summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r23720: Allow the member server to work against an LDAP Backend. Another caseAndrew Bartlett2-23/+23
where LDB isn't as strict as OpenLDAP, the self join record contains duplicate servicePrincipalNames once the DNS name and domain name are made equal. (Easier to just skip the useless self-join). Andrew Bartlett (This used to be commit 49ff929be6fcf57721532de13bdd7a7e1617af6f)
2007-10-10r23717: We need to remove the _ in LDAP_MANAGERPASS for theAndrew Bartlett3-5/+5
--ldap-manager-pass= option to work. Andrew Bartlett (This used to be commit fbcb1ec14125a4ca57922ec75b01af9a99dcd954)
2007-10-10r23716: Clarify LDAP Manager DN and fix slapd startup syntax.Andrew Bartlett3-6/+6
Andrew Bartlett (This used to be commit 17dad5d8c345c2c3a7643bff7a43473339a22d40)
2007-10-10r23715: Make the provision-backend script print out the exact commands to run,Andrew Bartlett2-4/+18
to set up the LDAP backend. Andrew Bartlett (This used to be commit cc7900210a2e473060d5897ec729923ac6b2f18d)
2007-10-10r23703: Start to get Samba4 to again work with LDAP backends, after I turnedAndrew Bartlett2-8/+9
on metze's schema work. Andrew Bartlett (This used to be commit 3111bbdf64f57bf8d2638fd9829c071dcfeb4af1)
2007-10-10r23560: - Activate metze's schema modules (from metze's schema-loading-13 ↵Andrew Bartlett3-6/+24
patch). - samba3sam.js: rework the samba3sam test to not use objectCategory, as it's has special rules (dnsName a simple match) - ldap.js: Test the ordering of the objectClass attributes for the baseDN - schema_init.c: Load the mayContain and mustContain (and system...) attributes when reading the schema from ldb - To make the schema load not suck in terms of performance, write the schema into a static global variable - ldif_handlers.c: Match objectCategory for equality and canonicolisation based on the loaded schema, not simple tring manipuation - ldb_msg.c: don't duplicate attributes when adding attributes to a list - kludge_acl.c: return allowedAttributesEffective based on schema results and privilages Andrew Bartlett (This used to be commit dcff83ebe463bc7391841f55856d7915c204d000)
2007-10-10r23559: After running testprogs/ejs/minschema.js update schema.ldif (on ↵Günther Deschner1-0/+131
abartlet's request). Guenther (This used to be commit 5410b23ea6649f49e8f24a57854f5e72f114aaef)
2007-10-10r23235: Don't do a seperate LDAP provision step. Instead, everything we needAndrew Bartlett1-8/+2
(including the config files) is created by provision-backend. Andrew Bartlett (This used to be commit 6d4d90399f5a0451fcf2156a465123801e027359)
2007-10-10r23232: Add in some extra files required by the new provision-backend.Andrew Bartlett2-0/+24
(sorry for breaking the build) Andrew Bartlett (This used to be commit 0108334fe3331b7a2cfa972c6f0674b56d436cb5)
2007-10-10r23205: abartlet please commit the correct content ...Stefan Metzmacher1-0/+0
this just fixes make install metze (This used to be commit 236da2cb3db5297b6b9c40a572c3d547954f5090)
2007-10-10r23189: Work towards a totally scripted setup of LDAP backends, so others canAndrew Bartlett5-13/+43
easily try this out. I also intend to use this for the selftest, but I'm chasing issues with the OpenlDAP (but not Fedora DS) backend. Andrew Bartlett (This used to be commit 0f457b1d2e20c36ab220b4a6711ce7930c4c7d21)
2007-10-10r23177: Add in a new provision-backend script. This helps set up the ↵Andrew Bartlett4-0/+241
OpenLDAP or Fedora DS backend. This required a new mkdir() call in ejs. We can now provision just the schema for ad2oLschema to operate on (with provision_schema(), without performing the whole provision, just to wipe it again (adjustments to 'make test' to come soon). Andrew Bartlett (This used to be commit 01d54d13dc66ef2127ac52c64ede53d0790738ec)
2007-10-10r23033: regenerate schema.ldif with minischema.jsStefan Metzmacher1-0/+137
metze (This used to be commit c9e017c00864d08ad6eb38092abd29810604e207)
2007-10-10r23027: Make sure the parent object always exists.Andrew Bartlett1-0/+4
Andrew Bartlett (This used to be commit 55c7c0906ccb741ab002f460164ccbbe56b55a98)
2007-10-10r22984: not everyone uses tridgell.net (fortunately)Andrew Tridgell1-1/+1
(This used to be commit f60817d7970ab449ac327f4da312f10350b9636f)
2007-10-10r22972: added the basic ldif needed to support group policies in Samba4. WinXPAndrew Tridgell2-0/+31
clients do correctly see our group policies, but the gpmc admin tool doesn't yet work to allow you to edit the policies (This used to be commit 4c6e01a585f59caf7d2d87833f5eedc018ed8acc)
2007-10-10r22921: This index saves another 7 seconds off a 'make quicktest', and is a ↵Andrew Bartlett1-0/+1
common search operator. Andrew Bartlett (This used to be commit a258455e757dcc67637502bedf7066580cbf4034)
2007-10-10r22887: and servicePrincipalName ....Andrew Tridgell1-0/+1
(This used to be commit 45d668d19f661cbaff257b91ed2525577e3cf0d2)
2007-10-10r22885: now we use kernberos more, we need to index on userPrincipalNameAndrew Tridgell1-0/+1
(This used to be commit 600d39e0bacfd669bdee0ea3aec6bdc02113993b)
2007-10-10r22756: Make it easier to setup an LDAP replica. Provision withAndrew Bartlett1-1/+5
--partitions-only (suggestions for a better name welcome) will setup the partitions records, but no any data in those partitions. This can then point at the already configured remote LDAP server. Andrew Bartlett (This used to be commit ee7b06fc832ca7c572205c7c268c3c7c552effa0)
2007-10-10r22572: Don't manually set objectGUID valuesAndrew Bartlett1-1/+0
(This used to be commit b5afec8b828e1aba231501b68aa4196b94a87c32)
2007-10-10r22531: Fix up OpenLDAP schema map to almost pass 'make test'.Andrew Bartlett2-2/+6
Andrew Bartlett (This used to be commit ef9320ae5b0b01bd39b60c22ff4e3698ac0ae9a7)
2007-10-10r22530: use message() to make --quiet workStefan Metzmacher1-2/+2
metze (This used to be commit 7c381b2d4f92622ac7efdcc6b8e405d418e2d4bb)
2007-10-10r22497: Support renaming objectclasses and attributes for the LDAP backend.Andrew Bartlett2-4/+12
OpenLDAP is fussy about operational attributes in user-supplied schema. Andrew Bartlett (This used to be commit d7cd4b768a7f56ced8ed94b9a63d01865ba7d10a)
2007-10-10r22494: Skip subSchema again, but we will need to remap this objectClass.Andrew Bartlett2-2/+1
Make the Fedora DS backend test again. Andrew Bartlett (This used to be commit 65327a0e4d61e2c9813720f04fe24ffc5c49278b)
2007-10-10r22478: Update the LDAP backend code to handle initialisation of multipleAndrew Bartlett11-4543/+6381
partitions onto the target LDAP server. Make the LDAP provision run before smbd starts, then stop the LDAP server. This ensures this occurs synchronously, We then restart it for the 'real run' (with slapd's stdin being the FIFO). This required fixing a few things in the provision scripts, with more containers being created via a add/modify pair. Andrew Bartlett (This used to be commit 860dfa4ea1ab2b62d4d4fe0644e0a9b882fdafa1)
2007-10-10r21673: Fix Samba 3 data read tests. I can't figure out why the upgrade one ↵Jelmer Vernooij1-1/+1
is broken, so that one is still disabled. (This used to be commit ef794f03d50022a77303c77045a04d9407d07cbc)
2007-10-10r21583: add missing CN=Stefan Metzmacher1-1/+1
metze (This used to be commit 199416a4d3d7e0f4c416c66cb92e49fc9a83a556)
2007-10-10r21435: ntPwdHash,lmPwdHash,sambaNTPwdHistory,sambaLMPwdHistory and krb5KeyStefan Metzmacher1-73/+88
are not used anymore metze (This used to be commit 9e91bd64492c45ee333f5e797d4d492378600356)
2007-10-10r21351: Change ldb ejs bindings return codes.Simo Sorce1-6/+7
We were returning just true/false and discarding error number and string. This checking probably breaks swat, will fix it in next round as swat is what made me look into this as I had no way to get back error messages to show to the users. Simo. (This used to be commit 35886b4ae68be475b0fc8b2689ca04d766661261)
2007-10-10r21298: protect windows password attributes tooStefan Metzmacher1-0/+11
metze (This used to be commit 5c779b3767b47c140fc658fb9aed0ebfd5d956f0)
2007-10-10r21135: Instead of having hooks to update keytabs as an explicit thing, updateAndrew Bartlett2-15/+15
them as a hook on ldb modify, via a module. This should allow the secrets.ldb to be edited by the admin, and to have things update in the on-disk keytab just as an in-memory keytab would. This isn't really a dsdb plugin, but I don't have any other good ideas about where to put it. Andrew Bartlett (This used to be commit 6ce557a1aff4754d2622be8f1c6695d9ee788d54)
2007-10-10r20956: cn and instanceType are autogenerated values, later we need to ↵Stefan Metzmacher1-16/+0
remove them from all ldif files, but for now only the ones used by the NET-API-BECOME-DC test metze (This used to be commit 7510b9ca4a79c12c31abcf4a64b5eaba2f6c2fe9)
2007-10-10r20859: fix typoStefan Metzmacher1-1/+1
metze (This used to be commit ba6ee1a098381683223d7efaafb04582a47ea871)
2007-10-10r20826: make the dsdb_control_current_partition struct public and allocate ↵Stefan Metzmacher1-0/+2
an oid for the control metze (This used to be commit 684eee52e8812f6d104d8706ab059643ff4faa46)
2007-10-10r20805: don't use hardcoded values for secrects.keytab and sam.ldbStefan Metzmacher1-2/+2
metze (This used to be commit c78e345feaef607b9297372aacb00ec068127785)
2007-10-10r20728: the DSDB_CONTROL_REPLICATED_OBJECT_OID control isn't used anymoreStefan Metzmacher1-1/+1
because we now use DSDB_EXTENDED_REPLICATED_OBJECTS_OID extended operation metze (This used to be commit 4380cc9ed6ac2e6c133b5a36f922b341474a8e7e)
2007-10-10r20678: add index for objectGUIDStefan Metzmacher1-1/+1
metze (This used to be commit e967b370173e1ae86632132851ab33d92c221291)
2007-10-10r20586: - allocate an OID range for LDB/LDAP extended operationsStefan Metzmacher1-0/+3
- allocate an OID for DSDB_EXTENDED_REPLICATED_OBJECTS_OID which will replace the DSDB_CONTROL_REPLICATED_OBJECT_OID soon metze (This used to be commit 6397f014482172573facd3d87d1f9eec1b320ac5)
2007-10-10r20577: - allocate an OID range for samba4 LDB/LDAP ControlsStefan Metzmacher1-0/+2
- allocate an OID for LDB Control that hold meta data when applying replicated objects metze (This used to be commit 2660c5ab211f353324452694b4bd5fd8bd17745b)
2007-10-10r20568: split out the rootdse ldifStefan Metzmacher3-20/+23
and set the isSyncronized = TRUE when we done metze (This used to be commit 5875ce1ac6ff694d07787ff0cf81b3429580311b)
2007-10-10r20565: configure the list of global ldb modules also in js codeStefan Metzmacher1-9/+1
metze (This used to be commit cbebe559a2563a3ab9dd2e002c79676a803b71a4)
2007-10-10r20560: make it possible to configure the backend and modulesStefan Metzmacher2-12/+18
for all partitions and make it not use LDAP in the variable names because it isn't specific to the ldap backend case. metze (This used to be commit 3e337ec2764038e4ff05c3e926220abaa5583702)
2007-10-10r20557: use ${DOMAINDN} instead of ${BASEDN}Stefan Metzmacher11-66/+66
metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-10-10r20554: - use ${ROOTDN} for the rootDomainNamingContextStefan Metzmacher1-1/+1
- the ${CONFIGDN} is a child of the ${ROOTDN} metze (This used to be commit ebbd8a83c982efdc58e53798d1fd191f08731005)
2007-10-10r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded pathsStefan Metzmacher12-704/+704
under ${BASEDN} metze (This used to be commit 09ca6aae12d8e10b76971cf269f7c62f228a4c87)
2007-10-10r20551: use variable instead of hardcoded value for the default siteStefan Metzmacher1-2/+2
metze (This used to be commit 21f433018afbb7b94089969f7ee9acda40ee1a70)
2007-10-10r20495: Further notes on joining with fedora DS.Andrew Bartlett3-3/+9
Add in a hook for adding an ACI, needed to allow anonymous access until we hook across a SYSTEM token to the LDAP server. Andrew Bartlett (This used to be commit f45504e2714680978f101b4a98516686a17531df)
2007-10-10r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.Andrew Bartlett2-2/+30
Add a new module entrypoint to handle the new, interesting and different mappings required for Fedora DS. Andrew Bartlett (This used to be commit 600c7f1a68c175b835ce45d13794a6f66bcc8493)
2007-10-10r20468: Patch from Martin Kuehl <kuehl@univention.de> to make it easier to loadAndrew Bartlett7-210/+235
into an exsting LDAP server. (Allow some parts to pre-exist, and try to blow away less data). Andrew Bartlett (This used to be commit 99faff0ad8fa12d596c599064a0125a6b3365134)
generated by cgit (git 2.34.1) at 2024-11-25 23:52:23 +0000