summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2011-10-17s4 provision: Default to win2k3 domain function levelKai Blin1-1/+1
2011-10-17s4 provision: Reword opinionated dns backend help text, add NONE backendKai Blin1-3/+11
2011-10-17s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILEKai Blin1-2/+2
2011-10-16provision: fix the docMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Oct 16 01:31:21 CEST 2011 on sn-devel-104
2011-10-16s4: check that the xattr are supported in the folder where we want to provisionMatthieu Patou1-1/+5
By default we were checking this on the default folder for tempfile.NamedTemporaryFile (usualy /tmp) but this folder can be mounted on tmpfs (which didn't support xattr currently). Now we should check on the filesystem where the provision will be done.
2011-10-07s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher1-0/+1
Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
2011-10-06s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell1-0/+1
this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-04s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell1-0/+1
this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-10-02s4 provision: Set server role default when called from command line to 'dc'Kai Blin1-0/+3
2011-09-22s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell1-0/+1
this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
2011-09-13s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett1-4/+25
The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
2011-09-13s4-provision Perform 'modify' operations as systemAndrew Bartlett2-8/+7
We need this so that we can modify the cn=configuration partition when we are setting up a new subdomain. The serverReference on our ${SERVERDN} is in that partition, and without this change creating a new subdomain fails due to ACLs. Andrew Bartlett
2011-09-13s4-provision Split addition of users and well known principalsAndrew Bartlett2-136/+136
If we are provisioning a subdomain, then these are already in cn=configuration. Andrew Bartlett
2011-09-13s4-provision Add initial support for joining as a new subdomainAndrew Bartlett4-50/+52
To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
2011-09-13s4-python: Fix some formatting issues.Jelmer Vernooij1-156/+163
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Sep 13 03:51:13 CEST 2011 on sn-devel-104
2011-09-12s4-s3-upgrade Remove upgrade_from_s3 script, use samba-tool domain samba3upgradeAndrew Bartlett2-134/+5
2011-09-12s4-provision: Add named.conf template for BIND9 with DLZ supportAmitay Isaacs1-0/+14
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-12s4-provision: Add Seperate instructions for BIND 9.7.x and 9.8.x.Amitay Isaacs1-33/+53
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-12s4-provision: Enable SPNs for DNSAmitay Isaacs1-3/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs1-0/+3
This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
2011-09-08s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs5-3/+129
This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Add DNS backend option to provisionAmitay Isaacs1-0/+4
This option is introduced temporarily to test bind9 backend with and without dlz_dlopen module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: exit is not imported directed, use sys.exitAmitay Isaacs1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Extract dns account creation as separate ldifAmitay Isaacs2-92/+12
MicrosoftDNS container and LDAP entries for root servers will be added by sambadns.py directly. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-provision Use ProvisioningError and the eadbAndrew Bartlett1-1/+22
The eadb flag tells us to avoid using system extended attributes, typcially if we are not running as root (ie, in a test environment). The ProvisioningError class allows us to return failures to the upgrade_from_s3 script which can then be detected correctly by the selftest framework. Andrew Bartlett
2011-09-05s4-provision Add realm to DC configuration in upgrade_from_s3 testAndrew Bartlett1-0/+1
2011-08-26s3_upgrade: Set lock directory to correct directoryAmitay Isaacs1-1/+2
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-26s3_upgrade: Update commandline options and use updated samba3 python moduleAmitay Isaacs2-22/+65
upgrade_from_s3 script now requires samba3 configuration file and target directory for samba4 database. In addition, it either uses --libdir option or --testparm option to correctly guess the paths for samba3 databases (private dir and state directory). Usage: upgrade_from_s3 [options] <configuration_file> <targetdir> Input arguments are: <configuration_file> - path to existing smb.conf <targetdir> - directory in which samba4 database will be created In addition, specify either samba3 database directory (with --libdir) or samba3 testparm utility (with --testparm). Before using passdb interface, initialize s3 loadparm context using correct path settings for private dir and state directory. Export account policy from s3 to s4. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-25s4-dns: fixed dns_update_list for multi-domain forestsAndrew Tridgell1-13/+28
this should now match the DNS entries of w2k8r2c Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-08-25s4-dns: fixed DNS and SPN update lists for multi-domain supportAndrew Tridgell2-3/+3
fixed DNS to point at forest root Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-08-22s4-provision set passdb backend to 'samba4' in template smb.conf filesAndrew Bartlett3-0/+8
This will allow smbpasswd, net sam and pdbedit to 'just work' against the newly created databases. Andrew Bartlett
2011-08-13upgrade: Add missing bits for the s3 to s4 upgrade scriptAmitay Isaacs1-17/+6
Use passdb backend to import/export users Remove unused options for upgrade_from_s3 command (--blank) and credentials options Config file is specified with -s/--configfile option and no need to specify as an argument. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13tests: Update test for s3 to s4 upgrade with two casesAmitay Isaacs1-0/+62
S3-member to S4-member and S3-dc to S4-dc Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13s4-scripting Rename passdb upgrade routine to avoid conflict with ↵Andrew Bartlett1-4/+4
upgradeprovision
2011-08-12s4-provision: create dsServiceName in @ROOTDSE in GUID formAndrew Tridgell1-0/+2
this allows for handling of server renames as the GUID doesn't change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-04ldb: added a new always-fail ldap extended match OIDAndrew Tridgell1-0/+8
this is used when rewriting filter rules to replace a filter rule with one that is guaranteed not to match Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-28samba-tool: updated test suite to account for newuser changeGiampaolo Lauria3-5/+5
Updated test suite invocations of newuser to "user add" as the newuser functionality is now being moved to "user add" Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: fixed samba-tool user syntaxAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-21samba-tool: update test suite for the new domain objectGiampaolo Lauria1-1/+1
Changed test suite to reflect the changes from setpassword to "domain setpassword" to fit the object-action model Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: update test suite for add setpasswordGiampaolo Lauria2-5/+5
The test suite needs to change from setpassword to "user setpassword" to reflect the new cmd syntax Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-12s4:param: add "state dir" and "cache dir" optionsStefan Metzmacher3-0/+6
metze
2011-07-07s4 provision: Add some of the AD-specific DNS records to the directoryKai Blin1-1/+1
Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Jul 7 02:29:53 CEST 2011 on sn-devel-104
2011-07-07s4 provision: split up DNS provisioning into generic and samba-specific ldifsKai Blin2-19/+21
Signed-off-by: Kai Blin <kai@samba.org>
2011-06-19s4-provision: Remove hard coded SD for CN=Sites containerMatthieu Patou1-1/+0
With the fix introduced by Nadya in changeset 622ef6aed82a2f2f7748c2a88535486af77487de we are now able to generate correct SD (at least the same as W2k3R2 with a Forest Level of 2003), so there is no need for this fix anymore as it makes SDs for Forest Level 2003 and lower incorrect.
2011-06-07s4-build: install a build link bin/provisionAndrew Tridgell1-0/+2
2011-06-06s4-param Remove 'sid generator'Andrew Bartlett3-3/+0
This was only used by the Fedora DS backend for Samba4. We agreed to no longer support external LDAP backends. Andrew Bartlett
2011-06-06s4-ipv6: added IPv6 support to samba_dnsupdateAndrew Tridgell1-0/+2
2011-06-01s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>Theresa Halloran1-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.Theresa Halloran1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-05-25s4-provision Use correct tkey-gssapi-credentialAndrew Bartlett1-1/+1
We changed to ${DNSNAME} (the fully qualified domain name) a while back, and while it's usually functionally idential to the previous setting, this breaks down if there is more than one DNS server. Andrew Bartlett
generated by cgit (git 2.34.1) at 2024-12-16 05:43:39 +0000