samba.git/source4/scripting/devel/ldapcmp, branch master

s4-ldapcmp: make ldapcmp a samba-tool command

2010-11-29T07:04:42+00:00

The ldapcmp tool is very useful, and should be available to Samba
admins, not just developers. This makes it a samba-tool command, which
also gives it the nicer command line handling that samba-tool has

s4-ldapcmp: fixed exception handling

2010-11-29T07:04:42+00:00

This pattern, which is common in our code, is wrong:
            except LdbError, (ERR_NO_SUCH_OBJECT, _):

what it actually does it to change the value of ldb.ERR_NO_SUCH_OBJECT
to be equal to whatever ldb error occurred! This led to some really
bizarre behavior

s4-ldapcmp.py: Don't guess credentials for second Credentials object

2010-10-02T23:05:20+00:00

This allow us to fallback to first credentials given.

Autobuild-User: Kamen Mazdrashki 
Autobuild-Date: Sat Oct  2 23:05:20 UTC 2010 on sn-devel-104

LDAPCmp feature to compare nTSecurityDescriptors

2010-09-30T16:41:20+00:00

New feature that enables LDAPCmp users to find unmatched or
missing ACEs in objects for the three naming contexts between
DCs in one domain (default) or different domains. Comparing
security descriptors is not the default action but attribute
compatison. So to activate the new mode there is --sd switch.
However there are two view modes to the new --sd action which
are 'section' (default) or 'collision'. In 'section' mode you
can only find differences connected to missing or value
unmatched ACEs but not disorder unmatch if ACE values and count
are the same. All of the mentioned differences plus disorder
ACE unmatch you can observe under 'collision' view however
it is more verbose.

Signed-off-by: Anatoliy Atanasov

s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connections

2010-09-25T23:25:10+00:00

s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a time

2010-09-25T23:25:03+00:00

If no arguments given, ldapcmp will compare all NCs

s4-ldapcmp: Enable comparisons between LDBs too

2010-09-22T12:07:24+00:00

This will enable us to compare two LDBs or and LDB with running
AD server. Comparing LDB against running running server
may come into handy when one want to see if 'net vampire'
command does what it does the right way

s4-ldapcmp: Fix options parsing for common Samba options

2010-09-18T12:09:46+00:00

And also set 'creds2' to be equal to 'creds' in case
username2 paramater is not supplied on cmd line

Remove place-holders when it is single domain

2010-08-20T10:52:08+00:00

This patch changes the behavior of LDAPCmp in a single domain
scenario. No place-holders will be applied during comparison
so replication will be fully tested and even the silightest
difference will pop up.

There is a second smaller fix when we compre hosts in different
domains. This fix disables ${SERVERNAME} paace-holder when there
are more then one serevr (domain controller) in the given domain.

DNS objects should not be ignored

2010-07-05T15:54:15+00:00

Recently I have found that after vampireing from a clean Windows
server we have the same DNS objects in the ldb. So ldapcmp has to
no longer ignore them.

Signed-off-by: Kamen Mazdrashki