summaryrefslogtreecommitdiffstats
path: root/source4/setup
Commit message (Collapse)AuthorAgeFilesLines
* s4:setup/provision - fix an output messageMatthias Dieter Wallnöfer2011-03-101-1/+1
| | | | Mention that Windows 2000 function level is supported as well.
* s4-provision Remove setup_path, setup_dir and find_setup_dirAndrew Bartlett2011-02-072-17/+3
| | | | | | | | | | | | | | We now have a reliable way to know the current location of the templates: dyn_SETUPDIR, which is updated for both the in-build and installed binaries. This replaces the function arguments and the distributed resolution of the setup directory with one 'global' function (imported as required). This also removes the ability to specify an alternate setup directory on the command line, as this was rarely if ever used and never tested. Andrew Bartlett
* s4-loadparm: removed "setup directory" optionAndrew Tridgell2011-02-073-3/+0
| | | | | | | the correct setup directory is known at both build time and install time using dyn_SETUPDIR, so we no longer have any need to override it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-test: fixed more assumptions of ./setup for setup directoryAndrew Tridgell2011-02-076-21/+21
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision: remove the disabled bit in the dns-$HOSTNAME accountAndrew Tridgell2010-12-011-1/+1
|
* s4-provision: fixed eadb automatic and manual setting in provisionAndrew Tridgell2010-11-261-4/+2
| | | | | | we should not set posix:eadb in lp in the acl native test code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-setup correct the require BIND version for Dynamic DNSAndrew Bartlett2010-11-241-1/+1
|
* s4:provision_rootdse_add.ldif - add all possible LDAP policy values but ↵Matthias Dieter Wallnöfer2010-11-211-0/+12
| | | | | | | | | outcommented for the moment It would be nice if someone could activate them as needed. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 21 14:41:53 CET 2010 on sn-devel-104
* s4-provision: don't test for xattrs if posix:eadb is setAndrew Tridgell2010-11-171-1/+1
| | | | | when it is set in smb.conf or on the command line, obey the setting and don't try to test for system xattr support
* s4-provision: setup posix:eadb using lp.set()Andrew Tridgell2010-11-173-3/+0
| | | | | this allows it to override a setting made during the automatic testing of xattr support
* s4-provision: don't try to autodetect xattr is posix:eadb is setAndrew Tridgell2010-11-171-1/+1
| | | | when posix:eadb is set then we know we should be using an eadb
* s4-provision: use the command line lp in provisionAndrew Tridgell2010-11-171-1/+1
| | | | | this ensures that provision options are stored in the generated smb.conf
* samba-tool Add test for --store-plaintextAndrew Bartlett2010-11-161-1/+1
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 16 06:29:04 UTC 2010 on sn-devel-104
* s4:provision_self_join.ldif - the object SID in AD is called "objectSid"Matthias Dieter Wallnöfer2010-11-091-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 9 13:18:29 UTC 2010 on sn-devel-104
* s4:provision - switch to "clearTextPassword" for setting passwordsMatthias Dieter Wallnöfer2010-11-093-4/+4
| | | | | | | This is the default password set/change attribute for s4 specific purposes (otherwise in respect to Windows it's "unicodePwd"). We move away from "userPassword" since on Windows it's not activated by default - and s4 will follow soon.
* s4:setup/spn_update_list - the DNS SPN is only used in DNS modeMatthias Dieter Wallnöfer2010-11-011-1/+3
| | | | | | | Not all DCs are automatically DNS servers. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 1 12:20:36 UTC 2010 on sn-devel-104
* s4:provision - adapt the "provision" so that SIDs are only set on entry creationMatthias Dieter Wallnöfer2010-11-012-3/+1
| | | | SID modifications are denied.
* s4:provision - remove the "servicePrincipalName" creation on the DC objectMatthias Dieter Wallnöfer2010-10-312-17/+2
| | | | This is now done by the "samba_spnupdate" script.
* s4:setup/spn_update_list - reorder and update with other SPNsMatthias Dieter Wallnöfer2010-10-311-13/+15
|
* s4 net: rename to samba-tool in order to not clash with s3 netKai Blin2010-10-284-67/+67
| | | | | Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Oct 28 07:25:16 UTC 2010 on sn-devel-104
* s4:setup/schema_samba4.ldif - this control isn't used anymoreMatthias Dieter Wallnöfer2010-10-271-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 27 16:32:28 UTC 2010 on sn-devel-104
* s4:provision_*_references.ldif - "add" and do not "replace" the ↵Matthias Dieter Wallnöfer2010-10-252-2/+2
| | | | | | | "wellKnownObjects" This is the correct AD operation in this case. Multi-valued replaces are generally denied most of the time.
* s4:provision.py - add the correct "CN=Sites" security descriptorMatthias Dieter Wallnöfer2010-10-231-0/+1
| | | | | | | This should help to fix bug #7403. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 23 20:16:59 UTC 2010 on sn-devel-104
* s4/ldb:introduce the LDB_CONTROL_PROVISION_OID controlMatthias Dieter Wallnöfer2010-10-231-0/+1
| | | | | | | This control is exactly thought for the actions which previously were performed using the RELAX one. We agreed that the RELAX control will only remain for interactions with OpenLDAP.
* ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into ↵Matthias Dieter Wallnöfer2010-10-231-1/+1
| | | | | | LDB_CONTROL_BYPASS_OPERATIONAL_OID It's nicer to have this consistent with "BYPASS_PASSWORD_HASH".
* s4-provisionbackend Allow a fixed URI to be specified for LDAP backendAndrew Bartlett2010-10-191-0/+12
| | | | | | | | This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett
* s4-openldap-backend Don't set 'dbnosync' on cn=configAndrew Bartlett2010-10-181-1/+0
| | | | | | This isn't valid in current OpenLDAP versions. Andrew Bartlett
* s4-provision Use --ldap-backend-nosync rather than just --nosyncAndrew Bartlett2010-10-181-2/+1
| | | | | | | For some reason we had both options, and --ldap-backend-nosync is the better name. Andrew Bartlett
* s4:setup/provision_self_join.ldif - let the samldb LDB module fill in ↵Matthias Dieter Wallnöfer2010-10-131-1/+1
| | | | | | "isCriticalSystemObject" It recognizes it now automatically.
* unit tests: do some cleanup after testsMatthieu Patou2010-10-112-0/+15
| | | | | | | fix Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Oct 11 14:29:10 UTC 2010 on sn-devel-104
* waf: fixed some python3.x portability issuesAndrew Tridgell2010-10-061-1/+3
| | | | | these have crept into the tree over time. Maybe we should add testing of a range of python versions to autobuild?
* s4:setup/provision_rootdse_add.ldif - provide informations in the right orderMatthias Dieter Wallnöfer2010-10-051-2/+2
| | | | | | | Doesn't change much - but nicer to read. Btw: is the testdata/samba3 stuff still needed ("provision_samba3sam.ldif"...)? It seems a bit outdated.
* Fix .reg file format parsing.Wilco Baan Hofman2010-10-031-3/+3
| | | | | | | | * multiline data * doublequoted value name * handle windows format CRLF Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4:schema_samba4.ldif - update allocated controls listMatthias Dieter Wallnöfer2010-10-031-0/+1
| | | | | This needs always to be done after a control allocation otherwise we end up in double-allocations and unexpected behaviour.
* selftest: Let selftest provide the tempdir, rather than creating it as ↵Jelmer Vernooij2010-10-011-1/+0
| | | | sideeffect of tests.py.
* s4-provision: simplify our generated krb5.confAndrew Tridgell2010-09-281-14/+1
| | | | | | | | we don't want to force the KDC to be ourselves, we should be using DNS to find a live KDC. Also remove some other options and allow the krb5 lib to use defaults. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision: fixed the authority response for our SOA recordAndrew Tridgell2010-09-281-1/+1
| | | | | | | some clients rely on this being the hostname, not the domain Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 28 06:39:19 UTC 2010 on sn-devel-104
* s4 provision: start with gpo of version 0 and be consistent between ↵Matthieu Patou2010-09-261-2/+2
| | | | different policies
* s4-dns: the DNS/${HOSTNAME} SPN should be on the DNS account onlyAndrew Tridgell2010-09-261-1/+0
|
* s4-provision: switch to dns-HOSTNAME instead of dnsAndrew Tridgell2010-09-263-18/+10
| | | | | | | | | We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-kerberos Rework keytab handling to export servicePrincipalName entriesAndrew Bartlett2010-09-241-1/+1
| | | | | | | This creates keytab entries with all the servicePrincipalNames listed in the secrets.ldb entry. Andrew Bartlett
* s4:provision - rootdse - remove static "ldapServiceName" attributeMatthias Dieter Wallnöfer2010-09-241-1/+0
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - rootdse - remove static "dnsHostName" attributeMatthias Dieter Wallnöfer2010-09-241-1/+0
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - rootdse - remove the static attribute "serverName"Matthias Dieter Wallnöfer2010-09-241-1/+0
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:setup/provision_self_join.ldif - now the samldb LDB module detects ↵Matthias Dieter Wallnöfer2010-09-121-1/+0
| | | | automatically that this is a DC account
* s4:provision: remember the setup directory if it wasn't the defaultStefan Metzmacher2010-09-103-0/+3
| | | | | | This fixes make test without a make install. metze
* s4-setup Make krb5.conf use DNS by defaultAndrew Bartlett2010-09-091-2/+2
| | | | | | | | We set up our DNS pretty well these days, and I think the previous setting was only there because Andrew Kroeger copied this out of our selftest code in bf3f3af92677bce8f03b0dd2be552d6c8c730ca1. Andrew Bartlett
* setup: Use standard octal ints rather than harcoding.Jelmer Vernooij2010-09-081-2/+1
|
* unit tests: debug to ease locating pb, remove dir if exists to avoid errorMatthieu Patou2010-08-191-2/+8
|
* s4:DSDB - rename the "DSDB_CONTROL_PASSWORD_CHANGE_OLD_PW_CHECKED_OID"Matthias Dieter Wallnöfer2010-08-171-1/+1
| | | | | Rename it to "DSDB_CONTROL_PASSWORD_CHANGE_OID". This control will afterwards contain a record with the specified old password as NT and/or LM hash.