r24985: Start to revert us back to the old-style SWAT, while trying not to

loose some of the fixes in the meantime.

Andrew Bartlett
(This used to be commit 13acff5ed259e7b5859fd2324ea7740b8f9e5fd7)

5 files changed, 420 insertions, 0 deletions

diff --git a/swat/install/index.esp b/swat/install/index.esp
new file mode 100644
index 0000000000..73b7ea24d5
--- /dev/null
+++ b/swat/install/index.esp
@@ -0,0 +1,40 @@
+<% page_header("columns", "Server Installation", "install"); 
+
+if (session.authinfo.user_class == "ADMINISTRATOR"
+	 || session.authinfo.user_class == "SYSTEM") {
+
+%>
+
+<h1>Installation</h1>
+
+<p>Welcome to Samba4 installation. Before proceeding, you will need to
+know: </p>
+
+<ul>
+<li>The domain name you will use
+<li>The realm name you will use
+</ul>
+
+<p>After you have decided on those, choose the 'Provisioning' menu item
+on the left, and fill in the form.</p>
+
+<p><b>Warning!</b> When you provision, your existing user database is
+wiped and replaced with a new one.</p>
+
+<% 
+
+} else {
+
+%>
+
+<h1>Installation</h1>
+
+<p>To install Samba4, you must have logged in as <b>root</b>, or administrator of the previously configured domain. </p>
+
+<p><b>Warning!</b> When you provision, your existing user database is
+wiped and replaced with a new one. </p>
+
+<% 
+
+}
+page_footer(); %>
diff --git a/swat/install/newuser.esp b/swat/install/newuser.esp
new file mode 100644
index 0000000000..1b341ff665
--- /dev/null
+++ b/swat/install/newuser.esp
@@ -0,0 +1,50 @@
+<% page_header("columns", "Add a user", "install"); 
+
+  include("/scripting/forms.js");
+  libinclude("base.js");
+  libinclude("provision.js");
+%>
+
+<h1>Add a user</h1>
+
+<%
+var f = FormObj("newuser", 0, 2);
+var i;
+var rand = random_init();
+
+f.add("USERNAME", "User Name");
+f.add("UNIXNAME", "Unix Name");
+f.add("PASSWORD", "Password", "password");
+f.add("CONFIRM", "Confirm Password", "password");
+f.submit[0] = "Add";
+f.submit[1] = "Cancel";
+
+if (form['submit'] == "Cancel") {
+	redirect("/");
+}
+
+
+if (form['submit'] == "Add" && 
+    form.USERNAME != undefined) {
+	var goodpass = (form.CONFIRM == form.PASSWORD);
+
+	if (!goodpass) {
+		write("<h3>Passwords don't match.  Please try again.</h3>");
+		f.display();
+	} else {
+		if (form.UNIXNAME == undefined) {
+			form.UNIXNAME = form.USERNAME;
+		}
+		if (form.PASSWORD == undefined) {
+			form.PASSWORD = rand.randpass();
+		}
+		newuser(form.USERNAME, form.UNIXNAME, form.PASSWORD, writefln, 
+			session.authinfo.session_info, session.authinfo.credentials);
+	}
+} else {
+	f.display();
+}
+%>
+
+
+<% page_footer(); %>
diff --git a/swat/install/provision.esp b/swat/install/provision.esp
new file mode 100644
index 0000000000..6183722cb4
--- /dev/null
+++ b/swat/install/provision.esp
@@ -0,0 +1,89 @@
+<% page_header("columns", "Provisioning", "install"); 
+
+  include("/scripting/forms.js");
+  libinclude("base.js");
+  libinclude("provision.js");
+%>
+
+<h1>Samba4 provisioning</h1>
+
+<%
+var f = FormObj("Provisioning", 0, 2);
+var i;
+var lp = loadparm_init();
+
+if (session.authinfo.user_class == "ADMINISTRATOR"
+	 || session.authinfo.user_class == "SYSTEM") {
+
+	if (lp.get("realm") == "") {
+		lp.set("realm", lp.get("workgroup") + ".example.com");
+	}
+
+	var subobj = provision_guess();
+	/* Don't supply default password for web interface */
+	subobj.ADMINPASS = "";
+
+	f.add("REALM", "DNS Domain Name");
+	f.add("DOMAIN", "NetBIOS Domain Name");
+	f.add("HOSTNAME", "Hostname");
+	f.add("ADMINPASS", "Administrator Password", "password");
+	f.add("CONFIRM", "Confirm Password", "password");
+	f.add("DOMAINSID", "Domain SID");
+	f.add("HOSTIP", "Host IP");
+	f.add("DEFAULTSITE", "Default Site");
+	f.submit[0] = "Provision";
+	f.submit[1] = "Cancel";
+
+	if (form['submit'] == "Cancel") {
+		redirect("/");
+	}
+
+	if (form['submit'] == "Provision") {
+		for (r in form) {
+			subobj[r] = form[r];
+		}
+	}
+
+	for (i=0;i<f.element.length;i++) {
+		f.element[i].value = subobj[f.element[i].name];
+	}
+
+	if (form['submit'] == "Provision") {
+	
+        	/* overcome an initially blank smb.conf */
+		lp.set("realm", subobj.REALM);
+		lp.set("workgroup", subobj.DOMAIN);
+		lp.reload();
+		var goodpass = (subobj.CONFIRM == subobj.ADMINPASS);
+
+		if (!goodpass) {
+			write("<h3>Passwords don't match.  Please try again.</h3>");
+			f.display();
+		} else if (subobj.ADMINPASS == "") {
+			write("<h3>You must choose an administrator password.  Please try again.</h3>");
+			f.display();
+		} else if (!provision_validate(subobj, writefln)) {
+			f.display();
+		} else {
+			var paths = provision_default_paths(subobj);
+			if (!provision(subobj, writefln, false, paths, 
+				       session.authinfo.session_info, session.authinfo.credentials, false)) {
+				writefln("Provision failed!");
+			} else if (!provision_dns(subobj, writefln, paths,
+						  session.authinfo.session_info, session.authinfo.credentials)) {
+				writefln("DNS Provision failed!");
+			} else {
+				writefln("Provision Complete!");
+			}
+		}
+	} else {
+		f.display();
+	}
+} else {
+	redirect("/");
+}
+
+%>
+
+
+<% page_footer(); %>
diff --git a/swat/install/samba3.esp b/swat/install/samba3.esp
new file mode 100644
index 0000000000..c6fc9f1418
--- /dev/null
+++ b/swat/install/samba3.esp
@@ -0,0 +1,112 @@
+<% page_header("columns", "Upgrade", "install"); 
+
+ /* frontend to Samba3 upgrade.
+	Based on provision.esp
+	(C) Jelmer Vernooij 2005
+	Published under the GNU GPL
+  */
+
+  include("/scripting/forms.js");
+  libinclude("base.js");
+  libinclude("provision.js");
+  libinclude("upgrade.js");
+%>
+
+<h1>Import from Samba3</h1>
+
+<%
+if (session.authinfo.user_class == "ADMINISTRATOR"
+    || session.authinfo.user_class == "SYSTEM") {
+
+	if (form['submit'] == "Cancel") {
+		redirect("/");
+	}
+
+	function confirm_form()
+	{
+		var samba3 = samba3_read(form['LIBDIR'], form['SMBCONF']);
+
+		var subobj = upgrade_provision(samba3);
+		var f = FormObj("Import from Samba3", 0, 2);
+		subobj.ADMINPASS = "";
+
+		f.add("REALM", "Realm");
+		f.add("DOMAIN", "Domain Name");
+		f.add("HOSTNAME", "Hostname");
+		f.add("ADMINPASS", "Administrator Password", "password");
+		f.add("CONFIRM", "Confirm Password", "password");
+		f.add("DOMAINSID", "Domain SID");
+		f.add("HOSTGUID", "Host GUID");
+		f.add("HOSTIP", "Host IP");
+		f.add("DEFAULTSITE", "Default Site");
+
+		for (i=0;i<f.element.length;i++) {
+			f.element[i].value = subobj[f.element[i].name];
+		}
+
+		f.add("SMBCONF", "", "hidden", form['SMBCONF']);
+		f.add("LIBDIR", "", "hidden", form['LIBDIR']);
+
+		f.submit[0] = "Continue";
+		f.submit[1] = "Cancel";
+		f.display();	
+	}
+
+	if (form['submit'] == "Import") {
+		confirm_form();
+	} else if (form['submit'] == "Continue") {
+		var samba3 = samba3_read(form['LIBDIR'], form['SMBCONF']);
+		assert(samba3 != undefined);
+		var subobj = upgrade_provision(samba3);
+		for (r in form) {
+			subobj[r] = form[r];
+		}
+
+		var goodpass = (subobj.CONFIRM == subobj.ADMINPASS);
+
+		if (!goodpass) {
+			write("<h3>Passwords don't match.  Please try again.</h3>");
+			confirm_form();
+		} else if (subobj.ADMINPASS == "") {
+			write("<h3>You must choose an administrator password.  Please try again.</h3>");
+			confirm_form();
+		} else {
+			var paths = provision_default_paths(subobj);
+			if (!provision(subobj, writefln, true, paths, 
+				       session.authinfo.session_info, session.authinfo.credentials)) {
+				writefln("Provision failed!");
+			} else { 
+				var ret = upgrade(subobj,samba3,message,paths,
+						  session.authinfo.session_info, session.authinfo.credentials);
+				if (ret > 0) {
+					writefln("Failed to import %d entries\n", ret);
+				} else {
+					if (!provision_dns(subobj, writefln, paths,
+							   session.authinfo.session_info, session.authinfo.credentials)) {
+						writefln("DNS Provision failed!");
+					} else {
+						writefln("Reloading smb.conf\n");
+						var lp = loadparm_init();
+						lp.reload();
+						writefln("Upgrade Complete!");
+					}
+				}
+			}
+		}
+	} else {
+		var f = FormObj("Import from Samba3", 0, 2);
+
+		f.add("SMBCONF", "smb.conf file", "text", "/etc/samba/smb.conf");
+		f.add("LIBDIR", "Lib directory", "text", "/var/lib/samba");
+		f.submit[0] = "Import";
+		f.submit[1] = "Cancel";
+
+		write('<p>Warning: This will erase your current configuration!</p>');
+		f.display();
+	}
+} else {
+	redirect("/");
+}
+%>
+
+<% page_footer(); %>
diff --git a/swat/install/vampire.esp b/swat/install/vampire.esp
new file mode 100644
index 0000000000..d5b7a73c53
--- /dev/null
+++ b/swat/install/vampire.esp
@@ -0,0 +1,129 @@
+<% page_header("columns", "Windows to Samba Migration", "install"); 
+
+  include("/scripting/forms.js");
+  libinclude("base.js");
+  libinclude("provision.js");
+
+  var misc = misc_init();
+%>
+
+<h1>Windows to Samba4 domain migration</h1>
+
+<%
+var f = FormObj("Provisioning", 0, 2);
+var i;
+var lp = loadparm_init();
+
+if (session.authinfo.user_class == "ADMINISTRATOR"
+	 || session.authinfo.user_class == "SYSTEM") {
+
+	if (lp.get("realm") == "") {
+		lp.set("realm", lp.get("workgroup") + ".example.com");
+	}
+
+
+	var subobj = provision_guess();
+	/* Don't supply default password for web interface */
+	subobj.ADMINPASS = "";
+
+	f.add("REALM", "DNS Domain Name");
+	f.add("DOMAIN", "NetBIOS Domain Name");
+	f.add("ADMIN", "Administrator Username");
+	f.add("ADMINPASS", "Administrator Password", "password");
+	f.add("HOSTNAME", "My Hostname");
+	f.add("HOSTIP", "My Host's IP");
+	f.add("DEFAULTSITE", "Default Site");
+	f.submit[0] = "Migrate";
+	f.submit[1] = "Cancel";
+
+	if (form['submit'] == "Cancel") {
+		redirect("/");
+	}
+
+	if (form['submit'] == "Migrate") {
+		for (r in form) {
+			subobj[r] = form[r];
+		}
+	}
+	
+	for (i=0;i<f.element.length;i++) {
+		f.element[i].value = subobj[f.element[i].name];
+	}
+	
+	if (form['submit'] == "Migrate") {
+	       	/* overcome an initially blank smb.conf */
+		lp.set("realm", subobj.REALM);
+		lp.set("workgroup", subobj.DOMAIN);
+		lp.reload();
+
+		if (subobj.ADMINPASS == "") {
+			write("<h3>We need the administrator password for the " + subobj.DOMAIN + " domain to proceed.  Please try again.</h3>");
+			f.display();
+		} else if (!provision_validate(subobj, writefln)) {
+			f.display();
+		} else if (strupper(lp.get("server role")) == "domain controller") {
+			writefln("You need to set 'server role' to 'member server' before starting the migration process");
+		} else {
+			var creds = credentials_init();
+			var samdb;
+			creds.set_username(form.ADMIN);
+			creds.set_password(form.ADMINPASS);
+			creds.set_domain(form.DOMAIN);
+			creds.set_realm(form.REALM);
+
+			var info = new Object();
+			var paths = provision_default_paths(subobj);
+			var session_info = session.authinfo.session_info;
+			var credentials = session.authinfo.credentials;
+
+			info.credentials = credentials;
+			info.session_info = session_info;
+			info.message = writefln;
+			info.subobj = subobj;
+
+			/* Setup a basic database structure, but don't setup any users */
+			if (!provision(subobj, writefln, true, paths,
+				       session_info, credentials, false)) {
+				writefln("Provision failed!");
+
+				/* Join domain */
+			} else if (!join_domain(form.DOMAIN, form.HOSTNAME, misc.SEC_CHAN_BDC, creds, writefln)) {
+				writefln("Domain Join failed!");
+			
+				/* Vampire */
+			} else if (!vampire(form.DOMAIN, session.authinfo.session_info, 
+					    session.authinfo.credentials, writefln)) {
+				writefln("Failed to syncronsise remote domain into local database!");
+			} else if (!provision_dns(subobj, writefln, paths,
+						  session.authinfo.session_info, session.authinfo.credentials)) {
+				writefln("DNS Provision failed!");
+			} else if (!(samdb = open_ldb(info, paths.samdb, false))) {
+				writefln("Opening " + paths.samdb + " failed!");
+				info.samdb = samdb;
+			} else if (!setup_name_mappings(info, samdb)) {
+				writefln("Setup of name mappings failed!");			
+			} else {
+				var zonepath = paths.dns;
+				%>
+<h3>Database migrated!</h3>
+You need to do the following to complete the process:
+<ul>
+	<li>Install the <b>@@zonepath</b> zone file into your bind install, and restart bind
+	<li>Change your smb.conf to set "server role = domain controller"
+	<li>Shutdown your existing PDC and any other DCs
+	<li>Restart smbd
+</ul>
+<%
+			}
+		}
+	} else {
+		f.display();
+	}
+} else {
+	redirect("/");
+}
+
+%>
+
+
+<% page_footer(); %>