summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2010-05-13s4:provision_configuration.ldif - "sites" objectMatthias Dieter Wallnöfer1-6/+2
- The default site doesn't contain a licensing object - Adequate two other values (a "showInAdvancedViewOnly" and a "systemFlags" one)
2010-05-13s4:provision.ldif - add IP security objects as they exist on Windows ServerMatthias Dieter Wallnöfer1-0/+282
2010-05-13s4:provision.ldif - add more Windows 2008 domain operationsMatthias Dieter Wallnöfer1-0/+72
2010-05-13s4:provision_users.ldif - On Windows Server >= 2008 security principal ↵Matthias Dieter Wallnöfer1-6/+0
S-1-5-20 doesn't exist anymore
2010-05-13s4:provision.ldif - "passwordSettingsContainer" add "showInAdvancedViewOnly"Matthias Dieter Wallnöfer1-0/+1
2010-05-13s4:provision.ldif - fix up "NTDS Quotas" "systemFlags"Matthias Dieter Wallnöfer1-1/+1
2010-05-13s4:provision_users.ldif - fix up Administrator's "userAccountControl"Matthias Dieter Wallnöfer1-1/+1
2010-05-13s4:provision_basedn_modify.ldif - fix up "maxPwdAge"Matthias Dieter Wallnöfer1-2/+2
2010-05-13s4:provision_users.ldif - Fix typos in user/group objectsMatthias Dieter Wallnöfer1-13/+13
2010-05-10s4:dsdb: add new controlsMatthias Dieter Wallnöfer1-0/+3
- Add a new control for getting status informations (domain informations, password change status) directly from the module - Add a new control for allowing direct hash changes - Introduce an addtional control "change_old password checked" for the password
2010-05-10s4:setup: mark DSDB_CONTROL_DN_STORAGE_FORMAT_OID 1.3.6.1.4.1.7165.4.3.4 as ↵Stefan Metzmacher1-2/+4
allocated metze
2010-05-10s4:blackbox password tests - more complex passwordsStefan Metzmacher2-5/+5
2010-05-10s3:provision_basedn_modify.ldif - add "msDS-NcType" attribute and fix commentsMatthias Dieter Wallnöfer1-1/+5
2010-04-27Install spn_update_list to setup/ dirMarcel Ritter1-0/+1
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
2010-04-27s4-dsdb: added samba_spnupdateAndrew Tridgell1-0/+27
this script adds all our required servicePrincipalName entries at runtime. The admin can add more entries to spn_update_list as needed
2010-04-27s4-dns: explain what the file is forAndrew Tridgell1-0/+2
2010-04-27s4-dns: fixed dc.dc duplication in DNS update listAndrew Tridgell1-2/+2
2010-04-22s4:provision Remove moduleload for 'hdb' (wrong name).Andrew Bartlett1-1/+0
The backends are not normally modules anyway
2010-04-22s4:provision Make OpenLDAP backend more robustAndrew Bartlett1-1/+11
With the extra moduleload lines (which succeed if it's already staticly linked), we now work with OpenLDAP overlays as modules. Andrew Bartlett
2010-04-22s4:provison Pass nosync in for the OpenLDAP cn=config tooAndrew Bartlett1-0/+1
2010-04-22s4:OpenLDAP-backend Use the new rdnval module in OpenLDAPAndrew Bartlett2-2/+7
This is rather than rdn_name, which tries to do the job on the client side. We need to leave this module in the stack for Fedora DS (and of course the LDB backend). Andrew Bartlett
2010-04-22s4:provision Use more reasonable values for DB_CONFIGAndrew Bartlett1-5/+13
With the OpenLDAP backend, the old DB_CONFIG caused OpenLDAP to abort on startup, and was very inefficient. This new one, kindly supplied by Matthew Backes <mbackes@symas.com> uses a more reasonable set of buffer sizes. Andrew Bartlett
2010-04-21s4-upgradeprovision: fixed --realm option duplicate in upgrade_from_s3Andrew Tridgell1-1/+0
2010-04-21s4-provision: cope with --realm being in getopt.pyAndrew Tridgell1-1/+2
we still need to allow for interactive querying of the realm Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-15s4 provision: Remove hard coded ACL for GPO objectsMatthieu Patou1-2/+0
It is no longer needed to hard code ACL for GPO object as we have now code that calculate ACL from defaultSecurityDescriptor and inheritance correctly. In fact the resulting ACL returned by this hard coded value is a bit wrong as some ACE are duplicated. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-04-15s4:setup/wscript_build: install dns_update_list into ${SETUPDIR}Stefan Metzmacher1-1/+1
metze
2010-04-08s4-python: More cleanups.Jelmer Vernooij1-1/+2
2010-04-08s4-python: Simplify code, improve formatting.Jelmer Vernooij1-8/+5
2010-04-08build: allow the waf build to work with python 3.0 and 3.1Thomas Nagy1-1/+2
Python 3.x is a bit fussier about print statements and indentation. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06s4-waf: install the rest of our python filesAndrew Tridgell1-8/+0
2010-04-06s4-waf: forgot these filesAndrew Tridgell1-0/+20
2010-04-04s4-python: Move dsdb constants to a separate python module.Jelmer Vernooij1-2/+5
2010-03-25python: use '#!/usr/bin/env python' to cope with varying install locationsAndrew Tridgell2-2/+2
this should be much more portable
2010-03-18Fixed --ol-mmr-url helplineOliver Liebel1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-18Fixed OL-MMR make testOliver Liebel1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-14Reintroduce "s4:provision Improve the handling of provision errors""Matthias Dieter Wallnöfer1-18/+23
This mainly reverts commit f0bc02d74c16bc013e9fdab46ef271cf45873453. Jelmer pointed out a way how we can achieve the same error handling with an older syntax also on Python 2.4+.
2010-03-13Revert "s4:provision Improve the handling of provision errors"Matthias Dieter Wallnöfer1-25/+18
This reverts partially commit 027123199e13cc02ae4edadd8f0dd0f0660e1193. Andrew, this is not Python 2.4+ compatible
2010-03-11s4:provision - Updated FDS schema mapping.Endi S. Dewata1-6/+4
2010-03-11s4:provision Improve the handling of provision errorsAndrew Bartlett1-18/+25
The backtraces were too confusing for our users, and didn't tell them what to do to fix the problem. By printing the string (rather than a backtrace), and including in the error what to do, and what file to remove, we give them a chance. Andrew Bartlett
2010-03-06s4:provision.reg - call us Windows 2008 from the current version point of viewMatthias Dieter Wallnöfer1-1/+1
2010-03-02s4:provision - Moved default FDS SASL mappings deletion from post_setup() to ↵Endi S. Dewata1-0/+11
init(). Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-02s4:provision - Use netbios name for FDS instance name.Endi S. Dewata1-12/+12
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-02-26s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"Matthias Dieter Wallnöfer1-1/+1
2010-02-26s4-provision: added dns_update_listAndrew Tridgell1-0/+20
This contains the list of DNS names we should have as a DC
2010-02-26s4-provision: fixed port number for gc ldap DNS SRV entryAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-26Revert "s4:AD content - adequate some revision levels to match Windows ↵Andrew Tridgell2-5/+5
Server 2008" This reverts commit 973ea198677c581064fad62cdac30baac7103ef8. This change breaks DRS dcpromo.
2010-02-21s4:AD content - Implement the new password settings containerMatthias Dieter Wallnöfer1-0/+5
2010-02-21s4:AD content - adequate some revision levels to match Windows Server 2008Matthias Dieter Wallnöfer2-5/+5
2010-02-21s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008Matthias Dieter Wallnöfer2-4/+22
Those replace the FRS ones.