summaryrefslogtreecommitdiffstats
path: root/source4/scripting/python
Commit message (Collapse)AuthorAgeFilesLines
* s4-python: fixed annoyance where control-C doesn't kill our python scriptsAndrew Tridgell2009-10-251-0/+10
| | | | | | | | | We want our scripts to die immediately when a user hits control-C. Otherwise we not only annoy the hell out of the user, we also risk db corruption as the control-C could get delivered as an exception which gets mis-interpreted (eg. as a missing db object). We use transactions for all our databases, so the right thing to do in all our command line tools is to die immediately.
* s4-python: we need to include Python.h firstAndrew Tridgell2009-10-233-3/+3
| | | | | If we don't include Python.h first then we get a pile of warnings due to broken redefines of XOPEN_SOURCE in the Python includes.
* s4:dsdb Split schema loading and schema data managementAndrew Bartlett2009-10-231-2/+3
| | | | | | | | | | | By splitting the module this way, we can load the schema at startup, after the partitions module is operational, but we leave the 'mess with details of entries in the partitions' module to operate only on the partitions module. Loading the schema later allows us to set the @ATTRIBUTES correctly on all the databases. Andrew Bartlett
* s4:provision - Reintroduce accidentally removed parameters and checks from ↵Matthias Dieter Wallnöfer2009-10-221-13/+38
| | | | | | "guess_names" abartlet pointed out that those are essential for a safe and consistent provision.
* s4:provision - rework the "guess_names" and "make_smbconf" methodMatthias Dieter Wallnöfer2009-10-211-37/+18
| | | | | | | | | | - Cleans it up from unnecessary "lower()/upper()" and parameters which can be derived through "lp" calls. - Substitute the "HOSTNAME" caption in the "smb.conf" templates with "NETBIOS_NAME" which fits better. - Now the "realm" and "domain" parameter of the provision are totally case insensitive and the script itself up/downcases them appropriately depending on the use (e.g. "realm" upcase for KERBEROS, lowcase for DNS domainname).
* s4:provision - important fix for DNS domainname: lower realmMatthias Dieter Wallnöfer2009-10-211-1/+1
|
* s4:provision Use schema to casefold partitions on 'upgrade'.Andrew Bartlett2009-10-211-8/+20
| | | | | | | This helps us upgrade from sam.ldb files before the dynamic partitions work, and ensures we use the right casefolding functions. Andrew Bartlett
* s4:Handle reprovision with existing partitionsAndrew Bartlett2009-10-211-3/+20
| | | | | | | | The issue here is that if we don't put the partitions metadata in the database before we wipe it, we won't wipe the partitions contents, and so the provision will later fail (entry already exists) Andrew Bartlett
* s4:provision Set @OPTIONS in the provision_init.ldifAndrew Bartlett2009-10-211-3/+0
| | | | | | | The new partitions code knows to copy these items in when creating a new parition, so we can set it from the start. Andrew Bartlett
* s4:dsdb Rework modules create new partitions at runtimeAndrew Bartlett2009-10-211-13/+7
| | | | | | | | | | | | | | This is done by passing an extended operation to the partitions module to extend the @PARTITION record and to extend the in-memory list of partitions. This also splits things up into module parts that belong above and below repl_meta_data Also slit the partitions module into two files due to the complexity of the code Andrew Barltett
* s4-provision: added the default privileges dbAndrew Tridgell2009-10-171-0/+21
| | | | privileges are now stored in a separate database
* s4:provision - fixed invalid creationTime formatEndi S. Dewata2009-10-161-2/+2
|
* s4:provision - replaced linked_attributes with FDS pluginsEndi S. Dewata2009-10-161-3/+54
| | | | | | | When FDS is used as a backend, Samba should not use the linked_attributes LDB module, but instead use the built-in DS plugins for attribute linking, indexing, and referential integrity.
* s4:provision.py - simplify the "realm" variable handling a bitMatthias Dieter Wallnöfer2009-10-121-6/+5
| | | | (Remove unneeded "upper"s)
* s4:provision Remove all references to samba4LocalDomainAndrew Bartlett2009-10-121-6/+1
| | | | | | | | | This was a bad idea all along, as Simo said at the time. With the full MS schema and enforcement of it, it is an even worse idea. This fixes the provision of the member server in 'make test' Andrew Bartlett
* s4:provision Clarify that we set, rather than modify, objectGUID valuesAndrew Bartlett2009-10-121-6/+6
|
* s4:provision Remove unused parameters from provision scriptsAndrew Bartlett2009-10-061-6/+4
|
* s4:provision - Cosmetic - right indentationsMatthias Dieter Wallnöfer2009-10-021-5/+6
|
* s4:dsdb rework instanceType module - put instanceType in provisionAndrew Bartlett2009-10-021-4/+5
| | | | | The instanceType needs to be specified in future because that's how the partitions are actually created.
* s4:dsdb Add 'lazy_commit' module to swallow the 'lazy commit' OIDAndrew Bartlett2009-10-021-0/+1
| | | | | | | | | | | This allows this control to be specified as critical. We support the control because we choose to always be durable in our transactions. We really, really need a 'duplicate request' API, as at the moment we can't do this without a large, error-prone set of code that cannot cope with new request fields or types. Andrew Bartlett
* s4:provision Ensure we add the schema with the 'relax' controlAndrew Bartlett2009-10-021-2/+4
| | | | (allows addition of systemOnly classes)
* s4: Improve provisioning: use relax controlMatthieu Patou2009-10-022-18/+22
| | | | | | | Give the possibility to specify controls when loading ldif files. Relax control is specified by default for all ldb_add_diff (request Andrew B). Set domainguid if specified at the creation of object instead of modifying afterward Allow to specify objectGUID for NTDS object of the first DC this option is used during provision upgrade.
* s4:provision - Change the default forest/domain function level back to ↵Matthias Dieter Wallnöfer2009-10-021-1/+1
| | | | Windows 2003 Native
* s4:samba.tests.samdb - remove last relicts of the templatesMatthias Dieter Wallnöfer2009-09-301-4/+2
|
* s4:provision - Lets the user choose between the supported forest/domain ↵Matthias Dieter Wallnöfer2009-09-301-10/+23
| | | | | | | function levels Adds a parameter "--function-level" which allows to specify the domain and forest function level.
* samba.tests.provision: Remove broken become_dc test.Jelmer Vernooij2009-09-261-25/+1
|
* Add init file for DCE/RPC tests.Jelmer Vernooij2009-09-241-0/+20
|
* PEP8Jelmer Vernooij2009-09-246-3/+6
|
* Revert "s4:python fixed subunit tests of dcerpc"Jelmer Vernooij2009-09-246-0/+0
| | | | This reverts commit ffd48a79ee34dc90c0f6f16564c3a0de8b53d3d2.
* Initial Implementation of the DS objects access checks.Nadezhda Ivanova2009-09-211-0/+1
| | | | | Currently disabled. The search will be greatly modified, also the object tree stuff will be simplified.
* Merge branch 'master' of git://git.samba.org/sambaNadezhda Ivanova2009-09-212-29/+92
|\
| * s4:kerberos Fix the salt to match Windows 2008.Andrew Bartlett2009-09-211-1/+1
| | | | | | | | | | | | | | The previous commit changed the wrong end - we must fix our server, not our client. Andrew Bartlett
| * s4:provision Make our default salt match our server behaviourAndrew Bartlett2009-09-211-1/+1
| | | | | | | | | | | | We need to look into salting algorithms further. Andrew Bartlett
| * s4:provision - Fix up ProvisioningError class as suggested by JelmerMatthias Dieter Wallnöfer2009-09-211-5/+5
| |
| * s4:samdb/tools - That should fix now the last failuresMatthias Dieter Wallnöfer2009-09-211-2/+2
| |
| * s4:provision Make us Windows 2008 level by defualt againAndrew Bartlett2009-09-201-4/+5
| | | | | | | | | | | | | | | | | | Also add a note to clarify that this should not be changed without discussion and consensus. We don't want this bouncing around. Paramater support to allow optional selection of Win2003 mode welcomed. Andrew Bartlett
| * s4:provision Use code to store domain join in 'net join' as wellAndrew Bartlett2009-09-201-23/+80
| | | | | | | | | | | | | | | | This ensures we only have one codepath to store the secret, and therefore that we have a single choke point for setting the saltPrincipal, which we were previously skipping. Andrew Bartlett
| * s4:provision split provision of DNS zone and self join keytabAndrew Bartlett2009-09-201-4/+10
| |
* | Merge branch 'master' of git://git.samba.org/sambaNadezhda Ivanova2009-09-201-12/+14
|\|
| * s4:python tools - try to fix some test problemsMatthias Dieter Wallnöfer2009-09-201-12/+14
| |
* | Initial implementation of security descriptor creation in DSNadezhda Ivanova2009-09-201-5/+44
|/ | | | | TODO's: ACE sorting and clarifying the inheritance of object specific ace's.
* Fixed a difference in domain sid type when SID is provided by user.Nadezhda Ivanova2009-09-201-1/+4
|
* s4:provision: add the 'resolve_oids' on the top of the module stackStefan Metzmacher2009-09-201-1/+2
| | | | metze
* s4:samdb.py - further reworkMatthias Dieter Wallnöfer2009-09-191-12/+9
| | | | | | | | | - I added a comment to the "new user" operation to point out that this works only on s4, since we add also ID mapping entries for winbind there - The "new user" operation adds now the password through the "set password" operation which I find better due to the re-use principle - Remove the word "DC" after "SAMBA 4" in the comment over the "set password" operation since this note and operation applies also to s4 in standalone mode
* s4:samdb.py - Unification of the interfacesMatthias Dieter Wallnöfer2009-09-182-38/+54
| | | | | | | | | - When a user account is requested by a call always the search filter will be passed as argument. This helps us to unify the API - Add/fix some comments; in particular new comments inform the developer which requirements exist if he wants to use calls which manipulate the "userPassword" attribute (On s4 no problem - but on certain domain levels on Windows Server)
* s4:provision - Bump down the domain and forest level to Windows 2000Matthias Dieter Wallnöfer2009-09-181-3/+3
| | | | | | | | | | | | - The DC level we keep on Windows Server 2008 R2 (we should call ourself always the newest server type) - The domain/forest level we set to the minimum (Windows 2000 native) to allow all AD DC types (from Windows 2000 on) in our domain - the NT4 "mixed" mode isn't supported by us (discussed on mailing list) -> "nTMixedDomain" is set always to 0 - I'll add a script which allows to bump the DC level (basically sets the "msDS-Behaviour-Version" attributes on the "Partitions/Configuration/DC" and on the "DC" object)
* s4:provision - Some rework (continuation)Matthias Dieter Wallnöfer2009-09-171-3/+4
| | | | | | | | | | | - Fix up "servicePrincipalNames" attributes on the DC object - Add some informative comments (most in "provision_self_join.ldif") - Add also comments where objects are missing which we may add later when we support the feature (mainly for FRS) - Add "domain updates" objects also under "CN=Configuration" (they exist twice) - Add the default services under "Services" to allow interoperability with some MS client tools - Smaller changes
* s4:provision - Some reworkMatthias Dieter Wallnöfer2009-09-171-3/+4
| | | | | | | | | | - Add/change "wellKnownObjects" attributes - Order entries in "provision_basedn_modify.ldif" - Add/change "delete entries" object under BASEDN and CONFIGDN - Fix default version number of "Default domain policy" group policy - Add "domain updates" objects for interoperability with MS AD maintaining tools - Show version number in the "oEMInformation" attribute (suggested by ekacnet) - Smaller fixups
* s4/domain behaviour flags: Fix them up in various locationsMatthias Dieter Wallnöfer2009-09-171-5/+6
| | | | | | | | | | Additional notes: - Bump the level to Windows Server 2008 R2 (we should support always the latest version - if we provision ourself) - In "descriptor.c" the check for the "domainFunctionality" level shouldn't be needed: ACL owner groups (not owner user) are supported since Windows 2000 Server (first AD edition) - I took the argument from: http://support.microsoft.com/kb/329194
* s4/python: flagsMatthias Dieter Wallnöfer2009-09-172-9/+83
| | | | | - Introduce the "userAccountControl", "groupType" and "sAMAccountType" flags - Corrects the "domain/forestFunctionality" and "domainControllerFunctionality" flags
generated by cgit (git 2.34.1) at 2025-07-29 17:49:40 +0000