summaryrefslogtreecommitdiffstats
path: root/source4/scripting/python
Commit message (Collapse)AuthorAgeFilesLines
* s4:provision.py - try to use other addresses than "127.0.0.x" and "::1"Matthias Dieter Wallnöfer2010-02-211-2/+10
| | | | | | | | | | | | | On production systems a user for sure strongly disagrees to use local IP addresses (how should the server be accessible?). Therefore if the user didn't specify an IP as provision option and in the "/etc/hosts" file we have at least one not-local IP which resolves to our hostname use this or one of them. Notice: if a host has more public IP addresses with the same name assigned the behaviour is non-deterministic (well, okay - by the entries order it is). But then the user is invited to specify the host IP manually. This should address bug #5484.
* s4-provision: freeze the DNS zone before creating the zone fileAndrew Tridgell2010-02-171-2/+10
| | | | | This prevents bind from getting confused if it has a journal for the zone.
* s4-provision: fix permissions on generated DNS zone fileAndrew Tridgell2010-02-171-9/+11
| | | | | | | The zone file needs to be writeable by bind to allow for it to flush its journal on dynamic updates Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: Function for accessing dsdb_load_partition_usn from PythonFernando J V da Silva2010-02-151-0/+50
| | | | | | | Returns both uSNHighest and uSNUrgent as a dict object in Python from a given partition dn. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:getopt.py - set the password callback only when no password has been providedMatthias Dieter Wallnöfer2010-02-121-4/+6
| | | | | | | | | | Previously the "no_pass" and "no_pass2" variables weren't handled correctly. Since at the initialisation of the "CredentialsOptions" we don't have any password at all. Only afterwards we could get one through "set_password". If a password is specified, use it. If no password is specified, consider the use fo an input mask on STDOUT. But if the loadparm context contains one prefer it over the input.
* s4-provision: import the R2 functional levelAndrew Tridgell2010-02-121-1/+1
| | | | | this makes it easier to modify the script to set us at R2 level in provision. We should make this a parameter.
* s4-build: avoid finding python symlinksAndrew Tridgell2010-02-121-1/+1
| | | | | emacs creates symlinks to .py files while you are editing them. This could cause build failures.
* provision: Use short name for assignee of ACE (BA, SA, CO, ...)Matthieu Patou2010-02-111-8/+6
| | | | | | | | | | Use short name (shortcut for wellknown SID/RID) for assignee in each entry of ACL (when possible) of sysvol files (GPO objects and netlogon folders). This avoid error prone substitution of DOMAINSID in ACL and make ACL clearer by using shortname for assignee accordingly with SDDL synthax rules. Translation to real SID is handled internaly by the from_sddl function. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* python-s4: use secrets.ldb instead of sam.ldb for reading domain SIDMatthieu Patou2010-02-111-2/+2
| | | | | | | This allow to be able to run net acl set xxx yyy on DC, but also on domain member. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* provision: Fix an error with eadb when using not default install dir and ↵Matthieu Patou2010-02-111-1/+5
| | | | | | running as a non root user Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* s4-provision: cope with umask in creating private/dnsAndrew Tridgell2010-02-111-0/+2
|
* s4-provision: pre-create a named.conf.update fileAndrew Tridgell2010-02-111-1/+5
| | | | | | The named.conf.update file will be filled in at runtime by Samba to contain the list of bind9 grant rules for granting DNS dynamic update permissions on the domain.
* s4-provision: move zone file to dns subdirectoryAndrew Tridgell2010-02-111-12/+52
| | | | | | | | This allows the permissions to be correctly set for bind to write to a journal file. It also sets the right group ownership and permissions on the files that bind needs to access. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:provision Be more polite to long-suffering Samba testers.Andrew Bartlett2010-02-111-2/+3
| | | | | | Our testers put up with a lot of odd things when testing out Samba4. Andrew Bartlett
* s4:provision Just 'do the right thing' with empty smb.conf filesAndrew Bartlett2010-02-101-2/+10
| | | | | | | | For some reason, JHT keeps on creating an empty smb.conf file, expecting it to be the same as a non-existant one. It is easier to just realise what he meant. Andrew Bartlett
* s4:Remove "Py_RETURN_NONE" compatibility codeMatthias Dieter Wallnöfer2010-02-091-4/+0
| | | | This was needed only by Python 2.3 which we no longer support.
* Fixed a bug caused by a typo. Infrastructure role didn't work.Nadezhda Ivanova2010-01-291-1/+1
|
* Implemented net fsmo command for transferring fsmo rolesNadezhda Ivanova2010-01-272-0/+204
| | | | | | | | | | | | | The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
* s4-python: Fix formatting.Jelmer Vernooij2010-01-253-33/+27
|
* pyxattr: Move to the same directory as the xattr code.Jelmer Vernooij2010-01-253-269/+0
|
* s4-provision: Fixed typos and redundant codeEndi S. Dewata2010-01-231-10/+10
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* pyxattr: Factor out helper functions.Jelmer Vernooij2010-01-211-24/+24
|
* pyxattr: Simplify tests.Jelmer Vernooij2010-01-212-57/+62
|
* pyxattr: Fix tests by not opening tdb files multiple times.Jelmer Vernooij2010-01-211-2/+0
|
* pyxattr: Fix tests by avoiding opening tdb files multiple times.Jelmer Vernooij2010-01-211-8/+8
|
* pyxattr: Fix memory leaks.Jelmer Vernooij2010-01-212-8/+20
|
* pyxattr: Simplify tests.Jelmer Vernooij2010-01-211-80/+50
|
* pyxattr: Use standard functions for error handling.Jelmer Vernooij2010-01-212-21/+23
|
* pyxattr: Remove unnecessary hacks.Jelmer Vernooij2010-01-212-26/+1
|
* s4-python: add some helper for converting ldb_flag to textMatthieu Patou2010-01-211-0/+33
|
* s4: utils recreate in python setntacl and getntaclMatthieu Patou2010-01-213-5/+126
| | | | | | setntacl is able to set NTACL attribute from command line getntacl now use getopt for parsing command line option and is also able to dump the acl in the SDDL format.
* provision: introduce use-xattr parameter for defining where to store attributesMatthieu Patou2010-01-211-25/+35
| | | | | This option allow simple user (non root) to invoke provision without facing an error while insuring that ACL on shared files will always be set
* s4-tests: register new unit testsMatthieu Patou2010-01-212-37/+106
| | | | make unit test emit a visible warning
* s4-python: add unit test for ntacls manipulation in pythonMatthieu Patou2010-01-211-0/+99
|
* s4-python: add more unit tests for xattr manipulation in pythonMatthieu Patou2010-01-211-11/+39
|
* s4: update setntacl and getntacl to select the adaquate backend (fs/tdb) for ↵Matthieu Patou2010-01-211-16/+54
| | | | storing xattr
* s4: Set acls correctly on all sysvol and scripts sharesMatthieu Patou2010-01-211-26/+45
|
* s4: Make unixid optionalMatthieu Patou2010-01-211-2/+26
| | | | | Make unixid optional, if value not supplied next id from id pool will be used. Create a function to get next id in id pool.
* s4: regroup gpo modification in one function, set acl on files accordingly ↵Matthieu Patou2010-01-212-19/+164
| | | | with ACL in LDAP
* s4: Create unit tests for python "samba.xattr" moduleMatthieu Patou2010-01-212-4/+53
|
* s4: add python bindings for wrap_(s|g)etxattrMatthieu Patou2010-01-214-2/+286
|
* Import testtools as well, required for subunit.Jelmer Vernooij2010-01-161-1/+1
|
* Fix permissions - net subcommand modules don't need to be executable.Jelmer Vernooij2010-01-162-0/+0
|
* Fixed a problem with incorrect default SD owner/group.Nadezhda Ivanova2010-01-131-1/+1
|
* Comparison tool for LDAP servers (using Ldb)Zahari Zahariev2010-01-131-0/+52
| | | | | | | | This tool is integrated with Samba4 Ldb. It provides a useful output where you can find easy differences in objects or attributes within naming context (Domain, Configuration or Schema). Added functionality for two sets of credentials.
* s4-schema: fixed the SDDL for the schema root security descriptorAndrew Tridgell2010-01-091-10/+14
| | | | | This was preventing a DCPROMO client from allowing outgoing replication
* s4-schema: switch to W2K8-R2 schemaAndrew Tridgell2010-01-081-2/+2
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-schema: added adminDisplayName and adminDescriptionAndrew Tridgell2010-01-081-0/+2
| | | | | | These are missing from the WSPP schemas Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision: do a self join for all server typesAndrew Tridgell2010-01-081-22/+17
| | | | | | We need a machine account so the RID allocation code can work. It seems better to use the same code paths for a domain controller and standalone server to avoid testing headaches with little used code.
* s4-provision: re-open sam.ldb after creating the schemaAndrew Tridgell2010-01-081-0/+9
| | | | | | This enables the full schema during the rest of the provision, which means indexing is enabled (along with index error checking, such as duplicate SIDs)