summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2011-09-12s4-provision: Enable SPNs for DNSAmitay Isaacs1-3/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs1-0/+3
This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
2011-09-08s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs5-3/+129
This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Add DNS backend option to provisionAmitay Isaacs1-0/+4
This option is introduced temporarily to test bind9 backend with and without dlz_dlopen module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: exit is not imported directed, use sys.exitAmitay Isaacs1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Extract dns account creation as separate ldifAmitay Isaacs2-92/+12
MicrosoftDNS container and LDAP entries for root servers will be added by sambadns.py directly. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-provision Use ProvisioningError and the eadbAndrew Bartlett1-1/+22
The eadb flag tells us to avoid using system extended attributes, typcially if we are not running as root (ie, in a test environment). The ProvisioningError class allows us to return failures to the upgrade_from_s3 script which can then be detected correctly by the selftest framework. Andrew Bartlett
2011-09-05s4-provision Add realm to DC configuration in upgrade_from_s3 testAndrew Bartlett1-0/+1
2011-08-26s3_upgrade: Set lock directory to correct directoryAmitay Isaacs1-1/+2
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-26s3_upgrade: Update commandline options and use updated samba3 python moduleAmitay Isaacs2-22/+65
upgrade_from_s3 script now requires samba3 configuration file and target directory for samba4 database. In addition, it either uses --libdir option or --testparm option to correctly guess the paths for samba3 databases (private dir and state directory). Usage: upgrade_from_s3 [options] <configuration_file> <targetdir> Input arguments are: <configuration_file> - path to existing smb.conf <targetdir> - directory in which samba4 database will be created In addition, specify either samba3 database directory (with --libdir) or samba3 testparm utility (with --testparm). Before using passdb interface, initialize s3 loadparm context using correct path settings for private dir and state directory. Export account policy from s3 to s4. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-25s4-dns: fixed dns_update_list for multi-domain forestsAndrew Tridgell1-13/+28
this should now match the DNS entries of w2k8r2c Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-08-25s4-dns: fixed DNS and SPN update lists for multi-domain supportAndrew Tridgell2-3/+3
fixed DNS to point at forest root Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-08-22s4-provision set passdb backend to 'samba4' in template smb.conf filesAndrew Bartlett3-0/+8
This will allow smbpasswd, net sam and pdbedit to 'just work' against the newly created databases. Andrew Bartlett
2011-08-13upgrade: Add missing bits for the s3 to s4 upgrade scriptAmitay Isaacs1-17/+6
Use passdb backend to import/export users Remove unused options for upgrade_from_s3 command (--blank) and credentials options Config file is specified with -s/--configfile option and no need to specify as an argument. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13tests: Update test for s3 to s4 upgrade with two casesAmitay Isaacs1-0/+62
S3-member to S4-member and S3-dc to S4-dc Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13s4-scripting Rename passdb upgrade routine to avoid conflict with ↵Andrew Bartlett1-4/+4
upgradeprovision
2011-08-12s4-provision: create dsServiceName in @ROOTDSE in GUID formAndrew Tridgell1-0/+2
this allows for handling of server renames as the GUID doesn't change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-04ldb: added a new always-fail ldap extended match OIDAndrew Tridgell1-0/+8
this is used when rewriting filter rules to replace a filter rule with one that is guaranteed not to match Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-28samba-tool: updated test suite to account for newuser changeGiampaolo Lauria3-5/+5
Updated test suite invocations of newuser to "user add" as the newuser functionality is now being moved to "user add" Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: fixed samba-tool user syntaxAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-21samba-tool: update test suite for the new domain objectGiampaolo Lauria1-1/+1
Changed test suite to reflect the changes from setpassword to "domain setpassword" to fit the object-action model Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: update test suite for add setpasswordGiampaolo Lauria2-5/+5
The test suite needs to change from setpassword to "user setpassword" to reflect the new cmd syntax Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-12s4:param: add "state dir" and "cache dir" optionsStefan Metzmacher3-0/+6
metze
2011-07-07s4 provision: Add some of the AD-specific DNS records to the directoryKai Blin1-1/+1
Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Jul 7 02:29:53 CEST 2011 on sn-devel-104
2011-07-07s4 provision: split up DNS provisioning into generic and samba-specific ldifsKai Blin2-19/+21
Signed-off-by: Kai Blin <kai@samba.org>
2011-06-19s4-provision: Remove hard coded SD for CN=Sites containerMatthieu Patou1-1/+0
With the fix introduced by Nadya in changeset 622ef6aed82a2f2f7748c2a88535486af77487de we are now able to generate correct SD (at least the same as W2k3R2 with a Forest Level of 2003), so there is no need for this fix anymore as it makes SDs for Forest Level 2003 and lower incorrect.
2011-06-07s4-build: install a build link bin/provisionAndrew Tridgell1-0/+2
2011-06-06s4-param Remove 'sid generator'Andrew Bartlett3-3/+0
This was only used by the Fedora DS backend for Samba4. We agreed to no longer support external LDAP backends. Andrew Bartlett
2011-06-06s4-ipv6: added IPv6 support to samba_dnsupdateAndrew Tridgell1-0/+2
2011-06-01s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>Theresa Halloran1-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.Theresa Halloran1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-05-25s4-provision Use correct tkey-gssapi-credentialAndrew Bartlett1-1/+1
We changed to ${DNSNAME} (the fully qualified domain name) a while back, and while it's usually functionally idential to the previous setting, this breaks down if there is more than one DNS server. Andrew Bartlett
2011-05-21upgradeprovision: add hostname in the blackbox testsMatthieu Patou1-1/+1
2011-05-21Make the purge first so that the provision can reused during testsMatthieu Patou1-3/+3
2011-04-30provision: reorganize attributes so that we don't attribute with DN syntax ↵Matthieu Patou2-6/+2
that depends on non present object Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Apr 30 14:51:16 CEST 2011 on sn-devel-104
2011-03-10s4:setup/provision - fix an output messageMatthias Dieter Wallnöfer1-1/+1
Mention that Windows 2000 function level is supported as well.
2011-02-07s4-provision Remove setup_path, setup_dir and find_setup_dirAndrew Bartlett2-17/+3
We now have a reliable way to know the current location of the templates: dyn_SETUPDIR, which is updated for both the in-build and installed binaries. This replaces the function arguments and the distributed resolution of the setup directory with one 'global' function (imported as required). This also removes the ability to specify an alternate setup directory on the command line, as this was rarely if ever used and never tested. Andrew Bartlett
2011-02-07s4-loadparm: removed "setup directory" optionAndrew Tridgell3-3/+0
the correct setup directory is known at both build time and install time using dyn_SETUPDIR, so we no longer have any need to override it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-07s4-test: fixed more assumptions of ./setup for setup directoryAndrew Tridgell6-21/+21
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-12-01s4-provision: remove the disabled bit in the dns-$HOSTNAME accountAndrew Tridgell1-1/+1
2010-11-26s4-provision: fixed eadb automatic and manual setting in provisionAndrew Tridgell1-4/+2
we should not set posix:eadb in lp in the acl native test code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-24s4-setup correct the require BIND version for Dynamic DNSAndrew Bartlett1-1/+1
2010-11-21s4:provision_rootdse_add.ldif - add all possible LDAP policy values but ↵Matthias Dieter Wallnöfer1-0/+12
outcommented for the moment It would be nice if someone could activate them as needed. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 21 14:41:53 CET 2010 on sn-devel-104
2010-11-17s4-provision: don't test for xattrs if posix:eadb is setAndrew Tridgell1-1/+1
when it is set in smb.conf or on the command line, obey the setting and don't try to test for system xattr support
2010-11-17s4-provision: setup posix:eadb using lp.set()Andrew Tridgell3-3/+0
this allows it to override a setting made during the automatic testing of xattr support
2010-11-17s4-provision: don't try to autodetect xattr is posix:eadb is setAndrew Tridgell1-1/+1
when posix:eadb is set then we know we should be using an eadb
2010-11-17s4-provision: use the command line lp in provisionAndrew Tridgell1-1/+1
this ensures that provision options are stored in the generated smb.conf
2010-11-16samba-tool Add test for --store-plaintextAndrew Bartlett1-1/+1
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 16 06:29:04 UTC 2010 on sn-devel-104
2010-11-09s4:provision_self_join.ldif - the object SID in AD is called "objectSid"Matthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 9 13:18:29 UTC 2010 on sn-devel-104
2010-11-09s4:provision - switch to "clearTextPassword" for setting passwordsMatthias Dieter Wallnöfer3-4/+4
This is the default password set/change attribute for s4 specific purposes (otherwise in respect to Windows it's "unicodePwd"). We move away from "userPassword" since on Windows it's not activated by default - and s4 will follow soon.