summaryrefslogtreecommitdiff
path: root/source4/setup/provision.ldif
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r8373: New wildcard matching code.Simo Sorce1-3/+0
This code applies correct ldap standard wildcard matching code removes WILDCARD matching from tdb @ATTRIBUTES, that's now handled independently adds some more tests for wildcard matching fixes dn comparison code in ldb_match (This used to be commit 4eb5863042011988d85092d7dde3d809aa15bd59)
2007-10-10r8225: make nETBIOSName case insensitive, so that lower case netbios domain ↵Stefan Metzmacher1-0/+1
REALM's are working in the hdb-ldb module metze (This used to be commit d24f39a5d746b9eabc4d5f6f6070a85be084d82c)
2007-10-10r8158: - use the timestring for the serial number of the bind zone fileStefan Metzmacher1-2/+2
- add --krbtgtpass and --machinepass options, with them you can easy set them to default values for testing so that you don't need to setup a new keytab file when you rerun provision.pl metze (This used to be commit cfb72455970c182aaba67bf9cf9775a854f143ff)
2007-10-10r8055: added canonicalName to our domainDns recordAndrew Tridgell1-0/+1
(This used to be commit 1ba296b9d0ed1cf0961bdd3cde03f1ce56e1d72b)
2007-10-10r7988: Store the KVNO for the machine account, and set it up in the provision.Andrew Bartlett1-0/+1
Andrew Bartlett (This used to be commit 90e94a4630c24282cd93ee05e258877b38e24a57)
2007-10-10r7900: the existing ltdb indexing code does in fact cope with binary fields, ↵Andrew Tridgell1-1/+1
so re-enable indexing on objectSid (This used to be commit 5781c83ba4ef919520e9668a40aafc8f74fe5700)
2007-10-10r7860: switch our ldb storage format to use a NDR encoded objectSid. This isAndrew Tridgell1-1/+1
quite a large change as we had lots of code that assumed that objectSid was a string in S- format. metze and simo tried to convince me to use NDR format months ago, but I didn't listen, so its fair that I have the pain of fixing all the code now :-) This builds on the ldb_register_samba_handlers() and ldif handlers code I did earlier this week. There are still three parts of this conversion I have not finished: - the ltdb index records need to use the string form of the objectSid (to keep the DNs sane). Until that it done I have disabled indexing on objectSid, which is a big performance hit, but allows us to pass all our tests while I rejig the indexing system to use a externally supplied conversion function - I haven't yet put in place the code that allows client to use the "S-xxx-yyy" form for objectSid in ldap search expressions. w2k3 supports this, presumably by looking for the "S-" prefix to determine what type of objectSid form is being used by the client. I have been working on ways to handle this, but am not happy with them yet so they aren't part of this patch - I need to change pidl to generate push functions that take a "const void *" instead of a "void*" for the data pointer. That will fix the couple of new warnings this code generates. Luckily it many places the conversion to NDR formatted records actually simplified the code, as it means we no longer need as many calls to dom_sid_parse_talloc(). In some places it got more complex, but not many. (This used to be commit d40bc2fa8ddd43560315688eebdbe98bdd02756c)
2007-10-10r7727: we need to mark some attributes as INTEGER, so that the standard searchesAndrew Tridgell1-0/+4
that w2k does work. For example, w2k asks for sAMAccountType=805306369 which will only match if we know its an integer (This used to be commit 941509ee58253b671bb74b2d8d8667cc6a1a4328)
2007-10-10r7499: ensure that the account we run tests as ("Administrator") maps to theAndrew Tridgell1-1/+1
unixName that we are running as in the test suite. Otherwise files are created as a user without any entry in the sam, so the ACL doesn't allow that user read permission when it should. This should fix the RAW-ACLS test in the build farm. (This used to be commit 30445483e4facb0a1d8a5979a2eac6c166193c09)
2007-10-10r6884: the invocationID is only used as objectGUID on the NTDS Settings ↵Stefan Metzmacher1-3/+3
object on the first DC in the forest! metze (This used to be commit 8ea59f23728450cd42c221e69f375d6e390c4a79)
2007-10-10r6883: Move to what simo assures me is the 'correct' way to find the NetBIOSAndrew Bartlett1-6/+46
and long names for a domain. Add servicePrincipalName mapping table (administrator configurable), in the same spot as microsoft uses. Andrew Bartlett (This used to be commit c25e78b4b34384a3a79a920f50f01be696a048ba)
2007-10-10r6868: the @ATTRIBUTES object format has changedSimo Sorce1-3/+6
(This used to be commit 4401c74fbc630d7ab7983c5f901483f3d7ddd8fb)
2007-10-10r6751: dnsDomain should be CASE_INSENSITIVE (winxp will sometimes do a cldap ↵Andrew Tridgell1-0/+1
query with this in uppercase) (This used to be commit f0c37555ff30c3e5ff4680d0b33bc105ebd3a0b1)
2007-10-10r6565: Cludge, cludge, cludge...Andrew Bartlett1-0/+1
We need to pass the 'secure channel type' to the NETLOGON layer, which must match the account type. (Yes, jelmer objects to this inclusion of the kitchen sink ;-) Andrew Bartlett (This used to be commit 8ee208a926d2b15fdc42753b1f9ee586564c6248)
2007-10-10r6207: - clean up source topdirStefan Metzmacher1-0/+1246
- move provision stuff to setup/ - remove unused scripts metze (This used to be commit c35887ca649675f28ca986713a08082420418d74)
generated by cgit (git 2.34.1) at 2024-11-12 07:22:40 +0000