summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2011-06-06s4-param Remove 'sid generator'Andrew Bartlett3-3/+0
This was only used by the Fedora DS backend for Samba4. We agreed to no longer support external LDAP backends. Andrew Bartlett
2011-06-06s4-ipv6: added IPv6 support to samba_dnsupdateAndrew Tridgell1-0/+2
2011-06-01s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>Theresa Halloran1-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.Theresa Halloran1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-05-25s4-provision Use correct tkey-gssapi-credentialAndrew Bartlett1-1/+1
We changed to ${DNSNAME} (the fully qualified domain name) a while back, and while it's usually functionally idential to the previous setting, this breaks down if there is more than one DNS server. Andrew Bartlett
2011-05-21upgradeprovision: add hostname in the blackbox testsMatthieu Patou1-1/+1
2011-05-21Make the purge first so that the provision can reused during testsMatthieu Patou1-3/+3
2011-04-30provision: reorganize attributes so that we don't attribute with DN syntax ↵Matthieu Patou2-6/+2
that depends on non present object Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Apr 30 14:51:16 CEST 2011 on sn-devel-104
2011-03-10s4:setup/provision - fix an output messageMatthias Dieter Wallnöfer1-1/+1
Mention that Windows 2000 function level is supported as well.
2011-02-07s4-provision Remove setup_path, setup_dir and find_setup_dirAndrew Bartlett2-17/+3
We now have a reliable way to know the current location of the templates: dyn_SETUPDIR, which is updated for both the in-build and installed binaries. This replaces the function arguments and the distributed resolution of the setup directory with one 'global' function (imported as required). This also removes the ability to specify an alternate setup directory on the command line, as this was rarely if ever used and never tested. Andrew Bartlett
2011-02-07s4-loadparm: removed "setup directory" optionAndrew Tridgell3-3/+0
the correct setup directory is known at both build time and install time using dyn_SETUPDIR, so we no longer have any need to override it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-07s4-test: fixed more assumptions of ./setup for setup directoryAndrew Tridgell6-21/+21
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-12-01s4-provision: remove the disabled bit in the dns-$HOSTNAME accountAndrew Tridgell1-1/+1
2010-11-26s4-provision: fixed eadb automatic and manual setting in provisionAndrew Tridgell1-4/+2
we should not set posix:eadb in lp in the acl native test code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-24s4-setup correct the require BIND version for Dynamic DNSAndrew Bartlett1-1/+1
2010-11-21s4:provision_rootdse_add.ldif - add all possible LDAP policy values but ↵Matthias Dieter Wallnöfer1-0/+12
outcommented for the moment It would be nice if someone could activate them as needed. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 21 14:41:53 CET 2010 on sn-devel-104
2010-11-17s4-provision: don't test for xattrs if posix:eadb is setAndrew Tridgell1-1/+1
when it is set in smb.conf or on the command line, obey the setting and don't try to test for system xattr support
2010-11-17s4-provision: setup posix:eadb using lp.set()Andrew Tridgell3-3/+0
this allows it to override a setting made during the automatic testing of xattr support
2010-11-17s4-provision: don't try to autodetect xattr is posix:eadb is setAndrew Tridgell1-1/+1
when posix:eadb is set then we know we should be using an eadb
2010-11-17s4-provision: use the command line lp in provisionAndrew Tridgell1-1/+1
this ensures that provision options are stored in the generated smb.conf
2010-11-16samba-tool Add test for --store-plaintextAndrew Bartlett1-1/+1
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 16 06:29:04 UTC 2010 on sn-devel-104
2010-11-09s4:provision_self_join.ldif - the object SID in AD is called "objectSid"Matthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 9 13:18:29 UTC 2010 on sn-devel-104
2010-11-09s4:provision - switch to "clearTextPassword" for setting passwordsMatthias Dieter Wallnöfer3-4/+4
This is the default password set/change attribute for s4 specific purposes (otherwise in respect to Windows it's "unicodePwd"). We move away from "userPassword" since on Windows it's not activated by default - and s4 will follow soon.
2010-11-01s4:setup/spn_update_list - the DNS SPN is only used in DNS modeMatthias Dieter Wallnöfer1-1/+3
Not all DCs are automatically DNS servers. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 1 12:20:36 UTC 2010 on sn-devel-104
2010-11-01s4:provision - adapt the "provision" so that SIDs are only set on entry creationMatthias Dieter Wallnöfer2-3/+1
SID modifications are denied.
2010-10-31s4:provision - remove the "servicePrincipalName" creation on the DC objectMatthias Dieter Wallnöfer2-17/+2
This is now done by the "samba_spnupdate" script.
2010-10-31s4:setup/spn_update_list - reorder and update with other SPNsMatthias Dieter Wallnöfer1-13/+15
2010-10-28s4 net: rename to samba-tool in order to not clash with s3 netKai Blin4-67/+67
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Oct 28 07:25:16 UTC 2010 on sn-devel-104
2010-10-27s4:setup/schema_samba4.ldif - this control isn't used anymoreMatthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 27 16:32:28 UTC 2010 on sn-devel-104
2010-10-25s4:provision_*_references.ldif - "add" and do not "replace" the ↵Matthias Dieter Wallnöfer2-2/+2
"wellKnownObjects" This is the correct AD operation in this case. Multi-valued replaces are generally denied most of the time.
2010-10-23s4:provision.py - add the correct "CN=Sites" security descriptorMatthias Dieter Wallnöfer1-0/+1
This should help to fix bug #7403. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104
2010-10-23s4/ldb:introduce the LDB_CONTROL_PROVISION_OID controlMatthias Dieter Wallnöfer1-0/+1
This control is exactly thought for the actions which previously were performed using the RELAX one. We agreed that the RELAX control will only remain for interactions with OpenLDAP.
2010-10-23ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into ↵Matthias Dieter Wallnöfer1-1/+1
LDB_CONTROL_BYPASS_OPERATIONAL_OID It's nicer to have this consistent with "BYPASS_PASSWORD_HASH".
2010-10-19s4-provisionbackend Allow a fixed URI to be specified for LDAP backendAndrew Bartlett1-0/+12
This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett
2010-10-18s4-openldap-backend Don't set 'dbnosync' on cn=configAndrew Bartlett1-1/+0
This isn't valid in current OpenLDAP versions. Andrew Bartlett
2010-10-18s4-provision Use --ldap-backend-nosync rather than just --nosyncAndrew Bartlett1-2/+1
For some reason we had both options, and --ldap-backend-nosync is the better name. Andrew Bartlett
2010-10-13s4:setup/provision_self_join.ldif - let the samldb LDB module fill in ↵Matthias Dieter Wallnöfer1-1/+1
"isCriticalSystemObject" It recognizes it now automatically.
2010-10-11unit tests: do some cleanup after testsMatthieu Patou2-0/+15
fix Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Oct 11 14:29:10 UTC 2010 on sn-devel-104
2010-10-06waf: fixed some python3.x portability issuesAndrew Tridgell1-1/+3
these have crept into the tree over time. Maybe we should add testing of a range of python versions to autobuild?
2010-10-05s4:setup/provision_rootdse_add.ldif - provide informations in the right orderMatthias Dieter Wallnöfer1-2/+2
Doesn't change much - but nicer to read. Btw: is the testdata/samba3 stuff still needed ("provision_samba3sam.ldif"...)? It seems a bit outdated.
2010-10-03Fix .reg file format parsing.Wilco Baan Hofman1-3/+3
* multiline data * doublequoted value name * handle windows format CRLF Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-10-03s4:schema_samba4.ldif - update allocated controls listMatthias Dieter Wallnöfer1-0/+1
This needs always to be done after a control allocation otherwise we end up in double-allocations and unexpected behaviour.
2010-10-01selftest: Let selftest provide the tempdir, rather than creating it as ↵Jelmer Vernooij1-1/+0
sideeffect of tests.py.
2010-09-28s4-provision: simplify our generated krb5.confAndrew Tridgell1-14/+1
we don't want to force the KDC to be ourselves, we should be using DNS to find a live KDC. Also remove some other options and allow the krb5 lib to use defaults. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-28s4-provision: fixed the authority response for our SOA recordAndrew Tridgell1-1/+1
some clients rely on this being the hostname, not the domain Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 28 06:39:19 UTC 2010 on sn-devel-104
2010-09-26s4 provision: start with gpo of version 0 and be consistent between ↵Matthieu Patou1-2/+2
different policies
2010-09-26s4-dns: the DNS/${HOSTNAME} SPN should be on the DNS account onlyAndrew Tridgell1-1/+0
2010-09-26s4-provision: switch to dns-HOSTNAME instead of dnsAndrew Tridgell3-18/+10
We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-24s4-kerberos Rework keytab handling to export servicePrincipalName entriesAndrew Bartlett1-1/+1
This creates keytab entries with all the servicePrincipalNames listed in the secrets.ldb entry. Andrew Bartlett
2010-09-24s4:provision - rootdse - remove static "ldapServiceName" attributeMatthias Dieter Wallnöfer1-1/+0
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
generated by cgit (git 2.34.1) at 2024-11-23 17:38:36 +0000