summaryrefslogtreecommitdiff
path: root/source4/scripting
AgeCommit message (Collapse)AuthorFilesLines
2012-05-30s4-provision: Use the s3fs file server by default in migrationsAndrew Bartlett1-1/+1
This covers both migrations from s3 and joining a domain as a new DC. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 30 14:57:22 CEST 2012 on sn-devel-104
2012-05-29s4:dbchecker - handle the "none" case correctlyMatthias Dieter Wallnöfer1-1/+1
This means that *no* fixing will be done, also the first possible one will be omitted as well. Reviewed-by: abartlet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue May 29 21:36:25 CEST 2012 on sn-devel-104
2012-05-27Avoid all(), as it's not available in Python 2.4.Jelmer Vernooij1-1/+5
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun May 27 16:13:34 CEST 2012 on sn-devel-104
2012-05-24s4/scripting: in MIT build do not install samba-tool, it is not usable yetAlexander Bokovoy2-7/+4
2012-05-23Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy2-9/+15
System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
2012-05-23s4: samba-tool is usable without export-keytab command, make sure it does ↵Alexander Bokovoy1-19/+22
not break When export_keytab is not compiled in (pure client-side Samba 4 build as with system MIT krb5), export-keytab command of samba-tool will not be available. Make sure it is not provided but its absence does not break the Python tool.
2012-05-15samba-upgradedns: Use the correct magic incantation of sys.path.insert()Amitay Isaacs1-1/+1
This replaces "bin/python" with the correct path for python libraries. The pattern requires double quotes (") instead of single quotes ('). Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 15 05:19:46 CEST 2012 on sn-devel-104
2012-05-10When listing group members allow fallback to cn attribute when ↵Lukasz Zalewski1-2/+5
samAccountName is not available
2012-05-08s4-provision Ensure we have posix ACLs before we permit a s3fs-based Samba4 ↵Andrew Bartlett1-0/+14
to be configured
2012-05-06s4-s3-upgrade: Max/min password age policy is in seconds, not daysAndrew Bartlett1-2/+2
This cases upgraded domains to have a too-long password expiry, which in extreme cases can cause the KDC to misfunction. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun May 6 14:49:39 CEST 2012 on sn-devel-104
2012-05-03provision: remove reference to no longer existing template files.Jelmer Vernooij1-7/+5
2012-05-03s4-samba-tool: make new samba-tool group listmembers use samAccountNameAndrew Bartlett2-4/+4
This is the unique username value. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu May 3 01:57:41 CEST 2012 on sn-devel-104
2012-05-03s4-s3upgrade: Force ldapsam:trusted = yesAndrew Bartlett1-0/+3
While this setting is not the default in Samba3, any domain that is in a suitable condition to upgrade to Samba4 should already be in the layout that ldapsam:trusted uses. It can be turned off by setting ldapsam:trusted=false in the smb.conf. Many upgrades to Samba4 happen on a different host to the old Samba3 domain and this avoids the need to configure nss_ldap only for the duration of the upgrade. Andrew Bartlett
2012-05-03Extension to the samba-tool group subcommand functionality to allow listing ↵Lukasz Zalewski2-0/+85
of the members of an AD group
2012-05-03s4-s3upgrade: Try harder to get group memberships on upgradeAndrew Bartlett1-5/+20
This fixes an issue where some group types were not upgraded, as we did not upgrade alias memberships. It also uses enum_group_memberships() to try and find the memberships from the other direction, by asking which groups a user is a member of. As Samba3 (and NT4) does not implement nested groups, this should be safe. Andrew Bartlett
2012-05-02s4-provision: Fix up --use-s3fs to create the directory for xattr.tdbAndrew Bartlett1-4/+8
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 2 04:45:05 CEST 2012 on sn-devel-104
2012-05-02s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'Andrew Bartlett1-1/+1
The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services. Andrew Bartlett
2012-05-01s4-upgradedns: Update serverdn with only the attributes that have changedAmitay Isaacs1-11/+21
This fixes the issue of ldb 'Operations Error' when trying to modify hasPartialReplicaNCs attribute. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 1 05:28:04 CEST 2012 on sn-devel-104
2012-04-24s4-s3upgrade: print the error message from passdb.error exceptionsAndrew Bartlett1-6/+6
This gives more information on why a group membership lookup failed. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Apr 24 04:34:44 CEST 2012 on sn-devel-104
2012-04-19s4-python: Ensure we handle the no-eadb case for system xattrs in get/setntaclAndrew Bartlett1-0/+1
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 19 20:51:16 CEST 2012 on sn-devel-104
2012-04-19Added number of FSMO roles owned by the server we are trying to demote.Daniele Dario1-1/+1
2012-04-19waf: Fix mispellingSimo Sorce1-1/+1
Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Apr 19 17:36:41 CEST 2012 on sn-devel-104
2012-04-19samba_spnupdate: don't try to register DNS related SPN if we are not ↵Matthieu Patou1-1/+24
mastering the NC For RW DC the impact is pretty small but for RODC the whole SPN set is rejected by the target DC as RODC hasn't the right to register DNS SPN if it is not mastering this NC.
2012-04-19dbcheck: Add a check that every FSMO role has a valid ownerAndrew Bartlett1-0/+41
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 19 07:49:54 CEST 2012 on sn-devel-104
2012-04-19s4-samba-tool: Fix samba-tool fsmo seizeAndrew Bartlett2-46/+51
This is currently untested, and a restructure broke it. Andrew Bartlett
2012-04-19s4-s3upgrade: Do not ever set a domain-wide maxPwdAge of 0Andrew Bartlett1-1/+1
This means no-expiry in s3, and so we must treat it like -1. Andrew Bartlett
2012-04-19s4-s3upgrade: Ignore (with warning) groups that are listed but we cannot ↵Andrew Bartlett1-2/+14
list members for
2012-04-18dbcheck: added fix for incorrect RMD_FLAGSAndrew Tridgell1-0/+35
this fixes the case where a DN link has RMD_FLAGS=0 for a link inside a deleted object Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 18 09:19:41 CEST 2012 on sn-devel-104
2012-04-18s4:dbchecker.py - integrate the "objectClass" fixing codeMatthias Dieter Wallnöfer1-0/+27
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2012-04-18s3fs: Use xattr_tdb format for xattr storageAndrew Bartlett1-9/+16
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 18 05:39:01 CEST 2012 on sn-devel-104
2012-04-18s4-python: Add python wrapper for xattr_tdb format xattr storageAndrew Bartlett1-13/+23
This uses the format used by the vfs_xattr_tdb module. The s4 posix:eadb format is kept, just in a new file and module. Andrew Bartlett
2012-04-17s4:ldapcmp.py: pass down outf and errfStefan Metzmacher1-12/+29
Not all classes are derived from class 'Command'. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Apr 17 10:06:47 CEST 2012 on sn-devel-104
2012-04-16Add an option to have s3fs as file server for samba4Matthieu Patou1-8/+19
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
2012-04-16s4-provision: Update configuration lines for dlz_bind9Amitay Isaacs1-3/+1
This adds configuration lines for BIND versions 9.8.x and 9.9.x. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 16 03:52:14 CEST 2012 on sn-devel-104
2012-04-12s4-libnet: split export_keytab in a separate python module to avoid pulling ↵Alexander Bokovoy1-0/+1
in HDB dependency Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Thu Apr 12 15:23:19 CEST 2012 on sn-devel-104
2012-04-02s4-upgradedns: Fix the fqdn for forest dns zoneAmitay Isaacs1-1/+1
Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 2 10:56:10 CEST 2012 on sn-devel-104
2012-03-28s4-upgradedns: Make sure the attribute exists before accessing itAmitay Isaacs1-4/+8
Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Mar 28 10:27:40 CEST 2012 on sn-devel-104
2012-03-26LDB/s4 - do not use the "(dn=...)" syntax on filters anymoreMatthias Dieter Wallnöfer8-26/+27
Make it AD-compatible using "(distinguishedName=...)". Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-03-21s4-samba-tool: add password verification in change user passBjörn Baumbach1-1/+5
Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Mar 21 17:43:35 CET 2012 on sn-devel-104
2012-03-21s4-samba-tool: add password verification in add userBjörn Baumbach1-0/+4
Signed-off-by: Michael Adam <obnox@samba.org>
2012-03-21s4-upgradedns: Add DNS partitions in msDS-hasMasterNCs in NTDS settingsAmitay Isaacs1-0/+40
Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Mar 21 03:16:22 CET 2012 on sn-devel-104
2012-03-21s4-upgradedns: Allow fixing of dns provision after domain joinAmitay Isaacs1-39/+56
This change allows samba_upgradedns script to be run even on existing dns provision (DLZ_BIND9 or SAMBA_INTERNAL) without any side effects. This allows to "fix" dns provision after samba-tool domain join for running BIND with DLZ plugin.
2012-03-19s4:selftest: add test for "samba-tool group list"Michael Adam1-0/+22
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Mar 19 02:30:39 CET 2012 on sn-devel-104
2012-03-18s4:samba-tool: add simple command "group list"Michael Adam1-0/+33
2012-03-18s4:selftest: add a new testsuite for the "samba-tool group" commandMichael Adam1-0/+128
2012-03-17upgrade provision didn't run findprovisionrange anymoreMatthieu Patou1-8/+13
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Mar 17 09:51:46 CET 2012 on sn-devel-104
2012-03-17Rewrite findprovisionrange to use factorized functionsMatthieu Patou1-98/+4
2012-03-17Factorize code from findprovisionusnranges in order to solve bug #8504Matthieu Patou1-2/+124
2012-03-16s4:samba-tool: remove remains of patch conflict resolutionMichael Adam1-1/+0
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Fri Mar 16 19:13:32 CET 2012 on sn-devel-104
2012-03-15samba.tests.source: Verify that only executable python files (and only ↵Jelmer Vernooij1-1/+20
executable files) have a shebang line.
generated by cgit (git 2.34.1) at 2024-11-17 20:49:10 +0000