summaryrefslogtreecommitdiff
path: root/source4/scripting
AgeCommit message (Collapse)AuthorFilesLines
2008-09-08Make it clear that the MMR password can differ from the admin passswordAndrew Bartlett1-6/+8
In the future, we might simply randomly generate this, or allow the admin to specify it seperate to the admin password. However, both are highly sensitive, as they imply read access to the krbtgt. Andrew Bartlett (This used to be commit 57d19ad002c523fb9a09694e6710ab7f588d44ec)
2008-09-08Use DIGEST-MD5 authentication for OpenLDAP replicationOliver Liebel1-0/+12
This avoids passing rootdn passwords or replicated data in cleartext across the network. Signed-of-by: Andrew Bartlett <abartlet@samba.org> (This used to be commit 67373c143a1d8a9f310fd116dbf81c1dd123b75f)
2008-09-04Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-testAndrew Tridgell2-5/+18
(This used to be commit c273d63f94c430a4f553085efb0d6e31a99e5853)
2008-09-03Regenerate SWIG file.Jelmer Vernooij3-12/+32
(This used to be commit e8ba65c4db986fcedf7008d05d8f8846f78a98f1)
2008-09-03Avoid using version call for version string.Jelmer Vernooij1-4/+3
(This used to be commit 1897cef508c8bea817c510bd9023d794cb983864)
2008-08-30Add a setexpiry operation in samdb.pyAndrew Tridgell4-10/+123
This makes it easy to set the expiry (or no expiry) for a samdb user (This used to be commit 25171f18a4b242b5a731f4ac1eefc51cc82efd74)
2008-08-21The index handling is now configured from the schema load, not by aAndrew Bartlett1-9/+0
template. Andrew Bartlett (This used to be commit b36c6a21ad12fdc1b53efdc3f29cde7614b4fa9e)
2008-08-20Update OpenLDAP MMR configuration per comments by Oliver LiebelAndrew Bartlett1-19/+18
<oliver@itc.li> This changes the RIDs to be <serverID><DBID>, to ease later debugging. The need to specify the port on the MMR URLs is now included in the help. Andrew Bartlett (This used to be commit a5cbe8c09c6f14f95ff9ba9b8782e2100fc55695)
2008-08-19Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartletAndrew Bartlett1-1/+11
(This used to be commit fc6b4f03ebba015a13a6ab93221b0bc3ef8ef2ed)
2008-08-19Fix up new OpenLDAP MMR code.Andrew Bartlett1-41/+26
This changes the MMR password from hard-coded value of 'linux', adds tests and fixes the Fedora DS backend. Currently the MMR password matches the admin password, but we can change this to be another random value if required. Also require the port to be specified on the command line, so we don't hard-code a port of 9000. Andrew Bartlett (This used to be commit 08257c6d6ce809fcd53f9b2b4d558fef616b74ce)
2008-08-19Generate Multi-Master Replication configuration for OpenLDAPOliver Liebel1-7/+79
This patches provision-backend and the related scripts to generate the correct configuration blobs for N-way multi-master replication using OpenLDAP. Signed-off-by: Andrew Bartlett <abartlet@samba.org> (This used to be commit 6ed0b3f2475022288f636605492ca27fde97cd52)
2008-08-19Fix templates.ldb reprovision handling.Andrew Bartlett1-1/+11
This sets the attributes in a seperate transaction, and allows a forced delete of the whole file. Andrew Bartlett (This used to be commit 423db2468ba3dac89cebc59c8498c0b08c5f3d7b)
2008-08-01Add helper object Hostconfig to make it easier to get to e.g. theJelmer Vernooij2-0/+37
SAM database. (This used to be commit be75b2a36ee49f66ada3ec3ababa82d74085d559)
2008-08-01Use new style python classes.Jelmer Vernooij9-12/+27
(This used to be commit 2a39aae0cef310a79427feb1b85f6794ea36849a)
2008-08-01Move domain DN determination out of newuser function.Jelmer Vernooij1-6/+9
(This used to be commit cbac27e6faa99ebaa3e6d653017c968db836560a)
2008-08-01Actually fix missing substitution variables.Jelmer Vernooij1-4/+10
(This used to be commit 783412ecb27d646b171993da0ac2f11a821901d3)
2008-08-01Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij1-27/+9
(This used to be commit c87a8ba1fef1ba508ad6527d0bae4bcdd5b3cb69)
2008-08-01Fix some forgotten substitute variables in provision, add check to prevent ↵Jelmer Vernooij1-0/+2
this sort of regression in the future. (This used to be commit a461118f3b668779f907c4d77cebe1e76fa4e39f)
2008-07-30Be more pythonic.Jelmer Vernooij1-7/+5
(This used to be commit 20d40e31942f96ca9d077e57c6dd4c1d38f79b4b)
2008-07-28We don't use EXTENSIBLEOBJECT any more.Andrew Bartlett1-3/+0
(This used to be commit 4b137085c8b89773d4639372bbffd516a41dfc8f)
2008-07-28Make it even clearer what to do next in the LDAP backend setupAndrew Bartlett1-1/+5
(This used to be commit bace931ad674b5071d53bf9c99c383f1d8957e1b)
2008-07-28Always print the slapd startup commandAndrew Bartlett1-1/+2
(This used to be commit b1d05e7d14c65133e8ab0ff9d41a26fa7e3d41d3)
2008-07-28Remove unused function and make sensitive directories private.Andrew Bartlett1-22/+2
(This used to be commit e23333d16397606d38e90684d2d916b5b967cde4)
2008-07-26mamachinepw: add better error handlingStefan Metzmacher1-4/+20
metze (This used to be commit 7ac424137f62ceacf44e477f4e3805267013005b)
2008-07-26Add "mymachinepw" to fetch our machine password out of secrets.ldbVolker Lendecke1-0/+45
(This used to be commit 4fbe16deb0e06e145f643568a699b80b431d4f42)
2008-07-25Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett1-3/+28
(This used to be commit b12dd8ee5443ebfc204d1684f541d68ffb351197)
2008-07-25Complain if we are told to use an ldap backend, without the typeAndrew Bartlett1-0/+2
(This used to be commit e9c3c9ad8289ee48efa998ab6b486250dcd40b52)
2008-07-22Install'named.txt' to private/ as documentation.Andrew Bartlett1-2/+26
This document is much more use when subbed with all the right things. Andrew Bartlett (This used to be commit 136a85599815670c807f212d7d4003ec53a13729)
2008-07-22Improve DNS and Group poicy configurations.Matthias Dieter Wallnöfer1-2/+3
- fixes bug #4813 (simplify DNS setup) - This reworks the named.conf to be a fully fledged include - This also moves the documentation into named.txt - improves bug #4900 (Group policy support in Samba) - by creating an empty GPT.INI - fixes bug #5582 (DNS: Enhanced zone file) - This is now closer to the zone file AD creates committed by Andrew Bartlett (This used to be commit 74d684f6b329d7dd573cdc55e16bb8e629474b02)
2008-07-18Make a seperate template for the refint configuration tooAndrew Bartlett1-3/+4
(This used to be commit d2a527acc5ee6fe9b943657dc9c3ace920b2d619)
2008-07-18Put the memberof template into a seperate setup/ file.Andrew Bartlett1-33/+27
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm having with OpenLDAP Andrew Bartlett (This used to be commit 6d6e03834a1a77a8ceba41fbe8c9d49680065ba3)
2008-07-16Reorder whitespace in generated slapd.confAndrew Bartlett1-4/+4
This helps us see the real groupings in the generated memberOf handling. Andrew Bartlett (This used to be commit ec70ebb8310e563324233662f8e779c55fb87514)
2008-07-15Fix asking for credentials for non-LDAP provisions.Andrew Bartlett1-1/+1
(This used to be commit 78416f4840df4f8d1f9cc5e46a48b19c86888050)
2008-07-15Rework provision to handle both simple and SASL binds.Andrew Bartlett1-4/+6
Fedora DS is still setup for simple binds only, at this point. (it also fails on other issues). Andrew Bartlett (This used to be commit b24c572d5a38c1f6906751c2ad2f809e1995b510)
2008-07-15Connect to the LDAP backend with SASL credentials.Andrew Bartlett1-9/+38
This reworks our LDAP backend code to move from anonymous access to a shared-secret SASL-protected connection. (SASL selects NTLM or DIGEST-MD5 on my system). To get this working, we must pre-populate the LDAP backend with a DN to store ths SASL secret on, and we use back-ldif for this. This gives us a reasonable basis to deploy a replicated OpenLDAP backend solution. Andrew Bartlett (This used to be commit cd0745253c4a9ec59a035e830e54d74a05b71aaa)
2008-07-12rename sambaPassword -> userPassword.Andrew Bartlett1-3/+3
This attribute is used in a very similar way (virtual attribute updating the password) in AD on Win2003, so eliminate the difference. This should not cause a problem for on-disk passwords, as by default we do not store the plaintext at all. Andrew Bartlett (This used to be commit 1cf0d751493b709ef6b2234ec8847a7499f48ab3)
2008-06-19Add a blackbox test for the provision-backend script.Andrew Bartlett1-27/+30
This test (as most tests do :-) found a few bugs, also fixed in this commit. Andrew Bartlett (This used to be commit d96a6482dad54d1d27a87107865e833a9c32cf53)
2008-06-16Try to get a bit further with provisioningSimo Sorce1-1/+4
(This used to be commit 649f6c0c1084828dda7d50bd2904208192de77da)
2008-06-11Clarify error when SWIG can't be found - it's not required unless youJelmer Vernooij1-1/+1
intend to do development. (This used to be commit 0f57fcaa2e8af3e2b03ba401f4fda812fe55745b)
2008-06-11Add working Python bindings for NBT.Jelmer Vernooij1-0/+28
(This used to be commit 9c88f5e1de9db34751f16c2247fa91ae2445c5f7)
2008-05-31Revert Jelmer's CFLAGS commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6cAndrew Bartlett1-1/+1
This commit broke the build, because not all files (libreplace, popt) were updated. Andrew Bartlett (This used to be commit 3faacf4351d68a10aea78b53768571d2059772ae)
2008-05-30Fix samdb python test.Jelmer Vernooij2-5/+5
(This used to be commit 0e3d488cc108174ca0f875aab16b9771c2933f19)
2008-05-30Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-defsJelmer Vernooij4-13/+30
Conflicts: source/samba4-skip (This used to be commit 7b0e0eb346c2f6a240b20fbcf14029539c6512b9)
2008-05-30Fix the samba4.dcerpc.bare.python test.Andrew Bartlett1-5/+6
The loadparm context isn't really optional, as otherwise we can't find the right server to connect to. Andrew Bartlett (This used to be commit 2b5acb5e95b46dd39c6f54b5bb7e15ddb180f7ec)
2008-05-30Fix rpcecho test.Andrew Bartlett1-1/+1
(This used to be commit df8399ba9dee9d1c706a3e56451c9f2cade96dae)
2008-05-30Fix up provision and samdb tests.Andrew Bartlett2-7/+23
This fixes up the provision to operate with a target directory - it must override the smb.conf in this case. Andrew Bartlett (This used to be commit 89fc39f7edb214065aff461bc225f41443eae3c7)
2008-05-30Move CFLAGS handling out of smb_build.Jelmer Vernooij1-1/+1
(This used to be commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6c)
2008-05-29Fix samdb test and enable it.Jelmer Vernooij1-2/+6
(This used to be commit 6b202d3780f8ff50e0bdfa4a749c43b5639e4880)
2008-05-29Update after changes to the provision API, make sure temp dir gets cleanedJelmer Vernooij1-10/+19
up. (This used to be commit 064e9ddb3786bd7df8785b39754b1e6674496b66)
2008-05-29Check test directory is cleaned up by Python tests.Jelmer Vernooij1-0/+1
(This used to be commit c338269b4b9f2bf4d3386880c1d733a8e47e2c8d)