summaryrefslogtreecommitdiff
path: root/source4/setup
AgeCommit message (Collapse)AuthorFilesLines
2012-11-30s4:dsdb: define DSDB_EXTENDED_SEC_DESC_PROPAGATION_OIDStefan Metzmacher1-0/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
2012-11-30s4:dsdb: define DSDB_CONTROL_SEC_DESC_PROPAGATION_OIDStefan Metzmacher1-0/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
2012-11-30s4:provision: add pekList and msDS-ExecuteScriptPassword to @KLUDGEACLStefan Metzmacher1-0/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
2012-10-17Removed phpldapadmin inclusion for Samba 4.Ricky Nance1-20/+0
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Oct 17 12:55:44 CEST 2012 on sn-devel-104
2012-09-12s4:scripting: rename upgradeprovision -> samba_upgradeprovisionStefan Metzmacher1-2/+2
metze
2012-09-12s4:setup: remove standalone 'provision'Stefan Metzmacher2-279/+0
metze
2012-09-11s4:setup/tests: make use of samba-tool domain provisionStefan Metzmacher6-19/+19
metze
2012-09-10s4:provision: ask the admin about the desired DNS implementationStefan Metzmacher1-0/+6
In interactive mode we should let the admin confirm which implementation he wants. metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Mon Sep 10 11:45:08 CEST 2012 on sn-devel-104
2012-08-28selftest: Fix comment in blackbox_s3upgrade.shAndrew Bartlett1-1/+1
2012-08-23selftest: Specify --use-ntvfs when testing the group codeAndrew Bartlett1-1/+1
We do not need to set filesystem ACLs in this case. Andrew Bartlett
2012-08-23selftest: Specify --use-ntvfs when testing the newuser codeAndrew Bartlett1-1/+1
We do not need to set filesystem ACLs in this case. Andrew Bartlett
2012-08-23selftest: Specify --use-ntvfs when testing the LDAP backend init codeAndrew Bartlett1-5/+5
We do not need to set filesystem ACLs in this case. Andrew Bartlett
2012-08-22selftest: Specify --use-ntvfs to provision in test scriptsAndrew Bartlett4-15/+15
Because these run as non-root, we need to avoid doing things that will fail during the provision. The main test of the s3fs provision is the plugin_s4_dc environment with a smb.conf that specifies vfs_fake_acls. Andrew Bartlett
2012-07-18dsdb: Allocate new OID to allow updates of a read-only replicaAndrew Bartlett1-0/+1
Normally this would be a very bad idea, but the specific case of fixing the instanceType is the only case where this makes sense. Andrew Bartlett
2012-07-13s4-provision: Provide YP/NIS subtree to allow ADUC to see and set rfc2307 attrsGeza Gemes2-1/+510
When provisioning with --use_rfc2307=yes populate the subtree: CN=ypServ30,CN=RpcServices,CN=System,${DOMAINDN} This makes it possible to manipulate the posix attributes via ADUC (commit message adjusted by abartlet) Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-07-03s4-dns: Remove refernece to BIND 9.7 supporting GSS-TSIGAndrew Bartlett1-1/+1
This support is too painful to use. Andrew Bartlett
2012-07-03s4-dns: Remove dynamic DNS instructions for bind 9.7Andrew Bartlett1-22/+1
This version of BIND only ever caused pain when trying to do dynamic DNS. If users are using this version, simply treat it as a static server. Andrew Bartlett
2012-06-20s4-provision: Remove --slapd-path optionAndrew Bartlett2-8/+5
This just leaves a default enough for the test code to still check the start of the provision. This may well be removed in future, and we wish to reduce the extra options to provision. Andrew Bartlett
2012-06-16s4-classicupgrade: Use "samba classic" description for samba3 NT4-like ↵Andrew Bartlett1-3/+4
domains in samba3upgrade
2012-06-16s4-s3upgrade: Add my wins.dat and fix the parsing errorAndrew Bartlett1-0/+2
The issue was that the numbers at the end of the lines are space padded. Andrew Bartlett
2012-05-24s4-provision: Make s3fs the default way to install a new Samba4 DCAndrew Bartlett1-2/+2
With s3fs now well settled into master, we now throw the swtich and make it the default. There is still much to do, but we need to be using s3fs by default to find out exactly what that is. Andrew Bartlett
2012-05-03provision: remove reference to no longer existing template files.Jelmer Vernooij1-2/+1
2012-05-03Extension to the samba-tool group subcommand functionality to allow listing ↵Lukasz Zalewski1-0/+6
of the members of an AD group
2012-05-02s4-provision: Fix --use-s3fs to parse correctlyAndrew Bartlett1-1/+1
2012-04-19s4-provision: Always give the warning if we are using eadb. It really ↵Andrew Bartlett1-3/+6
should be for testing only
2012-04-18s4:samdb:rootdse: implement the schemaUpgradeInProgress operation in ldap modifyMichael Adam1-0/+1
This is preliminary in that it is implemented as a no-op for a start just to be able to successfully answer the request, which seems to be sufficient in order to e.g. survive the exchange schema extensions. Signed-off-by: Matthieu Patou <mat@matws.net> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Apr 18 02:48:28 CEST 2012 on sn-devel-104
2012-04-16provision: Simplify handling of default for --server-role.Jelmer Vernooij1-8/+4
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Apr 16 18:12:24 CEST 2012 on sn-devel-104
2012-04-16provision: Simplify handling of default for --function-level.Jelmer Vernooij1-4/+3
2012-04-16provision: Simplify handling of default for --dns-backend option.Jelmer Vernooij1-6/+2
2012-04-16Add an option to have s3fs as file server for samba4Matthieu Patou1-1/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
2012-04-16s4-provision: Update configuration lines for dlz_bind9Amitay Isaacs1-1/+6
This adds configuration lines for BIND versions 9.8.x and 9.9.x. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 16 03:52:14 CEST 2012 on sn-devel-104
2012-03-26LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD modeMatthias Dieter Wallnöfer1-0/+1
Achieve this by introducing a "disallowDNFilter" flag. Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-03-21s4-provision: don't ask only 3 times for passwd in interactive modeBjörn Baumbach1-1/+1
Signed-off-by: Michael Adam <obnox@samba.org>
2012-03-21s4-provision: add password verification in interactive modeBjörn Baumbach1-3/+9
Since we do not print the password out (anymore), it is necessary to verify the entered password. Signed-off-by: Michael Adam <obnox@samba.org>
2012-03-08s4-selftest: create the st/provision if it didn't exists alreadyMatthieu Patou1-0/+2
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Mar 8 00:25:24 CET 2012 on sn-devel-104
2012-02-27provision: Write configuration without help of templates.Jelmer Vernooij3-45/+0
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 27 00:52:46 CET 2012 on sn-devel-104
2012-02-26provision: Leave result reporting up to caller.Jelmer Vernooij1-1/+3
2012-02-07provision: Make sure target directory is created early.Jelmer Vernooij1-7/+13
This is necessary when using the target directory to store temporary files. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Feb 7 02:45:37 CET 2012 on sn-devel-104
2012-02-07Use named argument 'dir' instead of 'prefix' on NamedTemporaryFile for ↵Horacio G. de Oro1-2/+2
source4/setup/provision Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2012-02-01selftest: Remove unused support for --exeextAndrew Bartlett1-3/+3
2012-01-24python: Change except: statement to except Exception:Amitay Isaacs1-1/+1
This way we only catch true exceptions and keyboard interrupts are not caught here. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
2012-01-10s4:provision: add a server services line to the smb.conf template for the dcMichael Adam1-0/+2
Signed-off-by: Kai Blin <kai@samba.org>
2011-12-14setup: Fix phpldapadmin configuration for version 1.2.xAmitay Isaacs1-18/+10
2011-11-29s4-provision: Make BIND9_DLZ as the default backend for DNSAmitay Isaacs1-3/+3
2011-11-29s4-provision: Create a samdb copy for access by dlz_bind9 moduleAmitay Isaacs1-0/+2
This creates a copy of rootdse, configuration and schema partitions for dlz_bind9 use in dns/ directory. Since dlz_bind9 requires write access to DNS partitions (DomainDnsZones and ForestDnsZones), those partitions are hard-linked (or symlinked) to the actual partitions. An empty domain partition is created so samdb layer can work.
2011-11-17s4-s3-upgrade Test getdomainsid as wellAndrew Bartlett1-0/+2
2011-11-17s4-provision permit server role to be the ROLE_ strings from s3Andrew Bartlett1-6/+1
Also convert between the aliases in one single place. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s4-s3-upgrade Add test of net getlocalsid after the upgradeAndrew Bartlett1-0/+4
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-16provision: Set the security descriptor while creating partitionsAmitay Isaacs1-0/+2
With Matthieu's patch, the setting of security descriptor on partition dn at create time works correctly. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
2011-11-10s4-setup Remove servicePrincipalName: DNS/${DNSDOMAIN} from new installationsAndrew Bartlett2-2/+0
This servicePrincipalName is incorrect (windows does not use that servicePrincipalName, as it targets the server it is updating, not the root of the DNS tree), and now that we have multiple DNS backends that use the internal database, it is quite incorrect (as it cannot exist on more than one account). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Nov 10 01:11:46 CET 2011 on sn-devel-104