summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2008-01-18Don't set 'name' in the LDIF, this is handled by the rdn_name module.Andrew Bartlett1-7/+0
Andrew Bartlett (This used to be commit e9003feb1b9eb3d5b82e82910b63306e5ecc2908)
2008-01-18Don't manually specify instanceID in the template files.Andrew Bartlett10-43/+0
The instanceid module creates this automaticlly, so we don't need this any more. Andrew Bartlett (This used to be commit f6dbdf34e8a790f460b705100e45ee3928b6b1b3)
2008-01-18Use syncrepl on all OpenLDAP databases (creates contextCSN attribute)Andrew Bartlett1-0/+12
This module needs to be loaded on each database, not just the main partition. We use it to create the usn for the entries. Andrew Bartlett (This used to be commit ffb12aad8a80bb90d66dc66baba81b856622a6bb)
2008-01-18Remove --ldap-base from the python provision scriptAndrew Bartlett1-8/+2
(This is a merge from the ejs script) Andrew Bartlett (This used to be commit d822dfa017b84895222ace8c44935fb872930548)
2008-01-17provision: simplfy by removing old code to manually create baseDNs.Andrew Bartlett5-11/+3
Previously, we would create the first record in the DB as an LDIF file, with the expectation that the administrator would use slapadd to create the database. We now do everything over LDAP, which is far simpler, and allows the LDB module chain to do its work, without special cases. Also fix naming of the output schema when suggesting the comamnd line to run ad2oLschema in provision-backend. Andrew Bartlett (This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f)
2008-01-17OpenLDAP backend: Place the refint overlay after the memberof overlayAndrew Bartlett1-2/+3
This still doesn't work for me, but is the recommended order. Andrew Bartlett (This used to be commit 4c869c54c2b8125fc88e58bbfddf1975476978a5)
2008-01-16Start generating a configuration for the refint overlay. ThisAndrew Bartlett1-0/+7
OpenLDAP module should ensure that after a subtree rename, attributes are still consistant. Andrew Bartlett (This used to be commit f7f765c29b1aca1179a47bdd8712917c3f244f15)
2008-01-11Add in new module to normalise DNs being returned from OpenLDAP. ThisAndrew Bartlett1-2/+2
fixes the case of the attribute in teh DN. Fix option spelling for example re-provision Andrew Bartlett (This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
2008-01-11Make Samba4 and Fedora DS happierAndrew Bartlett3-0/+24
Recent changes to Samba4 have made the Fedora DS backend fail. This is a start on fixing that. Andrew Bartlett (This used to be commit 48dc07902ffb792532ff216e507e53103d448b7b)
2008-01-07r26691: registry: Add subkeys required for Server Manager Alerts and ↵Jelmer Vernooij1-0/+9
Peplication. See bugs 4934 and 4935. (This used to be commit fdd2ba336b4cf742f6e59253beab5dd226a87a85)
2008-01-06r26686: Fix bug 5143 by Jason Tarbet. This prevented an easy cut-and-paste ofAndrew Bartlett1-1/+1
the provision options used. Andrew Bartlett (This used to be commit 51cd93344dfeb3556fada523e38bbcd7e51fbbe1)
2007-12-31r26636: Remove useless 'backend' parameter, and make the memberof overlay ↵Andrew Bartlett1-3/+2
use global. Andrew Bartlett (This used to be commit 3b6f461e9a1b0fee7a589b8d171f4fcec6340ca4)
2007-12-31r26635: The OpenLDAP folks have been very accommodating, and their memberof ↵Andrew Bartlett1-0/+1
plugin allows the error being returned to be adjusted. Andrew Bartlett (This used to be commit f2731fddf07dfda5d69ad19851dab8f82b05f1a5)
2007-12-28r26622: python: Update license version, clarify copyright.Jelmer Vernooij1-1/+3
(This used to be commit 3ee62094074d74b6c69948730f2892f0a430f40b)
2007-12-28r26621: vampire: Add simple Python-based vampire scriptJelmer Vernooij1-0/+54
(This used to be commit 46580d51d3e40ef83754fceefa392fe1df38e37d)
2007-12-26r26610: Write out a memberof.conf, to run the memberof plugin on all linkedAndrew Bartlett2-0/+35
attributes, as found in the schema. Index 'cn', as otherwise exact match searches on this attribute always fail (need to figure out what is so special about cn in OpenLDAP). Andrew Bartlett (This used to be commit 5a4a2d10bc5729d4adac4b173b0dc05e2e076c32)
2007-12-26r26598: Simplify the way Python tests are run.Jelmer Vernooij2-0/+4
(This used to be commit d649f73431fc993e31522e7fc8e1e35e0a4421d8)
2007-12-26r26596: Fixed upgrade.py.Jelmer Vernooij2-18/+23
Added blackbox tests for provision and upgrade Python scripts. Clean up temporary files created by the Python tests. (This used to be commit 2227fb6df62240cae64d27a1920d878316f819fc)
2007-12-26r26593: - More work on the python versions of samba3dump and the samba3sam ↵Jelmer Vernooij2-144/+32
tests. - Initial work converting the upgrade code to Python. - Removed the old EJS upgrade code because it has been broken for a long time. (This used to be commit 150cf39fbd4fe088546870fb0d8f20c0d9eb4aca)
2007-12-24r26562: Fix provisioning using Python.Jelmer Vernooij1-1/+1
(This used to be commit b07ca944ba62a3f3de58c06b66533c0953a32de9)
2007-12-21r26535: Get rid of all-knowing ProvisionSettings object.Jelmer Vernooij1-20/+16
(This used to be commit 40bf88c8a70e8379a6081cb6050034bcd7ae56eb)
2007-12-21r26526: Fix argument value.Jelmer Vernooij1-1/+1
(This used to be commit af28f0c56d8e5ccc6ce8916d5bbdf9045e1fb47e)
2007-12-21r26523: Refactor provisioning code.Jelmer Vernooij1-1/+1
(This used to be commit ac1083178f9e521dcd5d3d8b5199abcb00159adf)
2007-12-21r26520: More Python updates.Jelmer Vernooij1-1/+1
(This used to be commit a8b1fe15ac853082961132ede061fe1556ae29f7)
2007-12-21r26517: Add functions for setting and getting parameters on a LoadParm.Jelmer Vernooij1-6/+6
Pass loadparm context along to Ldb contexts. Other minor Python improvements. (This used to be commit 7a15b486bae8fb774058b2d94cc12b7b01ee6ac0)
2007-12-21r26509: Don't make boolean options eat the next argument.Jelmer Vernooij1-3/+4
(This used to be commit b4ae4cbfe5b66364f437a76aa0a4f82e9bc39ce1)
2007-12-21r26506: Start running (really trivial) tests for upgrade script.Jelmer Vernooij1-19/+14
(This used to be commit 73bd4a9566d15f85a971e3a87cefbec2e2eece1c)
2007-12-21r26505: Add python bindings for some samdb-related functions, improve ↵Jelmer Vernooij1-3/+3
provisioning in python. (This used to be commit d2402251666738c0372bbbaeaa1d26c06e254033)
2007-12-21r26503: Change order of arguments in param interface so it's easier to make theJelmer Vernooij1-6/+6
section name optional. Fix several smaller bits and pieces in the Python code. (This used to be commit 1b89311e5fa4fcde060df50e580dc221205cc8ca)
2007-12-21r26475: Add ldb.set_credentials function.Jelmer Vernooij2-6/+12
(This used to be commit dbebb4ef477d2c8de7b8d1e5cde9b9dada47044f)
2007-12-21r26424: Patch and hits from Howard Chu <hyc@symas.com> for our automated setupAndrew Bartlett1-1/+1
of OpenLDAP. This makes it consistant with the Fedora DS setup, and doesn't mix both hdb and bdb. Andrew Bartlett (This used to be commit 1ffada95d269c8f7d054bec7f6eaff8449995d40)
2007-12-21r26370: Import upgrade script in Python.Jelmer Vernooij1-0/+61
(This used to be commit 277f2165241dafe68e31a8197194c94d9d4a535e)
2007-12-21r26366: Import provision scripts in Python.Jelmer Vernooij1-0/+180
(This used to be commit 090c799f98adf2c4186daca445c81b4e26e91f2f)
2007-12-21r26305: Update template files and testsuite to try and work with currentAndrew Bartlett2-4/+5
openldap, and fully support different LDAP server locations. Andrew Bartlett (This used to be commit a00bb942537f0f638c2a8295770749cb4b5d9ef3)
2007-12-21r26298: Use metze's schema loading code to pre-initialise the schema into theAndrew Bartlett5-36/+21
samdb before we start writing entries into it. In doing so, I realised we still used 'dnsDomain', which is not part of the standard schema (now removed). We also set the 'wrong' side of the linked attributes for the masteredBy on each partition - this is now set in provision_self_join and backlinks via the linked attributes code. When we have the schema loaded, we must also have a valid domain SID loaded, so that the objectclass module works. This required some ejs glue. Andrew Bartlett (This used to be commit b0de08916e8cb59ce6a2ea94bbc9ac0679830ac1)
2007-12-21r26245: Make it easier to handle the LDAP backend, with it's differing needs,Andrew Bartlett2-1/+2
by seperating the modules list into parts. That way, we can remove the modules that the backend will provide. Andrew Bartlett (This used to be commit d67e5c7896f6d3064298897ae4d3204498824b06)
2007-12-21r26137: Rename the entryUUID module to better match it's purpose: being aAndrew Bartlett2-2/+3
simple ldap mapping (a complex mapping will follow). Fix the module to handle 'name' better, rather than using the 'name' attribute built into OpenLDAP, rename to samba4RDN. We need to see if this can be handled in the backend. Also rename the functions and inernal module name to entryuuid for consistancy. Andrew Bartlett (This used to be commit a7be80766f4270d63433bbd6a976ebf302ed3433)
2007-12-21r25960: Enable checks on the validity of the search base on sam.ldb in Samba4.Andrew Bartlett2-0/+4
Remove bogus check to return NO_SUCH_ENTRY in ldap_backend.c, as this error is now correctly emited from ldb. Andrew Bartlett (This used to be commit ed57862b90812e5a38ca81935b131338112fb19f)
2007-12-21r25940: Rework the samldb and templates handling.Andrew Bartlett1-8/+14
Templates just don't belong in the sam.ldb, as they don't obey any of the other rules. This moves them to a seperate templates.ldb. In samldb, this patch reworks the duplicate SID and Name detection code, to use ldb_search_exp_fmt() rather than gendb_search. This returns far more useful errors, which we now handle and report better. The call to samdb_search_for_parent_domain() has been moved in samldb, to allow both the account and SID uniqueness checks to be in the same domain. This function also returns better errors. dcesrv_drsuapi.c is updated for the new prototype of samdb_search_for_parent_domain() Andrew Bartlett (This used to be commit f1ab90c88c782c693b41795d70368650806543b5)
2007-12-21r25921: Now also listen on ldapi by default in the LDAP serverAndrew Bartlett1-0/+28
Create a phpLDAPadmin configuration file example to use ldapi to talk to Samba4 Andrew Bartlett (This used to be commit 54f4c8ba6127757fd272bd97e301188eb69977ed)
2007-12-21r25891: Test that we get the correct return value when we attempt to referenceAndrew Bartlett1-121/+121
invalid entries with a linked attribute. Make Samba4 pass that test, by fixing a silly bug in the linked_attributes module. (By passing down the 'original' request structure, tdb would override our handle, and therefore we would never be called for the 'wait', which collects the errors). Fix up the provision templates to handle the newly required referential integrity. Andrew Bartlett (This used to be commit 0377d85bbdcb2c4f110b0519005f0d1d10bc0c0b)
2007-12-21r25753: Move cn=rootdse to @ROOTDSE to avoid being caught up in schema ↵Andrew Bartlett2-2/+2
restrictions. Andrew Bartlett (This used to be commit f3390c9054244c0e4381007b36bbac9a17800570)
2007-12-21r25747: Implement linked attributes, for add operations.Andrew Bartlett1-10/+0
Much more work is still required here, particularly to handle this better during the provision, and to handle modifies and deletes, but this is a start. Andrew Bartlett (This used to be commit 2ba99d58e9fe1f8e4b15a58a2fdfce6e876f99b4)
2007-12-21r25616: Fedora DS now has a way to install the schema and extra configurationAndrew Bartlett2-5/+7
as part of the setup inf file. Andrew Bartlett (This used to be commit 6c8987464e198430885b9e71b54fed6758886fdd)
2007-10-10r25452: Move the creation of the server entry to the self join, as this makesAndrew Bartlett2-23/+23
no sense on a member server. Andrew Bartlett (This used to be commit 70467fa4c5d25b83c48dbbeb8236d5acb4550e77)
2007-10-10r25451: Rework the display of provision options to use printf syntax, andAndrew Bartlett1-10/+22
avoid %s in the substituted strings from becoming a problem. Andrew Bartlett (This used to be commit 3c4f107239eb6b2f4022a4eac06c5dd3ace71174)
2007-10-10r25450: Make it easier to test with a particular version of OpenLDAP, byAndrew Bartlett1-3/+3
setting OPENLDAP_PATH, move to using hdb as the backend (allows subtree renames), and re-enable the --quiet option. Andrew Bartlett (This used to be commit a186a0fa68cdcfb3abd430534657e5e278a5ebda)
2007-10-10r25354: Thanks to Amin Azez <azez@ufomechanic.net> for finally getting me toAndrew Bartlett1-0/+0
fix a provision without an smb.conf already setup. Andrew Bartlett (This used to be commit a00044d2294b482ea83e9d7392eb8113a9c94b6e)
2007-10-10r25303: Print out the options the provision script generated. This shouldAndrew Bartlett1-1/+12
help users produce predictable setups. Andrew Bartlett (This used to be commit 9789bd3c0a3f75f19fa523b251736cf6cdc157ce)
2007-10-10r25299: Modify the provision script to take an additional argument: ↵Andrew Bartlett9-65/+81
--server-role This must be set to either 'domain controller', 'domain member' or 'standalone'. The default for the provision now changes to 'standalone'. This is not because Samba4 is particularlly useful in that mode, but because we still want a positive sign from the administrator that we should advertise as a DC. We now do more to ensure the 'standalone' and 'member server' provision output is reasonable, and try not to set odd things into the database that only belong for the DC. Andrew Bartlett (This used to be commit 4cc4ed7719aff712e735628410bd3813c7d6aa40)