summaryrefslogtreecommitdiff
path: root/source4/setup/provision
AgeCommit message (Collapse)AuthorFilesLines
2008-07-15Connect to the LDAP backend with SASL credentials.Andrew Bartlett1-1/+3
This reworks our LDAP backend code to move from anonymous access to a shared-secret SASL-protected connection. (SASL selects NTLM or DIGEST-MD5 on my system). To get this working, we must pre-populate the LDAP backend with a DN to store ths SASL secret on, and we use back-ldif for this. This gives us a reasonable basis to deploy a replicated OpenLDAP backend solution. Andrew Bartlett (This used to be commit cd0745253c4a9ec59a035e830e54d74a05b71aaa)
2008-05-21Move more modules inside of the samba package.Jelmer Vernooij1-2/+2
(This used to be commit 9b39e99f48266a54ed0b8890c2efde218b4b118a)
2008-05-11Set sys.path for running inside source tree.Jelmer Vernooij1-1/+2
(This used to be commit b507109bb676715f7d9616e13b0e19305e9c2559)
2008-05-11Use system python rather than smbpython.Jelmer Vernooij1-0/+2
(This used to be commit d3df51cd01e53383dcc05923d248db03bc6f62e9)
2008-04-14make the SMB2 negotiated read and write size settable in smb.confAndrew Tridgell1-0/+2
parametic options: smb2:max read size = NNN smb2:max write size = NNN The defaults are 65536, which is what Vista sets, and what we previously set (This used to be commit 9e60164cae42b5dd95720e48301a2ac57e95482a)
2008-04-02Fix conflicts in setup/provision script.Andrew Bartlett1-8/+0
(This used to be commit 696b58f5dd8370b7ee0670c7a3e5db10234b41ff)
2008-04-02Fix merge of my host GUID removal and the IPv6 addition to provisionAndrew Bartlett1-1/+11
Merge branch 'v4-0-ipv6' of git://git.id10ts.net/samba into 4-0-abartlet Andrew Bartlett (This used to be commit d3336684f084f984500dd0893dd01bcfc5be0ab1)
2008-04-01provision: Add support for IPv6 (bz #4593).Andrew Kroeger1-2/+4
(This used to be commit 8585a3c77d5dfe97bca3f08716fc06ac2819f578)
2008-04-02Remove references to setting the host GUID, as the repl_meta_dataAndrew Bartlett1-5/+3
module prohibits it anyway. Andrew Bartlett (This used to be commit c5b287c056855892f30fbbf32efe7d65da31ce91)
2008-03-29Rework 'compleated' message in provision to be more useful.Andrew Bartlett1-9/+0
In particular, this should draw attention to accidential 'standalone' server provisions and therefore cause less frustration. Andrew Bartlett (This used to be commit e906ae041a2b589ffceff97b74f7c4b01386382a)
2008-03-28Fix and test python scripts and kerberosAndrew Bartlett1-2/+3
This fixes up the python credentials interface in a number of areas, with the aim of supporting '-k yes' as a command line option. (This enables the use of kerberos). As such, I've had to change the get_credentials call to take a loadparm context, so that the credentials can be initialised correctly. The test_kinit script has been modified to prove that this continues to work, as well as to provide greater code coverage of the kerberos paths. Andrew Bartlett (This used to be commit 727ef40c2b56910028ef3c1092b8eab1bfa6ce63)
2008-03-11Fix provision script to work without smb.conf location specified.Andrew Bartlett1-1/+2
Andrew Bartlett (This used to be commit b4da374a998caac18c288a0a6e3fcd2c50cbffa7)
2008-03-07Rework provision scripts for more testingAndrew Bartlett1-8/+12
This fixes up some issues with testdir (was not honoured) and increases test coverage. We now check all the major provision modes. In doing so, to make it possible to call from the multiple layers of 'sh', I have allowed 'dc' to alias 'domain controller' and 'member' to alias 'member server'. Fighting shell quoting in the test system was just too hard... Also fix upgrade.py Andrew Bartlett (This used to be commit 0923de12282b0e063dd73bc3e056dd5c3663c190)
2008-03-06Make Samba4 pass the NET-API-BECOMEDC test against Win2k3 (again).Andrew Bartlett1-21/+5
To make Samba4, using the python provision system, pass this test required some major rework. Untested code is broken code, and some of the refactoring for a seperate provision test (which also now passes) broke things. Similarly, the iconv work has compiled, but these codepaths have never been run (NULL pointer de-reference). In working to use a local, rather than global, loadparm context, and to support using a target directory, a few things needed to be reworked, particularly around path handling. Andrew Bartlett (This used to be commit 1169e8d7bee20477b0efbfea3534ac63c83fb3d6)
2008-02-21Make setup/provision the name of the python provision script now that that ↵Jelmer Vernooij1-198/+170
is the default. (This used to be commit a0a05c5a3d614d0f2936ecfcab5273a2ef7d61a8)
2008-02-21Be consistant about --ldap-backend-typeAndrew Bartlett1-6/+10
Make the EJS provision and the selftest scripts both use the new syntax for speicifying the ldap backend type. Andrew Bartlett (This used to be commit b1d2584277304be3f2a640465cbf6b2a3ec571cc)
2008-02-08Revert to ejs for 'provision'Andrew Bartlett1-173/+194
Andrew Bartlett (This used to be commit fa1098959ad0016770ce1c327665df08ce3f69d2)
2008-02-08Remove unused argument to provision().Andrew Bartlett1-194/+173
Andrew Bartlett (This used to be commit 2f98ec1e6417c70a48370a62e7a54dfc4f6291c1)
2008-01-24Make the repl_meta_data module the default for domain controllers.Andrew Bartlett1-4/+4
Andrew Bartlett (This used to be commit ae2ea1bd0cd2b326b09b372428969f2cf52ce519)
2008-01-17provision: simplfy by removing old code to manually create baseDNs.Andrew Bartlett1-5/+1
Previously, we would create the first record in the DB as an LDIF file, with the expectation that the administrator would use slapadd to create the database. We now do everything over LDAP, which is far simpler, and allows the LDB module chain to do its work, without special cases. Also fix naming of the output schema when suggesting the comamnd line to run ad2oLschema in provision-backend. Andrew Bartlett (This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f)
2008-01-11Add in new module to normalise DNs being returned from OpenLDAP. ThisAndrew Bartlett1-2/+2
fixes the case of the attribute in teh DN. Fix option spelling for example re-provision Andrew Bartlett (This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
2008-01-06r26686: Fix bug 5143 by Jason Tarbet. This prevented an easy cut-and-paste ofAndrew Bartlett1-1/+1
the provision options used. Andrew Bartlett (This used to be commit 51cd93344dfeb3556fada523e38bbcd7e51fbbe1)
2007-12-21r26245: Make it easier to handle the LDAP backend, with it's differing needs,Andrew Bartlett1-0/+1
by seperating the modules list into parts. That way, we can remove the modules that the backend will provide. Andrew Bartlett (This used to be commit d67e5c7896f6d3064298897ae4d3204498824b06)
2007-12-21r26137: Rename the entryUUID module to better match it's purpose: being aAndrew Bartlett1-1/+1
simple ldap mapping (a complex mapping will follow). Fix the module to handle 'name' better, rather than using the 'name' attribute built into OpenLDAP, rename to samba4RDN. We need to see if this can be handled in the backend. Also rename the functions and inernal module name to entryuuid for consistancy. Andrew Bartlett (This used to be commit a7be80766f4270d63433bbd6a976ebf302ed3433)
2007-10-10r25451: Rework the display of provision options to use printf syntax, andAndrew Bartlett1-10/+22
avoid %s in the substituted strings from becoming a problem. Andrew Bartlett (This used to be commit 3c4f107239eb6b2f4022a4eac06c5dd3ace71174)
2007-10-10r25303: Print out the options the provision script generated. This shouldAndrew Bartlett1-1/+12
help users produce predictable setups. Andrew Bartlett (This used to be commit 9789bd3c0a3f75f19fa523b251736cf6cdc157ce)
2007-10-10r25299: Modify the provision script to take an additional argument: ↵Andrew Bartlett1-0/+3
--server-role This must be set to either 'domain controller', 'domain member' or 'standalone'. The default for the provision now changes to 'standalone'. This is not because Samba4 is particularlly useful in that mode, but because we still want a positive sign from the administrator that we should advertise as a DC. We now do more to ensure the 'standalone' and 'member server' provision output is reasonable, and try not to set odd things into the database that only belong for the DC. Andrew Bartlett (This used to be commit 4cc4ed7719aff712e735628410bd3813c7d6aa40)
2007-10-10r24729: First try and publishing a DNS service account, for folks to play with.Andrew Bartlett1-0/+1
The keytab in dns.keytab should (I hope) do the job. Andrew Bartlett (This used to be commit af4d331eef91ef7699d179d15e7337fff1eff7bb)
2007-10-10r23859: Work to have Group Policy work 'out of the box' in Samba4.Andrew Bartlett1-0/+3
This involves creating the SYSVOL and NETLOGON shares at provision time, and creating the right subdirectories. This also changes the behaviour of lp.get("foo") in ejs - we now return undefined, rather than syntax error, if the parameter doesn't exist (perhaps because the share isn't defined). Andrew Bartlett (This used to be commit 45cadf3bc0d38f6600666511a392e1ce353adee7)
2007-10-10r23715: Make the provision-backend script print out the exact commands to run,Andrew Bartlett1-2/+7
to set up the LDAP backend. Andrew Bartlett (This used to be commit cc7900210a2e473060d5897ec729923ac6b2f18d)
2007-10-10r23703: Start to get Samba4 to again work with LDAP backends, after I turnedAndrew Bartlett1-7/+8
on metze's schema work. Andrew Bartlett (This used to be commit 3111bbdf64f57bf8d2638fd9829c071dcfeb4af1)
2007-10-10r23560: - Activate metze's schema modules (from metze's schema-loading-13 ↵Andrew Bartlett1-3/+3
patch). - samba3sam.js: rework the samba3sam test to not use objectCategory, as it's has special rules (dnsName a simple match) - ldap.js: Test the ordering of the objectClass attributes for the baseDN - schema_init.c: Load the mayContain and mustContain (and system...) attributes when reading the schema from ldb - To make the schema load not suck in terms of performance, write the schema into a static global variable - ldif_handlers.c: Match objectCategory for equality and canonicolisation based on the loaded schema, not simple tring manipuation - ldb_msg.c: don't duplicate attributes when adding attributes to a list - kludge_acl.c: return allowedAttributesEffective based on schema results and privilages Andrew Bartlett (This used to be commit dcff83ebe463bc7391841f55856d7915c204d000)
2007-10-10r23189: Work towards a totally scripted setup of LDAP backends, so others canAndrew Bartlett1-0/+1
easily try this out. I also intend to use this for the selftest, but I'm chasing issues with the OpenlDAP (but not Fedora DS) backend. Andrew Bartlett (This used to be commit 0f457b1d2e20c36ab220b4a6711ce7930c4c7d21)
2007-10-10r22756: Make it easier to setup an LDAP replica. Provision withAndrew Bartlett1-1/+5
--partitions-only (suggestions for a better name welcome) will setup the partitions records, but no any data in those partitions. This can then point at the already configured remote LDAP server. Andrew Bartlett (This used to be commit ee7b06fc832ca7c572205c7c268c3c7c552effa0)
2007-10-10r22530: use message() to make --quiet workStefan Metzmacher1-2/+2
metze (This used to be commit 7c381b2d4f92622ac7efdcc6b8e405d418e2d4bb)
2007-10-10r22478: Update the LDAP backend code to handle initialisation of multipleAndrew Bartlett1-0/+6
partitions onto the target LDAP server. Make the LDAP provision run before smbd starts, then stop the LDAP server. This ensures this occurs synchronously, We then restart it for the 'real run' (with slapd's stdin being the FIFO). This required fixing a few things in the provision scripts, with more containers being created via a add/modify pair. Andrew Bartlett (This used to be commit 860dfa4ea1ab2b62d4d4fe0644e0a9b882fdafa1)
2007-10-10r20859: fix typoStefan Metzmacher1-1/+1
metze (This used to be commit ba6ee1a098381683223d7efaafb04582a47ea871)
2007-10-10r20560: make it possible to configure the backend and modulesStefan Metzmacher1-6/+12
for all partitions and make it not use LDAP in the variable names because it isn't specific to the ldap backend case. metze (This used to be commit 3e337ec2764038e4ff05c3e926220abaa5583702)
2007-10-10r20495: Further notes on joining with fedora DS.Andrew Bartlett1-2/+6
Add in a hook for adding an ACI, needed to allow anonymous access until we hook across a SYSTEM token to the LDAP server. Andrew Bartlett (This used to be commit f45504e2714680978f101b4a98516686a17531df)
2007-10-10r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.Andrew Bartlett1-2/+4
Add a new module entrypoint to handle the new, interesting and different mappings required for Fedora DS. Andrew Bartlett (This used to be commit 600c7f1a68c175b835ce45d13794a6f66bcc8493)
2007-10-10r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to loadAndrew Bartlett1-4/+5
into an exsting LDAP server. (Allow some parts to pre-exist, and try to blow away less data). Andrew Bartlett (This used to be commit 99faff0ad8fa12d596c599064a0125a6b3365134)
2007-10-10r19216: Merge from SAMBA_4_0_RELEASE:Andrew Bartlett1-2/+0
Move default for subobj.LDAPMODULES into scripting/libjs/provision.js so that SWAT can provision again. Andrew Bartlett (This used to be commit a4aafe307d6d1396fa79b0c48b0a36cbf682f0ce)
2007-10-10r17705: Use the paged_searches module by default against the LDAP backend, ifAndrew Bartlett1-1/+1
selected. Andrew Bartlett (This used to be commit 3bb0a0d91eeb64db1ad2eeb13eab50f338caeb46)
2007-10-10r17526: Move timestamp generation into the objectGUID module. It probablyAndrew Bartlett1-0/+6
needs to be renamed (operation_add?). This allows me to match the behaviour and substitute with the entryUUID module for remote LDAP connections. Andrew Bartlett (This used to be commit af02b4d7c631bb15bf5a5f73f9fdc23075d50f60)
2007-10-10r16264: Add, but do not yet enable, the partitions module.Andrew Bartlett1-3/+12
This required changes to the rootDSE module, to allow registration of partitions. In doing so I renamed the 'register' operation to 'register_control' and 'register_partition', which changed a few more modules. Due to the behaviour of certain LDAP servers, we create the baseDN entry in two parts: Firstly, we allow the admin to export a simple LDIF file to add to their server. Then we perform a modify to add the remaining attributes. To delete all users in partitions, we must now search and delete all objects in the partition, rather than a simple search from the root. Against LDAP, this might not delete all objects, so we allow this to fail. In testing, we found that the 'Domain Controllers' container was misnamed, and should be 'CN=', rather than 'OU='. To avoid the Templates being found in default searches, they have been moved to CN=Templates from CN=Templates,${BASEDN}. Andrew Bartlett (This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2007-10-10r13239: Silly little patch: make the order of declaration match the order ↵Andrew Bartlett1-1/+1
of use. (This used to be commit 2b605cf22c7567e1171bf73cbbd37a5f0c1a4274)
2007-10-10r12944: Update scripts in setup to match changes in the provision.jsAndrew Bartlett1-2/+3
DNS is now done as a seperate step, to assist in migrations. Andrew Bartlett (This used to be commit 916607d1d08b6a41c375766a69fd609989e35bed)
2007-10-10r12746: An initial version of the kludge_acls module.Andrew Bartlett1-2/+2
This should be replaced with real ACLs, which tridge is working on. In the meantime, the rules are very simple: - SYSTEM and Administrators can read all. - Users and anonymous cannot read passwords, can read everything else - list of 'password' attributes is hard-coded Most of the difficult work in this was fighting with the C/js interface to add a system_session() all, as it still doesn't get on with me :-) Andrew Bartlett (This used to be commit be9d0cae8989429ef47a713d8f0a82f12966fc78)
2007-10-10r12739: Add support for using credentials in the provision process.Andrew Bartlett1-1/+4
This should allow us to provision to a 'normal' LDAP server. Also add in 'session info' hooks (unused). Both of these need to be hooked in on the webserver. Andrew Bartlett (This used to be commit b349d2fbfefd0e0d4620b9e8e0c4136f900be1ae)
2007-10-10r10190: Do some very basic input checking when provisioning.Jelmer Vernooij1-0/+5
(This used to be commit 87f25fe49caa78422582337c5208a331ef5b8c15)
generated by cgit (git 2.34.1) at 2024-11-02 14:59:22 +0000