summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r11239: Use ${REALM} for the realm in rootdse.ldifAndrew Bartlett1-1/+1
Add the kpasswd server to our KDC, implementing the 'original' and Microsoft versions of the protocol. This works with the Heimdal kpasswd client, but not with MIT, I think due to ordering issues. It may not be worth the pain to have this code go via GENSEC, as it is very, very tied to krb5. This gets us one step closer to joins from Apple, Samba3 and other similar implementations. Andrew Bartlett (This used to be commit ab5dbbe10a162286aa6694c7e08de43b48e34cdb)
2007-10-10r11222: Small provision fixes: canonicalName is now generated, and the DC=Andrew Bartlett1-1/+0
list should be from the dnsdomain (ie lowercae). Andrew Bartlett (This used to be commit 10d692a1c216134b301b5851ce1e71ed93cc6164)
2007-10-10r11218: Always return the mutual authentication reply (needed for kpasswd),Andrew Bartlett1-0/+1
and remove now duplicated unwrap_pac(). Andrew Bartlett (This used to be commit 90642d54e02e09edc96b9498e66befda20dbb68d)
2007-10-10r11208: Add DNS entries for finding the kpasswd server to the default zone.Andrew Bartlett1-0/+7
Andrew Bartlett (This used to be commit 7e01ff11fdcd70b54e30b438076bf1293638c61e)
2007-10-10r11200: Reposition the creation of the kerberos keytab for GSSAPI and Krb5Andrew Bartlett1-0/+13
authentication. This pulls the creating of the keytab back to the credentials code, and removes the special case of 'use keberos keytab = yes' for now. This allows (and requires) the callers to specify the credentials for the server credentails to GENSEC. This allows kpasswdd (soon to be added) to use a different set of kerberos credentials. The 'use kerberos keytab' code will be moved into the credentials layer, as the layers below now expect a keytab. We also now allow for the old secret to be stored into the credentials, allowing service password changes. Andrew Bartlett (This used to be commit 205f77c579ac8680c85f713a76de5767189c627b)
2007-10-10r11113: fixed two small bugs in newuserAndrew Tridgell1-1/+2
- randpass() is now in the random ejs module, not global - don't dereference the undefined variable on getopt failure (This used to be commit 7e338c23f5ac351b362a9e07fd81ec07bc700484)
2007-10-10r11087: - add type,name,scope as attributes to winsRecords,Stefan Metzmacher1-1/+1
so you can use them in search filters, only for administration not used inside the winserver code - fix the samba3 ugrade scripts to create a correct samba4 wins.ldb metze (This used to be commit 9f3b6746d86583c48097da48c28f50f075bbd3e3)
2007-10-10r10955: finally worked out why our computer accounts were being identified ↵Andrew Tridgell1-0/+1
as users in mmc. The problem was that the samdb module was auto-adding objectClass=user for these accounts. That would be OK, as computer accounts are supposed to be in that objectClass, but mmc cares about the order of the values in the objectClass attribute! It looks for the last value, and takes that as the value to use when deciding how to manipulate the record. So, this patch adds an explicit objectClass=user to the record when it gets created, which tells the samdb module to not add it as well. That fixes the order. I suspect we are missing something else though - is objectClass supposed to auto-sort based on the schema? (This used to be commit 68c5f807fdb99fd605154d455e61a08293cbd2d0)
2007-10-10r10916: - finished the 'operational' ldb moduleAndrew Tridgell3-3/+3
- removed the timestamps module, replacing it with the operational module - added a ldb_msg_copy_shallow() function which should be used when a module wants to add new elements to a message on add/modify. This is needed because the caller might be using a constant structure, or may want to re-use the structure again - enabled the UTC time attribute syntaxes in the operational module (This used to be commit 61e8b010223ac6a0573185008f3719ba29574688)
2007-10-10r10855: Put the domain SID in secrets.ldb by default, and add http as aAndrew Bartlett2-1/+2
default SPN alias. Andrew Bartlett (This used to be commit e4fe5802dae544f4dabf0c6d04a55be1144d8820)
2007-10-10r10314: Apply the controvertial 'server role =' patch after discussion on ↵Andrew Bartlett1-2/+2
the list: This patch removes the 'domain logon' and 'domain master' controls from Samba4, in favour of a 'server role =' that users can actually understand. We can expand the list of roles as needed, and nobody has to figure out what a 'domain master' actually means. Andrew Bartlett (This used to be commit 31e755c2ced64dbd2681d5f6ef021a87dbeda689)
2007-10-10r10190: Do some very basic input checking when provisioning.Jelmer Vernooij2-1/+6
(This used to be commit 87f25fe49caa78422582337c5208a331ef5b8c15)
2007-10-10r9951: Add another value to the default HKLM.Jelmer Vernooij1-9/+13
Convert Samba3 policy "refuse machine pw change" to registry value. (This used to be commit a143234ac7622ef3ef87c80224927551a1452e4b)
2007-10-10r9898: Add extra registry key used by WinXP (see r9894)Jelmer Vernooij1-0/+3
(This used to be commit 7666993fa96916d9d849a636a1b30ca7f77354a2)
2007-10-10r9834: More tests for the upgrade from Samba3Jelmer Vernooij1-1/+8
(This used to be commit d2db164d6f674cada470e871c558c75f98244141)
2007-10-10r9829: Registry key and value names are case insensitiveJelmer Vernooij1-0/+4
(This used to be commit 96ccbd6402fa37338c49d9a55919a360e940bc48)
2007-10-10r9816: Work on testsuite for upgradeJelmer Vernooij2-12/+21
Add 'paths' object to provision code. (This used to be commit 488d737fb0ebbc2535d0ec17c14f0dc1eaf2a578)
2007-10-10r9805: Add 'data' property to param EJS objectJelmer Vernooij1-4/+0
Write out new smb.conf file. Parameters that have disappeared between Samba 3 and 4 will optionally be prefixed with 'samba3:' (This used to be commit 27eefbd9059fe0a3daca15a71da7b4cb88ed22ec)
2007-10-10r9793: Be more verbose, check for errors in upgrade script.Jelmer Vernooij1-4/+6
(This used to be commit b7c09df9e506f8048f69c4bdd1c3351e3b554e18)
2007-10-10r9786: Move ldb_map into ldb/modules/Jelmer Vernooij1-0/+0
Move samba3sam to dsdb/ (This used to be commit eb9d615bcd49328131613f64745760a90553b7f2)
2007-10-10r9754: Upgrading with the command line utility now works, at least partially (-:Jelmer Vernooij1-48/+6
Upgrading using SWAT should work as well now. (This used to be commit 8baa2ac377315ae8b365f58c2bda0bf3d0c5aec3)
2007-10-10r9744: - [upgrade.js] Start working on smb.conf conversion.Jelmer Vernooij1-5/+50
- [ldb_map] Support storing non-mappable data in a fallback LDB (This used to be commit 435e4c6389b9d9b545beec8036289620ee5883db)
2007-10-10r9735: More work on generating a valid Samba4 configuration using theJelmer Vernooij1-0/+85
Samba3 data (both console and SWAT) (This used to be commit d569465dc4def55c27878028f2fc762960f453d8)
2007-10-10r9646: fixed error messageAndrew Tridgell1-1/+1
(This used to be commit 804f2485d059d60c4a41b6094c4cf568e6989397)
2007-10-10r9477: Convert popt options to an ejs object. Doesn't seem to break anythingRafal Szczesniak2-7/+7
except of popt help (-h) option (unexpected ?). rafal (This used to be commit 1990793b23d6198a85ce1bdf6ad43e12015db203)
2007-10-10r9319: updated newuser script for new OO style for nss objectAndrew Tridgell1-1/+2
thanks to Hotarut for spotting this (This used to be commit 3f30c6118ba22fbf52068630f48bcde82182b8a6)
2007-10-10r9219: by default be a DC, as the provisioning scripts assume that in other ↵Andrew Tridgell1-0/+3
parts (This used to be commit f8949869bc114590c9260ab7b9d97f71a552a6a7)
2007-10-10r8999: Use the timestamps module to ensure we update times.Andrew Bartlett1-0/+5
Andrew Bartlett (This used to be commit e6abd9f70449e9c5716cd36565442873bdc7d44c)
2007-10-10r8902: Revert the small change as Andrew Bartlett asked. Now, let's goRafal Szczesniak1-1/+1
and fix howto.txt. rafal (This used to be commit 5bf5559e0f71455ddf62eef11956de12d104459b)
2007-10-10r8898: Fix provision script to actually work, since location of smbscriptRafal Szczesniak1-1/+1
has changed. rafal (This used to be commit a59594d2d84417bc0c87be953daf9152b968c61a)
2007-10-10r8857: please don't get fancy with embedded boolean statements in jsAndrew Tridgell1-1/+3
code. Especially as this is a new language for most Samba developers, it is far better to err strongly on the side of readability rather than trying to save a line of code by using fancy tricks (This used to be commit 3228644cf898cc9b3386675f40f2f7e52f69e5c0)
2007-10-10r8790: Finish the migration of aliases and privilages with SamSync, by addingAndrew Bartlett4-460/+467
templating support for foreignSecurityPrincipals to the samdb module. This is an extension beyond what microsoft does, and has been very useful :-) The setup scripts have been modified to use the new template, as has the SAMR and LSA code. Other cleanups in LSA remove the assumption that the short domain name is the first component of the realm. Also add a lot of useful debug messages, to make it clear how/why the SamSync may have gone wrong. Many of these should perhaps be hooked into an error string. Andrew Bartlett (This used to be commit 1f071b0609c5c83024db1d4a7d04334a932b8253)
2007-10-10r8778: index on nCName in sam.ldb. This was costing us about 75% of the time ↵Andrew Tridgell1-0/+1
in each smb login (This used to be commit f6d24d063ad1a96c326ce6a60adfc224d905afc6)
2007-10-10r8740: Extend the rdn_name module to handle adding the rdn as an attribute. ie:Andrew Bartlett1-1/+1
dn: cn=foo,ou=bar objectClass: person implies dn: cn=foo,ou=bar objectClass: person cn: foo (as well as a pile more default attributes) We also correct the case in the attirbute to match that in the DN (win2k3 behaviour) and I have a testsuite (in ejs) to prove it. This module also found a bug in our provision.ldif, so and reduces code complexity in the samdb module. Andrew Bartlett (This used to be commit 0cc58f5c3cce12341ad0f7a90cdd85a3fab786b3)
2007-10-10r8677: The first part of the domain name may not be equal to the netbios ↵Andrew Bartlett1-2/+1
domain name. Remove the use of flatname from the main domain object, we no longer reference it. Andrew Bartlett (This used to be commit 2303e24be74570187b23c3d31d0433263c83ba7e)
2007-10-10r8667: Further simply the provision script, by removing the 'name' attribute.Andrew Bartlett3-62/+1
This is now calculated on the fly for every add and modify. Andrew Bartlett (This used to be commit ed1f2e029c840d2b3ecb49dbe6e8cd67588eeeed)
2007-10-10r8662: Revert change to CN=Cert Publishers, this group still needs toAndrew Bartlett1-0/+2
override the template for these attributes. Andrew Bartlett (This used to be commit 3462cbadb285313dfd88234b144d1921d2bcc880)
2007-10-10r8660: Use templates for the initial provision of user and computer accounts.Andrew Bartlett2-232/+150
This ensures the templating code is used, and also makes it clearer what I need to duplicate in the vampire area. Also fix a silly bug in the template application code (the samdb module) that caused templates to be compleatly unused (my fault, from my commit last night). Andrew Bartlett (This used to be commit 4a8ef7197ff938942832034453f843cb8a50f2d1)
2007-10-10r8650: Use the timestamps and a new objectguid module rather than placingAndrew Bartlett2-201/+51
boilerplate attributes in every entry in provision.ldif. The next step will be to use templates. Andrew Bartlett (This used to be commit 940ed9827f5ab83b668a60a2b0110567dd54c3e2)
2007-10-10r8643: - make lp_configfile() work againAndrew Tridgell1-0/+6
- get rid of redundeny dyn_CONFIGFILE argument to lp_load() - fixed provisioning to work with completely pristine install, creating an initial smb.conf is none is present - added lp.set() and lp.reload() to loadparm ejs object interface (This used to be commit c2691ef7126ddcee5f95970b78759b40a049d0a7)
2007-10-10r8558: move newuser logic into the provision.js libAndrew Tridgell1-71/+2
(This used to be commit b6ef32ddd1fdca0d40a12f34fa5f7a484b3c2071)
2007-10-10r8459: move to the more portable script execution methodAndrew Tridgell2-2/+4
(This used to be commit d7e4dcaaaa37c4992f763e37ca2d655e4d267283)
2007-10-10r8415: get rid of the last 2 runtime perl scriptsAndrew Tridgell2-377/+0
(This used to be commit b775884474bd28c0c3d45546b1bf3ac52601ed24)
2007-10-10r8410: converted the newuser script to jsAndrew Tridgell3-133/+142
(This used to be commit b90aa3c5a7cd7e91a8fc804c3cd9f2155761cf28)
2007-10-10r8373: New wildcard matching code.Simo Sorce1-3/+0
This code applies correct ldap standard wildcard matching code removes WILDCARD matching from tdb @ATTRIBUTES, that's now handled independently adds some more tests for wildcard matching fixes dn comparison code in ldb_match (This used to be commit 4eb5863042011988d85092d7dde3d809aa15bd59)
2007-10-10r8372: - split out provisioning logic into a separate ejs libraryAndrew Tridgell1-197/+8
- added a provisioning web page (This used to be commit 7476cb94132cf2849ec19360468904ca6fe8de2c)
2007-10-10r8355: - added a vsprintf() functionAndrew Tridgell1-2/+0
- removed the --outputdir option from provision, as its not used any more (as ejs knows the real paths) (This used to be commit abbf9c703c17c2edc2d978dade3619a96c38d0d9)
2007-10-10r8350: fixed the --root option to provisionAndrew Tridgell1-2/+1
(This used to be commit 506e07d6e064375aaee20133d722b6b44d63b083)
2007-10-10r8347: replace the perl provision script with a ejs scriptAndrew Tridgell2-527/+66
I don't mind depending on perl at compile time, but I want to avoid depending on it at runtime. This also will make it easy to add web install wizard (This used to be commit f27a68176984c6856fad2e3a028458eb96943f80)
2007-10-10r8345: make the dn on the hklm ldif validAndrew Tridgell1-9/+9
Jelmer, can you check this is OK? (This used to be commit 6d416656a02d02c6e60d980ba406a4b72e84811b)
generated by cgit (git 2.34.1) at 2024-12-18 22:07:25 +0000