Age | Commit message (Collapse) | Author | Files | Lines |
|
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun Oct 16 01:31:21 CEST 2011 on sn-devel-104
|
|
By default we were checking this on the default folder for
tempfile.NamedTemporaryFile (usualy /tmp) but this folder can be mounted
on tmpfs (which didn't support xattr currently). Now we should check on
the filesystem where the provision will be done.
|
|
|
|
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Sep 13 03:51:13 CEST 2011 on sn-devel-104
|
|
This option is introduced temporarily to test bind9 backend with
and without dlz_dlopen module.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
|
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
|
Mention that Windows 2000 function level is supported as well.
|
|
We now have a reliable way to know the current location of the
templates: dyn_SETUPDIR, which is updated for both the in-build and
installed binaries.
This replaces the function arguments and the distributed resolution of
the setup directory with one 'global' function (imported as required).
This also removes the ability to specify an alternate setup directory
on the command line, as this was rarely if ever used and never tested.
Andrew Bartlett
|
|
we should not set posix:eadb in lp in the acl native test code
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
when it is set in smb.conf or on the command line, obey the setting
and don't try to test for system xattr support
|
|
when posix:eadb is set then we know we should be using an eadb
|
|
this ensures that provision options are stored in the generated
smb.conf
|
|
This is added to make the 'existing' LDAP backend class more useful,
and to allow debuging of our OpenLDAP backend class with wireshark, by
forcing the traffic over loopback TCP, which is much easier to sniff.
Andrew Bartlett
|
|
For some reason we had both options, and --ldap-backend-nosync is
the better name.
Andrew Bartlett
|
|
metze
|
|
Make it possible to provision a domain with a given next rid counter.
This will be useful for upgrades, where we want to import users
with already given SIDs.
metze
|
|
|
|
|
|
|
|
|
|
than simple messaging callbacks.
|
|
we still need to allow for interactive querying of the realm
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
|
this should be much more portable
|
|
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
|
This mainly reverts commit f0bc02d74c16bc013e9fdab46ef271cf45873453.
Jelmer pointed out a way how we can achieve the same error handling with an
older syntax also on Python 2.4+.
|
|
This reverts partially commit 027123199e13cc02ae4edadd8f0dd0f0660e1193.
Andrew, this is not Python 2.4+ compatible
|
|
The backtraces were too confusing for our users, and didn't tell them
what to do to fix the problem. By printing the string (rather than a
backtrace), and including in the error what to do, and what file to
remove, we give them a chance.
Andrew Bartlett
|
|
we need the DS_DOMAIN_* levels imported
|
|
delibarately posix:eadb
|
|
This option allow simple user (non root) to invoke provision without facing an error
while insuring that ACL on shared files will always be set
|
|
|
|
with ACL in LDAP
|
|
- Revert change in "ask" - was previously correct
- Readd accidentally removed checks for non-null realm and domainname
- On interactive mode perform only one "ask" call per question
- Inform the user about the unset administrator password
|
|
|
|
Rather than treat the LDAP backend as a special case, treat all
backends the same, with different callbacks.
Andrew Bartlett
|
|
This allows a blackbox test to confirm this can be set.
Andrew Bartlett
|
|
Windows 2003 Native
|
|
function levels
Adds a parameter "--function-level" which allows to specify the domain and
forest function level.
|
|
This patches fixes the last difference between s4 and Windows Server regarding
group policy objects: we hadn't the domain controller policy.
- Adds the domain controller policy as it is found in the "original" AD
- Adds also the right version number in the GPT.INI file for the domain group
policy (was missing)
|
|
This should make setting up LDAP servers more predictable.
When not specified, it is random
Andrew Bartlett
|
|
This removes a *lot* of duplicated code and the cause of much
administrator frustration. We now handle starting and stopping the
slapd (at least for the provision), and ensure that there is only one
'right' way to configure the OpenLDAP and Fedora DS backend
We now run OpenLDAP in 'cn=config' mode for online configuration.
To test what was the provision-backend code, a new --ldap-dryrun-mode
option has been added to provision. It quits the provision just
before it would start the LDAP binaries
Andrew Bartlett
|
|
|
|
python module.
|
|
|
|
|
|
fixes test.
|
|
|