summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2011-08-13upgrade: Add missing bits for the s3 to s4 upgrade scriptAmitay Isaacs1-17/+6
Use passdb backend to import/export users Remove unused options for upgrade_from_s3 command (--blank) and credentials options Config file is specified with -s/--configfile option and no need to specify as an argument. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13tests: Update test for s3 to s4 upgrade with two casesAmitay Isaacs1-0/+62
S3-member to S4-member and S3-dc to S4-dc Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-13s4-scripting Rename passdb upgrade routine to avoid conflict with ↵Andrew Bartlett1-4/+4
upgradeprovision
2011-08-12s4-provision: create dsServiceName in @ROOTDSE in GUID formAndrew Tridgell1-0/+2
this allows for handling of server renames as the GUID doesn't change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-04ldb: added a new always-fail ldap extended match OIDAndrew Tridgell1-0/+8
this is used when rewriting filter rules to replace a filter rule with one that is guaranteed not to match Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-28samba-tool: updated test suite to account for newuser changeGiampaolo Lauria3-5/+5
Updated test suite invocations of newuser to "user add" as the newuser functionality is now being moved to "user add" Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: fixed samba-tool user syntaxAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-21samba-tool: update test suite for the new domain objectGiampaolo Lauria1-1/+1
Changed test suite to reflect the changes from setpassword to "domain setpassword" to fit the object-action model Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-21samba-tool: update test suite for add setpasswordGiampaolo Lauria2-5/+5
The test suite needs to change from setpassword to "user setpassword" to reflect the new cmd syntax Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-12s4:param: add "state dir" and "cache dir" optionsStefan Metzmacher3-0/+6
metze
2011-07-07s4 provision: Add some of the AD-specific DNS records to the directoryKai Blin1-1/+1
Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Jul 7 02:29:53 CEST 2011 on sn-devel-104
2011-07-07s4 provision: split up DNS provisioning into generic and samba-specific ldifsKai Blin2-19/+21
Signed-off-by: Kai Blin <kai@samba.org>
2011-06-19s4-provision: Remove hard coded SD for CN=Sites containerMatthieu Patou1-1/+0
With the fix introduced by Nadya in changeset 622ef6aed82a2f2f7748c2a88535486af77487de we are now able to generate correct SD (at least the same as W2k3R2 with a Forest Level of 2003), so there is no need for this fix anymore as it makes SDs for Forest Level 2003 and lower incorrect.
2011-06-07s4-build: install a build link bin/provisionAndrew Tridgell1-0/+2
2011-06-06s4-param Remove 'sid generator'Andrew Bartlett3-3/+0
This was only used by the Fedora DS backend for Samba4. We agreed to no longer support external LDAP backends. Andrew Bartlett
2011-06-06s4-ipv6: added IPv6 support to samba_dnsupdateAndrew Tridgell1-0/+2
2011-06-01s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>Theresa Halloran1-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-01s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.Theresa Halloran1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-05-25s4-provision Use correct tkey-gssapi-credentialAndrew Bartlett1-1/+1
We changed to ${DNSNAME} (the fully qualified domain name) a while back, and while it's usually functionally idential to the previous setting, this breaks down if there is more than one DNS server. Andrew Bartlett
2011-05-21upgradeprovision: add hostname in the blackbox testsMatthieu Patou1-1/+1
2011-05-21Make the purge first so that the provision can reused during testsMatthieu Patou1-3/+3
2011-04-30provision: reorganize attributes so that we don't attribute with DN syntax ↵Matthieu Patou2-6/+2
that depends on non present object Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Apr 30 14:51:16 CEST 2011 on sn-devel-104
2011-03-10s4:setup/provision - fix an output messageMatthias Dieter Wallnöfer1-1/+1
Mention that Windows 2000 function level is supported as well.
2011-02-07s4-provision Remove setup_path, setup_dir and find_setup_dirAndrew Bartlett2-17/+3
We now have a reliable way to know the current location of the templates: dyn_SETUPDIR, which is updated for both the in-build and installed binaries. This replaces the function arguments and the distributed resolution of the setup directory with one 'global' function (imported as required). This also removes the ability to specify an alternate setup directory on the command line, as this was rarely if ever used and never tested. Andrew Bartlett
2011-02-07s4-loadparm: removed "setup directory" optionAndrew Tridgell3-3/+0
the correct setup directory is known at both build time and install time using dyn_SETUPDIR, so we no longer have any need to override it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-07s4-test: fixed more assumptions of ./setup for setup directoryAndrew Tridgell6-21/+21
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-12-01s4-provision: remove the disabled bit in the dns-$HOSTNAME accountAndrew Tridgell1-1/+1
2010-11-26s4-provision: fixed eadb automatic and manual setting in provisionAndrew Tridgell1-4/+2
we should not set posix:eadb in lp in the acl native test code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-24s4-setup correct the require BIND version for Dynamic DNSAndrew Bartlett1-1/+1
2010-11-21s4:provision_rootdse_add.ldif - add all possible LDAP policy values but ↵Matthias Dieter Wallnöfer1-0/+12
outcommented for the moment It would be nice if someone could activate them as needed. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 21 14:41:53 CET 2010 on sn-devel-104
2010-11-17s4-provision: don't test for xattrs if posix:eadb is setAndrew Tridgell1-1/+1
when it is set in smb.conf or on the command line, obey the setting and don't try to test for system xattr support
2010-11-17s4-provision: setup posix:eadb using lp.set()Andrew Tridgell3-3/+0
this allows it to override a setting made during the automatic testing of xattr support
2010-11-17s4-provision: don't try to autodetect xattr is posix:eadb is setAndrew Tridgell1-1/+1
when posix:eadb is set then we know we should be using an eadb
2010-11-17s4-provision: use the command line lp in provisionAndrew Tridgell1-1/+1
this ensures that provision options are stored in the generated smb.conf
2010-11-16samba-tool Add test for --store-plaintextAndrew Bartlett1-1/+1
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 16 06:29:04 UTC 2010 on sn-devel-104
2010-11-09s4:provision_self_join.ldif - the object SID in AD is called "objectSid"Matthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 9 13:18:29 UTC 2010 on sn-devel-104
2010-11-09s4:provision - switch to "clearTextPassword" for setting passwordsMatthias Dieter Wallnöfer3-4/+4
This is the default password set/change attribute for s4 specific purposes (otherwise in respect to Windows it's "unicodePwd"). We move away from "userPassword" since on Windows it's not activated by default - and s4 will follow soon.
2010-11-01s4:setup/spn_update_list - the DNS SPN is only used in DNS modeMatthias Dieter Wallnöfer1-1/+3
Not all DCs are automatically DNS servers. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 1 12:20:36 UTC 2010 on sn-devel-104
2010-11-01s4:provision - adapt the "provision" so that SIDs are only set on entry creationMatthias Dieter Wallnöfer2-3/+1
SID modifications are denied.
2010-10-31s4:provision - remove the "servicePrincipalName" creation on the DC objectMatthias Dieter Wallnöfer2-17/+2
This is now done by the "samba_spnupdate" script.
2010-10-31s4:setup/spn_update_list - reorder and update with other SPNsMatthias Dieter Wallnöfer1-13/+15
2010-10-28s4 net: rename to samba-tool in order to not clash with s3 netKai Blin4-67/+67
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Oct 28 07:25:16 UTC 2010 on sn-devel-104
2010-10-27s4:setup/schema_samba4.ldif - this control isn't used anymoreMatthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 27 16:32:28 UTC 2010 on sn-devel-104
2010-10-25s4:provision_*_references.ldif - "add" and do not "replace" the ↵Matthias Dieter Wallnöfer2-2/+2
"wellKnownObjects" This is the correct AD operation in this case. Multi-valued replaces are generally denied most of the time.
2010-10-23s4:provision.py - add the correct "CN=Sites" security descriptorMatthias Dieter Wallnöfer1-0/+1
This should help to fix bug #7403. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104
2010-10-23s4/ldb:introduce the LDB_CONTROL_PROVISION_OID controlMatthias Dieter Wallnöfer1-0/+1
This control is exactly thought for the actions which previously were performed using the RELAX one. We agreed that the RELAX control will only remain for interactions with OpenLDAP.
2010-10-23ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into ↵Matthias Dieter Wallnöfer1-1/+1
LDB_CONTROL_BYPASS_OPERATIONAL_OID It's nicer to have this consistent with "BYPASS_PASSWORD_HASH".
2010-10-19s4-provisionbackend Allow a fixed URI to be specified for LDAP backendAndrew Bartlett1-0/+12
This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett
2010-10-18s4-openldap-backend Don't set 'dbnosync' on cn=configAndrew Bartlett1-1/+0
This isn't valid in current OpenLDAP versions. Andrew Bartlett
2010-10-18s4-provision Use --ldap-backend-nosync rather than just --nosyncAndrew Bartlett1-2/+1
For some reason we had both options, and --ldap-backend-nosync is the better name. Andrew Bartlett
generated by cgit (git 2.34.1) at 2024-07-02 05:16:18 +0000