diff options
Diffstat (limited to 'swat2/install')
-rw-r--r-- | swat2/install/index.esp | 40 | ||||
-rw-r--r-- | swat2/install/newuser.esp | 50 | ||||
-rw-r--r-- | swat2/install/provision.esp | 90 | ||||
-rw-r--r-- | swat2/install/samba3.esp | 112 | ||||
-rw-r--r-- | swat2/install/vampire.esp | 130 |
5 files changed, 422 insertions, 0 deletions
diff --git a/swat2/install/index.esp b/swat2/install/index.esp new file mode 100644 index 0000000000..4ba581c1fd --- /dev/null +++ b/swat2/install/index.esp @@ -0,0 +1,40 @@ +<% page_header("columns", "Server Installation", "install"); + +if ((session.authinfo.user_class == "ADMINISTRATOR") + || (session.authinfo.user_class == "SYSTEM")) { + +%> + +<h1>Installation</h1> + +<p>Welcome to Samba4 installation. Before proceeding, you will need to +know: </p> + +<ul> +<li>The domain name you will use +<li>The realm name you will use +</ul> + +<p>After you have decided on those, choose the 'Provisioning' menu item +on the left, and fill in the form.</p> + +<p><b>Warning!</b> When you provision, your existing user database is +wiped and replaced with a new one.</p> + +<% + +} else { + +%> + +<h1>Installation</h1> + +<p>To install Samba4, you must have logged in as <b>root</b>, or administrator of the previously configured domain. </p> + +<p><b>Warning!</b> When you provision, your existing user database is +wiped and replaced with a new one. </p> + +<% + +} +page_footer(); %> diff --git a/swat2/install/newuser.esp b/swat2/install/newuser.esp new file mode 100644 index 0000000000..1b341ff665 --- /dev/null +++ b/swat2/install/newuser.esp @@ -0,0 +1,50 @@ +<% page_header("columns", "Add a user", "install"); + + include("/scripting/forms.js"); + libinclude("base.js"); + libinclude("provision.js"); +%> + +<h1>Add a user</h1> + +<% +var f = FormObj("newuser", 0, 2); +var i; +var rand = random_init(); + +f.add("USERNAME", "User Name"); +f.add("UNIXNAME", "Unix Name"); +f.add("PASSWORD", "Password", "password"); +f.add("CONFIRM", "Confirm Password", "password"); +f.submit[0] = "Add"; +f.submit[1] = "Cancel"; + +if (form['submit'] == "Cancel") { + redirect("/"); +} + + +if (form['submit'] == "Add" && + form.USERNAME != undefined) { + var goodpass = (form.CONFIRM == form.PASSWORD); + + if (!goodpass) { + write("<h3>Passwords don't match. Please try again.</h3>"); + f.display(); + } else { + if (form.UNIXNAME == undefined) { + form.UNIXNAME = form.USERNAME; + } + if (form.PASSWORD == undefined) { + form.PASSWORD = rand.randpass(); + } + newuser(form.USERNAME, form.UNIXNAME, form.PASSWORD, writefln, + session.authinfo.session_info, session.authinfo.credentials); + } +} else { + f.display(); +} +%> + + +<% page_footer(); %> diff --git a/swat2/install/provision.esp b/swat2/install/provision.esp new file mode 100644 index 0000000000..c6511adb66 --- /dev/null +++ b/swat2/install/provision.esp @@ -0,0 +1,90 @@ +<% page_header("columns", "Provisioning", "install"); + + include("/scripting/forms.js"); + libinclude("base.js"); + libinclude("provision.js"); +%> + +<h1>Samba4 provisioning</h1> + +<% +var f = FormObj("Provisioning", 0, 2); +var i; +var lp = loadparm_init(); +if ((session.authinfo.user_class == "ADMINISTRATOR") + || (session.authinfo.user_class == "SYSTEM")) { + + if (lp.get("realm") == "") { + lp.set("realm", lp.get("workgroup") + ".example.com"); + } + + var subobj = provision_guess(); + /* Don't supply default password for web interface */ + subobj.ADMINPASS = ""; + + f.add("REALM", "DNS Domain Name"); + f.add("DOMAIN", "NetBIOS Domain Name"); + f.add("HOSTNAME", "Hostname"); + f.add("ADMINPASS", "Administrator Password", "password"); + f.add("CONFIRM", "Confirm Password", "password"); + f.add("DOMAINSID", "Domain SID"); + f.add("HOSTIP", "Host IP"); + f.add("DEFAULTSITE", "Default Site"); + f.submit[0] = "Provision"; + f.submit[1] = "Cancel"; + + if (form['submit'] == "Cancel") { + redirect("/"); + } + + if (form['submit'] == "Provision") { + for (r in form) { + subobj[r] = form[r]; + } + } + + for (i=0;i<f.element.length;i++) { + f.element[i].value = subobj[f.element[i].name]; + } + + if (form['submit'] == "Provision") { + + /* overcome an initially blank smb.conf */ + lp.set("realm", subobj.REALM); + lp.set("workgroup", subobj.DOMAIN); + lp.reload(); + var goodpass = (subobj.CONFIRM == subobj.ADMINPASS); + + var paths = provision_default_paths(subobj); + provision_fix_subobj(subobj, paths); + + if (!goodpass) { + write("<h3>Passwords don't match. Please try again.</h3>"); + f.display(); + } else if (subobj.ADMINPASS == "") { + write("<h3>You must choose an administrator password. Please try again.</h3>"); + f.display(); + } else if (!provision_validate(subobj, writefln)) { + f.display(); + } else { + if (!provision(subobj, writefln, false, paths, + session.authinfo.session_info, session.authinfo.credentials, false)) { + writefln("Provision failed!"); + } else if (!provision_dns(subobj, writefln, paths, + session.authinfo.session_info, session.authinfo.credentials)) { + writefln("DNS Provision failed!"); + } else { + writefln("Provision Complete!"); + } + } + } else { + f.display(); + } +} else { + redirect("/"); +} + +%> + + +<% page_footer(); %> diff --git a/swat2/install/samba3.esp b/swat2/install/samba3.esp new file mode 100644 index 0000000000..4de942f972 --- /dev/null +++ b/swat2/install/samba3.esp @@ -0,0 +1,112 @@ +<% page_header("columns", "Upgrade", "install"); + + /* frontend to Samba3 upgrade. + Based on provision.esp + (C) Jelmer Vernooij 2005 + Published under the GNU GPL + */ + + include("/scripting/forms.js"); + libinclude("base.js"); + libinclude("provision.js"); + libinclude("upgrade.js"); +%> + +<h1>Import from Samba3</h1> + +<% +if ((session.authinfo.user_class == "ADMINISTRATOR") + || (session.authinfo.user_class == "SYSTEM")) { + + if (form['submit'] == "Cancel") { + redirect("/"); + } + + function confirm_form() + { + var samba3 = samba3_read(form['LIBDIR'], form['SMBCONF']); + + var subobj = upgrade_provision(samba3); + var f = FormObj("Import from Samba3", 0, 2); + subobj.ADMINPASS = ""; + + f.add("REALM", "Realm"); + f.add("DOMAIN", "Domain Name"); + f.add("HOSTNAME", "Hostname"); + f.add("ADMINPASS", "Administrator Password", "password"); + f.add("CONFIRM", "Confirm Password", "password"); + f.add("DOMAINSID", "Domain SID"); + f.add("HOSTGUID", "Host GUID"); + f.add("HOSTIP", "Host IP"); + f.add("DEFAULTSITE", "Default Site"); + + for (i=0;i<f.element.length;i++) { + f.element[i].value = subobj[f.element[i].name]; + } + + f.add("SMBCONF", "", "hidden", form['SMBCONF']); + f.add("LIBDIR", "", "hidden", form['LIBDIR']); + + f.submit[0] = "Continue"; + f.submit[1] = "Cancel"; + f.display(); + } + + if (form['submit'] == "Import") { + confirm_form(); + } else if (form['submit'] == "Continue") { + var samba3 = samba3_read(form['LIBDIR'], form['SMBCONF']); + assert(samba3 != undefined); + var subobj = upgrade_provision(samba3); + for (r in form) { + subobj[r] = form[r]; + } + + var goodpass = (subobj.CONFIRM == subobj.ADMINPASS); + + if (!goodpass) { + write("<h3>Passwords don't match. Please try again.</h3>"); + confirm_form(); + } else if (subobj.ADMINPASS == "") { + write("<h3>You must choose an administrator password. Please try again.</h3>"); + confirm_form(); + } else { + var paths = provision_default_paths(subobj); + if (!provision(subobj, writefln, true, paths, + session.authinfo.session_info, session.authinfo.credentials)) { + writefln("Provision failed!"); + } else { + var ret = upgrade(subobj,samba3,message,paths, + session.authinfo.session_info, session.authinfo.credentials); + if (ret > 0) { + writefln("Failed to import %d entries\n", ret); + } else { + if (!provision_dns(subobj, writefln, paths, + session.authinfo.session_info, session.authinfo.credentials)) { + writefln("DNS Provision failed!"); + } else { + writefln("Reloading smb.conf\n"); + var lp = loadparm_init(); + lp.reload(); + writefln("Upgrade Complete!"); + } + } + } + } + } else { + var f = FormObj("Import from Samba3", 0, 2); + + f.add("SMBCONF", "smb.conf file", "text", "/etc/samba/smb.conf"); + f.add("LIBDIR", "Lib directory", "text", "/var/lib/samba"); + f.submit[0] = "Import"; + f.submit[1] = "Cancel"; + + write('<p>Warning: This will erase your current configuration!</p>'); + f.display(); + } +} else { + redirect("/"); +} +%> + +<% page_footer(); %> diff --git a/swat2/install/vampire.esp b/swat2/install/vampire.esp new file mode 100644 index 0000000000..77e9959de3 --- /dev/null +++ b/swat2/install/vampire.esp @@ -0,0 +1,130 @@ +<% page_header("columns", "Windows to Samba Migration", "install"); + + include("/scripting/forms.js"); + libinclude("base.js"); + libinclude("provision.js"); + + var misc = misc_init(); +%> + +<h1>Windows to Samba4 domain migration</h1> + +<% +var f = FormObj("Provisioning", 0, 2); +var i; +var lp = loadparm_init(); + +if ((session.authinfo.user_class == "ADMINISTRATOR") + || (session.authinfo.user_class == "SYSTEM")) { + + if (lp.get("realm") == "") { + lp.set("realm", lp.get("workgroup") + ".example.com"); + } + + + var subobj = provision_guess(); + /* Don't supply default password for web interface */ + subobj.ADMINPASS = ""; + + f.add("REALM", "DNS Domain Name"); + f.add("DOMAIN", "NetBIOS Domain Name"); + f.add("ADMIN", "Administrator Username"); + f.add("ADMINPASS", "Administrator Password", "password"); + f.add("HOSTNAME", "My Hostname"); + f.add("HOSTIP", "My Host's IP"); + f.add("DEFAULTSITE", "Default Site"); + f.submit[0] = "Migrate"; + f.submit[1] = "Cancel"; + + if (form['submit'] == "Cancel") { + redirect("/"); + } + + if (form['submit'] == "Migrate") { + for (r in form) { + subobj[r] = form[r]; + } + } + + for (i=0;i<f.element.length;i++) { + f.element[i].value = subobj[f.element[i].name]; + } + + if (form['submit'] == "Migrate") { + /* overcome an initially blank smb.conf */ + lp.set("realm", subobj.REALM); + lp.set("workgroup", subobj.DOMAIN); + lp.reload(); + + if (subobj.ADMINPASS == "") { + write("<h3>We need the administrator password for the " + subobj.DOMAIN + " domain to proceed. Please try again.</h3>"); + f.display(); + } else if (!provision_validate(subobj, writefln)) { + f.display(); + } else if (strupper(lp.get("server role")) == "domain controller") { + writefln("You need to set 'server role' to 'member server' before starting the migration process"); + } else { + var creds = credentials_init(); + var samdb; + creds.set_username(form.ADMIN); + creds.set_password(form.ADMINPASS); + creds.set_domain(form.DOMAIN); + creds.set_realm(form.REALM); + + var info = new Object(); + var paths = provision_default_paths(subobj); + var session_info = session.authinfo.session_info; + var credentials = session.authinfo.credentials; + + provision_fix_subobj(subobj, paths); + + info.session_info = session_info; + info.message = writefln; + info.subobj = subobj; + + /* Setup a basic database structure, but don't setup any users */ + if (!provision(subobj, writefln, true, paths, + session_info, credentials, false)) { + writefln("Provision failed!"); + + /* Join domain */ + } else if (!join_domain(form.DOMAIN, form.HOSTNAME, misc.SEC_CHAN_BDC, creds, writefln)) { + writefln("Domain Join failed!"); + + /* Vampire */ + } else if (!vampire(form.DOMAIN, session.authinfo.session_info, + session.authinfo.credentials, writefln)) { + writefln("Failed to syncronsise remote domain into local database!"); + } else if (!provision_dns(subobj, writefln, paths, + session.authinfo.session_info, session.authinfo.credentials)) { + writefln("DNS Provision failed!"); + } else if (!(samdb = open_ldb(info, paths.samdb, false))) { + writefln("Opening " + paths.samdb + " failed!"); + info.samdb = samdb; + } else if (!setup_name_mappings(info, samdb)) { + writefln("Setup of name mappings failed!"); + } else { + var zonepath = paths.dns; + %> +<h3>Database migrated!</h3> +You need to do the following to complete the process: +<ul> + <li>Install the <b>@@zonepath</b> zone file into your bind install, and restart bind + <li>Change your smb.conf to set "server role = domain controller" + <li>Shutdown your existing PDC and any other DCs + <li>Restart smbd +</ul> +<% + } + } + } else { + f.display(); + } +} else { + redirect("/"); +} + +%> + + +<% page_footer(); %> |