Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-07-15 | s4 upgradeprovision: Synchronize the calculated keyversionnumber with the ↵ | Matthieu Patou | 1 | -1/+22 | |
one previously stored Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 upgradeprovision: do not copy RID Set it's automaticaly created by the ↵ | Matthieu Patou | 1 | -24/+34 | |
RID manager Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 upgradeprovision: add function to backup the provision before updating | Matthieu Patou | 1 | -152/+268 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 upgradeprovision: fix whitespaces | Matthieu Patou | 1 | -13/+13 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4: Add unit test for increment_calculated_keyversion_number | Matthieu Patou | 1 | -1/+25 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 upgradeprovision: introduce a new function to update the field use for ↵ | Matthieu Patou | 1 | -3/+37 | |
calculating msds-keyversionnumber This function change the version field of the unicodePwd in the replPropertyMetaData so that the version is equal or superior to the reference value passed. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 python: Add functions to samdb to manipulate version of ↵ | Matthieu Patou | 2 | -1/+128 | |
replPropertyMetaData attribute This change contains also helpers for attribute id to attribute oid conversion and from attribute id to attribute name. It brings also unit tests Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 dsdb: Use the changereplmetadata control | Matthieu Patou | 1 | -11/+78 | |
This control allow to specify the replPropertyMetaData attribute to be specified on modify request. It can be used for very specific needs to tweak the content of the replication data. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4: Add a simple script to change dc password | Matthieu Patou | 1 | -0/+63 | |
This script will mostly be used by unit test (blackbox type) to test the change of the dc password Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-15 | s4 provision: move update_machine_account_password to helpers | Matthieu Patou | 2 | -49/+51 | |
This is to allow reuse of this function and also unit tests Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-10 | s4:provision: also use fixed GUID names of the default group policies for ↵ | Stefan Metzmacher | 1 | -2/+3 | |
domain and domain controllers in tests metze | |||||
2010-07-10 | s4 provision: use correct GUID for default policies | Matthieu Patou | 1 | -2/+7 | |
The value of GUID for policy is not random for default policies, it is described here ("How Core Group Policy Works"): http://technet.microsoft.com/en-us/library/cc784268%28WS.10%29.aspx at paragraph System\Policies Container. Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-07-10 | s4 net: Add spn module to list/add/remove spn on objects | Matthieu Patou | 2 | -0/+219 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-07-08 | s4:samdb.py - "setpassword" - performs password sets using the "unicodePwd" ↵ | Matthias Dieter Wallnöfer | 1 | -7/+3 | |
attribute This does work per default on each AD-compatible DC. "userPassword" support on Windows however has to be activated explicitly by the "dSHeuristics". | |||||
2010-07-08 | s4 upgradeprovision: For SID > 1000 do not copy them, let the system ↵ | Matthieu Patou | 1 | -0/+6 | |
regenerated a new one This should avoid colliion with newly added objects that use the same SID as existing users in the upgraded provision. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2010-07-05 | DNS objects should not be ignored | Zahari Zahariev | 1 | -21/+9 | |
Recently I have found that after vampireing from a clean Windows server we have the same DNS objects in the ldb. So ldapcmp has to no longer ignore them. Signed-off-by: Kamen Mazdrashki <kamenim@samba.org> | |||||
2010-07-03 | s4:pwsettings net utility - change also here the "minPwdAge" to be the real ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
default Which is one day. | |||||
2010-06-29 | s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC | Andrew Bartlett | 1 | -1/+16 | |
This ensures that our DC will use all the available encyption types. (The KDC reads this entry to determine what the server supports) Andrew Bartlett | |||||
2010-06-28 | s4/spnupdate: Fixed spnupdate to use secrets credentials when accessing SamDB. | Endi S. Dewata | 1 | -3/+30 | |
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2010-06-26 | s4:provision.py - fix comment regarding DNS entries | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
I think this should mean partially Samba4 specified (all beside the "dns" account is standard) | |||||
2010-06-26 | s4:provision: move Samba4 specific DNS stuff to its own file | Stefan Metzmacher | 1 | -1/+8 | |
metze | |||||
2010-06-26 | s4:provision: add --next-rid option | Stefan Metzmacher | 1 | -2/+13 | |
Make it possible to provision a domain with a given next rid counter. This will be useful for upgrades, where we want to import users with already given SIDs. metze | |||||
2010-06-26 | s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool' | Stefan Metzmacher | 1 | -3/+11 | |
On Windows dcpromo imports nextRid from the local SAM, which means it's not hardcoded to 1000. The initlal rIDAvailablePool starts at nextRid + 100. I also found that the RID Set of the local dc should be created via provision and not at runtime, when the first rid is needed. (Tested with dcpromo on w2k8r2, while disabling the DNS check box). After provision we should have this (assuming nextRid=1000): rIDAllocationPool: 1100-1599 rIDPrevAllocationPool: 1100-1599 rIDUsedPool: 0 rIDNextRID: 1100 rIDAvailablePool: 1600-1073741823 Because provision sets rIDNextRid=1100, the first created account (typically DNS related accounts) will get 1101 as rid! metze | |||||
2010-06-26 | s4:provision: pass relax control also to modify_ldif | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2010-06-25 | s4 python: Add unit tests related to PyLong/PyInt handling | Matthieu Patou | 1 | -2/+11 | |
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-06-25 | s4 upgradeprovision: Try to support older Pythons. | Michael Wood | 1 | -1/+1 | |
Use "...".split(sep, 1) instead of "...".partition(sep). Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2010-06-24 | s4-python: python is not always in /usr/bin | Andrew Tridgell | 54 | -54/+54 | |
Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-06-24 | s4:upgradeprovision - fix include order for "ldb" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Patch originally posted on the list by Matthieu Patou. | |||||
2010-06-23 | Fix to undo nasty hack for for grouptype conversion | Lukasz Zalewski | 1 | -1/+1 | |
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-06-23 | s4:net Remove warnings for 2000 native mode and Samba4. | Andrew Bartlett | 1 | -5/+5 | |
We now support 2000 native mode, and so we just need to warn about mixed mode. Andrew Bartlett | |||||
2010-06-23 | s4:provision Raise default max functional level to 2008R2 | Andrew Bartlett | 1 | -3/+3 | |
We don't support many of the extra features, but that applies across many other parts of AD. Allow the admin to join a 2008R2 domain if he or she wants. This also makes it possible to test 2008R2 domain code in 'make test' Andrew Bartlett | |||||
2010-06-23 | s4:provision Remove am_rodc from Schema | Andrew Bartlett | 2 | -5/+5 | |
The SamDB created in the schema code isn't real enough to care if it's an rodc or not. | |||||
2010-06-23 | libds:common Remove DS_DC_* domain functionality flags | Andrew Bartlett | 2 | -11/+7 | |
These are just a subset of the DS_DOMAIN_ functionality flags, are compared and often confused with each other. Just make them one set. Andrew Bartlett | |||||
2010-06-22 | s4/test: fix DC password in selftest-vars.sh | Kamen Mazdrashki | 1 | -2/+2 | |
2010-06-21 | s4 upgradeprovision: fix the logging stuff so that it actually log | Matthieu Patou | 1 | -0/+2 | |
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-06-20 | s4:python LDB __init__.py - remove completely unused "erase_partitions" call | Matthias Dieter Wallnöfer | 2 | -36/+0 | |
Seems to be a relict from the past. | |||||
2010-06-20 | provision: Look for Samba prefix a bit harder. | Jelmer Vernooij | 1 | -4/+6 | |
2010-06-20 | pydsdb: Mark all SamDB and Schema methods that are in pydsdb as | Jelmer Vernooij | 3 | -17/+17 | |
private, to discourage them being called directly. | |||||
2010-06-20 | testparm: Check netbios name and workgroup characters and length. | Jelmer Vernooij | 1 | -14/+36 | |
2010-06-20 | provision: Properly cancel transactions on the secrets ldb. | Jelmer Vernooij | 1 | -122/+131 | |
2010-06-20 | selftest: Use scripted testparm. | Jelmer Vernooij | 1 | -2/+2 | |
2010-06-20 | testparm: Simplify default option handling. | Jelmer Vernooij | 1 | -19/+14 | |
2010-06-20 | testparm: Fix suppress prompt option. | Jelmer Vernooij | 1 | -7/+5 | |
2010-06-20 | testparm: Fix exit value, install. | Jelmer Vernooij | 2 | -14/+21 | |
2010-06-20 | s4-python: Implement LoadParm.dump(). | Jelmer Vernooij | 1 | -1/+1 | |
2010-06-20 | testparm: Split up functions that do multiple things. | Jelmer Vernooij | 1 | -40/+33 | |
2010-06-20 | testparm: Convert to Python. | Jelmer Vernooij | 1 | -0/+204 | |
2010-06-20 | s4-python: Remove more unused imports, fix use of sets in upgradehelpers. | Jelmer Vernooij | 3 | -9/+5 | |
2010-06-20 | Use standard Python syntax, booleans and set()'s where appropriate. | Jelmer Vernooij | 3 | -23/+28 | |
2010-06-20 | Remove unnecessary use of transactions. | Jelmer Vernooij | 1 | -11/+3 | |