summaryrefslogtreecommitdiffstats
path: root/source4/setup
Commit message (Collapse)AuthorAgeFilesLines
* s4 provision: Remove hard coded ACL for GPO objectsMatthieu Patou2010-04-151-2/+0
| | | | | | | | | | It is no longer needed to hard code ACL for GPO object as we have now code that calculate ACL from defaultSecurityDescriptor and inheritance correctly. In fact the resulting ACL returned by this hard coded value is a bit wrong as some ACE are duplicated. Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4:setup/wscript_build: install dns_update_list into ${SETUPDIR}Stefan Metzmacher2010-04-151-1/+1
| | | | metze
* s4-python: More cleanups.Jelmer Vernooij2010-04-081-1/+2
|
* s4-python: Simplify code, improve formatting.Jelmer Vernooij2010-04-081-8/+5
|
* build: allow the waf build to work with python 3.0 and 3.1Thomas Nagy2010-04-081-1/+2
| | | | | | Python 3.x is a bit fussier about print statements and indentation. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell2010-04-061-0/+2
| | | | them
* s4-waf: install the rest of our python filesAndrew Tridgell2010-04-061-8/+0
|
* s4-waf: forgot these filesAndrew Tridgell2010-04-061-0/+20
|
* s4-python: Move dsdb constants to a separate python module.Jelmer Vernooij2010-04-041-2/+5
|
* python: use '#!/usr/bin/env python' to cope with varying install locationsAndrew Tridgell2010-03-252-2/+2
| | | | this should be much more portable
* Fixed --ol-mmr-url helplineOliver Liebel2010-03-181-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Fixed OL-MMR make testOliver Liebel2010-03-181-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Reintroduce "s4:provision Improve the handling of provision errors""Matthias Dieter Wallnöfer2010-03-141-18/+23
| | | | | | | This mainly reverts commit f0bc02d74c16bc013e9fdab46ef271cf45873453. Jelmer pointed out a way how we can achieve the same error handling with an older syntax also on Python 2.4+.
* Revert "s4:provision Improve the handling of provision errors"Matthias Dieter Wallnöfer2010-03-131-25/+18
| | | | | | This reverts partially commit 027123199e13cc02ae4edadd8f0dd0f0660e1193. Andrew, this is not Python 2.4+ compatible
* s4:provision - Updated FDS schema mapping.Endi S. Dewata2010-03-111-6/+4
|
* s4:provision Improve the handling of provision errorsAndrew Bartlett2010-03-111-18/+25
| | | | | | | | | The backtraces were too confusing for our users, and didn't tell them what to do to fix the problem. By printing the string (rather than a backtrace), and including in the error what to do, and what file to remove, we give them a chance. Andrew Bartlett
* s4:provision.reg - call us Windows 2008 from the current version point of viewMatthias Dieter Wallnöfer2010-03-061-1/+1
|
* s4:provision - Moved default FDS SASL mappings deletion from post_setup() to ↵Endi S. Dewata2010-03-021-0/+11
| | | | | | init(). Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - Use netbios name for FDS instance name.Endi S. Dewata2010-03-021-12/+12
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"Matthias Dieter Wallnöfer2010-02-261-1/+1
|
* s4-provision: added dns_update_listAndrew Tridgell2010-02-261-0/+20
| | | | This contains the list of DNS names we should have as a DC
* s4-provision: fixed port number for gc ldap DNS SRV entryAndrew Tridgell2010-02-261-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* Revert "s4:AD content - adequate some revision levels to match Windows ↵Andrew Tridgell2010-02-262-5/+5
| | | | | | | | Server 2008" This reverts commit 973ea198677c581064fad62cdac30baac7103ef8. This change breaks DRS dcpromo.
* s4:AD content - Implement the new password settings containerMatthias Dieter Wallnöfer2010-02-211-0/+5
|
* s4:AD content - adequate some revision levels to match Windows Server 2008Matthias Dieter Wallnöfer2010-02-212-5/+5
|
* s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008Matthias Dieter Wallnöfer2010-02-212-4/+22
| | | | Those replace the FRS ones.
* s4-drs: enable the recyclebin optional featureEduardo Lima2010-02-161-0/+12
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-provision: fixed --function-level option to provisionAndrew Tridgell2010-02-121-0/+1
| | | | we need the DS_DOMAIN_* levels imported
* s4-provision: pre-create a named.conf.update fileAndrew Tridgell2010-02-112-35/+8
| | | | | | The named.conf.update file will be filled in at runtime by Samba to contain the list of bind9 grant rules for granting DNS dynamic update permissions on the domain.
* s4-provision: move zone file to dns subdirectoryAndrew Tridgell2010-02-111-2/+2
| | | | | | | | This allows the permissions to be correctly set for bind to write to a journal file. It also sets the right group ownership and permissions on the files that bind needs to access. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:provision Just 'do the right thing' with empty smb.conf filesAndrew Bartlett2010-02-101-0/+16
| | | | | | | | For some reason, JHT keeps on creating an empty smb.conf file, expecting it to be the same as a non-existant one. It is easier to just realise what he meant. Andrew Bartlett
* upgrade_from_s3: Remove unused imports.Jelmer Vernooij2010-01-251-2/+0
|
* s4-provision: Added msDS-NcType into samba4Top object classEndi S. Dewata2010-01-231-0/+1
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* s4-provision: Disable populating FDS during instance creation.Endi S. Dewata2010-01-231-0/+1
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* provision: use message and do not display warning if the user choosed ↵Matthieu Patou2010-01-211-3/+4
| | | | delibarately posix:eadb
* provision: introduce use-xattr parameter for defining where to store attributesMatthieu Patou2010-01-214-6/+24
| | | | | This option allow simple user (non root) to invoke provision without facing an error while insuring that ACL on shared files will always be set
* s4: Set acls correctly on all sysvol and scripts sharesMatthieu Patou2010-01-211-2/+7
|
* s4: regroup gpo modification in one function, set acl on files accordingly ↵Matthieu Patou2010-01-211-1/+2
| | | | with ACL in LDAP
* s4-provision: added w2k8r2 ldap capabilitiesAndrew Tridgell2010-01-161-0/+2
|
* s4-provision: added "check-names ignore;" to allow for _msdcs A recordsAndrew Tridgell2010-01-161-0/+3
|
* s4:provision_users.ldif - Add a comment that some objects under "Users" are ↵Matthias Dieter Wallnöfer2010-01-141-0/+3
| | | | | | now located elsewhere This is needed due to the new RID/SID distribution system
* s4:provision_users.ldif - Add objects for IISMatthias Dieter Wallnöfer2010-01-141-0/+21
| | | | | | | Some WSPP locations point out that beginning with Windows Server 2008 they're also per default present. Compared against Windows Server 2008
* s4:provision_users.ldif - Add additional BUILTIN objectsMatthias Dieter Wallnöfer2010-01-141-0/+30
| | | | Compared against Windows Server 2008
* s4:provision_users.ldif - add the restant part of the objects needing for ↵Matthias Dieter Wallnöfer2010-01-141-0/+26
| | | | | | | | RODC support RODC = Read Only Domain Controllers Compared against Windows Server 2008
* s4:provision_users.ldif - Fix up errors on existing entriesMatthias Dieter Wallnöfer2010-01-141-6/+8
| | | | Compared against Windows Server 2008
* s4:provision_users.ldif - Simple reorderingMatthias Dieter Wallnöfer2010-01-141-70/+70
| | | | Sorted according the SID - easier for later enhancements.
* s4:provision_users.ldif - Remove system objects from the wrong placeMatthias Dieter Wallnöfer2010-01-141-27/+0
| | | | | Objects like the "Cryptographic Operators", "Event Log Readers" don't belong here but into the builtin domain.
* Revert "s4:provision_users.ldif - Import all essential groups for Windows ↵Andrew Tridgell2010-01-111-113/+85
| | | | | | | | | | | Server 2008 mode" This reverts commit 5c174c68ccba7506147feab1d09ad676792139b3. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push.
* Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 ↵Andrew Tridgell2010-01-111-0/+5
| | | | | | | | | | | for now" This reverts commit 61dfd3dc1dce2c0dd6693de80930af312ad3e39f. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push.
* Revert "s4:provision_users.ldif - Fix memberships regarding the denied ↵Andrew Tridgell2010-01-111-8/+0
| | | | | | | | | | | password RODC replication group" This reverts commit 9ee895fcf6327b1c2f5ee09fa565bd62974e9c58. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push.