summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2007-12-21r26298: Use metze's schema loading code to pre-initialise the schema into theAndrew Bartlett5-36/+21
samdb before we start writing entries into it. In doing so, I realised we still used 'dnsDomain', which is not part of the standard schema (now removed). We also set the 'wrong' side of the linked attributes for the masteredBy on each partition - this is now set in provision_self_join and backlinks via the linked attributes code. When we have the schema loaded, we must also have a valid domain SID loaded, so that the objectclass module works. This required some ejs glue. Andrew Bartlett (This used to be commit b0de08916e8cb59ce6a2ea94bbc9ac0679830ac1)
2007-12-21r26245: Make it easier to handle the LDAP backend, with it's differing needs,Andrew Bartlett2-1/+2
by seperating the modules list into parts. That way, we can remove the modules that the backend will provide. Andrew Bartlett (This used to be commit d67e5c7896f6d3064298897ae4d3204498824b06)
2007-12-21r26137: Rename the entryUUID module to better match it's purpose: being aAndrew Bartlett2-2/+3
simple ldap mapping (a complex mapping will follow). Fix the module to handle 'name' better, rather than using the 'name' attribute built into OpenLDAP, rename to samba4RDN. We need to see if this can be handled in the backend. Also rename the functions and inernal module name to entryuuid for consistancy. Andrew Bartlett (This used to be commit a7be80766f4270d63433bbd6a976ebf302ed3433)
2007-12-21r25960: Enable checks on the validity of the search base on sam.ldb in Samba4.Andrew Bartlett2-0/+4
Remove bogus check to return NO_SUCH_ENTRY in ldap_backend.c, as this error is now correctly emited from ldb. Andrew Bartlett (This used to be commit ed57862b90812e5a38ca81935b131338112fb19f)
2007-12-21r25940: Rework the samldb and templates handling.Andrew Bartlett1-8/+14
Templates just don't belong in the sam.ldb, as they don't obey any of the other rules. This moves them to a seperate templates.ldb. In samldb, this patch reworks the duplicate SID and Name detection code, to use ldb_search_exp_fmt() rather than gendb_search. This returns far more useful errors, which we now handle and report better. The call to samdb_search_for_parent_domain() has been moved in samldb, to allow both the account and SID uniqueness checks to be in the same domain. This function also returns better errors. dcesrv_drsuapi.c is updated for the new prototype of samdb_search_for_parent_domain() Andrew Bartlett (This used to be commit f1ab90c88c782c693b41795d70368650806543b5)
2007-12-21r25921: Now also listen on ldapi by default in the LDAP serverAndrew Bartlett1-0/+28
Create a phpLDAPadmin configuration file example to use ldapi to talk to Samba4 Andrew Bartlett (This used to be commit 54f4c8ba6127757fd272bd97e301188eb69977ed)
2007-12-21r25891: Test that we get the correct return value when we attempt to referenceAndrew Bartlett1-121/+121
invalid entries with a linked attribute. Make Samba4 pass that test, by fixing a silly bug in the linked_attributes module. (By passing down the 'original' request structure, tdb would override our handle, and therefore we would never be called for the 'wait', which collects the errors). Fix up the provision templates to handle the newly required referential integrity. Andrew Bartlett (This used to be commit 0377d85bbdcb2c4f110b0519005f0d1d10bc0c0b)
2007-12-21r25753: Move cn=rootdse to @ROOTDSE to avoid being caught up in schema ↵Andrew Bartlett2-2/+2
restrictions. Andrew Bartlett (This used to be commit f3390c9054244c0e4381007b36bbac9a17800570)
2007-12-21r25747: Implement linked attributes, for add operations.Andrew Bartlett1-10/+0
Much more work is still required here, particularly to handle this better during the provision, and to handle modifies and deletes, but this is a start. Andrew Bartlett (This used to be commit 2ba99d58e9fe1f8e4b15a58a2fdfce6e876f99b4)
2007-12-21r25616: Fedora DS now has a way to install the schema and extra configurationAndrew Bartlett2-5/+7
as part of the setup inf file. Andrew Bartlett (This used to be commit 6c8987464e198430885b9e71b54fed6758886fdd)
2007-10-10r25452: Move the creation of the server entry to the self join, as this makesAndrew Bartlett2-23/+23
no sense on a member server. Andrew Bartlett (This used to be commit 70467fa4c5d25b83c48dbbeb8236d5acb4550e77)
2007-10-10r25451: Rework the display of provision options to use printf syntax, andAndrew Bartlett1-10/+22
avoid %s in the substituted strings from becoming a problem. Andrew Bartlett (This used to be commit 3c4f107239eb6b2f4022a4eac06c5dd3ace71174)
2007-10-10r25450: Make it easier to test with a particular version of OpenLDAP, byAndrew Bartlett1-3/+3
setting OPENLDAP_PATH, move to using hdb as the backend (allows subtree renames), and re-enable the --quiet option. Andrew Bartlett (This used to be commit a186a0fa68cdcfb3abd430534657e5e278a5ebda)
2007-10-10r25354: Thanks to Amin Azez <azez@ufomechanic.net> for finally getting me toAndrew Bartlett1-0/+0
fix a provision without an smb.conf already setup. Andrew Bartlett (This used to be commit a00044d2294b482ea83e9d7392eb8113a9c94b6e)
2007-10-10r25303: Print out the options the provision script generated. This shouldAndrew Bartlett1-1/+12
help users produce predictable setups. Andrew Bartlett (This used to be commit 9789bd3c0a3f75f19fa523b251736cf6cdc157ce)
2007-10-10r25299: Modify the provision script to take an additional argument: ↵Andrew Bartlett9-65/+81
--server-role This must be set to either 'domain controller', 'domain member' or 'standalone'. The default for the provision now changes to 'standalone'. This is not because Samba4 is particularlly useful in that mode, but because we still want a positive sign from the administrator that we should advertise as a DC. We now do more to ensure the 'standalone' and 'member server' provision output is reasonable, and try not to set odd things into the database that only belong for the DC. Andrew Bartlett (This used to be commit 4cc4ed7719aff712e735628410bd3813c7d6aa40)
2007-10-10r25203: Don't use subclasses in Samba4, as we always fill out the fullAndrew Bartlett2-12/+0
objectClass list. Andrew Bartlett (This used to be commit e882dcb7aaa52843c656084c47c0b3c49557c22e)
2007-10-10r24914: In response to bug #4892 by Matthias Wallnöfer <mwallnoefer@yahoo.de>,Andrew Bartlett1-30/+0
allow the objectclass module to reconstruct the objectclass hierarchy, rather than using templates. The issue being fixed in particular is that 'top' was not being set on containers. This should ensure we do this right for all objects. Andrew Bartlett (This used to be commit d17a0058ba8492b8b3f81b6f10fc34b3e45bb8a6)
2007-10-10r24913: Fix typoAndrew Bartlett1-1/+1
(This used to be commit 4634bb282bec35c75e74e47f5ce67835a3556b68)
2007-10-10r24911: Make better use of substituted variables in example named.confAndrew Bartlett1-5/+5
Andrew Bartlett (This used to be commit 9f18a9711771a88be7c38bc26ae6e59fb98f93dd)
2007-10-10r24909: Patch from Andrew Kroeger <andrew@sprocks.gotdns.com> on the slow roadAndrew Bartlett1-6/+15
to working GSS-TSIG DDNS. Andrew Bartlett (This used to be commit 99f832e7edcf940003fe9a2506622d991bc00f27)
2007-10-10r24760: Ensure we base64 encode any password being put into LDIF, to avoidAndrew Bartlett3-6/+6
provision failures when some of the random password values are illigal LDIF. Andrew Bartlett (This used to be commit 876003f6c6466bfd37ec9b05c9a1f1cc83dd9898)
2007-10-10r24729: First try and publishing a DNS service account, for folks to play with.Andrew Bartlett3-0/+31
The keytab in dns.keytab should (I hope) do the job. Andrew Bartlett (This used to be commit af4d331eef91ef7699d179d15e7337fff1eff7bb)
2007-10-10r24704: Fix bug in the registry patch code.. all the more proves this code ↵Jelmer Vernooij1-1/+9
needs tests. (This used to be commit aa98d219571c4a7af1e5a0f8483cc17a4b6b36e2)
2007-10-10r24703: Use standard registry diff files when provisioning rather thanJelmer Vernooij2-43/+6
LDIF files for the registry files. (This used to be commit 67ad556b7388e5d82756e0a3cfc596e44136329c)
2007-10-10r24696: Fix bug 4918 reported by Matthias Wallnöfer <mwallnoefer@yahoo.de>Andrew Bartlett1-0/+237
with a patch from Andrew Kroeger <andrew@sprocks.gotdns.com>. The changes to samldb_fill_foreignSecurityPrincipal_object() look much larger then they are: We just skip all the objectSid generation if the SID is supplied. By providing a few more objects, standard dialogs on the clients are better behaved, for these 'well known' users. Andrew Bartlett (This used to be commit 35ee4aee719e69983d650602d1c6422a31600001)
2007-10-10r24694: Remove objectCategory entries from the setup templates. These can beAndrew Bartlett6-47/+0
autogenerated by the objectclass module when the the entries are added. Andrew Bartlett (This used to be commit 79e13349f00d009fc5dd0cdddade379df906ebc8)
2007-10-10r24667: Finally merge the registry improvements that Wilco Baan Hofman and I ↵Jelmer Vernooij1-0/+17
have been working on for at least half a year now. Contains the following improvements: * proper layering (finally!) for the registry library. Distinction is now made between 'real' backends (local, remote, wine, etc) and the low-level hive backends (regf, creg, ldb, ...) that are only used by the local registry backend * tests for all important hive and registry operations * re-enable RPC-WINREG tests (still needs more work though, as some return values aren't checked yet) * write support for REGF files * dir backend now supports setting/reading values, creating keys * support for storing security descriptors * remove CREG backend as it was incomplete, didn't match the data model and wasn't used at all anyway * support for parsing ADM files as used by the policy editor (see lib/policy) * support for parsing PREG files (format used by .POL files) * new streaming interface for registry diffs (improves speed and memory usage for regdiff/regpatch significantly) ... and fixes a large number of bugs in the registry code (This used to be commit 7a1eec6358bc863dfc671c542b7185d3e39d7b5a)
2007-10-10r24651: Allow dynamic updates for the domain controller over its own nameSimo Sorce1-0/+5
(This used to be commit ce9b64341159cb1a8f42809dcecc0b1e80eb8a5e)
2007-10-10r24650: Some more instructions to have make GSS-TSIG workSimo Sorce1-1/+13
(This used to be commit 98350b35ab0b0f06cc9ddf8edaf3dfe705c3e5bf)
2007-10-10r24640: Add a suggested BIND configuration snippit, to help with DNS ↵Andrew Bartlett1-0/+10
configuration. When we sort out GSS-TSIG on the server, we can expand this to have the 'right stuff'. Andrew Bartlett (This used to be commit 8f02ade1b2cc164f64f4ea8a371c107ccf6a81b3)
2007-10-10r24262: Set the objectCategory by default in the objectclass module, rather ↵Andrew Bartlett1-5/+0
than using templates. Modify the samba3sam test to be less fussy, and not use the objectclass module (which requires proper schema stuff now). Andrew Bartlett (This used to be commit 53c248c2645e86fbc8720860aed92a479483b528)
2007-10-10r24060: Fix bug #4806 by Matthias Wallnöfer <mwallnoefer@yahoo.de>: We need toAndrew Bartlett1-4/+0
include the attribute allowedChildClassesEffective for MMC to allow the creation of containers. This may need further refinement, but it seems to work for now. Andrew Bartlett (This used to be commit d053b8e218767cb12e20a00fb18995e30869db11)
2007-10-10r23859: Work to have Group Policy work 'out of the box' in Samba4.Andrew Bartlett4-28/+37
This involves creating the SYSVOL and NETLOGON shares at provision time, and creating the right subdirectories. This also changes the behaviour of lp.get("foo") in ejs - we now return undefined, rather than syntax error, if the parameter doesn't exist (perhaps because the share isn't defined). Andrew Bartlett (This used to be commit 45cadf3bc0d38f6600666511a392e1ce353adee7)
2007-10-10r23815: Thanks to Matthias Wallnoefer <mwallnoefer@yahoo.de> for pointing outAndrew Bartlett2-3/+3
that we had the wrong objectClass for OU=Domain Controllers,${DOMAINDN} (was CN=Domain Controllers,${DOMAINDN}) This fixes both the SAMR server and the LDIF templates. Andrew Bartlett (This used to be commit 625a9e6c041bedc93925bdebb3a60af1dbdde317)
2007-10-10r23720: Allow the member server to work against an LDAP Backend. Another caseAndrew Bartlett2-23/+23
where LDB isn't as strict as OpenLDAP, the self join record contains duplicate servicePrincipalNames once the DNS name and domain name are made equal. (Easier to just skip the useless self-join). Andrew Bartlett (This used to be commit 49ff929be6fcf57721532de13bdd7a7e1617af6f)
2007-10-10r23717: We need to remove the _ in LDAP_MANAGERPASS for theAndrew Bartlett3-5/+5
--ldap-manager-pass= option to work. Andrew Bartlett (This used to be commit fbcb1ec14125a4ca57922ec75b01af9a99dcd954)
2007-10-10r23716: Clarify LDAP Manager DN and fix slapd startup syntax.Andrew Bartlett3-6/+6
Andrew Bartlett (This used to be commit 17dad5d8c345c2c3a7643bff7a43473339a22d40)
2007-10-10r23715: Make the provision-backend script print out the exact commands to run,Andrew Bartlett2-4/+18
to set up the LDAP backend. Andrew Bartlett (This used to be commit cc7900210a2e473060d5897ec729923ac6b2f18d)
2007-10-10r23703: Start to get Samba4 to again work with LDAP backends, after I turnedAndrew Bartlett2-8/+9
on metze's schema work. Andrew Bartlett (This used to be commit 3111bbdf64f57bf8d2638fd9829c071dcfeb4af1)
2007-10-10r23560: - Activate metze's schema modules (from metze's schema-loading-13 ↵Andrew Bartlett3-6/+24
patch). - samba3sam.js: rework the samba3sam test to not use objectCategory, as it's has special rules (dnsName a simple match) - ldap.js: Test the ordering of the objectClass attributes for the baseDN - schema_init.c: Load the mayContain and mustContain (and system...) attributes when reading the schema from ldb - To make the schema load not suck in terms of performance, write the schema into a static global variable - ldif_handlers.c: Match objectCategory for equality and canonicolisation based on the loaded schema, not simple tring manipuation - ldb_msg.c: don't duplicate attributes when adding attributes to a list - kludge_acl.c: return allowedAttributesEffective based on schema results and privilages Andrew Bartlett (This used to be commit dcff83ebe463bc7391841f55856d7915c204d000)
2007-10-10r23559: After running testprogs/ejs/minschema.js update schema.ldif (on ↵Günther Deschner1-0/+131
abartlet's request). Guenther (This used to be commit 5410b23ea6649f49e8f24a57854f5e72f114aaef)
2007-10-10r23235: Don't do a seperate LDAP provision step. Instead, everything we needAndrew Bartlett1-8/+2
(including the config files) is created by provision-backend. Andrew Bartlett (This used to be commit 6d4d90399f5a0451fcf2156a465123801e027359)
2007-10-10r23232: Add in some extra files required by the new provision-backend.Andrew Bartlett2-0/+24
(sorry for breaking the build) Andrew Bartlett (This used to be commit 0108334fe3331b7a2cfa972c6f0674b56d436cb5)
2007-10-10r23205: abartlet please commit the correct content ...Stefan Metzmacher1-0/+0
this just fixes make install metze (This used to be commit 236da2cb3db5297b6b9c40a572c3d547954f5090)
2007-10-10r23189: Work towards a totally scripted setup of LDAP backends, so others canAndrew Bartlett5-13/+43
easily try this out. I also intend to use this for the selftest, but I'm chasing issues with the OpenlDAP (but not Fedora DS) backend. Andrew Bartlett (This used to be commit 0f457b1d2e20c36ab220b4a6711ce7930c4c7d21)
2007-10-10r23177: Add in a new provision-backend script. This helps set up the ↵Andrew Bartlett4-0/+241
OpenLDAP or Fedora DS backend. This required a new mkdir() call in ejs. We can now provision just the schema for ad2oLschema to operate on (with provision_schema(), without performing the whole provision, just to wipe it again (adjustments to 'make test' to come soon). Andrew Bartlett (This used to be commit 01d54d13dc66ef2127ac52c64ede53d0790738ec)
2007-10-10r23033: regenerate schema.ldif with minischema.jsStefan Metzmacher1-0/+137
metze (This used to be commit c9e017c00864d08ad6eb38092abd29810604e207)
2007-10-10r23027: Make sure the parent object always exists.Andrew Bartlett1-0/+4
Andrew Bartlett (This used to be commit 55c7c0906ccb741ab002f460164ccbbe56b55a98)
2007-10-10r22984: not everyone uses tridgell.net (fortunately)Andrew Tridgell1-1/+1
(This used to be commit f60817d7970ab449ac327f4da312f10350b9636f)
generated by cgit (git 2.34.1) at 2024-11-23 11:37:42 +0000