summaryrefslogtreecommitdiffstats
path: root/source4/scripting/python
Commit message (Collapse)AuthorAgeFilesLines
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-161-2/+2
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision Handle machine account password changes while keeping keytabAndrew Bartlett2010-07-151-15/+23
| | | | | | | | | The challenge here is to update the existing record if it already exists, rather than deleting the old record. This ensures that the secrets.keytab handling code keeps the previous password in the keytab. Andrew Bartlett
* s4: Add unit test for increment_calculated_keyversion_numberMatthieu Patou2010-07-151-1/+25
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4 upgradeprovision: introduce a new function to update the field use for ↵Matthieu Patou2010-07-151-3/+37
| | | | | | | | | | calculating msds-keyversionnumber This function change the version field of the unicodePwd in the replPropertyMetaData so that the version is equal or superior to the reference value passed. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4 python: Add functions to samdb to manipulate version of ↵Matthieu Patou2010-07-152-1/+128
| | | | | | | | | | replPropertyMetaData attribute This change contains also helpers for attribute id to attribute oid conversion and from attribute id to attribute name. It brings also unit tests Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4 dsdb: Use the changereplmetadata controlMatthieu Patou2010-07-151-11/+78
| | | | | | | | This control allow to specify the replPropertyMetaData attribute to be specified on modify request. It can be used for very specific needs to tweak the content of the replication data. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4 provision: move update_machine_account_password to helpersMatthieu Patou2010-07-151-1/+44
| | | | | | This is to allow reuse of this function and also unit tests Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision: also use fixed GUID names of the default group policies for ↵Stefan Metzmacher2010-07-101-2/+3
| | | | | | domain and domain controllers in tests metze
* s4 provision: use correct GUID for default policiesMatthieu Patou2010-07-101-2/+7
| | | | | | | | | The value of GUID for policy is not random for default policies, it is described here ("How Core Group Policy Works"): http://technet.microsoft.com/en-us/library/cc784268%28WS.10%29.aspx at paragraph System\Policies Container. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4 net: Add spn module to list/add/remove spn on objectsMatthieu Patou2010-07-102-0/+219
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:samdb.py - "setpassword" - performs password sets using the "unicodePwd" ↵Matthias Dieter Wallnöfer2010-07-081-7/+3
| | | | | | | attribute This does work per default on each AD-compatible DC. "userPassword" support on Windows however has to be activated explicitly by the "dSHeuristics".
* s4:pwsettings net utility - change also here the "minPwdAge" to be the real ↵Matthias Dieter Wallnöfer2010-07-031-2/+2
| | | | | | default Which is one day.
* s4:provision Add an msDS-SupportedEncryptionTypes entry to our DCAndrew Bartlett2010-06-291-1/+16
| | | | | | | | This ensures that our DC will use all the available encyption types. (The KDC reads this entry to determine what the server supports) Andrew Bartlett
* s4:provision.py - fix comment regarding DNS entriesMatthias Dieter Wallnöfer2010-06-261-1/+1
| | | | | I think this should mean partially Samba4 specified (all beside the "dns" account is standard)
* s4:provision: move Samba4 specific DNS stuff to its own fileStefan Metzmacher2010-06-261-1/+8
| | | | metze
* s4:provision: add --next-rid optionStefan Metzmacher2010-06-261-2/+13
| | | | | | | | Make it possible to provision a domain with a given next rid counter. This will be useful for upgrades, where we want to import users with already given SIDs. metze
* s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'Stefan Metzmacher2010-06-261-3/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | On Windows dcpromo imports nextRid from the local SAM, which means it's not hardcoded to 1000. The initlal rIDAvailablePool starts at nextRid + 100. I also found that the RID Set of the local dc should be created via provision and not at runtime, when the first rid is needed. (Tested with dcpromo on w2k8r2, while disabling the DNS check box). After provision we should have this (assuming nextRid=1000): rIDAllocationPool: 1100-1599 rIDPrevAllocationPool: 1100-1599 rIDUsedPool: 0 rIDNextRID: 1100 rIDAvailablePool: 1600-1073741823 Because provision sets rIDNextRid=1100, the first created account (typically DNS related accounts) will get 1101 as rid! metze
* s4:provision: pass relax control also to modify_ldifStefan Metzmacher2010-06-261-2/+2
| | | | metze
* s4 python: Add unit tests related to PyLong/PyInt handlingMatthieu Patou2010-06-251-2/+11
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: Try to support older Pythons.Michael Wood2010-06-251-1/+1
| | | | | | Use "...".split(sep, 1) instead of "...".partition(sep). Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4-python: python is not always in /usr/binAndrew Tridgell2010-06-2453-53/+53
| | | | | | | | Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Fix to undo nasty hack for for grouptype conversionLukasz Zalewski2010-06-231-1/+1
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4:net Remove warnings for 2000 native mode and Samba4.Andrew Bartlett2010-06-231-5/+5
| | | | | | We now support 2000 native mode, and so we just need to warn about mixed mode. Andrew Bartlett
* s4:provision Raise default max functional level to 2008R2Andrew Bartlett2010-06-231-3/+3
| | | | | | | | | We don't support many of the extra features, but that applies across many other parts of AD. Allow the admin to join a 2008R2 domain if he or she wants. This also makes it possible to test 2008R2 domain code in 'make test' Andrew Bartlett
* s4:provision Remove am_rodc from SchemaAndrew Bartlett2010-06-232-5/+5
| | | | | The SamDB created in the schema code isn't real enough to care if it's an rodc or not.
* libds:common Remove DS_DC_* domain functionality flagsAndrew Bartlett2010-06-232-11/+7
| | | | | | These are just a subset of the DS_DOMAIN_ functionality flags, are compared and often confused with each other. Just make them one set. Andrew Bartlett
* s4:python LDB __init__.py - remove completely unused "erase_partitions" callMatthias Dieter Wallnöfer2010-06-202-36/+0
| | | | Seems to be a relict from the past.
* provision: Look for Samba prefix a bit harder.Jelmer Vernooij2010-06-201-4/+6
|
* pydsdb: Mark all SamDB and Schema methods that are in pydsdb asJelmer Vernooij2010-06-203-17/+17
| | | | private, to discourage them being called directly.
* provision: Properly cancel transactions on the secrets ldb.Jelmer Vernooij2010-06-201-122/+131
|
* s4-python: Remove more unused imports, fix use of sets in upgradehelpers.Jelmer Vernooij2010-06-201-2/+2
|
* Use standard Python syntax, booleans and set()'s where appropriate.Jelmer Vernooij2010-06-203-23/+28
|
* Remove unnecessary use of transactions.Jelmer Vernooij2010-06-201-11/+3
|
* ldb: Remove last import of dsdb.Jelmer Vernooij2010-06-201-12/+0
|
* Some more formatting fixes, move schema related functions from Ldb to Schema.Jelmer Vernooij2010-06-205-35/+31
|
* Move convert_to_openldap onto Schema class.Jelmer Vernooij2010-06-203-5/+7
|
* Formatting cleanups; use True/False for booleans, unnecessary backslashes, ↵Jelmer Vernooij2010-06-205-61/+78
| | | | spacing.
* Move a few more samdb-specific methods to SamDB, away from Ldb.Jelmer Vernooij2010-06-201-13/+1
|
* samdb: Fix formatting, move get_oid_from_attid from Ldb to SamDB.Jelmer Vernooij2010-06-203-22/+20
|
* s4-python: Remove trivial function, replace by dictionary.Jelmer Vernooij2010-06-202-36/+3
|
* Modifications extending functionality of newuser cmd and new net group set ↵Lukasz Zalewski2010-06-202-60/+63
| | | | | | of commands for group related operations on ldb Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* Modifications extending functionality of newuser cmd and new net group set ↵Lukasz Zalewski2010-06-204-8/+439
| | | | | | of commands for group related operations on ldb Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: Make grouped commit / rollback more resistant to ↵Matthieu Patou2010-06-201-13/+42
| | | | | | unexpected problems Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: Check that the policy for DC is present if not warn the ↵Matthieu Patou2010-06-201-0/+24
| | | | | | user Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: Emit message instead of crashing when not able to set aclMatthieu Patou2010-06-201-4/+10
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 unittests: add unit tests for upgradehelpersMatthieu Patou2010-06-202-4/+19
| | | | | | | | The functions tested are: * construct_existor_expr * search_constructed_attrs_stored Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: Add function for searching stored constructed attributesMatthieu Patou2010-06-201-0/+51
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: additional restylingMatthieu Patou2010-06-201-31/+42
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 upgradeprovision: Move functions to helpers and improve codeMatthieu Patou2010-06-203-99/+444
| | | | | | | | | | | | Among code improvement the most significant part is that we now compare DN object instead of their string representation. It allow to better react to case an white space difference. Some new move objects have been added (ie. System into well known security principals). This will allow more unittesting Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4 python: Update unit tests related to create secretsMatthieu Patou2010-06-201-0/+13
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>