Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-11-17 | s4-provision: don't test for xattrs if posix:eadb is set | Andrew Tridgell | 1 | -1/+1 | |
when it is set in smb.conf or on the command line, obey the setting and don't try to test for system xattr support | |||||
2010-11-17 | s4-provision: setup posix:eadb using lp.set() | Andrew Tridgell | 3 | -3/+0 | |
this allows it to override a setting made during the automatic testing of xattr support | |||||
2010-11-17 | s4-provision: don't try to autodetect xattr is posix:eadb is set | Andrew Tridgell | 1 | -1/+1 | |
when posix:eadb is set then we know we should be using an eadb | |||||
2010-11-17 | s4-provision: use the command line lp in provision | Andrew Tridgell | 1 | -1/+1 | |
this ensures that provision options are stored in the generated smb.conf | |||||
2010-11-16 | samba-tool Add test for --store-plaintext | Andrew Bartlett | 1 | -1/+1 | |
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 16 06:29:04 UTC 2010 on sn-devel-104 | |||||
2010-11-09 | s4:provision_self_join.ldif - the object SID in AD is called "objectSid" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 9 13:18:29 UTC 2010 on sn-devel-104 | |||||
2010-11-09 | s4:provision - switch to "clearTextPassword" for setting passwords | Matthias Dieter Wallnöfer | 3 | -4/+4 | |
This is the default password set/change attribute for s4 specific purposes (otherwise in respect to Windows it's "unicodePwd"). We move away from "userPassword" since on Windows it's not activated by default - and s4 will follow soon. | |||||
2010-11-01 | s4:setup/spn_update_list - the DNS SPN is only used in DNS mode | Matthias Dieter Wallnöfer | 1 | -1/+3 | |
Not all DCs are automatically DNS servers. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 1 12:20:36 UTC 2010 on sn-devel-104 | |||||
2010-11-01 | s4:provision - adapt the "provision" so that SIDs are only set on entry creation | Matthias Dieter Wallnöfer | 2 | -3/+1 | |
SID modifications are denied. | |||||
2010-10-31 | s4:provision - remove the "servicePrincipalName" creation on the DC object | Matthias Dieter Wallnöfer | 2 | -17/+2 | |
This is now done by the "samba_spnupdate" script. | |||||
2010-10-31 | s4:setup/spn_update_list - reorder and update with other SPNs | Matthias Dieter Wallnöfer | 1 | -13/+15 | |
2010-10-28 | s4 net: rename to samba-tool in order to not clash with s3 net | Kai Blin | 4 | -67/+67 | |
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Oct 28 07:25:16 UTC 2010 on sn-devel-104 | |||||
2010-10-27 | s4:setup/schema_samba4.ldif - this control isn't used anymore | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 27 16:32:28 UTC 2010 on sn-devel-104 | |||||
2010-10-25 | s4:provision_*_references.ldif - "add" and do not "replace" the ↵ | Matthias Dieter Wallnöfer | 2 | -2/+2 | |
"wellKnownObjects" This is the correct AD operation in this case. Multi-valued replaces are generally denied most of the time. | |||||
2010-10-23 | s4:provision.py - add the correct "CN=Sites" security descriptor | Matthias Dieter Wallnöfer | 1 | -0/+1 | |
This should help to fix bug #7403. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104 | |||||
2010-10-23 | s4/ldb:introduce the LDB_CONTROL_PROVISION_OID control | Matthias Dieter Wallnöfer | 1 | -0/+1 | |
This control is exactly thought for the actions which previously were performed using the RELAX one. We agreed that the RELAX control will only remain for interactions with OpenLDAP. | |||||
2010-10-23 | ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
LDB_CONTROL_BYPASS_OPERATIONAL_OID It's nicer to have this consistent with "BYPASS_PASSWORD_HASH". | |||||
2010-10-19 | s4-provisionbackend Allow a fixed URI to be specified for LDAP backend | Andrew Bartlett | 1 | -0/+12 | |
This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett | |||||
2010-10-18 | s4-openldap-backend Don't set 'dbnosync' on cn=config | Andrew Bartlett | 1 | -1/+0 | |
This isn't valid in current OpenLDAP versions. Andrew Bartlett | |||||
2010-10-18 | s4-provision Use --ldap-backend-nosync rather than just --nosync | Andrew Bartlett | 1 | -2/+1 | |
For some reason we had both options, and --ldap-backend-nosync is the better name. Andrew Bartlett | |||||
2010-10-13 | s4:setup/provision_self_join.ldif - let the samldb LDB module fill in ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
"isCriticalSystemObject" It recognizes it now automatically. | |||||
2010-10-11 | unit tests: do some cleanup after tests | Matthieu Patou | 2 | -0/+15 | |
fix Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Oct 11 14:29:10 UTC 2010 on sn-devel-104 | |||||
2010-10-06 | waf: fixed some python3.x portability issues | Andrew Tridgell | 1 | -1/+3 | |
these have crept into the tree over time. Maybe we should add testing of a range of python versions to autobuild? | |||||
2010-10-05 | s4:setup/provision_rootdse_add.ldif - provide informations in the right order | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Doesn't change much - but nicer to read. Btw: is the testdata/samba3 stuff still needed ("provision_samba3sam.ldif"...)? It seems a bit outdated. | |||||
2010-10-03 | Fix .reg file format parsing. | Wilco Baan Hofman | 1 | -3/+3 | |
* multiline data * doublequoted value name * handle windows format CRLF Signed-off-by: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-10-03 | s4:schema_samba4.ldif - update allocated controls list | Matthias Dieter Wallnöfer | 1 | -0/+1 | |
This needs always to be done after a control allocation otherwise we end up in double-allocations and unexpected behaviour. | |||||
2010-10-01 | selftest: Let selftest provide the tempdir, rather than creating it as ↵ | Jelmer Vernooij | 1 | -1/+0 | |
sideeffect of tests.py. | |||||
2010-09-28 | s4-provision: simplify our generated krb5.conf | Andrew Tridgell | 1 | -14/+1 | |
we don't want to force the KDC to be ourselves, we should be using DNS to find a live KDC. Also remove some other options and allow the krb5 lib to use defaults. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-28 | s4-provision: fixed the authority response for our SOA record | Andrew Tridgell | 1 | -1/+1 | |
some clients rely on this being the hostname, not the domain Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 28 06:39:19 UTC 2010 on sn-devel-104 | |||||
2010-09-26 | s4 provision: start with gpo of version 0 and be consistent between ↵ | Matthieu Patou | 1 | -2/+2 | |
different policies | |||||
2010-09-26 | s4-dns: the DNS/${HOSTNAME} SPN should be on the DNS account only | Andrew Tridgell | 1 | -1/+0 | |
2010-09-26 | s4-provision: switch to dns-HOSTNAME instead of dns | Andrew Tridgell | 3 | -18/+10 | |
We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4-kerberos Rework keytab handling to export servicePrincipalName entries | Andrew Bartlett | 1 | -1/+1 | |
This creates keytab entries with all the servicePrincipalNames listed in the secrets.ldb entry. Andrew Bartlett | |||||
2010-09-24 | s4:provision - rootdse - remove static "ldapServiceName" attribute | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:provision - rootdse - remove static "dnsHostName" attribute | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:provision - rootdse - remove the static attribute "serverName" | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-12 | s4:setup/provision_self_join.ldif - now the samldb LDB module detects ↵ | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
automatically that this is a DC account | |||||
2010-09-10 | s4:provision: remember the setup directory if it wasn't the default | Stefan Metzmacher | 3 | -0/+3 | |
This fixes make test without a make install. metze | |||||
2010-09-09 | s4-setup Make krb5.conf use DNS by default | Andrew Bartlett | 1 | -2/+2 | |
We set up our DNS pretty well these days, and I think the previous setting was only there because Andrew Kroeger copied this out of our selftest code in bf3f3af92677bce8f03b0dd2be552d6c8c730ca1. Andrew Bartlett | |||||
2010-09-08 | setup: Use standard octal ints rather than harcoding. | Jelmer Vernooij | 1 | -2/+1 | |
2010-08-19 | unit tests: debug to ease locating pb, remove dir if exists to avoid error | Matthieu Patou | 1 | -2/+8 | |
2010-08-17 | s4:DSDB - rename the "DSDB_CONTROL_PASSWORD_CHANGE_OLD_PW_CHECKED_OID" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Rename it to "DSDB_CONTROL_PASSWORD_CHANGE_OID". This control will afterwards contain a record with the specified old password as NT and/or LM hash. | |||||
2010-07-31 | s4:blackbox/newuser: use test specific user names | Stefan Metzmacher | 1 | -10/+10 | |
As this test doesn't delete the user accounts at the end, we should use test specific user names. That lowers the chance of conflicts with other tests. metze | |||||
2010-07-15 | s4 dsdb: create a new control: changereplmetadata | Matthieu Patou | 1 | -0/+1 | |
This control is designed to allow replmetadata to be specified Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-07-10 | s4:provision: remove --policy-guid and --policy-guid-dc cmdline options | Stefan Metzmacher | 1 | -5/+0 | |
metze | |||||
2010-07-10 | s4 unittests: remove the provision directory before (re)generating | Matthieu Patou | 3 | -0/+3 | |
2010-07-10 | s4 net: Add spn module to list/add/remove spn on objects | Matthieu Patou | 1 | -0/+33 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-07-05 | s4:dsdb: allocate DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID | Stefan Metzmacher | 1 | -0/+1 | |
When importing users from Samba3 we need to control all values. metze | |||||
2010-07-03 | s4:setup/provision_basedn_modify.ldif - set "minPwdAge" to the right value | Matthias Dieter Wallnöfer | 1 | -2/+1 | |
Now we should have fixed all password related tests to cooperate with this value | |||||
2010-06-26 | s4:provision: add entries for root dns servers | Stefan Metzmacher | 1 | -0/+72 | |
metze |