Age | Commit message (Collapse) | Author | Files | Lines |
|
provisioning, some other minor refactoring of the provisioning.
Pair-programmed by Andrew and me using obby :-)
(This used to be commit 688adcbb635af87fcfedb869b7f1857a947fd2f9)
|
|
Andrew Bartlett
(This used to be commit ae2ea1bd0cd2b326b09b372428969f2cf52ce519)
|
|
(This used to be commit e9bb130d63e86fafc4cbf379e2e237354b88bcf8)
|
|
The less things we manually place into the templates, the easier the
conversion to python will be.
Andrew Bartlett
(This used to be commit f65e5c164476b80468aa19452b108db17c642f8b)
|
|
and default to using system smb.conf.
(This used to be commit b3afde0f00ab5093b577b139a062c233d4db2524)
|
|
This means we only show and set the values when they are not the
values the schema and objectclass module would impose.
Andrew Bartlett
(This used to be commit c2f2e01357c1b087aa1261fb2cac8687426d5a78)
|
|
Andrew Bartlett
(This used to be commit e9003feb1b9eb3d5b82e82910b63306e5ecc2908)
|
|
The instanceid module creates this automaticlly, so we don't need this
any more.
Andrew Bartlett
(This used to be commit f6dbdf34e8a790f460b705100e45ee3928b6b1b3)
|
|
This module needs to be loaded on each database, not just the main
partition. We use it to create the usn for the entries.
Andrew Bartlett
(This used to be commit ffb12aad8a80bb90d66dc66baba81b856622a6bb)
|
|
(This is a merge from the ejs script)
Andrew Bartlett
(This used to be commit d822dfa017b84895222ace8c44935fb872930548)
|
|
Previously, we would create the first record in the DB as an LDIF
file, with the expectation that the administrator would use slapadd to
create the database.
We now do everything over LDAP, which is far simpler, and allows the
LDB module chain to do its work, without special cases.
Also fix naming of the output schema when suggesting the comamnd line
to run ad2oLschema in provision-backend.
Andrew Bartlett
(This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f)
|
|
This still doesn't work for me, but is the recommended order.
Andrew Bartlett
(This used to be commit 4c869c54c2b8125fc88e58bbfddf1975476978a5)
|
|
OpenLDAP module should ensure that after a subtree rename, attributes
are still consistant.
Andrew Bartlett
(This used to be commit f7f765c29b1aca1179a47bdd8712917c3f244f15)
|
|
fixes the case of the attribute in teh DN.
Fix option spelling for example re-provision
Andrew Bartlett
(This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
|
|
Recent changes to Samba4 have made the Fedora DS backend fail. This
is a start on fixing that.
Andrew Bartlett
(This used to be commit 48dc07902ffb792532ff216e507e53103d448b7b)
|
|
Peplication. See bugs 4934 and 4935.
(This used to be commit fdd2ba336b4cf742f6e59253beab5dd226a87a85)
|
|
the provision options used.
Andrew Bartlett
(This used to be commit 51cd93344dfeb3556fada523e38bbcd7e51fbbe1)
|
|
use global.
Andrew Bartlett
(This used to be commit 3b6f461e9a1b0fee7a589b8d171f4fcec6340ca4)
|
|
plugin allows the error being returned to be adjusted.
Andrew Bartlett
(This used to be commit f2731fddf07dfda5d69ad19851dab8f82b05f1a5)
|
|
(This used to be commit 3ee62094074d74b6c69948730f2892f0a430f40b)
|
|
(This used to be commit 46580d51d3e40ef83754fceefa392fe1df38e37d)
|
|
attributes, as found in the schema.
Index 'cn', as otherwise exact match searches on this attribute always
fail (need to figure out what is so special about cn in OpenLDAP).
Andrew Bartlett
(This used to be commit 5a4a2d10bc5729d4adac4b173b0dc05e2e076c32)
|
|
(This used to be commit d649f73431fc993e31522e7fc8e1e35e0a4421d8)
|
|
Added blackbox tests for provision and upgrade Python scripts.
Clean up temporary files created by the Python tests.
(This used to be commit 2227fb6df62240cae64d27a1920d878316f819fc)
|
|
tests.
- Initial work converting the upgrade code to Python.
- Removed the old EJS upgrade code because it has been broken for a long time.
(This used to be commit 150cf39fbd4fe088546870fb0d8f20c0d9eb4aca)
|
|
(This used to be commit b07ca944ba62a3f3de58c06b66533c0953a32de9)
|
|
(This used to be commit 40bf88c8a70e8379a6081cb6050034bcd7ae56eb)
|
|
(This used to be commit af28f0c56d8e5ccc6ce8916d5bbdf9045e1fb47e)
|
|
(This used to be commit ac1083178f9e521dcd5d3d8b5199abcb00159adf)
|
|
(This used to be commit a8b1fe15ac853082961132ede061fe1556ae29f7)
|
|
Pass loadparm context along to Ldb contexts.
Other minor Python improvements.
(This used to be commit 7a15b486bae8fb774058b2d94cc12b7b01ee6ac0)
|
|
(This used to be commit b4ae4cbfe5b66364f437a76aa0a4f82e9bc39ce1)
|
|
(This used to be commit 73bd4a9566d15f85a971e3a87cefbec2e2eece1c)
|
|
provisioning in python.
(This used to be commit d2402251666738c0372bbbaeaa1d26c06e254033)
|
|
section name optional. Fix several smaller bits and pieces in the Python code.
(This used to be commit 1b89311e5fa4fcde060df50e580dc221205cc8ca)
|
|
(This used to be commit dbebb4ef477d2c8de7b8d1e5cde9b9dada47044f)
|
|
of OpenLDAP.
This makes it consistant with the Fedora DS setup, and doesn't mix
both hdb and bdb.
Andrew Bartlett
(This used to be commit 1ffada95d269c8f7d054bec7f6eaff8449995d40)
|
|
(This used to be commit 277f2165241dafe68e31a8197194c94d9d4a535e)
|
|
(This used to be commit 090c799f98adf2c4186daca445c81b4e26e91f2f)
|
|
openldap, and fully support different LDAP server locations.
Andrew Bartlett
(This used to be commit a00bb942537f0f638c2a8295770749cb4b5d9ef3)
|
|
samdb before we start writing entries into it.
In doing so, I realised we still used 'dnsDomain', which is not part
of the standard schema (now removed).
We also set the 'wrong' side of the linked attributes for the
masteredBy on each partition - this is now set in provision_self_join
and backlinks via the linked attributes code.
When we have the schema loaded, we must also have a valid domain SID
loaded, so that the objectclass module works. This required some ejs
glue.
Andrew Bartlett
(This used to be commit b0de08916e8cb59ce6a2ea94bbc9ac0679830ac1)
|
|
by seperating the modules list into parts. That way, we can remove
the modules that the backend will provide.
Andrew Bartlett
(This used to be commit d67e5c7896f6d3064298897ae4d3204498824b06)
|
|
simple ldap mapping (a complex mapping will follow).
Fix the module to handle 'name' better, rather than using the 'name'
attribute built into OpenLDAP, rename to samba4RDN. We need to see if
this can be handled in the backend.
Also rename the functions and inernal module name to entryuuid for
consistancy.
Andrew Bartlett
(This used to be commit a7be80766f4270d63433bbd6a976ebf302ed3433)
|
|
Remove bogus check to return NO_SUCH_ENTRY in ldap_backend.c, as this
error is now correctly emited from ldb.
Andrew Bartlett
(This used to be commit ed57862b90812e5a38ca81935b131338112fb19f)
|
|
Templates just don't belong in the sam.ldb, as they don't obey any of
the other rules. This moves them to a seperate templates.ldb.
In samldb, this patch reworks the duplicate SID and Name detection
code, to use ldb_search_exp_fmt() rather than gendb_search. This
returns far more useful errors, which we now handle and report better.
The call to samdb_search_for_parent_domain() has been moved in samldb,
to allow both the account and SID uniqueness checks to be in the same
domain. This function also returns better errors.
dcesrv_drsuapi.c is updated for the new prototype of
samdb_search_for_parent_domain()
Andrew Bartlett
(This used to be commit f1ab90c88c782c693b41795d70368650806543b5)
|
|
Create a phpLDAPadmin configuration file example to use ldapi to talk
to Samba4
Andrew Bartlett
(This used to be commit 54f4c8ba6127757fd272bd97e301188eb69977ed)
|
|
invalid entries with a linked attribute.
Make Samba4 pass that test, by fixing a silly bug in the
linked_attributes module. (By passing down the 'original' request
structure, tdb would override our handle, and therefore we would never
be called for the 'wait', which collects the errors).
Fix up the provision templates to handle the newly required
referential integrity.
Andrew Bartlett
(This used to be commit 0377d85bbdcb2c4f110b0519005f0d1d10bc0c0b)
|
|
restrictions.
Andrew Bartlett
(This used to be commit f3390c9054244c0e4381007b36bbac9a17800570)
|
|
Much more work is still required here, particularly to handle this
better during the provision, and to handle modifies and deletes, but
this is a start.
Andrew Bartlett
(This used to be commit 2ba99d58e9fe1f8e4b15a58a2fdfce6e876f99b4)
|
|
as part of the setup inf file.
Andrew Bartlett
(This used to be commit 6c8987464e198430885b9e71b54fed6758886fdd)
|