samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2008-09-08	Use DIGEST-MD5 authentication for OpenLDAP replication	Oliver Liebel	1	-4/+4
	This avoids passing rootdn passwords or replicated data in cleartext across the network. Signed-of-by: Andrew Bartlett <abartlet@samba.org> (This used to be commit 67373c143a1d8a9f310fd116dbf81c1dd123b75f)
2008-08-19	Fix up new OpenLDAP MMR code.	Andrew Bartlett	1	-3/+3
	This changes the MMR password from hard-coded value of 'linux', adds tests and fixes the Fedora DS backend. Currently the MMR password matches the admin password, but we can change this to be another random value if required. Also require the port to be specified on the command line, so we don't hard-code a port of 9000. Andrew Bartlett (This used to be commit 08257c6d6ce809fcd53f9b2b4d558fef616b74ce)
2008-08-19	Generate Multi-Master Replication configuration for OpenLDAP	Oliver Liebel	1	-4/+32
	This patches provision-backend and the related scripts to generate the correct configuration blobs for N-way multi-master replication using OpenLDAP. Signed-off-by: Andrew Bartlett <abartlet@samba.org> (This used to be commit 6ed0b3f2475022288f636605492ca27fde97cd52)
2008-07-21	Make invalid 'member' detection work again.	Andrew Bartlett	1	-0/+4
	This defines a rootdn globally, and due to OpenLDAP bugs, gives it manage access to the whole database. This makes the memberOf module able to validate the links again, now we have database ACLs. Andrew Bartlett (This used to be commit 9fe3e9f09f89fd92f8a16768e53391ff5f8489ec)
2008-07-18	Make a seperate template for the refint configuration too	Andrew Bartlett	1	-0/+2
	(This used to be commit d2a527acc5ee6fe9b943657dc9c3ace920b2d619)
2008-07-18	Put the memberof template into a seperate setup/ file.	Andrew Bartlett	1	-0/+3
	Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm having with OpenLDAP Andrew Bartlett (This used to be commit 6d6e03834a1a77a8ceba41fbe8c9d49680065ba3)
2008-07-15	Lock down the LDAP backend - only samba may read or write	Andrew Bartlett	1	-1/+1
	(This used to be commit a3912801fb25f715725c06402d4bdff9a926f15d)
2008-07-15	Connect to the LDAP backend with SASL credentials.	Andrew Bartlett	1	-9/+30
	This reworks our LDAP backend code to move from anonymous access to a shared-secret SASL-protected connection. (SASL selects NTLM or DIGEST-MD5 on my system). To get this working, we must pre-populate the LDAP backend with a DN to store ths SASL secret on, and we use back-ldif for this. This gives us a reasonable basis to deploy a replicated OpenLDAP backend solution. Andrew Bartlett (This used to be commit cd0745253c4a9ec59a035e830e54d74a05b71aaa)
2008-07-10	Avoid the use of extensibleObject in ldap mapping backend.	Andrew Bartlett	1	-2/+0
	Instead of extensibleObject, we use the new (more correct) ad2oLschema tool, and a new objectClass called 'samba4Top', which we add and remove in the same way we did extensibleObject. Andrew Bartlett (This used to be commit 5ab20aa8b43415751f77602fff3a3008bf2186db)
2008-03-15	Rework memberof handling in slapd.conf (used for OpenLDAP backend)	Andrew Bartlett	1	-3/+5
	Instead of using an include file, put the generated configurationd directly into slapd.conf. Andrew Bartlett (This used to be commit 95ac786136aebfe5ededeb3fb81cbd4e296e3988)
2008-01-18	Use syncrepl on all OpenLDAP databases (creates contextCSN attribute)	Andrew Bartlett	1	-0/+12
	This module needs to be loaded on each database, not just the main partition. We use it to create the usn for the entries. Andrew Bartlett (This used to be commit ffb12aad8a80bb90d66dc66baba81b856622a6bb)
2007-12-31	r26636: Remove useless 'backend' parameter, and make the memberof overlay ↵	Andrew Bartlett	1	-3/+2
	use global. Andrew Bartlett (This used to be commit 3b6f461e9a1b0fee7a589b8d171f4fcec6340ca4)
2007-12-26	r26610: Write out a memberof.conf, to run the memberof plugin on all linked	Andrew Bartlett	1	-0/+5
	attributes, as found in the schema. Index 'cn', as otherwise exact match searches on this attribute always fail (need to figure out what is so special about cn in OpenLDAP). Andrew Bartlett (This used to be commit 5a4a2d10bc5729d4adac4b173b0dc05e2e076c32)
2007-12-21	r26424: Patch and hits from Howard Chu <hyc@symas.com> for our automated setup	Andrew Bartlett	1	-1/+1
	of OpenLDAP. This makes it consistant with the Fedora DS setup, and doesn't mix both hdb and bdb. Andrew Bartlett (This used to be commit 1ffada95d269c8f7d054bec7f6eaff8449995d40)
2007-12-21	r26305: Update template files and testsuite to try and work with current	Andrew Bartlett	1	-4/+4
	openldap, and fully support different LDAP server locations. Andrew Bartlett (This used to be commit a00bb942537f0f638c2a8295770749cb4b5d9ef3)
2007-10-10	r25450: Make it easier to test with a particular version of OpenLDAP, by	Andrew Bartlett	1	-3/+3
	setting OPENLDAP_PATH, move to using hdb as the backend (allows subtree renames), and re-enable the --quiet option. Andrew Bartlett (This used to be commit a186a0fa68cdcfb3abd430534657e5e278a5ebda)
2007-10-10	r23717: We need to remove the _ in LDAP_MANAGERPASS for the	Andrew Bartlett	1	-2/+2
	--ldap-manager-pass= option to work. Andrew Bartlett (This used to be commit fbcb1ec14125a4ca57922ec75b01af9a99dcd954)
2007-10-10	r23716: Clarify LDAP Manager DN and fix slapd startup syntax.	Andrew Bartlett	1	-2/+2
	Andrew Bartlett (This used to be commit 17dad5d8c345c2c3a7643bff7a43473339a22d40)
2007-10-10	r23189: Work towards a totally scripted setup of LDAP backends, so others can	Andrew Bartlett	1	-6/+6
	easily try this out. I also intend to use this for the selftest, but I'm chasing issues with the OpenlDAP (but not Fedora DS) backend. Andrew Bartlett (This used to be commit 0f457b1d2e20c36ab220b4a6711ce7930c4c7d21)
2007-10-10	r23177: Add in a new provision-backend script. This helps set up the ↵	Andrew Bartlett	1	-0/+73
	OpenLDAP or Fedora DS backend. This required a new mkdir() call in ejs. We can now provision just the schema for ad2oLschema to operate on (with provision_schema(), without performing the whole provision, just to wipe it again (adjustments to 'make test' to come soon). Andrew Bartlett (This used to be commit 01d54d13dc66ef2127ac52c64ede53d0790738ec)