summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2010-04-15s4 provision: Remove hard coded ACL for GPO objectsMatthieu Patou1-2/+0
It is no longer needed to hard code ACL for GPO object as we have now code that calculate ACL from defaultSecurityDescriptor and inheritance correctly. In fact the resulting ACL returned by this hard coded value is a bit wrong as some ACE are duplicated. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-04-15s4:setup/wscript_build: install dns_update_list into ${SETUPDIR}Stefan Metzmacher1-1/+1
metze
2010-04-08s4-python: More cleanups.Jelmer Vernooij1-1/+2
2010-04-08s4-python: Simplify code, improve formatting.Jelmer Vernooij1-8/+5
2010-04-08build: allow the waf build to work with python 3.0 and 3.1Thomas Nagy1-1/+2
Python 3.x is a bit fussier about print statements and indentation. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06s4-waf: install the rest of our python filesAndrew Tridgell1-8/+0
2010-04-06s4-waf: forgot these filesAndrew Tridgell1-0/+20
2010-04-04s4-python: Move dsdb constants to a separate python module.Jelmer Vernooij1-2/+5
2010-03-25python: use '#!/usr/bin/env python' to cope with varying install locationsAndrew Tridgell2-2/+2
this should be much more portable
2010-03-18Fixed --ol-mmr-url helplineOliver Liebel1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-18Fixed OL-MMR make testOliver Liebel1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-14Reintroduce "s4:provision Improve the handling of provision errors""Matthias Dieter Wallnöfer1-18/+23
This mainly reverts commit f0bc02d74c16bc013e9fdab46ef271cf45873453. Jelmer pointed out a way how we can achieve the same error handling with an older syntax also on Python 2.4+.
2010-03-13Revert "s4:provision Improve the handling of provision errors"Matthias Dieter Wallnöfer1-25/+18
This reverts partially commit 027123199e13cc02ae4edadd8f0dd0f0660e1193. Andrew, this is not Python 2.4+ compatible
2010-03-11s4:provision - Updated FDS schema mapping.Endi S. Dewata1-6/+4
2010-03-11s4:provision Improve the handling of provision errorsAndrew Bartlett1-18/+25
The backtraces were too confusing for our users, and didn't tell them what to do to fix the problem. By printing the string (rather than a backtrace), and including in the error what to do, and what file to remove, we give them a chance. Andrew Bartlett
2010-03-06s4:provision.reg - call us Windows 2008 from the current version point of viewMatthias Dieter Wallnöfer1-1/+1
2010-03-02s4:provision - Moved default FDS SASL mappings deletion from post_setup() to ↵Endi S. Dewata1-0/+11
init(). Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02s4:provision - Use netbios name for FDS instance name.Endi S. Dewata1-12/+12
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-02-26s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"Matthias Dieter Wallnöfer1-1/+1
2010-02-26s4-provision: added dns_update_listAndrew Tridgell1-0/+20
This contains the list of DNS names we should have as a DC
2010-02-26s4-provision: fixed port number for gc ldap DNS SRV entryAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-26Revert "s4:AD content - adequate some revision levels to match Windows ↵Andrew Tridgell2-5/+5
Server 2008" This reverts commit 973ea198677c581064fad62cdac30baac7103ef8. This change breaks DRS dcpromo.
2010-02-21s4:AD content - Implement the new password settings containerMatthias Dieter Wallnöfer1-0/+5
2010-02-21s4:AD content - adequate some revision levels to match Windows Server 2008Matthias Dieter Wallnöfer2-5/+5
2010-02-21s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008Matthias Dieter Wallnöfer2-4/+22
Those replace the FRS ones.
2010-02-16s4-drs: enable the recyclebin optional featureEduardo Lima1-0/+12
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-12s4-provision: fixed --function-level option to provisionAndrew Tridgell1-0/+1
we need the DS_DOMAIN_* levels imported
2010-02-11s4-provision: pre-create a named.conf.update fileAndrew Tridgell2-35/+8
The named.conf.update file will be filled in at runtime by Samba to contain the list of bind9 grant rules for granting DNS dynamic update permissions on the domain.
2010-02-11s4-provision: move zone file to dns subdirectoryAndrew Tridgell1-2/+2
This allows the permissions to be correctly set for bind to write to a journal file. It also sets the right group ownership and permissions on the files that bind needs to access. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-10s4:provision Just 'do the right thing' with empty smb.conf filesAndrew Bartlett1-0/+16
For some reason, JHT keeps on creating an empty smb.conf file, expecting it to be the same as a non-existant one. It is easier to just realise what he meant. Andrew Bartlett
2010-01-25upgrade_from_s3: Remove unused imports.Jelmer Vernooij1-2/+0
2010-01-23s4-provision: Added msDS-NcType into samba4Top object classEndi S. Dewata1-0/+1
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-23s4-provision: Disable populating FDS during instance creation.Endi S. Dewata1-0/+1
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-21provision: use message and do not display warning if the user choosed ↵Matthieu Patou1-3/+4
delibarately posix:eadb
2010-01-21provision: introduce use-xattr parameter for defining where to store attributesMatthieu Patou4-6/+24
This option allow simple user (non root) to invoke provision without facing an error while insuring that ACL on shared files will always be set
2010-01-21s4: Set acls correctly on all sysvol and scripts sharesMatthieu Patou1-2/+7
2010-01-21s4: regroup gpo modification in one function, set acl on files accordingly ↵Matthieu Patou1-1/+2
with ACL in LDAP
2010-01-16s4-provision: added w2k8r2 ldap capabilitiesAndrew Tridgell1-0/+2
2010-01-16s4-provision: added "check-names ignore;" to allow for _msdcs A recordsAndrew Tridgell1-0/+3
2010-01-14s4:provision_users.ldif - Add a comment that some objects under "Users" are ↵Matthias Dieter Wallnöfer1-0/+3
now located elsewhere This is needed due to the new RID/SID distribution system
2010-01-14s4:provision_users.ldif - Add objects for IISMatthias Dieter Wallnöfer1-0/+21
Some WSPP locations point out that beginning with Windows Server 2008 they're also per default present. Compared against Windows Server 2008
2010-01-14s4:provision_users.ldif - Add additional BUILTIN objectsMatthias Dieter Wallnöfer1-0/+30
Compared against Windows Server 2008
2010-01-14s4:provision_users.ldif - add the restant part of the objects needing for ↵Matthias Dieter Wallnöfer1-0/+26
RODC support RODC = Read Only Domain Controllers Compared against Windows Server 2008
2010-01-14s4:provision_users.ldif - Fix up errors on existing entriesMatthias Dieter Wallnöfer1-6/+8
Compared against Windows Server 2008
2010-01-14s4:provision_users.ldif - Simple reorderingMatthias Dieter Wallnöfer1-70/+70
Sorted according the SID - easier for later enhancements.
2010-01-14s4:provision_users.ldif - Remove system objects from the wrong placeMatthias Dieter Wallnöfer1-27/+0
Objects like the "Cryptographic Operators", "Event Log Readers" don't belong here but into the builtin domain.
2010-01-11Revert "s4:provision_users.ldif - Import all essential groups for Windows ↵Andrew Tridgell1-113/+85
Server 2008 mode" This reverts commit 5c174c68ccba7506147feab1d09ad676792139b3. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push.
2010-01-11Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 ↵Andrew Tridgell1-0/+5
for now" This reverts commit 61dfd3dc1dce2c0dd6693de80930af312ad3e39f. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push.
2010-01-11Revert "s4:provision_users.ldif - Fix memberships regarding the denied ↵Andrew Tridgell1-8/+0
password RODC replication group" This reverts commit 9ee895fcf6327b1c2f5ee09fa565bd62974e9c58. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push.