summaryrefslogtreecommitdiffstats
path: root/source4/scripting
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:python Push some helper functions from SamDB into samba.LdbAndrew Bartlett2009-08-172-64/+57
| | | | | | | | | | | | | | | This makes it possible to do a bit more of the provision with Samba helpers, but without some of the otherwise useful things (such as loading in the global schema) that SamDB does. Rewrite provision_erase to use a recursive search, rather than a looping subtree search. This is much more efficient, particularly now we have one-level indexes enabled. Delete the @INDEX and similar records *after* deleting all other visible records, this hopefully also assists performance. Andrew Bartlett
* s4:schema Allow a schema load on an unconnected databaseAndrew Bartlett2009-08-171-1/+1
| | | | | | | This helps ensure we don't load the schema too often in the provision (allowing a reference in of the schema before the modules load). Andrew Bartlett
* s4:schema Provide a way to reference a loaded schema between ldbsAndrew Bartlett2009-08-172-5/+37
| | | | | | | | This allows us to load the schema against one ldb context, but apply it to another. This will be useful in the provision script, as we need the schema before we start the LDAP server backend. Adnrew Bartlett
* s4:samdb python bindings - we don't need the attributes hereMatthias Dieter Wallnöfer2009-08-141-2/+1
|
* s4: Better way to call "dom_sid_to_rid" from ldap.pyMatthias Dieter Wallnöfer2009-08-141-0/+10
|
* s4:test for "primaryGroupToken"Matthias Dieter Wallnöfer2009-08-111-0/+23
| | | | | | | | Tests for the right behaviour of this introduced constructed attribute. Since we don't support the read-only-ness of those attributes yet, I commented some lines out. Also I had to add a function for python which converts domain SIDs in RIDs. And a small fix for the "groupType" test.
* s4:provision Allow provision-backend to not run slapd for 'make test'Andrew Bartlett2009-08-121-22/+23
| | | | | | | | | | | As the version of OpenLDAP required for Samba4 is fairly new, we don't want to make it a requirement before this python code is run in 'make test'. As such, skip over the actual starting of slapd, but check the rest runs alright (which still validates syntax and other modules). Andrew Bartlett
* s4:provision Make the --ol-slapd paramter take the full path to slapdAndrew Bartlett2009-08-121-2/+1
|
* s4:provision Rework and further automate setup of OpenLDAP backendOliver Liebel2009-08-121-35/+191
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | heres the summary of all changes/extensions: - Andrew Bartlett's patch to generate indext - Howard Chu's idea to use nosync on the DB included, but made optional - slaptest-path is not needed any more (slapd -Ttest is used instead) and is therefore removed. slapd-path is now recommended when openldap-backend is chosen. its also used for olc-conversion - slapd-detection is now always done by ldapsearch (ldb module), looking anonymous for objectClass: OpenLDAProotDSE via our ldapi_uri. - if ldapsearch was not successfull, (no slapd listening on our socket) slapd is started via special generated slapdcommand_prov (ldapi_uri only) - slapd-"provision-process" startup is done via pythons subprocess. - the slapd-provision-pid is stored under paths.ldapdir/slapd_provision_pid. - after provision-backend is finished: --- slapd.pid is compared with our stored slapd_provision_pid. if the are unique, slapd.pid will be read out, and the slapd "provison"-process will be shut down. --- proper slapd-shutdown is verified again with ldb-search -> ldapi_uri -> rootDSE. --- if the pids are different or one of the pid-files is missing, slapd will not be shut down, instead an error message is displayed to locate slapd manually --- extended help-messages (relevant to slapd) are always displayed, e.g. the commandline with which slapd has to be started when everythings finished (slapd-commandline is stored under paths.ldapdir/slapd_command_file.txt)) - upgraded the content of the mini-howto (howto-ol-backend-s4.txt)
* s4: Simplify two lines in the "samdb.py" file (cosmetic)Matthias Dieter Wallnöfer2009-08-061-2/+1
|
* python: Cope with the dom_sid2 alias in pidl's python generating code.Jelmer Vernooij2009-07-301-2/+2
| | | | | This fixes some problems in the samr Python bindings that pidl was (correctly) warning about.
* DCE/RPC(Python): Rename py_talloc_import to py_talloc_steal.Jelmer Vernooij2009-07-301-1/+1
| | | | | Use py_talloc_reference in DCE/RPC code, fixes access to SAMR pipe.
* s4:provision We no longer add krbtgt or kpasswd account into secrets.ldbAndrew Bartlett2009-07-291-1/+1
|
* s4:provision Fix provision on FreeBSDAndrew Bartlett2009-07-221-0/+1
| | | | | | | | | | We were missing the 'cn' attribute, which we then prepare a sorted list based on. On Linux, strcmp(NULL, NULL) does not segfault, where it does on FreeBSD. Reported by Timur I. Bakeyev <timur@com.bat.ru> Andrew Bartlett
* Re-add accidently removed shares test.Jelmer Vernooij2009-07-201-0/+74
|
* Remove unnecessary imports.Jelmer Vernooij2009-07-196-14/+9
|
* python: Set right ldb modules directory when using system ldb.Jelmer Vernooij2009-07-181-0/+2
|
* Remove pyldb_util and simply duplicate the 5-line function it contains,Jelmer Vernooij2009-07-181-0/+9
| | | | rather than creating a separate shared library for it.
* s4:dsdb Handle dc/domain/forest functional levels properlyAndrew Bartlett2009-07-163-5/+30
| | | | | | | | | | | | Rather than have the functional levels scattered in 4 different, unconnected locations, the provision script now sets it, and the rootdse module maintains it's copy only as a cached view onto the original values. We also use the functional level to determine if we should store AES Kerberos keys. Andrew Bartlett
* Add a way to set an opaque integer onto a samdbAndrew Bartlett2009-07-162-0/+67
| | | | This will allow us to set some more flags into ldb during the provision.
* s4: Remove stub endpoint mapper script.Jelmer Vernooij2009-07-031-24/+0
|
* show attribute values in sorted order to make comparison easierAndrew Tridgell2009-07-021-0/+5
|
* Changed ldb.ERR_NO_SUCH_OBJECT to LDB_ERR_NO_SUCH_OBJECT.Andrew Tridgell2009-07-021-5/+5
| | | | | | | | The LDB_ERR_NO_SUCH_OBJECT varient is not a defined variable. This should improve error handling in our python code on some systems. Unfortunately it still doesn't work on mine. I need to trap Jelmer somewhere where he can't escape some day and force him to divulge the deep druid secrets of python exception handling ....
* s4: Add tests and 'must change password' flags in setpassword and newuserAndrew Bartlett2009-06-181-10/+21
| | | | | | | In particular, ensure that we can acutally change the password under these circumstances. Andrew Bartlett
* s4:setup Add an option to 'setpassword' to force password change at next loginAndrew Bartlett2009-06-181-2/+12
|
* Remove outdated Python status file.Jelmer Vernooij2009-06-181-14/+0
|
* Make fullschema script executable.Jelmer Vernooij2009-06-171-0/+0
|
* python: Provide way to iterate over available shares.Jelmer Vernooij2009-06-161-1/+4
|
* python: Add API for accessing available shares.Jelmer Vernooij2009-06-161-0/+58
|
* A script to compare the differences in nTSecurityDescriptor between 2 hostsNadezhda Ivanova2009-06-111-0/+153
| | | | | | | | | | This script walks the schema, configuration and domain partitions of the locally installed Ldb and a remote hosts and compares the descriptors disregarding the difference in domain SID. The goal is to make sure a freshly provisioned Samba has the correct descriptors so ACLs work correctly. It outputs the descriptors in short SDDL, where the correct SIDs are to be replaced during provisioning. Optionally it can be output as an LDIF file with the current local domain and domain SIDs.
* Fix installation path of the subunit python modules.Timur I Bakeyev2009-06-091-1/+1
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* python: Fix samba4.dcerpc.rpcecho.RpcEchoTests.test_surrounding test.Jelmer Vernooij2009-06-081-1/+1
|
* Fix more unresolved symbols.Jelmer Vernooij2009-06-022-10/+18
|
* python: Move helper functions for using param into a separate file ratherJelmer Vernooij2009-06-021-1/+1
| | | | than linking against the python module.
* Modified SamDB to accept options like Ldb.Nadezhda Ivanova2009-05-271-2/+2
|
* Add str() for policy_handles.Andrew Bartlett2009-04-211-1/+6
| | | | Pair programmed with Jelmer
* python/dcerpc: Custom implementations of policy_handle.__init__ and ↵Andrew Bartlett2009-04-211-0/+11
| | | | | | policy_handle.__repr__ pair-programmed with Jelmer
* python/rpc: Add custom GUID.__str__, GUID.__repr__, GUID.__init__ and ↵Andrew Bartlett2009-04-211-0/+48
| | | | GUID.__cmp__.
* Fix the valid NetBIOS name tests.Jelmer Vernooij2009-04-201-3/+3
|
* Merge branch 'wspp-schema'Andrew Tridgell2009-04-094-42/+364
|\
| * s4:schema Update Windows 2008 schema from Microsoft to latest versionAndrew Bartlett2009-04-031-2/+2
| |
| * Merge branch 'master' into wspp-schemaAndrew Tridgell2009-03-314-30/+206
| |\
| * | s4:schema Remove 'cn' from the final output of ms_schema.pyAndrew Bartlett2009-03-201-0/+6
| | | | | | | | | | | | | | | | | | | | | This avoids one more point of difference between this an the output from minschema and fullschema Andrew Bartlett
| * | Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schemaAndrew Bartlett2009-03-202-101/+91
| |\ \
| * | | s4:provision load_schema in provision.py no longer takes a hostnameAndrew Bartlett2009-03-111-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | This was missed in the earlier work to use this in provision-backend Andrew Bartlett
| * | | Load the schema for provision-backend in a transactionAndrew Bartlett2009-03-061-18/+24
| | | | | | | | | | | | | | | | | | | | | | | | Loading data in a transaction is faster than without. Andrew Bartlett
| * | | Allow ms_schema.py to produce output much like minschema_wsppSreepathi Pai2009-03-051-0/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I've patched the new ms_schema.py (which was intended to be used as a library) to function as minschema_wspp if invoked standalone. Although this is less robust than minschema_wspp on incorrect data, having two programs doing the same thing might not be good idea. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
| * | | Remove ad2oLschema, insted call it directly from provision-backendAndrew Bartlett2009-03-053-16/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes a level of indirection via external binaries in the provision-backend code, and also makes better use of our internal code for loading schema from an LDIF file. Remaining to do: Sort the output again, as the load from LDIF is unsorted (also needed because the normal LDB load from sorted input is too slow anyway, and is only needed here). Andrew Bartlett
| * | | Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schemaAndrew Bartlett2009-03-056-13/+14
| |\ \ \
| * | | | Add the new, updated AD schema file from MicrosoftAndrew Bartlett2009-02-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also remove the copy of the licence text from licence.txt, to ensure we don't get variations between the copies. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-25 22:46:00 +0000