summaryrefslogtreecommitdiffstats
path: root/source4/scripting/devel/ldapcmp
Commit message (Collapse)AuthorAgeFilesLines
* s4-ldapcmp: make ldapcmp a samba-tool commandAndrew Tridgell2010-11-291-818/+0
| | | | | | The ldapcmp tool is very useful, and should be available to Samba admins, not just developers. This makes it a samba-tool command, which also gives it the nicer command line handling that samba-tool has
* s4-ldapcmp: fixed exception handlingAndrew Tridgell2010-11-291-19/+17
| | | | | | | | | This pattern, which is common in our code, is wrong: except LdbError, (ERR_NO_SUCH_OBJECT, _): what it actually does it to change the value of ldb.ERR_NO_SUCH_OBJECT to be equal to whatever ldb error occurred! This led to some really bizarre behavior
* s4-ldapcmp.py: Don't guess credentials for second Credentials objectKamen Mazdrashki2010-10-021-1/+1
| | | | | | | This allow us to fallback to first credentials given. Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Sat Oct 2 23:05:20 UTC 2010 on sn-devel-104
* LDAPCmp feature to compare nTSecurityDescriptorsZahari Zahariev2010-09-301-34/+252
| | | | | | | | | | | | | | | | | New feature that enables LDAPCmp users to find unmatched or missing ACEs in objects for the three naming contexts between DCs in one domain (default) or different domains. Comparing security descriptors is not the default action but attribute compatison. So to activate the new mode there is --sd switch. However there are two view modes to the new --sd action which are 'section' (default) or 'collision'. In 'section' mode you can only find differences connected to missing or value unmatched ACEs but not disorder unmatch if ACE values and count are the same. All of the mentioned differences plus disorder ACE unmatch you can observe under 'collision' view however it is more verbose. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connectionsKamen Mazdrashki2010-09-261-2/+3
|
* s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a timeKamen Mazdrashki2010-09-261-20/+33
| | | | If no arguments given, ldapcmp will compare all NCs
* s4-ldapcmp: Enable comparisons between LDBs tooKamen Mazdrashki2010-09-221-3/+12
| | | | | | | This will enable us to compare two LDBs or and LDB with running AD server. Comparing LDB against running running server may come into handy when one want to see if 'net vampire' command does what it does the right way
* s4-ldapcmp: Fix options parsing for common Samba optionsKamen Mazdrashki2010-09-181-4/+10
| | | | | And also set 'creds2' to be equal to 'creds' in case username2 paramater is not supplied on cmd line
* Remove place-holders when it is single domainZahari Zahariev2010-08-201-18/+32
| | | | | | | | | | | This patch changes the behavior of LDAPCmp in a single domain scenario. No place-holders will be applied during comparison so replication will be fully tested and even the silightest difference will pop up. There is a second smaller fix when we compre hosts in different domains. This fix disables ${SERVERNAME} paace-holder when there are more then one serevr (domain controller) in the given domain.
* DNS objects should not be ignoredZahari Zahariev2010-07-051-21/+9
| | | | | | | | Recently I have found that after vampireing from a clean Windows server we have the same DNS objects in the ldb. So ldapcmp has to no longer ignore them. Signed-off-by: Kamen Mazdrashki <kamenim@samba.org>
* v2 Latest enhancements in ldapcmp toolZahari Zahariev2010-05-101-140/+262
| | | | | | | | | | | - Added support for replicating hosts versus hosts in different domains - Added switches for the following modes: = two - ignores additional attributes that cannot be the same in two different provisions (domains) = quiet - display nothing, only return code = verbose - display all dn objects through compare fase = default - display only objects with differences - Added more placeholders for nETBIOSDomainName and ServerName
* python: use '#!/usr/bin/env python' to cope with varying install locationsAndrew Tridgell2010-03-251-1/+1
| | | | this should be much more portable
* Comparison tool for LDAP servers (using Ldb)Zahari Zahariev2010-01-131-0/+449
This tool is integrated with Samba4 Ldb. It provides a useful output where you can find easy differences in objects or attributes within naming context (Domain, Configuration or Schema). Added functionality for two sets of credentials.