summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2012-04-19s4-provision: Always give the warning if we are using eadb. It really ↵Andrew Bartlett1-3/+6
should be for testing only
2012-04-18s4:samdb:rootdse: implement the schemaUpgradeInProgress operation in ldap modifyMichael Adam1-0/+1
This is preliminary in that it is implemented as a no-op for a start just to be able to successfully answer the request, which seems to be sufficient in order to e.g. survive the exchange schema extensions. Signed-off-by: Matthieu Patou <mat@matws.net> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Apr 18 02:48:28 CEST 2012 on sn-devel-104
2012-04-16provision: Simplify handling of default for --server-role.Jelmer Vernooij1-8/+4
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Apr 16 18:12:24 CEST 2012 on sn-devel-104
2012-04-16provision: Simplify handling of default for --function-level.Jelmer Vernooij1-4/+3
2012-04-16provision: Simplify handling of default for --dns-backend option.Jelmer Vernooij1-6/+2
2012-04-16Add an option to have s3fs as file server for samba4Matthieu Patou1-1/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
2012-04-16s4-provision: Update configuration lines for dlz_bind9Amitay Isaacs1-1/+6
This adds configuration lines for BIND versions 9.8.x and 9.9.x. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 16 03:52:14 CEST 2012 on sn-devel-104
2012-03-26LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD modeMatthias Dieter Wallnöfer1-0/+1
Achieve this by introducing a "disallowDNFilter" flag. Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-03-21s4-provision: don't ask only 3 times for passwd in interactive modeBjörn Baumbach1-1/+1
Signed-off-by: Michael Adam <obnox@samba.org>
2012-03-21s4-provision: add password verification in interactive modeBjörn Baumbach1-3/+9
Since we do not print the password out (anymore), it is necessary to verify the entered password. Signed-off-by: Michael Adam <obnox@samba.org>
2012-03-08s4-selftest: create the st/provision if it didn't exists alreadyMatthieu Patou1-0/+2
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Mar 8 00:25:24 CET 2012 on sn-devel-104
2012-02-27provision: Write configuration without help of templates.Jelmer Vernooij3-45/+0
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 27 00:52:46 CET 2012 on sn-devel-104
2012-02-26provision: Leave result reporting up to caller.Jelmer Vernooij1-1/+3
2012-02-07provision: Make sure target directory is created early.Jelmer Vernooij1-7/+13
This is necessary when using the target directory to store temporary files. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Feb 7 02:45:37 CET 2012 on sn-devel-104
2012-02-07Use named argument 'dir' instead of 'prefix' on NamedTemporaryFile for ↵Horacio G. de Oro1-2/+2
source4/setup/provision Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2012-02-01selftest: Remove unused support for --exeextAndrew Bartlett1-3/+3
2012-01-24python: Change except: statement to except Exception:Amitay Isaacs1-1/+1
This way we only catch true exceptions and keyboard interrupts are not caught here. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
2012-01-10s4:provision: add a server services line to the smb.conf template for the dcMichael Adam1-0/+2
Signed-off-by: Kai Blin <kai@samba.org>
2011-12-14setup: Fix phpldapadmin configuration for version 1.2.xAmitay Isaacs1-18/+10
2011-11-29s4-provision: Make BIND9_DLZ as the default backend for DNSAmitay Isaacs1-3/+3
2011-11-29s4-provision: Create a samdb copy for access by dlz_bind9 moduleAmitay Isaacs1-0/+2
This creates a copy of rootdse, configuration and schema partitions for dlz_bind9 use in dns/ directory. Since dlz_bind9 requires write access to DNS partitions (DomainDnsZones and ForestDnsZones), those partitions are hard-linked (or symlinked) to the actual partitions. An empty domain partition is created so samdb layer can work.
2011-11-17s4-s3-upgrade Test getdomainsid as wellAndrew Bartlett1-0/+2
2011-11-17s4-provision permit server role to be the ROLE_ strings from s3Andrew Bartlett1-6/+1
Also convert between the aliases in one single place. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s4-s3-upgrade Add test of net getlocalsid after the upgradeAndrew Bartlett1-0/+4
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-16provision: Set the security descriptor while creating partitionsAmitay Isaacs1-0/+2
With Matthieu's patch, the setting of security descriptor on partition dn at create time works correctly. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
2011-11-10s4-setup Remove servicePrincipalName: DNS/${DNSDOMAIN} from new installationsAndrew Bartlett2-2/+0
This servicePrincipalName is incorrect (windows does not use that servicePrincipalName, as it targets the server it is updating, not the root of the DNS tree), and now that we have multiple DNS backends that use the internal database, it is quite incorrect (as it cannot exist on more than one account). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Nov 10 01:11:46 CET 2011 on sn-devel-104
2011-11-09s4-provision: Create ldap records for DNS partitions similar to windowsAmitay Isaacs1-4/+2
this allows easy comparison between windows and samba ldap trees Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 9 08:27:46 CET 2011 on sn-devel-104
2011-11-08s4-provision Remove options for LDAP backend to reduce user confusionAndrew Bartlett2-28/+7
We do not support the LDAP backend any more, but keep the code in case someone comes up with an interesting use case that could leverage this in a very particular situation. In order to keep the code, we must test it, so we keep just this much of the support around. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 8 04:33:49 CET 2011 on sn-devel-104
2011-10-23s4: samba-tool subcommand rename - change samba-tool user add to samba-tool ↵Theresa Halloran3-5/+5
user create Signed-off-by: Theresa Halloran <thallora@linux.vnet.ibm.com> Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2011-10-27s4:wscript - install the two missing files "dlz_bind9.so" and "named.conf.dlz"Geza Gemes1-2/+2
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Oct 27 20:27:32 CEST 2011 on sn-devel-104
2011-10-19s4-s3-upgrade rename samba-tool domain samba3upgrade --libdir to --dbdir for ↵Andrew Bartlett1-2/+2
clarity The things pointed at are not typically in a directory called lib, so avoid confusing our administrators. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Oct 19 15:43:04 CEST 2011 on sn-devel-104
2011-10-19s4-s3-upgrade test upgrade without a wins.datAndrew Bartlett1-0/+3
2011-10-17s4 provision: Default to win2k3 domain function levelKai Blin1-1/+1
2011-10-17s4 provision: Reword opinionated dns backend help text, add NONE backendKai Blin1-3/+11
2011-10-17s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILEKai Blin1-2/+2
2011-10-16provision: fix the docMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Oct 16 01:31:21 CEST 2011 on sn-devel-104
2011-10-16s4: check that the xattr are supported in the folder where we want to provisionMatthieu Patou1-1/+5
By default we were checking this on the default folder for tempfile.NamedTemporaryFile (usualy /tmp) but this folder can be mounted on tmpfs (which didn't support xattr currently). Now we should check on the filesystem where the provision will be done.
2011-10-07s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher1-0/+1
Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
2011-10-06s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell1-0/+1
this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-04s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell1-0/+1
this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-02s4 provision: Set server role default when called from command line to 'dc'Kai Blin1-0/+3
2011-09-22s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell1-0/+1
this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
2011-09-13s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett1-4/+25
The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
2011-09-13s4-provision Perform 'modify' operations as systemAndrew Bartlett2-8/+7
We need this so that we can modify the cn=configuration partition when we are setting up a new subdomain. The serverReference on our ${SERVERDN} is in that partition, and without this change creating a new subdomain fails due to ACLs. Andrew Bartlett
2011-09-13s4-provision Split addition of users and well known principalsAndrew Bartlett2-136/+136
If we are provisioning a subdomain, then these are already in cn=configuration. Andrew Bartlett
2011-09-13s4-provision Add initial support for joining as a new subdomainAndrew Bartlett4-50/+52
To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
2011-09-13s4-python: Fix some formatting issues.Jelmer Vernooij1-156/+163
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Sep 13 03:51:13 CEST 2011 on sn-devel-104
2011-09-12s4-s3-upgrade Remove upgrade_from_s3 script, use samba-tool domain samba3upgradeAndrew Bartlett2-134/+5
2011-09-12s4-provision: Add named.conf template for BIND9 with DLZ supportAmitay Isaacs1-0/+14
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-12s4-provision: Add Seperate instructions for BIND 9.7.x and 9.8.x.Amitay Isaacs1-33/+53
Signed-off-by: Andrew Bartlett <abartlet@samba.org>