. We
have to let the user delete the old one (also to give him a chance to backup
personal changes - if needed) and only then the script is capable to add the
new one onto the right place. Make this clear with an exhaustive error output.
I personally don't see a good way how to do this better for now so I would leave
this as a manual step.
2010-01-10 22:48:06 +01:00
Matthias Dieter Wallnöfer
e0d6b0977e
s4:upgradeprovision - Reformat comments
...
Make them break at line 80 (better readability).
2010-01-10 22:48:05 +01:00
Matthias Dieter Wallnöfer
601ea3a442
s4:repl_meta_data - Transform a "1" into a "true" on a boolean variable
2010-01-10 22:48:05 +01:00
Matthias Dieter Wallnöfer
91e2100287
s4:provision_users.ldif - Add objects for IIS
...
Some WSPP locations point out that they're defacto-standards for Windows Server deployments starting with 2008. So we should add them to s4 too.
2010-01-10 22:48:05 +01:00
Matthias Dieter Wallnöfer
e72787f0af
s4:provision_self_join_modify.ldif - Point out that account "dns" is s4 specific
2010-01-10 22:48:04 +01:00
Matthias Dieter Wallnöfer
9ee895fcf6
s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group
2010-01-10 22:48:04 +01:00
Matthias Dieter Wallnöfer
61dfd3dc1d
s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now
...
This belongs to the AD IIS stuff where I don't know yet if we should import it.
2010-01-10 11:07:16 +01:00
Matthias Dieter Wallnöfer
5c174c68cc
s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode
...
Additionally I had to fix some bugs (especially wrong "groupTypes") and
reordered the objects using the SID (this is easier when enhancing the file).
2010-01-10 10:50:46 +01:00
Andrew Tridgell
a3e089db19
s4-ldb: display security descriptors with correct SDL for known SIDs
...
This makes it much easier to compare SDs
2010-01-10 13:23:38 +11:00
Andrew Tridgell
d5091a1dd9
s4-dsdb: added samdb_domain_sid_cache_only()
2010-01-10 13:23:37 +11:00
Andrew Tridgell
c03a101e6d
s4-drs: instanceType is always sent, regardless of UDV values
2010-01-09 22:08:36 +11:00
Andrew Tridgell
a894eeab77
s4-debug: lower the verbosity of a couple of common log messages
2010-01-09 21:59:34 +11:00
Andrew Tridgell
93fefefea8
s4-samldb: fixed primaryGroupID when promoting a machine to a DC
...
The machine gets a primaryGroupID of DOMAIN_RID_DCS. This is done
without changing the member attributes of its groups.
2010-01-09 21:59:33 +11:00
Andrew Tridgell
8a09dc1266
s4-schema: fixed the SDDL for the schema root security descriptor
...
This was preventing a DCPROMO client from allowing outgoing
replication
2010-01-09 21:59:33 +11:00
Andrew Tridgell
45f49d0a58
s4-drs: add a local UDV entry even when no replUpToDateVector present on NC
...
This allows us to filter correctly for a NC that we have created but
not pulled from anyone.
2010-01-09 21:59:33 +11:00
Andrew Tridgell
b37bec8e06
s4-drs: give DN of failed replication partition
2010-01-09 21:59:32 +11:00
Andrew Tridgell
04e82370db
s4-drs: base is_nc_prefix on instanceType
...
for extended operations comparing to the ncRoot_dn is not correct
2010-01-09 18:56:30 +11:00
Andrew Tridgell
67d8518f2c
s4-drs: having no SPNs to change is not an error
2010-01-09 18:56:30 +11:00
Andrew Tridgell
ba745a4356
s4-drs: fixed writespn to ignore add/delete errors
...
When a SPN is added and already exists, it is ignored. Similarly, when
a SPN is deleted and doesn't exist, it is ignored.
2010-01-09 18:56:30 +11:00
Andrew Tridgell
8c2d7ae19e
s4-dsdb: added samdb_ldb_val_case_cmp()
2010-01-09 18:56:29 +11:00
Andrew Tridgell
acf33e0d58
s4-drs: moved the DsWriteAccountSpn call to its own file
2010-01-09 18:56:29 +11:00
Andrew Tridgell
8ccedc3ac7
s4-libnet: dsdb_wellknown_dn() in vampire code
2010-01-09 18:56:29 +11:00
Andrew Tridgell
1158c13861
s4-drs: need to set the getncchanges extended_ret on success too
2010-01-09 18:56:29 +11:00
Andrew Tridgell
7010fad4ea
s4-drs: calculate and send a uptodateness_vector with replication requests
...
This stops us getting objects changes twice if they came via an
indirect path.
2010-01-09 18:56:29 +11:00
Andrew Tridgell
39730ac302
s4-drs: be less verbose when we filter objects by UDV
2010-01-09 18:56:28 +11:00
Andrew Tridgell
349f7ba09c
s4-drs: added filtering by udv in getncchanges
...
When a client supplied an uptodateness_vector, we can use it to filter
what objects we return. This greatly reduces the amount of replication
traffic between DCs.
2010-01-09 13:11:27 +11:00
Andrew Tridgell
9e6eb22f7f
s4-drs: fixed the NC in the getncchanges RID alloc reply
...
the search happens on a different DN to the NC of the request, but the
reply is with the original NC
2010-01-09 10:15:14 +11:00
Andrew Tridgell
651ddb720a
s4-messaging: remove only usage of debug_ctx()
2010-01-09 10:15:13 +11:00
Andrew Tridgell
6a36799d30
s4-messaging: fixed a memory leak in messaging_path()
...
It is a bit convoluted to fix, as cluster_id_string() may return a
const string.
2010-01-09 10:15:12 +11:00
Andrew Tridgell
196cb6b359
s4-drs: fixed usage of ldb_dn_new()
2010-01-09 10:15:12 +11:00
Andrew Tridgell
39a4e2a38d
s4-ldb: validate the type of the ldb argument to ldb_dn_new()
...
It has been a common bug to get the first two arguments the wrong way
around
2010-01-09 10:15:12 +11:00
Simo Sorce
7eee8e053b
Fix comment
2010-01-08 17:01:02 -05:00
Matthias Dieter Wallnöfer
fca0c4de2a
s4:provision_self_join.ldif - Adapt comment after implementation of distributed RIDs
2010-01-08 18:18:21 +01:00
Andreas Schneider
0588f34467
s4-kdc: Migrate tcp connections to tsocket.
...
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-08 14:38:35 +01:00
Stefan Metzmacher
42c34cdafa
s4:kdc: use LIBSAMBA_TSOCKET
...
metze
2010-01-08 14:36:49 +01:00
Stefan Metzmacher
d97562b382
s4:kdc: the ->process function returns "bool"
...
metze
2010-01-08 14:36:49 +01:00
Stefan Metzmacher
bbaec01b37
libcli/util: add tstream_read_pdu_blob_send/recv
...
This will take the some full_request callback function
as the Samba4 packet code.
metze
2010-01-08 14:36:43 +01:00
Andrew Tridgell
8d87c0a0c3
s4-drs: added two more SPNs in addentry
...
w2k8r2 wants these after a DCPROMO
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:54 +11:00
Andrew Tridgell
ad11deb9bd
s4-schema: fixes for W2K8-R2 schema
...
The schema from WSPP had a number of typos that prevented it from
working. These changes allow it to work with Samba, and allow w2k8r2
to run DCPROMO against Samba successfully
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:54 +11:00
Andrew Tridgell
ebec49965b
s4-schema: added msDS-NcType to schema container
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
ce21151d22
s4-schema: fixed attributes of aggregate schema
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
38909a4ae5
s4-schema: switch to W2K8-R2 schema
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
d371b0eabe
s4-schema: added adminDisplayName and adminDescription
...
These are missing from the WSPP schemas
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
c93a182a0d
s4-schema: added some debug for bad attributes
2010-01-08 18:24:53 +11:00
Andrew Tridgell
9d296e6776
s4-provision: added W2K8-R2 schema as provided by WSPP
2010-01-08 18:24:52 +11:00