Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | r12704: role => server role | Jelmer Vernooij | 2006-01-03 | 1 | -4/+4 |
| | |||||
* | r12703: Fix handling of short passdb backends (also reported by Steinar ↵ | Jelmer Vernooij | 2006-01-03 | 1 | -2/+4 |
| | | | | Gunderson) | ||||
* | r12699: correctly escape invalid DN characters (reported by Steinar H. ↵ | Jelmer Vernooij | 2006-01-03 | 1 | -1/+1 |
| | | | | | | | Gunderson). this still doesn't work as a bug in ldb causes it to not understand escaped characters in DNs when parsing DNs | ||||
* | r12697: Support empty fullname fields in unix accounts | Jelmer Vernooij | 2006-01-03 | 1 | -0/+4 |
| | |||||
* | r12695: A dot is allowed in NetBIOS names. | Jelmer Vernooij | 2006-01-03 | 1 | -2/+2 |
| | |||||
* | r12533: Get the ldb.errstring() out to the user on failure. It helps a lot | Andrew Bartlett | 2005-12-28 | 1 | -2/+9 |
| | | | | | | with debugging! Andrew Bartlett | ||||
* | r12252: With this change (hack) we can now do an provision onto Samba4's LDAP | Andrew Bartlett | 2005-12-15 | 1 | -1/+4 |
| | | | | | | server. Now to try another one... Andrew Bartlett | ||||
* | r12227: I realised that I wasn't yet seeing authenticated LDAP for the ldb | Andrew Bartlett | 2005-12-14 | 1 | -9/+9 |
| | | | | | | | | | | | | | | backend. The idea is that every time we open an LDB, we can provide a session_info and/or credentials. This would allow any ldb to be remote to LDAP. We should also support provisioning to a authenticated ldap server. (They are separate so we can say authenticate as foo for remote, but here we just want a token of SYSTEM). Andrew Bartlett | ||||
* | r11995: A big kerberos-related update. | Andrew Bartlett | 2005-12-01 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This merges Samba4 up to current lorikeet-heimdal, which includes a replacement for some Samba-specific hacks. In particular, the credentials system now supplies GSS client and server credentials. These are imported into GSS with gss_krb5_import_creds(). Unfortunetly this can't take an MEMORY keytab, so we now create a FILE based keytab as provision and join time. Because the keytab is now created in advance, we don't spend .4s at negprot doing sha1 s2k calls. Also, because the keytab is read in real time, any change in the server key will be correctly picked up by the the krb5 code. To mark entries in the secrets which should be exported to a keytab, there is a new kerberosSecret objectClass. The new routine cli_credentials_update_all_keytabs() searches for these, and updates the keytabs. This is called in the provision.js via the ejs wrapper credentials_update_all_keytabs(). We can now (in theory) use a system-provided /etc/krb5.keytab, if krb5Keytab: FILE:/etc/krb5.keytab is added to the secrets.ldb record. By default the attribute privateKeytab: secrets.keytab is set, pointing to allow the whole private directory to be moved without breaking the internal links. | ||||
* | r11956: removed the old rootdse.ldif, and the provision.js code that uses it | Andrew Tridgell | 2005-11-29 | 1 | -3/+0 |
| | |||||
* | r11781: rename tree to tcons to match the sessions substructure of ↵ | Stefan Metzmacher | 2005-11-18 | 1 | -5/+5 |
| | | | | | | smbsrv_connection metze | ||||
* | r11501: change provision code to use the new display specifiers | Andrew Tridgell | 2005-11-04 | 1 | -0/+2 |
| | |||||
* | r11500: fixed a bug in the variable substition code using the new limit ↵ | Andrew Tridgell | 2005-11-04 | 1 | -1/+1 |
| | | | | argument to split() | ||||
* | r11496: add a minimal ads-compatible schema into our sam.ldb setup. This is | Andrew Tridgell | 2005-11-04 | 1 | -2/+2 |
| | | | | needed for mmc management of Samba4. | ||||
* | r11475: removed a extraneous ldb_delete() call (i had it there for debugging) | Andrew Tridgell | 2005-11-02 | 1 | -1/+0 |
| | |||||
* | r11474: - enable ldb transactions from ejs | Andrew Tridgell | 2005-11-02 | 1 | -4/+19 |
| | | | | | - speed up provisioning a bit using a ldb transaction (also means you can't end up with a ldb being half done) | ||||
* | r11458: fixed our ejs smbscript interfaces to use arrays where appropriate. In | Andrew Tridgell | 2005-11-02 | 2 | -12/+4 |
| | | | | | | | | js arrays are a special type of object where the length property is automatic, and cannot be modified manually. Our code was manually setting length, which made it abort when someone passed in a real ejs array. To fix this we need to create real arrays instead of objects, and remove the code that manually sets the length | ||||
* | r11363: fixed a problem with provisioning when hklm already exists (the | Andrew Tridgell | 2005-10-28 | 1 | -2/+1 |
| | | | | | problem is really caused by hklm not having objectclass attributes on its records, but this is a workaround) | ||||
* | r11285: fixed winreg.js for the recent change to winreg.idl | Andrew Tridgell | 2005-10-25 | 1 | -2/+2 |
| | |||||
* | r11222: Small provision fixes: canonicalName is now generated, and the DC= | Andrew Bartlett | 2005-10-20 | 1 | -1/+1 |
| | | | | | | list should be from the dnsdomain (ie lowercae). Andrew Bartlett | ||||
* | r11217: Ensure the realm is substituted in UPPER case. | Andrew Bartlett | 2005-10-20 | 1 | -2/+2 |
| | | | | Andrew Bartlett | ||||
* | r11203: Use different variable names to make it easier to tell which assert ↵ | Andrew Bartlett | 2005-10-20 | 1 | -4/+4 |
| | | | | | | fired. Andrew Bartlett | ||||
* | r11087: - add type,name,scope as attributes to winsRecords, | Stefan Metzmacher | 2005-10-15 | 1 | -7/+58 |
| | | | | | | | | so you can use them in search filters, only for administration not used inside the winserver code - fix the samba3 ugrade scripts to create a correct samba4 wins.ldb metze | ||||
* | r10515: Handle replacement of "domain logons" and "domain master" by "server ↵ | Jelmer Vernooij | 2005-09-26 | 1 | -2/+14 |
| | | | | role" | ||||
* | r10193: r11632@blu: tridge | 2005-08-30 23:08:27 +1000 | Andrew Tridgell | 2005-09-13 | 1 | -0/+22 |
| | | | | | | | | if we fail to erase a ldb during provision by traversing and deleting records (an in-place erase) then just unlink it and start it again. This makes provisioning much more robust to changes in ldb that make it not backward compatible with old DBs. | ||||
* | r10190: Do some very basic input checking when provisioning. | Jelmer Vernooij | 2005-09-12 | 1 | -0/+26 |
| | |||||
* | r9951: Add another value to the default HKLM. | Jelmer Vernooij | 2005-09-02 | 1 | -4/+15 |
| | | | | Convert Samba3 policy "refuse machine pw change" to registry value. | ||||
* | r9925: Fix swapped nt/lm password hashes - caught by Andrew Bartlett | Jelmer Vernooij | 2005-09-01 | 1 | -1/+1 |
| | |||||
* | r9899: Be more conservative about what is sent to the remote server in ldb_map. | Jelmer Vernooij | 2005-09-01 | 1 | -5/+6 |
| | |||||
* | r9854: Finish ldb_map testsuite | Jelmer Vernooij | 2005-09-01 | 1 | -18/+79 |
| | | | | | Update PLAN Some more small other fixes | ||||
* | r9842: More error checks in the ldb_map modules, extend testsuite | Jelmer Vernooij | 2005-08-31 | 1 | -28/+31 |
| | |||||
* | r9834: More tests for the upgrade from Samba3 | Jelmer Vernooij | 2005-08-31 | 1 | -9/+21 |
| | |||||
* | r9830: Fix support for importing registry values. Extended the examplre ↵ | Jelmer Vernooij | 2005-08-31 | 1 | -5/+3 |
| | | | | registry tdb. | ||||
* | r9827: Convert 'passdb backend' rather then 'passdb backends' | Jelmer Vernooij | 2005-08-31 | 1 | -1/+2 |
| | | | | Be a bit more verbose | ||||
* | r9816: Work on testsuite for upgrade | Jelmer Vernooij | 2005-08-31 | 2 | -23/+39 |
| | | | | Add 'paths' object to provision code. | ||||
* | r9805: Add 'data' property to param EJS object | Jelmer Vernooij | 2005-08-30 | 1 | -19/+49 |
| | | | | | Write out new smb.conf file. Parameters that have disappeared between Samba 3 and 4 will optionally be prefixed with 'samba3:' | ||||
* | r9800: Add EJS interface to param. tridge, sorry this overlaps a bit | Jelmer Vernooij | 2005-08-30 | 1 | -3/+3 |
| | | | | with your loadparm interface. :-/ | ||||
* | r9793: Be more verbose, check for errors in upgrade script. | Jelmer Vernooij | 2005-08-30 | 1 | -9/+23 |
| | |||||
* | r9770: Couple other bugfixes | Jelmer Vernooij | 2005-08-30 | 2 | -8/+9 |
| | | | | Update TODO-list | ||||
* | r9762: Add support for reading good old smbpasswd files | Jelmer Vernooij | 2005-08-29 | 1 | -23/+36 |
| | | | | | Fix password support Make base64 decode/encode functions available to EJS | ||||
* | r9756: One-way upgrade from Samba3->Samba4 basically works now | Jelmer Vernooij | 2005-08-29 | 2 | -13/+8 |
| | | | | Still need to polish some rough edges | ||||
* | r9754: Upgrading with the command line utility now works, at least partially (-: | Jelmer Vernooij | 2005-08-29 | 1 | -8/+95 |
| | | | | Upgrading using SWAT should work as well now. | ||||
* | r9746: Add "staff" as possible alternative to wheel | Jelmer Vernooij | 2005-08-29 | 1 | -1/+1 |
| | | | | (should fix standard provisioning on AIX) | ||||
* | r9744: - [upgrade.js] Start working on smb.conf conversion. | Jelmer Vernooij | 2005-08-29 | 1 | -36/+123 |
| | | | | - [ldb_map] Support storing non-mappable data in a fallback LDB | ||||
* | r9735: More work on generating a valid Samba4 configuration using the | Jelmer Vernooij | 2005-08-29 | 1 | -2/+269 |
| | | | | Samba3 data (both console and SWAT) | ||||
* | r9722: Initial attempt at converting samba3dump to EJS.. | Jelmer Vernooij | 2005-08-28 | 1 | -1/+6 |
| | |||||
* | r9718: Work a bit on the SWAT interface | Jelmer Vernooij | 2005-08-28 | 1 | -0/+8 |
| | |||||
* | r9707: r11080@blu: tridge | 2005-08-28 12:41:12 +1000 | Andrew Tridgell | 2005-08-28 | 1 | -1/+26 |
| | | | | make sure we leave the account enabled after creating a new user | ||||
* | r9568: updated the winreg js library for CreateKey, and add a --createkey | Andrew Tridgell | 2005-08-24 | 1 | -6/+41 |
| | | | | option to the winreg tool | ||||
* | r9497: - converted the winreg library to a more OO style of interface | Andrew Tridgell | 2005-08-23 | 1 | -30/+63 |
| | | | | - added a reg.typestring() method that returns a string representation of a type |