Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-11-02 | s4:provision Split ProvisionBackend out of the main provision script | Andrew Bartlett | 3 | -590/+631 | |
This splits the code, while keeping the original behaviour. The provision.py file had become just too long. Andrew Bartlett | |||||
2009-11-02 | s4:provision Inline 'ldap_backend_shutdown' for clarity | Andrew Bartlett | 1 | -15/+15 | |
2009-11-02 | s4:provision Fix samdb test with new provision code | Andrew Bartlett | 1 | -3/+12 | |
2009-11-02 | s4:provision Move 'Schema' into it's own file | Andrew Bartlett | 3 | -120/+155 | |
2009-11-02 | s4:provision Make 'linked_attributes' and 'dnsyntax_attributes' a property ↵ | Andrew Bartlett | 1 | -17/+33 | |
of the Schema | |||||
2009-11-02 | s4:provision Rework provision to always have a ProvisionBackend | Andrew Bartlett | 1 | -165/+188 | |
Rather than treat the LDAP backend as a special case, treat all backends the same, with different callbacks. Andrew Bartlett | |||||
2009-11-02 | s4 - SID allocation using FDS DNA plugin | Endi S. Dewata | 1 | -7/+32 | |
2009-11-02 | s4:dsdb - Fixed attribute dereferencing for FDS | Endi S. Dewata | 1 | -2/+2 | |
2009-10-25 | s4-python: fixed annoyance where control-C doesn't kill our python scripts | Andrew Tridgell | 1 | -0/+10 | |
We want our scripts to die immediately when a user hits control-C. Otherwise we not only annoy the hell out of the user, we also risk db corruption as the control-C could get delivered as an exception which gets mis-interpreted (eg. as a missing db object). We use transactions for all our databases, so the right thing to do in all our command line tools is to die immediately. | |||||
2009-10-23 | s4-python: we need to include Python.h first | Andrew Tridgell | 3 | -3/+3 | |
If we don't include Python.h first then we get a pile of warnings due to broken redefines of XOPEN_SOURCE in the Python includes. | |||||
2009-10-23 | s4:dsdb Split schema loading and schema data management | Andrew Bartlett | 1 | -2/+3 | |
By splitting the module this way, we can load the schema at startup, after the partitions module is operational, but we leave the 'mess with details of entries in the partitions' module to operate only on the partitions module. Loading the schema later allows us to set the @ATTRIBUTES correctly on all the databases. Andrew Bartlett | |||||
2009-10-22 | s4:provision - Reintroduce accidentally removed parameters and checks from ↵ | Matthias Dieter Wallnöfer | 1 | -13/+38 | |
"guess_names" abartlet pointed out that those are essential for a safe and consistent provision. | |||||
2009-10-21 | s4:provision - rework the "guess_names" and "make_smbconf" method | Matthias Dieter Wallnöfer | 1 | -37/+18 | |
- Cleans it up from unnecessary "lower()/upper()" and parameters which can be derived through "lp" calls. - Substitute the "HOSTNAME" caption in the "smb.conf" templates with "NETBIOS_NAME" which fits better. - Now the "realm" and "domain" parameter of the provision are totally case insensitive and the script itself up/downcases them appropriately depending on the use (e.g. "realm" upcase for KERBEROS, lowcase for DNS domainname). | |||||
2009-10-21 | s4:provision - important fix for DNS domainname: lower realm | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2009-10-21 | s4:provision Use schema to casefold partitions on 'upgrade'. | Andrew Bartlett | 1 | -8/+20 | |
This helps us upgrade from sam.ldb files before the dynamic partitions work, and ensures we use the right casefolding functions. Andrew Bartlett | |||||
2009-10-21 | s4:Handle reprovision with existing partitions | Andrew Bartlett | 1 | -3/+20 | |
The issue here is that if we don't put the partitions metadata in the database before we wipe it, we won't wipe the partitions contents, and so the provision will later fail (entry already exists) Andrew Bartlett | |||||
2009-10-21 | s4:provision Set @OPTIONS in the provision_init.ldif | Andrew Bartlett | 1 | -3/+0 | |
The new partitions code knows to copy these items in when creating a new parition, so we can set it from the start. Andrew Bartlett | |||||
2009-10-21 | s4:dsdb Rework modules create new partitions at runtime | Andrew Bartlett | 1 | -13/+7 | |
This is done by passing an extended operation to the partitions module to extend the @PARTITION record and to extend the in-memory list of partitions. This also splits things up into module parts that belong above and below repl_meta_data Also slit the partitions module into two files due to the complexity of the code Andrew Barltett | |||||
2009-10-17 | s4-provision: added the default privileges db | Andrew Tridgell | 1 | -0/+21 | |
privileges are now stored in a separate database | |||||
2009-10-16 | s4:provision - fixed invalid creationTime format | Endi S. Dewata | 1 | -2/+2 | |
2009-10-16 | s4:provision - replaced linked_attributes with FDS plugins | Endi S. Dewata | 1 | -3/+54 | |
When FDS is used as a backend, Samba should not use the linked_attributes LDB module, but instead use the built-in DS plugins for attribute linking, indexing, and referential integrity. | |||||
2009-10-12 | s4:provision.py - simplify the "realm" variable handling a bit | Matthias Dieter Wallnöfer | 1 | -6/+5 | |
(Remove unneeded "upper"s) | |||||
2009-10-12 | s4:provision Remove all references to samba4LocalDomain | Andrew Bartlett | 1 | -6/+1 | |
This was a bad idea all along, as Simo said at the time. With the full MS schema and enforcement of it, it is an even worse idea. This fixes the provision of the member server in 'make test' Andrew Bartlett | |||||
2009-10-12 | s4:provision Clarify that we set, rather than modify, objectGUID values | Andrew Bartlett | 1 | -6/+6 | |
2009-10-06 | s4:provision Remove unused parameters from provision scripts | Andrew Bartlett | 1 | -6/+4 | |
2009-10-02 | s4:provision - Cosmetic - right indentations | Matthias Dieter Wallnöfer | 1 | -5/+6 | |
2009-10-02 | s4:dsdb rework instanceType module - put instanceType in provision | Andrew Bartlett | 1 | -4/+5 | |
The instanceType needs to be specified in future because that's how the partitions are actually created. | |||||
2009-10-02 | s4:dsdb Add 'lazy_commit' module to swallow the 'lazy commit' OID | Andrew Bartlett | 1 | -0/+1 | |
This allows this control to be specified as critical. We support the control because we choose to always be durable in our transactions. We really, really need a 'duplicate request' API, as at the moment we can't do this without a large, error-prone set of code that cannot cope with new request fields or types. Andrew Bartlett | |||||
2009-10-02 | s4:provision Ensure we add the schema with the 'relax' control | Andrew Bartlett | 1 | -2/+4 | |
(allows addition of systemOnly classes) | |||||
2009-10-02 | s4: Improve provisioning: use relax control | Matthieu Patou | 2 | -18/+22 | |
Give the possibility to specify controls when loading ldif files. Relax control is specified by default for all ldb_add_diff (request Andrew B). Set domainguid if specified at the creation of object instead of modifying afterward Allow to specify objectGUID for NTDS object of the first DC this option is used during provision upgrade. | |||||
2009-10-02 | s4:provision - Change the default forest/domain function level back to ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Windows 2003 Native | |||||
2009-09-30 | s4:samba.tests.samdb - remove last relicts of the templates | Matthias Dieter Wallnöfer | 1 | -4/+2 | |
2009-09-30 | s4:provision - Lets the user choose between the supported forest/domain ↵ | Matthias Dieter Wallnöfer | 1 | -10/+23 | |
function levels Adds a parameter "--function-level" which allows to specify the domain and forest function level. | |||||
2009-09-26 | samba.tests.provision: Remove broken become_dc test. | Jelmer Vernooij | 1 | -25/+1 | |
2009-09-24 | Add init file for DCE/RPC tests. | Jelmer Vernooij | 1 | -0/+20 | |
2009-09-24 | PEP8 | Jelmer Vernooij | 6 | -3/+6 | |
2009-09-24 | Revert "s4:python fixed subunit tests of dcerpc" | Jelmer Vernooij | 6 | -0/+0 | |
This reverts commit ffd48a79ee34dc90c0f6f16564c3a0de8b53d3d2. | |||||
2009-09-21 | Initial Implementation of the DS objects access checks. | Nadezhda Ivanova | 1 | -0/+1 | |
Currently disabled. The search will be greatly modified, also the object tree stuff will be simplified. | |||||
2009-09-21 | Merge branch 'master' of git://git.samba.org/samba | Nadezhda Ivanova | 2 | -29/+92 | |
2009-09-21 | s4:kerberos Fix the salt to match Windows 2008. | Andrew Bartlett | 1 | -1/+1 | |
The previous commit changed the wrong end - we must fix our server, not our client. Andrew Bartlett | |||||
2009-09-21 | s4:provision Make our default salt match our server behaviour | Andrew Bartlett | 1 | -1/+1 | |
We need to look into salting algorithms further. Andrew Bartlett | |||||
2009-09-21 | s4:provision - Fix up ProvisioningError class as suggested by Jelmer | Matthias Dieter Wallnöfer | 1 | -5/+5 | |
2009-09-21 | s4:samdb/tools - That should fix now the last failures | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2009-09-20 | s4:provision Make us Windows 2008 level by defualt again | Andrew Bartlett | 1 | -4/+5 | |
Also add a note to clarify that this should not be changed without discussion and consensus. We don't want this bouncing around. Paramater support to allow optional selection of Win2003 mode welcomed. Andrew Bartlett | |||||
2009-09-20 | Merge branch 'master' of git://git.samba.org/samba | Nadezhda Ivanova | 1 | -12/+14 | |
2009-09-20 | s4:provision Use code to store domain join in 'net join' as well | Andrew Bartlett | 1 | -23/+80 | |
This ensures we only have one codepath to store the secret, and therefore that we have a single choke point for setting the saltPrincipal, which we were previously skipping. Andrew Bartlett | |||||
2009-09-20 | s4:provision split provision of DNS zone and self join keytab | Andrew Bartlett | 1 | -4/+10 | |
2009-09-20 | Initial implementation of security descriptor creation in DS | Nadezhda Ivanova | 1 | -5/+44 | |
TODO's: ACE sorting and clarifying the inheritance of object specific ace's. | |||||
2009-09-20 | s4:python tools - try to fix some test problems | Matthias Dieter Wallnöfer | 1 | -12/+14 | |
2009-09-20 | Fixed a difference in domain sid type when SID is provided by user. | Nadezhda Ivanova | 1 | -1/+4 | |