summaryrefslogtreecommitdiffstats
path: root/source4/scripting
Commit message (Collapse)AuthorAgeFilesLines
* wafsamba: Fix handling of pyembed/pyext.Jelmer Vernooij2010-10-101-19/+19
|
* wafsamba: Clarify needs_python argument name, use pyembed/pyext whereJelmer Vernooij2010-10-101-9/+9
| | | | | | | | | applicable. Allow using both pyembed and pyext, to prevent unresolved symbols. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 10 03:54:01 UTC 2010 on sn-devel-104
* waf: fixed some python3.x portability issuesAndrew Tridgell2010-10-061-3/+4
| | | | | these have crept into the tree over time. Maybe we should add testing of a range of python versions to autobuild?
* s4-provision: Reset "debuglevel" after "provision" take placeKamen Mazdrashki2010-10-051-7/+9
| | | | | | | | Otherwise "provision" resets our current debug level and we don't get debug messages we may expect onwards Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Tue Oct 5 11:32:50 UTC 2010 on sn-devel-104
* s4:dsdb python stuff - introduce also here the "show_recycled" controlMatthias Dieter Wallnöfer2010-10-032-5/+8
| | | | | | | But also here beside "show_deleted" to not loose compatibility with older provisions. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-selftest: silence warnings about bind chownAndrew Tridgell2010-10-021-2/+2
|
* s4-test: silence the Failed to chown message in make testAndrew Tridgell2010-10-021-3/+5
|
* s4-ldapcmp.py: Don't guess credentials for second Credentials objectKamen Mazdrashki2010-10-021-1/+1
| | | | | | | This allow us to fallback to first credentials given. Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Sat Oct 2 23:05:20 UTC 2010 on sn-devel-104
* s4-getopt.py: Make Anonymous creds when no credentialsKamen Mazdrashki2010-10-031-2/+7
| | | | | are supplied on command line and caller doesn't want us to guess credentials from environment
* s4-python-test: Common implementation for getting environment variable valueKamen Mazdrashki2010-10-031-0/+11
| | | | | Unit-test based python tests require certain input parameters to be set in environment, otherwise they can't be run
* s4-python-samba: Remove trailing ';'sKamen Mazdrashki2010-10-032-29/+29
|
* s4-python-test: Implement global connect_samdb() functionKamen Mazdrashki2010-10-031-0/+46
| | | | | This helper makes proper ldb url to connect to and is a shorthand for test to create SamDB connections
* s4-samba.samdb: Fix masking names from outer contextKamen Mazdrashki2010-10-031-17/+17
| | | | | - 'filter' is built-in - 'ldb' is a module name we imported
* s4-python-samba: 'file' is a built-inKamen Mazdrashki2010-10-031-3/+3
|
* s4-samba.samdb: Fix leading indention and trailing ';'Kamen Mazdrashki2010-10-031-10/+10
|
* s4-python-samba: Fix few cosmeticsKamen Mazdrashki2010-10-031-4/+3
| | | | | - we have sys module already imported - _glue module is part of samba package so be more precise how to import
* s4-spn: don't try and send an empty SPN listAndrew Tridgell2010-09-301-0/+2
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision: wipe the old keytabs when provisioningAndrew Tridgell2010-09-302-7/+29
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytabAndrew Tridgell2010-09-301-2/+5
| | | | | | we need to fetch the msDS-keyVersionNumber from the writeable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* LDAPCmp feature to compare nTSecurityDescriptorsZahari Zahariev2010-09-301-34/+252
| | | | | | | | | | | | | | | | | New feature that enables LDAPCmp users to find unmatched or missing ACEs in objects for the three naming contexts between DCs in one domain (default) or different domains. Comparing security descriptors is not the default action but attribute compatison. So to activate the new mode there is --sd switch. However there are two view modes to the new --sd action which are 'section' (default) or 'collision'. In 'section' mode you can only find differences connected to missing or value unmatched ACEs but not disorder unmatch if ACE values and count are the same. All of the mentioned differences plus disorder ACE unmatch you can observe under 'collision' view however it is more verbose. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4-dns: send A record updates via TKEYAndrew Tridgell2010-09-301-1/+6
|
* s4-devel: added new options to getncchanges scriptAndrew Tridgell2010-09-291-9/+65
| | | | | | added --pas, --dest-dsa and --replica-flags options Pair-Programmed-With: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS callAndrew Tridgell2010-09-291-10/+57
| | | | | we can't do SPN updates via sam writes and replication, as the sam is read-only
* s4-drsutils: expose DsBind() call in drs_utils.pyAndrew Tridgell2010-09-291-37/+38
| | | | this will be used by samba_spnupdate
* s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpersAndrew Tridgell2010-09-292-0/+12
| | | | | | | | | | | Our helper scripts can fail on Fedora with the PDT timezone (Western USA). This is the same issue we found with Heimdal earlier today, the 24 second difference between GMT and UTC, but this time in MIT Kerberos as linked into bind9. By forcing TZ=GMT in these scripts we avoid the problem Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dns: added --update-list option to samba_dnsupdateAndrew Tridgell2010-09-271-8/+14
| | | | this allows us to use it for RODC netlogon updates
* s4-dns: use the generated krb5.conf in samba_dnsupdateAndrew Tridgell2010-09-271-0/+5
| | | | | | | this gives one less thing that an admin can get wrong Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 27 02:35:29 UTC 2010 on sn-devel-104
* s4-provision: fixed the generation of the krb5.conf for vampireAndrew Tridgell2010-09-271-6/+6
| | | | we need a correct krb5.conf for nsupdate from bind9
* s4-spn: don't try to do SPN updates as a RODCAndrew Tridgell2010-09-261-0/+4
| | | | we don't have the permissions to do it
* upgradeprovision: fix a typoMatthieu Patou2010-09-261-1/+1
|
* upgradeprovision: Fix a bug with renamed entriesMatthieu Patou2010-09-261-2/+13
| | | | | The SD was not refetched for renamed entries, resulting with a try to add an additional SD when there was already one.
* upgradeprovision: fix a bug with not updated linksMatthieu Patou2010-09-261-0/+1
|
* s4 provision: start with gpo of version 0 and be consistent between ↵Matthieu Patou2010-09-261-1/+1
| | | | different policies
* s4 upgradeprovision: fix a bug with empty reference objectsMatthieu Patou2010-09-261-1/+9
| | | | Thanks to lukas@eecs.qmul.ac.uk for poiting it to me
* s4 upgradeprovision: Copy versionNumber if not present it helps to make gpo ↵Matthieu Patou2010-09-261-3/+3
| | | | valid
* s4 provision: Make GPO folder group writableMatthieu Patou2010-09-261-3/+3
| | | | | | The group of this folder is domain administrator and it seems sensible that all domain administrators have the right to modify the gpo (they have it at the NT ACLs level ...)
* upgradeprovision: use the same case for hostname in reference provision as ↵Matthieu Patou2010-09-261-1/+1
| | | | | | | in the current provision Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Sep 26 01:21:52 UTC 2010 on sn-devel-104
* s4-provision: switch to dns-HOSTNAME instead of dnsAndrew Tridgell2010-09-261-7/+23
| | | | | | | | | We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connectionsKamen Mazdrashki2010-09-261-2/+3
|
* s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a timeKamen Mazdrashki2010-09-261-20/+33
| | | | If no arguments given, ldapcmp will compare all NCs
* s4-net: added --ipaddress option to net commandsAndrew Tridgell2010-09-256-6/+13
| | | | | | | this allows override of server IP address, bypassing NBT or DNS name resolution of DCs Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
* s4:provision - rootdse - remove static "ldapServiceName" attributeMatthias Dieter Wallnöfer2010-09-241-3/+0
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - rootdse - remove static "dnsHostName" attributeMatthias Dieter Wallnöfer2010-09-241-1/+0
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision.py - support still not fully provisioned trees regarding the ↵Matthias Dieter Wallnöfer2010-09-241-2/+11
| | | | | | | | rootDSE module We simply override the NTDS settings path manually Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision.py - make more use of "names.serverdn" on NTDS settings locationMatthias Dieter Wallnöfer2010-09-241-2/+2
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:python/samba/join.py - add a comment to point out that NCs have to be ↵Matthias Dieter Wallnöfer2010-09-241-0/+1
| | | | | | | | assigned dynamically We could also have DNS partitions (only to make one example). Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:python/samba/join.py - use constant for DC function levelMatthias Dieter Wallnöfer2010-09-241-1/+2
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-drs: we don't need to decode to utf8 in python dcerpc strings any moreAndrew Tridgell2010-09-231-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-selftest: Move credentials tests to standard python directory.Jelmer Vernooij2010-09-221-0/+100
|
* s4-selftest: Move samba3sam test to standard python directory.Jelmer Vernooij2010-09-221-0/+1092
|