From 66b2a04346a568e6564b9cb21a89cf887cad3d03 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 27 Jul 2005 00:23:09 +0000 Subject: r8790: Finish the migration of aliases and privilages with SamSync, by adding templating support for foreignSecurityPrincipals to the samdb module. This is an extension beyond what microsoft does, and has been very useful :-) The setup scripts have been modified to use the new template, as has the SAMR and LSA code. Other cleanups in LSA remove the assumption that the short domain name is the first component of the realm. Also add a lot of useful debug messages, to make it clear how/why the SamSync may have gone wrong. Many of these should perhaps be hooked into an error string. Andrew Bartlett (This used to be commit 1f071b0609c5c83024db1d4a7d04334a932b8253) --- source4/scripting/libjs/provision.js | 19 +++++++------------ 1 file changed, 7 insertions(+), 12 deletions(-) (limited to 'source4/scripting/libjs') diff --git a/source4/scripting/libjs/provision.js b/source4/scripting/libjs/provision.js index b6a7c5978b..0bcb2fa761 100644 --- a/source4/scripting/libjs/provision.js +++ b/source4/scripting/libjs/provision.js @@ -56,19 +56,10 @@ function add_foreign(str, sid, desc, unixname) dn: CN=${SID},CN=ForeignSecurityPrincipals,${BASEDN} objectClass: top objectClass: foreignSecurityPrincipal -cn: ${SID} description: ${DESC} -instanceType: 4 -whenCreated: ${LDAPTIME} -whenChanged: ${LDAPTIME} +unixName: ${UNIXNAME} uSNCreated: 1 uSNChanged: 1 -showInAdvancedViewOnly: TRUE -name: ${SID} -objectGUID: ${NEWGUID} -objectSid: ${SID} -objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,${BASEDN} -unixName: ${UNIXNAME} "; var sub = new Object(); sub.SID = sid; @@ -212,7 +203,7 @@ function setup_file(template, fname, subobj) /* provision samba4 - caution, this wipes all existing data! */ -function provision(subobj, message) +function provision(subobj, message, blank) { var data = ""; var lp = loadparm_init(); @@ -249,7 +240,11 @@ function provision(subobj, message) message("Setting up sam.ldb templates\n"); setup_ldb("provision_templates.ldif", "sam.ldb", subobj, NULL, false); message("Setting up sam.ldb data\n"); - setup_ldb("provision.ldif", "sam.ldb", subobj, data, false); + setup_ldb("provision.ldif", "sam.ldb", subobj, NULL, false); + if (blank == false) { + message("Setting up sam.ldb users and groups\n"); + setup_ldb("provision_users.ldif", "sam.ldb", subobj, data, false); + } message("Setting up rootdse.ldb\n"); setup_ldb("rootdse.ldif", "rootdse.ldb", subobj); message("Setting up secrets.ldb\n"); -- cgit