summaryrefslogtreecommitdiffstats
path: root/source4/scripting
Commit message (Collapse)AuthorAgeFilesLines
* s4-provision: Test for posix ACLs in the actual sysvol pathAndrew Bartlett2012-06-051-12/+16
| | | | | | | | This avoids issues in the previous location where lp may not be initialised at this point and instead simply waits until we have a known sysvol path, and test for ACL support there. Andrew Bartlett
* s4-provision: Place xattr.tdb in the actual state directoryAndrew Bartlett2012-06-051-13/+14
| | | | | | | | | This patch does two things: it fixes up the spelling of "state dir" to "state directory" so that we actually find the smb.conf parameter, and we move it to after we process the global settings in case this is changed in the future. Andrew Bartlett
* Add '--use-ntvfs' option to 'samba-tool domain join'Andriy Syrovenko2012-06-052-13/+17
|
* s4-provision: Use the s3fs file server by default in migrationsAndrew Bartlett2012-05-301-1/+1
| | | | | | | | | This covers both migrations from s3 and joining a domain as a new DC. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 30 14:57:22 CEST 2012 on sn-devel-104
* s4:dbchecker - handle the "none" case correctlyMatthias Dieter Wallnöfer2012-05-291-1/+1
| | | | | | | | | | This means that *no* fixing will be done, also the first possible one will be omitted as well. Reviewed-by: abartlet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue May 29 21:36:25 CEST 2012 on sn-devel-104
* Avoid all(), as it's not available in Python 2.4.Jelmer Vernooij2012-05-271-1/+5
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun May 27 16:13:34 CEST 2012 on sn-devel-104
* s4/scripting: in MIT build do not install samba-tool, it is not usable yetAlexander Bokovoy2012-05-242-7/+4
|
* Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy2012-05-232-9/+15
| | | | | | | | | | | | | | | | | System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
* s4: samba-tool is usable without export-keytab command, make sure it does ↵Alexander Bokovoy2012-05-231-19/+22
| | | | | | | | not break When export_keytab is not compiled in (pure client-side Samba 4 build as with system MIT krb5), export-keytab command of samba-tool will not be available. Make sure it is not provided but its absence does not break the Python tool.
* samba-upgradedns: Use the correct magic incantation of sys.path.insert()Amitay Isaacs2012-05-151-1/+1
| | | | | | | | This replaces "bin/python" with the correct path for python libraries. The pattern requires double quotes (") instead of single quotes ('). Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 15 05:19:46 CEST 2012 on sn-devel-104
* When listing group members allow fallback to cn attribute when ↵Lukasz Zalewski2012-05-101-2/+5
| | | | samAccountName is not available
* s4-provision Ensure we have posix ACLs before we permit a s3fs-based Samba4 ↵Andrew Bartlett2012-05-081-0/+14
| | | | to be configured
* s4-s3-upgrade: Max/min password age policy is in seconds, not daysAndrew Bartlett2012-05-061-2/+2
| | | | | | | | | | This cases upgraded domains to have a too-long password expiry, which in extreme cases can cause the KDC to misfunction. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun May 6 14:49:39 CEST 2012 on sn-devel-104
* provision: remove reference to no longer existing template files.Jelmer Vernooij2012-05-031-7/+5
|
* s4-samba-tool: make new samba-tool group listmembers use samAccountNameAndrew Bartlett2012-05-032-4/+4
| | | | | | | | | This is the unique username value. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu May 3 01:57:41 CEST 2012 on sn-devel-104
* s4-s3upgrade: Force ldapsam:trusted = yesAndrew Bartlett2012-05-031-0/+3
| | | | | | | | | | | | | While this setting is not the default in Samba3, any domain that is in a suitable condition to upgrade to Samba4 should already be in the layout that ldapsam:trusted uses. It can be turned off by setting ldapsam:trusted=false in the smb.conf. Many upgrades to Samba4 happen on a different host to the old Samba3 domain and this avoids the need to configure nss_ldap only for the duration of the upgrade. Andrew Bartlett
* Extension to the samba-tool group subcommand functionality to allow listing ↵Lukasz Zalewski2012-05-032-0/+85
| | | | of the members of an AD group
* s4-s3upgrade: Try harder to get group memberships on upgradeAndrew Bartlett2012-05-031-5/+20
| | | | | | | | | | | | This fixes an issue where some group types were not upgraded, as we did not upgrade alias memberships. It also uses enum_group_memberships() to try and find the memberships from the other direction, by asking which groups a user is a member of. As Samba3 (and NT4) does not implement nested groups, this should be safe. Andrew Bartlett
* s4-provision: Fix up --use-s3fs to create the directory for xattr.tdbAndrew Bartlett2012-05-021-4/+8
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 2 04:45:05 CEST 2012 on sn-devel-104
* s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'Andrew Bartlett2012-05-021-1/+1
| | | | | | | The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services. Andrew Bartlett
* s4-upgradedns: Update serverdn with only the attributes that have changedAmitay Isaacs2012-05-011-11/+21
| | | | | | | | This fixes the issue of ldb 'Operations Error' when trying to modify hasPartialReplicaNCs attribute. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 1 05:28:04 CEST 2012 on sn-devel-104
* s4-s3upgrade: print the error message from passdb.error exceptionsAndrew Bartlett2012-04-241-6/+6
| | | | | | | | | This gives more information on why a group membership lookup failed. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Apr 24 04:34:44 CEST 2012 on sn-devel-104
* s4-python: Ensure we handle the no-eadb case for system xattrs in get/setntaclAndrew Bartlett2012-04-191-0/+1
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 19 20:51:16 CEST 2012 on sn-devel-104
* Added number of FSMO roles owned by the server we are trying to demote.Daniele Dario2012-04-191-1/+1
|
* waf: Fix mispellingSimo Sorce2012-04-191-1/+1
| | | | | Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Apr 19 17:36:41 CEST 2012 on sn-devel-104
* samba_spnupdate: don't try to register DNS related SPN if we are not ↵Matthieu Patou2012-04-191-1/+24
| | | | | | | | mastering the NC For RW DC the impact is pretty small but for RODC the whole SPN set is rejected by the target DC as RODC hasn't the right to register DNS SPN if it is not mastering this NC.
* dbcheck: Add a check that every FSMO role has a valid ownerAndrew Bartlett2012-04-191-0/+41
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 19 07:49:54 CEST 2012 on sn-devel-104
* s4-samba-tool: Fix samba-tool fsmo seizeAndrew Bartlett2012-04-192-46/+51
| | | | | | This is currently untested, and a restructure broke it. Andrew Bartlett
* s4-s3upgrade: Do not ever set a domain-wide maxPwdAge of 0Andrew Bartlett2012-04-191-1/+1
| | | | | | This means no-expiry in s3, and so we must treat it like -1. Andrew Bartlett
* s4-s3upgrade: Ignore (with warning) groups that are listed but we cannot ↵Andrew Bartlett2012-04-191-2/+14
| | | | list members for
* dbcheck: added fix for incorrect RMD_FLAGSAndrew Tridgell2012-04-181-0/+35
| | | | | | | | | | this fixes the case where a DN link has RMD_FLAGS=0 for a link inside a deleted object Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 18 09:19:41 CEST 2012 on sn-devel-104
* s4:dbchecker.py - integrate the "objectClass" fixing codeMatthias Dieter Wallnöfer2012-04-181-0/+27
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3fs: Use xattr_tdb format for xattr storageAndrew Bartlett2012-04-181-9/+16
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 18 05:39:01 CEST 2012 on sn-devel-104
* s4-python: Add python wrapper for xattr_tdb format xattr storageAndrew Bartlett2012-04-181-13/+23
| | | | | | | This uses the format used by the vfs_xattr_tdb module. The s4 posix:eadb format is kept, just in a new file and module. Andrew Bartlett
* s4:ldapcmp.py: pass down outf and errfStefan Metzmacher2012-04-171-12/+29
| | | | | | | | | Not all classes are derived from class 'Command'. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Apr 17 10:06:47 CEST 2012 on sn-devel-104
* Add an option to have s3fs as file server for samba4Matthieu Patou2012-04-161-8/+19
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
* s4-provision: Update configuration lines for dlz_bind9Amitay Isaacs2012-04-161-3/+1
| | | | | | | This adds configuration lines for BIND versions 9.8.x and 9.9.x. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 16 03:52:14 CEST 2012 on sn-devel-104
* s4-libnet: split export_keytab in a separate python module to avoid pulling ↵Alexander Bokovoy2012-04-121-0/+1
| | | | | | | | | in HDB dependency Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Thu Apr 12 15:23:19 CEST 2012 on sn-devel-104
* s4-upgradedns: Fix the fqdn for forest dns zoneAmitay Isaacs2012-04-021-1/+1
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 2 10:56:10 CEST 2012 on sn-devel-104
* s4-upgradedns: Make sure the attribute exists before accessing itAmitay Isaacs2012-03-281-4/+8
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Mar 28 10:27:40 CEST 2012 on sn-devel-104
* LDB/s4 - do not use the "(dn=...)" syntax on filters anymoreMatthias Dieter Wallnöfer2012-03-268-26/+27
| | | | | | | Make it AD-compatible using "(distinguishedName=...)". Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-samba-tool: add password verification in change user passBjörn Baumbach2012-03-211-1/+5
| | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Mar 21 17:43:35 CET 2012 on sn-devel-104
* s4-samba-tool: add password verification in add userBjörn Baumbach2012-03-211-0/+4
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s4-upgradedns: Add DNS partitions in msDS-hasMasterNCs in NTDS settingsAmitay Isaacs2012-03-211-0/+40
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Mar 21 03:16:22 CET 2012 on sn-devel-104
* s4-upgradedns: Allow fixing of dns provision after domain joinAmitay Isaacs2012-03-211-39/+56
| | | | | | | This change allows samba_upgradedns script to be run even on existing dns provision (DLZ_BIND9 or SAMBA_INTERNAL) without any side effects. This allows to "fix" dns provision after samba-tool domain join for running BIND with DLZ plugin.
* s4:selftest: add test for "samba-tool group list"Michael Adam2012-03-191-0/+22
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Mar 19 02:30:39 CET 2012 on sn-devel-104
* s4:samba-tool: add simple command "group list"Michael Adam2012-03-181-0/+33
|
* s4:selftest: add a new testsuite for the "samba-tool group" commandMichael Adam2012-03-181-0/+128
|
* upgrade provision didn't run findprovisionrange anymoreMatthieu Patou2012-03-171-8/+13
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Mar 17 09:51:46 CET 2012 on sn-devel-104
* Rewrite findprovisionrange to use factorized functionsMatthieu Patou2012-03-171-98/+4
|