summaryrefslogtreecommitdiff
path: root/source4/scripting/libjs/provision.js
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r22478: Update the LDAP backend code to handle initialisation of multipleAndrew Bartlett1-3/+39
partitions onto the target LDAP server. Make the LDAP provision run before smbd starts, then stop the LDAP server. This ensures this occurs synchronously, We then restart it for the 'real run' (with slapd's stdin being the FIFO). This required fixing a few things in the provision scripts, with more containers being created via a add/modify pair. Andrew Bartlett (This used to be commit 860dfa4ea1ab2b62d4d4fe0644e0a9b882fdafa1)
2007-10-10r21513: I don't know how long this has been wrong, but fix this up so we canAndrew Bartlett1-1/+1
re-provision (as is required for the TEST_LDAP=yes version of make test). Andrew Bartlett (This used to be commit ea4c2ea22fb3975d80130f52edecaf6d1790adde)
2007-10-10r21351: Change ldb ejs bindings return codes.Simo Sorce1-54/+59
We were returning just true/false and discarding error number and string. This checking probably breaks swat, will fix it in next round as swat is what made me look into this as I had no way to get back error messages to show to the users. Simo. (This used to be commit 35886b4ae68be475b0fc8b2689ca04d766661261)
2007-10-10r21294: this is useless, now that there's no operation in between...Stefan Metzmacher1-7/+0
metze (This used to be commit 838d307e6ca0740bc330a5ebc46b95f3181a5c14)
2007-10-10r21135: Instead of having hooks to update keytabs as an explicit thing, updateAndrew Bartlett1-11/+6
them as a hook on ldb modify, via a module. This should allow the secrets.ldb to be edited by the admin, and to have things update in the on-disk keytab just as an in-memory keytab would. This isn't really a dsdb plugin, but I don't have any other good ideas about where to put it. Andrew Bartlett (This used to be commit 6ce557a1aff4754d2622be8f1c6695d9ee788d54)
2007-10-10r20953: add templates in provision_become_dc()Stefan Metzmacher1-0/+3
metze (This used to be commit 306ea74f85c8cd0df767a25c45304cb33410e03c)
2007-10-10r20922: use the show_deleted module by defaultStefan Metzmacher1-0/+1
metze (This used to be commit edc37501d6ecdaf7b13006b732914e21ae0be657)
2007-10-10r20806: make it possible to configure the secrets.ldb urlStefan Metzmacher1-1/+18
via "secrets database = my_secrets.ldb" metze (This used to be commit a096a9741597105140845f59e54a76060da0010b)
2007-10-10r20805: don't use hardcoded values for secrects.keytab and sam.ldbStefan Metzmacher1-3/+8
metze (This used to be commit c78e345feaef607b9297372aacb00ec068127785)
2007-10-10r20683: load indexes before applying replicated objects,Stefan Metzmacher1-0/+3
as for every object the repl_meta_data module needs to look up the object by objectGUID metze (This used to be commit 55f845377ce3a7aeb028805754dc9c05d429548e)
2007-10-10r20575: apply records to the test_samdb.ldb (my birthday present to myself...:-)Stefan Metzmacher1-0/+3
we need to modify some modules to only handle originating changes... metze (This used to be commit 0f387d58e69a6ee806fea02229ef8fa030f2918d)
2007-10-10r20572: - prepare a test_samdb.ldb in the NET-API-BECOME-DC torture testStefan Metzmacher1-12/+47
- we call a ejs script from the torture test for this task so that we can use the provision template ldif's. metze (This used to be commit e84b0c7d4004df312ae58ed76dd708a2c3c37986)
2007-10-10r20568: split out the rootdse ldifStefan Metzmacher1-0/+10
and set the isSyncronized = TRUE when we done metze (This used to be commit 5875ce1ac6ff694d07787ff0cf81b3429580311b)
2007-10-10r20565: configure the list of global ldb modules also in js codeStefan Metzmacher1-2/+25
metze (This used to be commit cbebe559a2563a3ab9dd2e002c79676a803b71a4)
2007-10-10r20560: make it possible to configure the backend and modulesStefan Metzmacher1-6/+11
for all partitions and make it not use LDAP in the variable names because it isn't specific to the ldap backend case. metze (This used to be commit 3e337ec2764038e4ff05c3e926220abaa5583702)
2007-10-10r20557: use ${DOMAINDN} instead of ${BASEDN}Stefan Metzmacher1-14/+14
metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-10-10r20555: fix typo...Stefan Metzmacher1-1/+1
metze (This used to be commit 09622f01227093b4b351fcc79fe29d5b2f388376)
2007-10-10r20554: - use ${ROOTDN} for the rootDomainNamingContextStefan Metzmacher1-1/+2
- the ${CONFIGDN} is a child of the ${ROOTDN} metze (This used to be commit ebbd8a83c982efdc58e53798d1fd191f08731005)
2007-10-10r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded pathsStefan Metzmacher1-0/+2
under ${BASEDN} metze (This used to be commit 09ca6aae12d8e10b76971cf269f7c62f228a4c87)
2007-10-10r20505: I had the wrong ldif name here.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 5781d0f41ac1847c38ebda290f5e85423dd20186)
2007-10-10r20495: Further notes on joining with fedora DS.Andrew Bartlett1-0/+1
Add in a hook for adding an ACI, needed to allow anonymous access until we hook across a SYSTEM token to the LDAP server. Andrew Bartlett (This used to be commit f45504e2714680978f101b4a98516686a17531df)
2007-10-10r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.Andrew Bartlett1-0/+1
Add a new module entrypoint to handle the new, interesting and different mappings required for Fedora DS. Andrew Bartlett (This used to be commit 600c7f1a68c175b835ce45d13794a6f66bcc8493)
2007-10-10r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to loadAndrew Bartlett1-7/+38
into an exsting LDAP server. (Allow some parts to pre-exist, and try to blow away less data). Andrew Bartlett (This used to be commit 99faff0ad8fa12d596c599064a0125a6b3365134)
2007-10-10r19427: print out the currect nameStefan Metzmacher1-1/+1
metze (This used to be commit 0fcdc8c243f50da5a1203370740ac8d022a5cfdc)
2007-10-10r19334: Commit commented provisioning code to activate the schemaSimo Sorce1-0/+32
(This used to be commit 57ee79c15579d1bbe7c0d3202b84a06b75320e40)
2007-10-10r19318: Because we don't test the vampire code in SWAT very regularly, it ↵Andrew Bartlett1-2/+4
bit-rotted. Fix up interfaces and interaction between the two.. Andrew Bartlett (This used to be commit 9b77d285d8cd8999547c0d17e97681d236acbdb0)
2007-10-10r19258: Don't delete the contents of the partitions twice, and in particularAndrew Bartlett1-17/+6
don't delete their contents until we have specified the new partition locations. However, preserve the important part of tridge's change, that is to ensure that no database index is present when the mass delete occours. In my testing, it is best to leave the index until the provision is compleated. Andrew Bartlett (This used to be commit 962219df7dc53ce6f6889f4b71ee19850c7ff7b5)
2007-10-10r19252: - fixed 'erase' argument to setup_ldb()Andrew Tridgell1-2/+21
- when wiping a ldb, wipe within each naming context first. By not wiping the naming contexts we didn't wipe the partitions, which caused a massive slowdown in re-provisioning due to re-indexing of the schema. (This used to be commit b62437214cf7c98c81598c4f37c91ab284928dbb)
2007-10-10r19216: Merge from SAMBA_4_0_RELEASE:Andrew Bartlett1-0/+1
Move default for subobj.LDAPMODULES into scripting/libjs/provision.js so that SWAT can provision again. Andrew Bartlett (This used to be commit a4aafe307d6d1396fa79b0c48b0a36cbf682f0ce)
2007-10-10r18977: Seperate these asserts, so we know which fired.Andrew Bartlett1-1/+2
Andrew Bartlett (This used to be commit 9b2003618b28cb045e74937803e9aad773781803)
2007-10-10r18880: JSON-RPC work in progressDerrell Lipman1-1/+1
(This used to be commit 34bffbaebf50c2a75c91285d5ec82e8f377981cc)
2007-10-10r18334: AIX 5.1 doesn't have any of 'users', 'guest', 'other' or 'unknown'Andrew Tridgell1-1/+1
it does have 'usr' (This used to be commit 96db975024a744f42a0418e379df1da6c4079fe6)
2007-10-10r18248: Bail out with a error message if this search fails for some reason.Andrew Bartlett1-0/+4
Andrew Bartlett (This used to be commit 77b810f548fffc1298978cc92c842f5e4fc13786)
2007-10-10r18072: Really delete things in the base partition, after we changed where theAndrew Bartlett1-4/+3
default search scope points to. Andrew Bartlett (This used to be commit 1a111817a361faab04e73b666624ce554f000034)
2007-10-10r17982: One final hack...Andrew Bartlett1-0/+3
When against a real, schema-checking LDAP backend, we need extensibleObject on the baseDN entry (as entryUUID isn't run for creating this basic ldif) output. (This used to be commit befac43f59c4688f6c6827eb2e4e916c1056a740)
2007-10-10r17876: Require one less patch for the LDAP backend to work.Andrew Bartlett1-4/+21
This lets the modules or backend generate the host and domain GUID, rather than the randguid() function. These can still be specified from the command line. Andrew Bartlett (This used to be commit 32996ca9d62568006f8bee85a1f2f37c64c04fb5)
2007-10-10r17704: Add comments suggesting how to get the LDAP backend working.Andrew Bartlett1-3/+23
Shutdown and reload the LDB, so the entryUUID module knows to read the schema (will be changed once we have a central schema store and notifications). Andrew Bartlett (This used to be commit d5814b689eedfc4c4701beb18a516db716a466f1)
2007-10-10r17534: Try another group for 'wheel' on True64.Andrew Bartlett1-1/+1
(This used to be commit 177b713288be9c5d559a27d65e16521cbeefc958)
2007-10-10r17499: Open the main database only the minimum times during a provision.Andrew Bartlett1-84/+62
This causes things to operate as just one transaction (locally), and to make a minimum of TCP connections when connecting to a remote LDAP server. Taking advantage of this, create another file to handle loading the Samba4 specific schema extensions. Also comment out 'middleName' and reassign the OID to one in the Samba4 range, as it is 'stolen' from a netscape range that is used in OpenLDAP and interenet standards for 'ref'. Andrew Bartlett (This used to be commit 009d0905947dec9bab81d8e6de5cb424807ffd35)
2007-10-10r17330: Enable the partitions module.Andrew Bartlett1-1/+4
This module redirects various samdb requests into different modules, depending on the prefix. It also makes moving to an LDAP backend easier, as it is just a different partition backend. This adds yet another stage to the provision process, as we must setup the partitions before we setup the magic attributes. Andrew Bartlett (This used to be commit 31225b9cb6ef6fcb7bd831043999b1b44ef1b128)
2007-10-10r17206: Add a modular API for share configuration.Simo Sorce1-0/+7
Commit the classic backwards compatible module which is the default one (This used to be commit a89cc346b9296cb49929898d257a064a6c2bae86)
2007-10-10r16265: Fix 'newuser' command.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 82f5f6c03d005741613c5b00705613c4078c844e)
2007-10-10r16264: Add, but do not yet enable, the partitions module.Andrew Bartlett1-19/+150
This required changes to the rootDSE module, to allow registration of partitions. In doing so I renamed the 'register' operation to 'register_control' and 'register_partition', which changed a few more modules. Due to the behaviour of certain LDAP servers, we create the baseDN entry in two parts: Firstly, we allow the admin to export a simple LDIF file to add to their server. Then we perform a modify to add the remaining attributes. To delete all users in partitions, we must now search and delete all objects in the partition, rather than a simple search from the root. Against LDAP, this might not delete all objects, so we allow this to fail. In testing, we found that the 'Domain Controllers' container was misnamed, and should be 'CN=', rather than 'OU='. To avoid the Templates being found in default searches, they have been moved to CN=Templates from CN=Templates,${BASEDN}. Andrew Bartlett (This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2007-10-10r16063: Make is clearer when we can't write to the smb.confAndrew Bartlett1-5/+8
Find more possible posix group names for the 'domain users' group, as the existing options don't exist in OSX. Andrew Bartlett (This used to be commit 4e8d7b7fb310a668ae8653bc06036c94249b2b2a)
2007-10-10r15077: map SID_BUILTIN_USERSStefan Metzmacher1-0/+1
metze (This used to be commit e896c32614fd4fd80a124ccfe49332e319f717f9)
2007-10-10r14200: Now we have real USN support, don't force the values in the provisionAndrew Bartlett1-16/+0
scripts. This tests the real module, and avoids duplication. Andrew Bartlett (This used to be commit 0859ba59ae00029177cd63366fc59efe8b19c973)
2007-10-10r13369: let's have a way to show the samba4 version through ejsSimo Sorce1-1/+1
and use it in provisioning to fullfill rfc 3045 requirements (This used to be commit 3fb9571a76481560304a826fc945983d52123299)
2007-10-10r13102: fixed the vampire code to correctly setup foreign sids and defaultAndrew Tridgell1-21/+35
unix name mappings (This used to be commit dc74d8ccf15b9324cd8b90ef9d41cf293b9de8e3)
2007-10-10r13098: make check for workgroup and realm case insensitiveAndrew Tridgell1-2/+2
(This used to be commit 0cacd69dd57254cb1b51ad7969993bc24bae86c7)
2007-10-10r13097: move the creation of the default sam name -> unix name mappings intoAndrew Tridgell1-6/+75
the main provision logic, so it can also be used as part of the vampire process (This used to be commit 95e90169f4e5887ee88116179d96f28f9e06796e)
generated by cgit (git 2.34.1) at 2024-12-26 12:53:13 +0000