summaryrefslogtreecommitdiff
path: root/source4/scripting/python
AgeCommit message (Collapse)AuthorFilesLines
2010-03-16Added a net acl ds command for modification of ACLs on directory objectsNadezhda Ivanova6-2/+242
At present the command supports only addition of control access rigts, done so DRS access checks can be tested. It will be expanded to deal with most ways to modify and view a DS ACL. Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed to this, which is "net acl ds" ./bin/net acl ds set --help Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn Options: -h, --help show this help message and exit --host=HOST LDB URL for database or target server --car=CAR The access control right to allow or deny --action=ACTION Deny or allow access --objectdn=OBJECTDN DN of the object whose SD to modify --trusteedn=TRUSTEEDN DN of the entity that gets access Samba Common Options: -s FILE, --configfile=FILE Configuration file Credentials Options: --simple-bind-dn=DN DN to use for a simple bind --password=PASSWORD Password -U USERNAME, --username=USERNAME Username -W WORKGROUP, --workgroup=WORKGROUP Workgroup -N, --no-pass Don't ask for a password -k KERBEROS, --kerberos=KERBEROS Use Kerberos
2010-03-16s4:dsdb Change dsdb_get_schema() callers to use new talloc argumentAndrew Bartlett1-2/+2
This choses an appropriate talloc context to attach the schema too, long enough lived to ensure it does not go away before the operation compleates. Andrew Bartlett
2010-03-12s4:provision.py - small output improvementMatthias Dieter Wallnöfer1-1/+1
2010-03-11s4:provision Improve the handling of provision errorsAndrew Bartlett2-11/+17
The backtraces were too confusing for our users, and didn't tell them what to do to fix the problem. By printing the string (rather than a backtrace), and including in the error what to do, and what file to remove, we give them a chance. Andrew Bartlett
2010-03-11s4:samba_dnsupdate Add a 'file based' mode to samba_dnsupdateAndrew Bartlett2-4/+5
For the testsuite to use DNS like names, we need to write these names to a file. Also, to have this run in 'make test' the usual rules about 'no 127.*' IP addresses in DNS must be skipped, so glue.interface_ips takes two arguments now
2010-03-05s4-python: only install external python libs that are missingAndrew Tridgell1-0/+12
2010-03-05s4-python: import a copy of the python dns libraryAndrew Tridgell114-0/+16829
This library is not installed on enough systems for us to rely on it being available. We use the system copy if possible, and fallback to this local copy Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-03-05s4-python: allow us to have samba copies of python libraries we depend onAndrew Tridgell1-0/+50
For python libraries like dns.resolver it is useful to be able to install a copy of the library with Samba. This set of functions allows us to do that while using the locally installed version if it is available Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-03-04s4:provision - use the new "interface_ips" python call to detect the right ↵Matthias Dieter Wallnöfer1-8/+8
host IPv4 address Inform the user when there are more possibilities (so he can check for the right address and otherwise he is able to do an immediate reprovision) and no possibility at all (then we fall back to the loopback address "127.0.0.1" - this is thought for testing purposes). I think this should be enough for closing bug #5484.
2010-03-02s4:provision - Moved default FDS SASL mappings deletion from post_setup() to ↵Endi S. Dewata1-7/+0
init(). Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02s4:provision - Moved setup_db_config() into OpenLDAPBackend class.Endi S. Dewata1-16/+16
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02s4:provision - Moved backend-specific variables into backend class.Endi S. Dewata2-75/+60
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02s4:provision - Use netbios name for FDS instance name.Endi S. Dewata1-3/+5
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-01Fix the build, add filtered subunit runner.Jelmer Vernooij1-1/+1
2010-03-01More formatting fixes, pointed out by pylint.Jelmer Vernooij8-44/+51
2010-03-01python: Add 'make pylint' convenience rule.Jelmer Vernooij1-0/+5
2010-03-01General cleanups of python code, hinted by pyflakes.Jelmer Vernooij14-152/+124
2010-03-01Add 'pyflakes' rule.Jelmer Vernooij1-0/+5
2010-03-01ntacl: Use existing infrastructure.Jelmer Vernooij2-27/+27
2010-03-01Remove __contains__ from mock object for consistency with actualJelmer Vernooij1-3/+0
implementation.
2010-03-01Fix SharesContainer.__len__.Ricardo Jorge1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01More formatting fixes.Jelmer Vernooij1-16/+10
2010-03-01Fix formatting.Jelmer Vernooij1-172/+174
2010-03-01upgradeprovision: Remove unused imports, use shutil.rmtree rather thanJelmer Vernooij1-30/+11
rmall.
2010-03-01upgradeprovision: Move to pythondoc formatMatthieu Patou1-9/+33
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01upgradeprovision: code cleanupMatthieu Patou1-6/+7
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01upgradeprovision: split the big script to put reusable functions appartMatthieu Patou1-0/+220
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-02-26s4:provision: use generate_random_password()Stefan Metzmacher1-5/+5
metze
2010-02-26s4:pyglue: add generate_random_password()Stefan Metzmacher1-2/+22
metze
2010-02-26s4-provision: fixed use of rndc command from pythonAndrew Tridgell1-1/+1
rndc command is now a list
2010-02-26s4-provision: also create the dns_update_list when running net vampireAndrew Tridgell1-0/+10
We need the list when joining a windows domain, so we can automatically maintain the right DNS entries on the Windows DNS server
2010-02-26s4-provision: setup the dns_update_list at provision timeAndrew Tridgell1-0/+5
This file is substituted at runtime by samba_dnsupdate
2010-02-26s4-provision: if we aren't doing variable substitution then don't check for varsAndrew Tridgell1-1/+1
2010-02-26samdb: added get_ntds_GUID() methodAndrew Tridgell2-0/+39
2010-02-26py-samdb: added server_site_name methodAndrew Tridgell1-0/+3
2010-02-26pyglue: added py_samdb_server_site_name()Andrew Tridgell1-0/+29
2010-02-26py-samdb: added get_invocation_id() methodAndrew Tridgell1-0/+5
2010-02-26pyglue: added py_samdb_ntds_invocation_id()Andrew Tridgell1-0/+36
2010-02-26pyglue: don't return 127.0.0.0/8 IPs in interface_ips()Andrew Tridgell1-5/+18
We don't generally want loopback addresses in the python code
2010-02-24python: ntacls, fix a leftover that is not in the try/except branchMatthieu Patou1-1/+0
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-23s4-pyglue: added interface_ips() callAndrew Tridgell1-0/+43
This allows a python script to query the internal network interface lists from Samba
2010-02-21s4:provision.py - try to use other addresses than "127.0.0.x" and "::1"Matthias Dieter Wallnöfer1-2/+10
On production systems a user for sure strongly disagrees to use local IP addresses (how should the server be accessible?). Therefore if the user didn't specify an IP as provision option and in the "/etc/hosts" file we have at least one not-local IP which resolves to our hostname use this or one of them. Notice: if a host has more public IP addresses with the same name assigned the behaviour is non-deterministic (well, okay - by the entries order it is). But then the user is invited to specify the host IP manually. This should address bug #5484.
2010-02-17s4-provision: freeze the DNS zone before creating the zone fileAndrew Tridgell1-2/+10
This prevents bind from getting confused if it has a journal for the zone.
2010-02-17s4-provision: fix permissions on generated DNS zone fileAndrew Tridgell1-9/+11
The zone file needs to be writeable by bind to allow for it to flush its journal on dynamic updates Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-15s4-drs: Function for accessing dsdb_load_partition_usn from PythonFernando J V da Silva1-0/+50
Returns both uSNHighest and uSNUrgent as a dict object in Python from a given partition dn. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-12s4:getopt.py - set the password callback only when no password has been providedMatthias Dieter Wallnöfer1-4/+6
Previously the "no_pass" and "no_pass2" variables weren't handled correctly. Since at the initialisation of the "CredentialsOptions" we don't have any password at all. Only afterwards we could get one through "set_password". If a password is specified, use it. If no password is specified, consider the use fo an input mask on STDOUT. But if the loadparm context contains one prefer it over the input.
2010-02-12s4-provision: import the R2 functional levelAndrew Tridgell1-1/+1
this makes it easier to modify the script to set us at R2 level in provision. We should make this a parameter.
2010-02-12s4-build: avoid finding python symlinksAndrew Tridgell1-1/+1
emacs creates symlinks to .py files while you are editing them. This could cause build failures.
2010-02-11provision: Use short name for assignee of ACE (BA, SA, CO, ...)Matthieu Patou1-8/+6
Use short name (shortcut for wellknown SID/RID) for assignee in each entry of ACL (when possible) of sysvol files (GPO objects and netlogon folders). This avoid error prone substitution of DOMAINSID in ACL and make ACL clearer by using shortname for assignee accordingly with SDDL synthax rules. Translation to real SID is handled internaly by the from_sddl function. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11python-s4: use secrets.ldb instead of sam.ldb for reading domain SIDMatthieu Patou1-2/+2
This allow to be able to run net acl set xxx yyy on DC, but also on domain member. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
generated by cgit (git 2.34.1) at 2024-07-24 13:07:30 +0000