summaryrefslogtreecommitdiff
path: root/source4/scripting
AgeCommit message (Collapse)AuthorFilesLines
2010-01-10s4:upgradeprovision - fix up the script regarding linked attributesMatthias Dieter Wallnöfer1-12/+46
We have to try to add new objects until between two iterations we didn't make any progress. Either we are then done (no objects remaining) or we are incapable to do this fully automatically. The latter can happen if important system objects (builtin groups, users...) moved (e.g. consider one of my recent comments). Then the new object can't be added if it contains the same "sAMAccountName" attribute as the old one. We have to let the user delete the old one (also to give him a chance to backup personal changes - if needed) and only then the script is capable to add the new one onto the right place. Make this clear with an exhaustive error output. I personally don't see a good way how to do this better for now so I would leave this as a manual step.
2010-01-10s4:upgradeprovision - Reformat commentsMatthias Dieter Wallnöfer1-28/+44
Make them break at line 80 (better readability).
2010-01-09s4-schema: fixed the SDDL for the schema root security descriptorAndrew Tridgell1-10/+14
This was preventing a DCPROMO client from allowing outgoing replication
2010-01-08s4-schema: switch to W2K8-R2 schemaAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added adminDisplayName and adminDescriptionAndrew Tridgell1-0/+2
These are missing from the WSPP schemas Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-scripting: we need to use a base search for the NTDS GUIDAndrew Tridgell1-1/+1
now we have nTDSConnections structures we can get more than 1 reply
2010-01-08s4-provision: do a self join for all server typesAndrew Tridgell1-22/+17
We need a machine account so the RID allocation code can work. It seems better to use the same code paths for a domain controller and standalone server to avoid testing headaches with little used code.
2010-01-08s4-devel: a useful script to setup bin/ and st/ as tmpfs filesystemsAndrew Tridgell1-0/+13
this makes building and testing s4 as a developer much faster, if you have enough memory!
2010-01-08s4-provision: re-open sam.ldb after creating the schemaAndrew Tridgell1-0/+9
This enables the full schema during the rest of the provision, which means indexing is enabled (along with index error checking, such as duplicate SIDs)
2010-01-08s4-provision: don't hard wire the creation of the RID Set objectAndrew Tridgell1-2/+2
We now create it automatically in the samldb module when the first user is created. The creation of the dns user also had to move to the _modify.ldif as it now relies on the fSMO role being setup for the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-provision: allow provision modifies to add recordsAndrew Tridgell1-1/+4
we need to recognise a changetype of 'add'
2010-01-08s4-provision: the DC object itself needs a fixed objectSIDAndrew Tridgell1-0/+1
We can't allocate a objectSID until we have rIDSetReferences, but that is in the DC object, so we have to force the objectSID of the DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-31s4-net: fixed pwsettings commandAndrew Tridgell1-6/+6
Don't override user settings with current settings
2009-12-31samba: Fix whitespace, remove pointless 'pass' statement.Jelmer Vernooij1-27/+26
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31pyldb: Add dom_sid.split in favor of less powerful dom_sid_to_rid().Jelmer Vernooij2-32/+0
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31net: Support 'super' commands implemented in Python.Jelmer Vernooij1-14/+15
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31net: Move 'newuser' to 'net newuser'Jelmer Vernooij2-5/+80
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31net: Fix tests and documentation of setexpiry.Jelmer Vernooij3-0/+68
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31net: Move setexpiry to 'net setexpiry'Jelmer Vernooij2-0/+73
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-31net: Move 'setpassword' to 'net setpassword'.Jelmer Vernooij3-2/+86
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-29python: When updating sys.path to include the Samba python path, avoid ↵Jelmer Vernooij2-4/+41
throwing away the changes made by site.py.
2009-12-29s4/net: Allow options before arguments for Python commands.Jelmer Vernooij1-1/+2
2009-12-29s4/net: Pass all arguments through to the Python commands.Jelmer Vernooij1-5/+6
2009-12-29s4/net: Add domainlevel subcommand.Jelmer Vernooij3-26/+275
2009-12-29Use CommandError exception to deal with problems during net commands.Jelmer Vernooij2-20/+34
2009-12-29s4/net: Make pwsettings a net subcommand.Jelmer Vernooij1-0/+187
2009-12-29netcmd: Add some basic tests.Jelmer Vernooij1-0/+34
2009-12-29s4/net: Support parsing arguments in Python commands.Jelmer Vernooij1-3/+61
2009-12-29net: Support usage/help of subcommands implemented in Python.Jelmer Vernooij1-0/+4
2009-12-29net: Support implementing subcommands in python.Jelmer Vernooij1-0/+33
2009-12-21s4-provision: added a note about where invocationIDs come fromAndrew Tridgell1-0/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-12-18s4-scripts: add a enablerecyclebin scriptAndrew Tridgell1-0/+54
This can be used to enable the recyclebin on a windows box. Once we properly implement this feature in samba we will use this to enable the feature on ourselves as well.
2009-12-18s4:provision Give a more useful error message in guess_namesAndrew Bartlett1-3/+11
The problem here is that as we start to get 'real users' they still decide to do silly things, like load empty but existing smb.conf files. Let's give them a better chance to discover what they did wrong. Andrew Bartlett
2009-12-15s4: rename res/res2 to something more explicitMatthieu Patou1-71/+68
2009-12-15s4: upgradeprovision handle renaming and knownobjectsMatthieu Patou1-6/+18
2009-12-15s4: upgradeprovision rename also when there is a mismatch on the case of ↵Matthieu Patou1-2/+7
name attribute Renaming not only helps when name attribute is not here it also helps when the case is not the good one. So in order to avoid problem and have as much as possible similar provision we should use the rename whenever a name difference appear.
2009-12-15s4: reorder action to permit old provision to be correctly upgradedMatthieu Patou1-5/+8
2009-12-14s4-devel: support vampire_ad.sh with no initial smb.confAndrew Tridgell1-1/+4
2009-12-08s4-drs: use -r to ldbdel in unvampire devel scriptAndrew Tridgell1-4/+3
This ensures we delete any nTDSConnection objects
2009-12-01s4: Remove targetdir as it can cause some trouble and can be replaced by an ↵Matthieu Patou1-3/+1
adapted -s smb.conf Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01s4: Handle the case in secrets.ldb without name attributeMatthieu Patou1-5/+25
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01s4: don't forget to update defaultSecurityDescriptorMatthieu Patou1-2/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01s4: load the domain level of the current provision and create a provision ↵Matthieu Patou2-3/+9
with the same domain level Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-11-28s4:upgrade_from_s3 - Move it back to "setup"Matthias Dieter Wallnöfer1-86/+0
Suggested by Jelmer
2009-11-28s4:upgrade.py - remove my copyrightMatthias Dieter Wallnöfer1-1/+0
First I wanted to add also other changes but then I didn't introduce them. Therefore remove my copyright again.
2009-11-28s4:upgrade.py - readd accidentally removed empty linesMatthias Dieter Wallnöfer1-0/+4
Jelmer pointed out that this is against the PEP8 norm
2009-11-28s4:samba3.py/upgrade.py: RevertMatthias Dieter Wallnöfer3-10/+9
This reverts commit 2175c0ed0649d545ea833d50e8d33fbee9051c35. This reverts commit 6c3e2417a0639cd7c367de93615c422cf5217456. This reverts commit dbb8989e05ac3189a5eca11fa40d572388ea02fc. This reverts commit 82adfa39b75aa628c88f828278c6ac09335d1a49. This reverts commit f299efa8f05c6a5b739222bdf75690a4591d3650. After a small discussion with Jelmer we agreed that this isn't the right way to fix the problem. We should wait for a real patch rather to rely on temporal hacks.
2009-11-28s4: fix SD update and password change in upgrade scriptMatthieu Patou3-88/+96
- reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-11-27s4:provision.py - remove hardcoded SIDs and RIDsMatthias Dieter Wallnöfer1-3/+3
After rework of the SDDL modules this is possible. In future: Never hardcode them anymore! Always use the abbreviations.
2009-11-27s4:samba3.py - deactivate also the assertion on line 599Matthias Dieter Wallnöfer1-1/+1