summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2011-11-17s4-s3-upgrade Test getdomainsid as wellAndrew Bartlett1-0/+2
2011-11-17s4-provision permit server role to be the ROLE_ strings from s3Andrew Bartlett1-6/+1
Also convert between the aliases in one single place. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s4-s3-upgrade Add test of net getlocalsid after the upgradeAndrew Bartlett1-0/+4
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-16provision: Set the security descriptor while creating partitionsAmitay Isaacs1-0/+2
With Matthieu's patch, the setting of security descriptor on partition dn at create time works correctly. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
2011-11-10s4-setup Remove servicePrincipalName: DNS/${DNSDOMAIN} from new installationsAndrew Bartlett2-2/+0
This servicePrincipalName is incorrect (windows does not use that servicePrincipalName, as it targets the server it is updating, not the root of the DNS tree), and now that we have multiple DNS backends that use the internal database, it is quite incorrect (as it cannot exist on more than one account). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Nov 10 01:11:46 CET 2011 on sn-devel-104
2011-11-09s4-provision: Create ldap records for DNS partitions similar to windowsAmitay Isaacs1-4/+2
this allows easy comparison between windows and samba ldap trees Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 9 08:27:46 CET 2011 on sn-devel-104
2011-11-08s4-provision Remove options for LDAP backend to reduce user confusionAndrew Bartlett2-28/+7
We do not support the LDAP backend any more, but keep the code in case someone comes up with an interesting use case that could leverage this in a very particular situation. In order to keep the code, we must test it, so we keep just this much of the support around. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 8 04:33:49 CET 2011 on sn-devel-104
2011-10-23s4: samba-tool subcommand rename - change samba-tool user add to samba-tool ↵Theresa Halloran3-5/+5
user create Signed-off-by: Theresa Halloran <thallora@linux.vnet.ibm.com> Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2011-10-27s4:wscript - install the two missing files "dlz_bind9.so" and "named.conf.dlz"Geza Gemes1-2/+2
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Oct 27 20:27:32 CEST 2011 on sn-devel-104
2011-10-19s4-s3-upgrade rename samba-tool domain samba3upgrade --libdir to --dbdir for ↵Andrew Bartlett1-2/+2
clarity The things pointed at are not typically in a directory called lib, so avoid confusing our administrators. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Oct 19 15:43:04 CEST 2011 on sn-devel-104
2011-10-19s4-s3-upgrade test upgrade without a wins.datAndrew Bartlett1-0/+3
2011-10-17s4 provision: Default to win2k3 domain function levelKai Blin1-1/+1
2011-10-17s4 provision: Reword opinionated dns backend help text, add NONE backendKai Blin1-3/+11
2011-10-17s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILEKai Blin1-2/+2
2011-10-16provision: fix the docMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Oct 16 01:31:21 CEST 2011 on sn-devel-104
2011-10-16s4: check that the xattr are supported in the folder where we want to provisionMatthieu Patou1-1/+5
By default we were checking this on the default folder for tempfile.NamedTemporaryFile (usualy /tmp) but this folder can be mounted on tmpfs (which didn't support xattr currently). Now we should check on the filesystem where the provision will be done.
2011-10-07s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher1-0/+1
Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
2011-10-06s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell1-0/+1
this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-04s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell1-0/+1
this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-02s4 provision: Set server role default when called from command line to 'dc'Kai Blin1-0/+3
2011-09-22s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell1-0/+1
this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
2011-09-13s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett1-4/+25
The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
2011-09-13s4-provision Perform 'modify' operations as systemAndrew Bartlett2-8/+7
We need this so that we can modify the cn=configuration partition when we are setting up a new subdomain. The serverReference on our ${SERVERDN} is in that partition, and without this change creating a new subdomain fails due to ACLs. Andrew Bartlett
2011-09-13s4-provision Split addition of users and well known principalsAndrew Bartlett2-136/+136
If we are provisioning a subdomain, then these are already in cn=configuration. Andrew Bartlett
2011-09-13s4-provision Add initial support for joining as a new subdomainAndrew Bartlett4-50/+52
To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
2011-09-13s4-python: Fix some formatting issues.Jelmer Vernooij1-156/+163
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Sep 13 03:51:13 CEST 2011 on sn-devel-104
2011-09-12s4-s3-upgrade Remove upgrade_from_s3 script, use samba-tool domain samba3upgradeAndrew Bartlett2-134/+5
2011-09-12s4-provision: Add named.conf template for BIND9 with DLZ supportAmitay Isaacs1-0/+14
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-12s4-provision: Add Seperate instructions for BIND 9.7.x and 9.8.x.Amitay Isaacs1-33/+53
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-12s4-provision: Enable SPNs for DNSAmitay Isaacs1-3/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs1-0/+3
This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
2011-09-08s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs5-3/+129
This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Add DNS backend option to provisionAmitay Isaacs1-0/+4
This option is introduced temporarily to test bind9 backend with and without dlz_dlopen module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: exit is not imported directed, use sys.exitAmitay Isaacs1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Extract dns account creation as separate ldifAmitay Isaacs2-92/+12
MicrosoftDNS container and LDAP entries for root servers will be added by sambadns.py directly. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-provision Use ProvisioningError and the eadbAndrew Bartlett1-1/+22
The eadb flag tells us to avoid using system extended attributes, typcially if we are not running as root (ie, in a test environment). The ProvisioningError class allows us to return failures to the upgrade_from_s3 script which can then be detected correctly by the selftest framework. Andrew Bartlett
2011-09-05s4-provision Add realm to DC configuration in upgrade_from_s3 testAndrew Bartlett1-0/+1
2011-08-26s3_upgrade: Set lock directory to correct directoryAmitay Isaacs1-1/+2
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-26s3_upgrade: Update commandline options and use updated samba3 python moduleAmitay Isaacs2-22/+65
upgrade_from_s3 script now requires samba3 configuration file and target directory for samba4 database. In addition, it either uses --libdir option or --testparm option to correctly guess the paths for samba3 databases (private dir and state directory). Usage: upgrade_from_s3 [options] <configuration_file> <targetdir> Input arguments are: <configuration_file> - path to existing smb.conf <targetdir> - directory in which samba4 database will be created In addition, specify either samba3 database directory (with --libdir) or samba3 testparm utility (with --testparm). Before using passdb interface, initialize s3 loadparm context using correct path settings for private dir and state directory. Export account policy from s3 to s4. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-25s4-dns: fixed dns_update_list for multi-domain forestsAndrew Tridgell1-13/+28
this should now match the DNS entries of w2k8r2c Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-08-25s4-dns: fixed DNS and SPN update lists for multi-domain supportAndrew Tridgell2-3/+3
fixed DNS to point at forest root Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-08-22s4-provision set passdb backend to 'samba4' in template smb.conf filesAndrew Bartlett3-0/+8
This will allow smbpasswd, net sam and pdbedit to 'just work' against the newly created databases. Andrew Bartlett
2011-08-13upgrade: Add missing bits for the s3 to s4 upgrade scriptAmitay Isaacs1-17/+6
Use passdb backend to import/export users Remove unused options for upgrade_from_s3 command (--blank) and credentials options Config file is specified with -s/--configfile option and no need to specify as an argument. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13tests: Update test for s3 to s4 upgrade with two casesAmitay Isaacs1-0/+62
S3-member to S4-member and S3-dc to S4-dc Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13s4-scripting Rename passdb upgrade routine to avoid conflict with ↵Andrew Bartlett1-4/+4
upgradeprovision
2011-08-12s4-provision: create dsServiceName in @ROOTDSE in GUID formAndrew Tridgell1-0/+2
this allows for handling of server renames as the GUID doesn't change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-04ldb: added a new always-fail ldap extended match OIDAndrew Tridgell1-0/+8
this is used when rewriting filter rules to replace a filter rule with one that is guaranteed not to match Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-28samba-tool: updated test suite to account for newuser changeGiampaolo Lauria3-5/+5
Updated test suite invocations of newuser to "user add" as the newuser functionality is now being moved to "user add" Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: fixed samba-tool user syntaxAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-21samba-tool: update test suite for the new domain objectGiampaolo Lauria1-1/+1
Changed test suite to reflect the changes from setpassword to "domain setpassword" to fit the object-action model Signed-off-by: Andrew Tridgell <tridge@samba.org>