summaryrefslogtreecommitdiff
path: root/source4/scripting/python/samba/join.py
AgeCommit message (Collapse)AuthorFilesLines
2013-03-02Move python modules from source4/scripting/python/ to python/.Jelmer Vernooij1-1149/+0
Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sat Mar 2 03:57:34 CET 2013 on sn-devel-104
2012-10-11samba.join: Fix multiple spaces.Jelmer Vernooij1-1/+1
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Thu Oct 11 20:30:43 CEST 2012 on sn-devel-104
2012-10-07s4-join: factorize code, add infoMatthieu Patou1-5/+9
2012-10-07s4-join: add some documentationMatthieu Patou1-1/+11
2012-09-16s4-python: Formatting fixes, break lines.Jelmer Vernooij1-25/+26
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Sun Sep 16 15:58:04 CEST 2012 on sn-devel-104
2012-09-06join.py: Only replicate DNS zones if the source DC had DNS zonesAndrew Bartlett1-7/+18
This avoid folks needing to specify --dns-backend=NONE Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Sep 6 04:48:55 CEST 2012 on sn-devel-104
2012-08-04s4:domain join: setup RODC invocationIdStefan Metzmacher1-0/+26
Pair-Programmed-With: Björn Baumbach <bb@sernet.de> metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Aug 4 18:27:21 CEST 2012 on sn-devel-104
2012-07-06s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to ↵Andrew Bartlett1-10/+54
a DC This command is like dcpromo in that it upgrades the existing workstation account to be a domain controller. The SID (and therefore any file ownerships) is preserved. Andrew Bartlett
2012-06-24s4-join: Setup correct DNS configurationAndrew Bartlett1-1/+14
This means we do not need to run samba_upgradedns any more. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sun Jun 24 18:10:10 CEST 2012 on sn-devel-104
2012-06-25s4-join: Import DNS zones in AD DC joinAndrew Bartlett1-14/+45
2012-06-05Add '--use-ntvfs' option to 'samba-tool domain join'Andriy Syrovenko1-8/+9
2012-03-13s4-python: Remove env from non-executable samba scripts.Andreas Schneider1-2/+0
2012-02-26join: Don't print provision results when they're just noise.Jelmer Vernooij1-11/+9
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Feb 26 17:56:57 CET 2012 on sn-devel-104
2012-02-26provision: Leave result reporting up to caller.Jelmer Vernooij1-0/+1
2012-02-25Partially revert 1f0298dd1b1a939cb215e7b474178b217f8347f4Jelmer Vernooij1-2/+2
It's fine to catch keyboard interrupts and other kinds of errors when it's done just for resource management, where the error is reraised later. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Feb 25 17:29:34 CET 2012 on sn-devel-104
2012-02-13s4:join python code - "msDS-KeyVersionNumber" does not exist on Win2kMatthias Dieter Wallnöfer1-2/+6
No problem since "secretsdb_self_join()" then chooses 1 as a default value. Fix case sensitivity for "msDS-KeyVersionNumber". Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-02-09s4:join python code - perform a fallback password set operation over libnetMatthias Dieter Wallnöfer1-4/+18
Windows 2000 DCs allow LDAP password set operations only with the help of SSL. Given the fact that this technique is hard to setup it is easier to use SAMR over "libnet". Reviewed-By: Andrew Bartlett <abartlet@samba.org>
2012-02-09s4:join python code - write the SAM account name correctlyMatthias Dieter Wallnöfer1-2/+2
It is easier for the comprehension Reviewed-By: Andrew Bartlett <abartlet@samba.org>
2012-01-24python: Change except: statement to except Exception:Amitay Isaacs1-1/+1
This way we only catch true exceptions and keyboard interrupts are not caught here. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
2011-12-19s4-join: replicate first with DRS_CRITICAL_ONLY and DRS_GET_ANC objects for ↵Matthieu Patou1-0/+10
the base dn partition Windows dcpromo do the same: getncchanges with DRS_GET_ANC and DRS_CRITICAL_ONLY, then it does a getncchanges without those flags for the rest. Signed-off-by: Andrew Tridgell <tridge@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-12s4:python/samba/join: set msDS-Behavior-Version to '4' 2008_R2 on the nTDSA ↵Stefan Metzmacher1-1/+1
object This matches the values we set in provision. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Dec 12 19:16:13 CET 2011 on sn-devel-104
2011-12-05s4-python: factorize the definition of get_dsServiceNameMatthieu Patou1-5/+1
2011-11-29s4:python/samba/join.py: add optional 'machinepass' parameter to join_*()Stefan Metzmacher1-6/+12
metze
2011-11-29s4:python/samba/join.py: add optional 'machinepass' parameter to class dc_joinStefan Metzmacher1-2/+6
metze
2011-11-29s4-provision: Make BIND9_DLZ as the default backend for DNSAmitay Isaacs1-1/+1
2011-11-26s4:libnet/py_net.c: "py_net_finddc" - add an "address" parameterMatthias Dieter Wallnöfer1-1/+1
This is useful for a new "samba-tool domain info" command. Patch inspired by Matthieu Patou. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-15s4:join.py - fix typoMatthias Dieter Wallnöfer1-1/+1
2011-11-09s4:join.py - fix up "DsAddEntry" against Windows Server 2000Matthias Dieter Wallnöfer1-9/+18
It is important to consider the result level regarding error information. Windows 2000 seems to send us back v2, all other implementations v3. Consider post "Joining W2k AD domain" Reviewed-by: abartlet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 9 23:37:08 CET 2011 on sn-devel-104
2011-11-06Some formatting fixes, remove unused imports.Jelmer Vernooij1-6/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 6 06:22:33 CET 2011 on sn-devel-104
2011-11-01s4-join: Send ReplicaUpdateRefs at the end of the joinMatthieu Patou1-1/+19
2011-11-01s4-domain-join: do not add DFSR entries when joining, this should be done in ↵Matthieu Patou1-9/+0
the code handling DFSR replication
2011-10-17s4 provision: DNS backend should be set by callerKai Blin1-2/+4
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Mon Oct 17 09:51:12 CEST 2011 on sn-devel-104
2011-10-04s4-subdomain: create trust record with forest root DCAndrew Tridgell1-7/+33
when we create a sub-subdomain we need to use the forest naming master to setup the partition changes for the new subdomain. We also need to setup the trust with the forest root, as that allows us to create the needed _msdcs DNS entries in the forest Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 4 07:40:59 CEST 2011 on sn-devel-104
2011-10-04s4-join: enable cleanup on failed joinAndrew Tridgell1-1/+1
if a join fails, then cleanup the old records
2011-09-19s4-provision Add initial support for joining as a new subdomainAndrew Bartlett1-64/+86
To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
2011-09-13s4-subdomain: match windows form for trustAuthInOutBlobAndrew Tridgell1-11/+3
Windows does not put a version element in the array Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: fixed domain guid choice for subdomain joinAndrew Tridgell1-4/+13
We need to use the domain GUID that the server choose in the ncName link Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: don't delete account DN not created in subdomain joinAndrew Tridgell1-5/+8
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: use a password length of 128Andrew Tridgell1-1/+1
windows seems to use a fixed size for this password. It is possible that windows servers can only handle one size, given we have observed some strange behaviour from the windows kdc when we setup trusts Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-join: fixed non-subdomain joinAndrew Tridgell1-0/+2
these two vars need to be initialised for general join Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: fixed invocationID and hostIPs in subdomain joinAndrew Tridgell1-5/+15
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain more work on sub-domain joinAndrew Bartlett1-49/+267
we can now create a subdomain of an existing windows domain using: samba-tool domain join sub.domain.dns.name subdomain The ordering of the creation of the key records is quite tricky, especially for the NTDSDSA object Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2011-09-13s4-join Add a partitions DN when we join a subdomainAndrew Bartlett1-0/+16
2011-09-13s4-join supply the NTDS GUID to the provisionAndrew Bartlett1-1/+1
Unlike other join operations, the creation of a subdomain makes local changes to the DB, so we need to pass in the NTDS GUID to ensure the one set on the object created in the parent domain is the one that is used. Andrew Bartlett
2011-09-13s4-provision Add initial support for joining as a new subdomainAndrew Bartlett1-55/+117
To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
2011-08-25s4-join: fixed DNS hostnameAndrew Tridgell1-1/+1
we need the local hostname, not the remote name
2011-08-25s4-join: setup DNS forest name on join contextAndrew Tridgell1-4/+4
2011-08-12s4:py/samba/join: add domain_critical_only=False to join_DC/join_RODCStefan Metzmacher1-3/+10
metze Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-08-12s4-join: make dsServiceName a GUID in @ROOTDSE on joinAndrew Tridgell1-3/+5
when joining another domain as a DC we should setup our dsServiceName in @ROOTDSE to be a GUID so we can cope with later server renames Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-29samba-tool: use ldb.binary_encode() on search expression elementsAndrew Tridgell1-2/+2
this allows us to deal with search elements containing characters that must be escaped in LDAP Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>