Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | upgrade_from_s3: Remove unused imports. | Jelmer Vernooij | 2010-01-25 | 1 | -2/+0 |
| | |||||
* | s4-provision: Added msDS-NcType into samba4Top object class | Endi S. Dewata | 2010-01-23 | 1 | -0/+1 |
| | | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> | ||||
* | s4-provision: Disable populating FDS during instance creation. | Endi S. Dewata | 2010-01-23 | 1 | -0/+1 |
| | | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> | ||||
* | provision: use message and do not display warning if the user choosed ↵ | Matthieu Patou | 2010-01-21 | 1 | -3/+4 |
| | | | | delibarately posix:eadb | ||||
* | provision: introduce use-xattr parameter for defining where to store attributes | Matthieu Patou | 2010-01-21 | 4 | -6/+24 |
| | | | | | This option allow simple user (non root) to invoke provision without facing an error while insuring that ACL on shared files will always be set | ||||
* | s4: Set acls correctly on all sysvol and scripts shares | Matthieu Patou | 2010-01-21 | 1 | -2/+7 |
| | |||||
* | s4: regroup gpo modification in one function, set acl on files accordingly ↵ | Matthieu Patou | 2010-01-21 | 1 | -1/+2 |
| | | | | with ACL in LDAP | ||||
* | s4-provision: added w2k8r2 ldap capabilities | Andrew Tridgell | 2010-01-16 | 1 | -0/+2 |
| | |||||
* | s4-provision: added "check-names ignore;" to allow for _msdcs A records | Andrew Tridgell | 2010-01-16 | 1 | -0/+3 |
| | |||||
* | s4:provision_users.ldif - Add a comment that some objects under "Users" are ↵ | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -0/+3 |
| | | | | | | now located elsewhere This is needed due to the new RID/SID distribution system | ||||
* | s4:provision_users.ldif - Add objects for IIS | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -0/+21 |
| | | | | | | | Some WSPP locations point out that beginning with Windows Server 2008 they're also per default present. Compared against Windows Server 2008 | ||||
* | s4:provision_users.ldif - Add additional BUILTIN objects | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -0/+30 |
| | | | | Compared against Windows Server 2008 | ||||
* | s4:provision_users.ldif - add the restant part of the objects needing for ↵ | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -0/+26 |
| | | | | | | | | RODC support RODC = Read Only Domain Controllers Compared against Windows Server 2008 | ||||
* | s4:provision_users.ldif - Fix up errors on existing entries | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -6/+8 |
| | | | | Compared against Windows Server 2008 | ||||
* | s4:provision_users.ldif - Simple reordering | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -70/+70 |
| | | | | Sorted according the SID - easier for later enhancements. | ||||
* | s4:provision_users.ldif - Remove system objects from the wrong place | Matthias Dieter Wallnöfer | 2010-01-14 | 1 | -27/+0 |
| | | | | | Objects like the "Cryptographic Operators", "Event Log Readers" don't belong here but into the builtin domain. | ||||
* | Revert "s4:provision_users.ldif - Import all essential groups for Windows ↵ | Andrew Tridgell | 2010-01-11 | 1 | -113/+85 |
| | | | | | | | | | | | Server 2008 mode" This reverts commit 5c174c68ccba7506147feab1d09ad676792139b3. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push. | ||||
* | Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 ↵ | Andrew Tridgell | 2010-01-11 | 1 | -0/+5 |
| | | | | | | | | | | | for now" This reverts commit 61dfd3dc1dce2c0dd6693de80930af312ad3e39f. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push. | ||||
* | Revert "s4:provision_users.ldif - Fix memberships regarding the denied ↵ | Andrew Tridgell | 2010-01-11 | 1 | -8/+0 |
| | | | | | | | | | | | password RODC replication group" This reverts commit 9ee895fcf6327b1c2f5ee09fa565bd62974e9c58. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push. | ||||
* | Revert "s4:provision_users.ldif - Add objects for IIS" | Andrew Tridgell | 2010-01-11 | 1 | -21/+0 |
| | | | | | | | | | This reverts commit 91e210028790397996659116446e6add452707f6. This series of commits broke 'make test'. Matthias, please make sure you run a _full_ make test before every push. | ||||
* | s4:provision_users.ldif - Add objects for IIS | Matthias Dieter Wallnöfer | 2010-01-10 | 1 | -0/+21 |
| | | | | Some WSPP locations point out that they're defacto-standards for Windows Server deployments starting with 2008. So we should add them to s4 too. | ||||
* | s4:provision_self_join_modify.ldif - Point out that account "dns" is s4 specific | Matthias Dieter Wallnöfer | 2010-01-10 | 1 | -0/+1 |
| | |||||
* | s4:provision_users.ldif - Fix memberships regarding the denied password RODC ↵ | Matthias Dieter Wallnöfer | 2010-01-10 | 1 | -0/+8 |
| | | | | replication group | ||||
* | s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now | Matthias Dieter Wallnöfer | 2010-01-10 | 1 | -5/+0 |
| | | | | This belongs to the AD IIS stuff where I don't know yet if we should import it. | ||||
* | s4:provision_users.ldif - Import all essential groups for Windows Server ↵ | Matthias Dieter Wallnöfer | 2010-01-10 | 1 | -85/+113 |
| | | | | | | | 2008 mode Additionally I had to fix some bugs (especially wrong "groupTypes") and reordered the objects using the SID (this is easier when enhancing the file). | ||||
* | s4:provision_self_join.ldif - Adapt comment after implementation of ↵ | Matthias Dieter Wallnöfer | 2010-01-08 | 1 | -2/+2 |
| | | | | distributed RIDs | ||||
* | s4-schema: fixes for W2K8-R2 schema | Andrew Tridgell | 2010-01-08 | 2 | -35/+143 |
| | | | | | | | | The schema from WSPP had a number of typos that prevented it from working. These changes allow it to work with Samba, and allow w2k8r2 to run DCPROMO against Samba successfully Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | s4-schema: added msDS-NcType to schema container | Andrew Tridgell | 2010-01-08 | 1 | -0/+1 |
| | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | s4-schema: fixed attributes of aggregate schema | Andrew Tridgell | 2010-01-08 | 1 | -0/+2 |
| | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | s4-provision: added W2K8-R2 schema as provided by WSPP | Andrew Tridgell | 2010-01-08 | 2 | -0/+19529 |
| | |||||
* | s4-provision: RID 1000 is consumed by the machine account | Andrew Tridgell | 2010-01-08 | 1 | -1/+1 |
| | |||||
* | s4-dsdb: added an extended operation for allocating a new RID pool | Andrew Tridgell | 2010-01-08 | 1 | -0/+1 |
| | | | | | | | This will be called by getncchanges when a client asks for a DRSUAPI_EXOP_FSMO_RID_ALLOC operation Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | s4-provision: don't hard wire the creation of the RID Set object | Andrew Tridgell | 2010-01-08 | 3 | -27/+16 |
| | | | | | | | | | | We now create it automatically in the samldb module when the first user is created. The creation of the dns user also had to move to the _modify.ldif as it now relies on the fSMO role being setup for the RID Manager Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | s4-provision: the DC object itself needs a fixed objectSID | Andrew Tridgell | 2010-01-08 | 1 | -1/+2 |
| | | | | | | | We can't allocate a objectSID until we have rIDSetReferences, but that is in the DC object, so we have to force the objectSID of the DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | s4-provision: added an initial RID Set | Andrew Tridgell | 2010-01-08 | 2 | -2/+12 |
| | | | | | | We will allocate RIDs from this set Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | ||||
* | net: Move 'newuser' to 'net newuser' | Jelmer Vernooij | 2009-12-31 | 3 | -78/+12 |
| | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org> | ||||
* | net: Fix tests and documentation of setexpiry. | Jelmer Vernooij | 2009-12-31 | 1 | -65/+0 |
| | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org> | ||||
* | net: Move setexpiry to 'net setexpiry' | Jelmer Vernooij | 2009-12-31 | 1 | -72/+0 |
| | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org> | ||||
* | net: Move 'setpassword' to 'net setpassword'. | Jelmer Vernooij | 2009-12-31 | 1 | -74/+0 |
| | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org> | ||||
* | s4/net: Add domainlevel subcommand. | Jelmer Vernooij | 2009-12-29 | 1 | -250/+0 |
| | |||||
* | s4/net: Make pwsettings a net subcommand. | Jelmer Vernooij | 2009-12-29 | 1 | -198/+0 |
| | |||||
* | s4:provision - Remap conflicting thumbnailPhoto and thumbnailLogo OID's. | Endi Sukma Dewata | 2009-12-15 | 2 | -0/+8 |
| | |||||
* | s4:setup Adjust upgradeprovision blackbox test now we don't have --targetdir | Andrew Bartlett | 2009-12-01 | 1 | -2/+2 |
| | |||||
* | s4:upgrade_from_s3 - Move it back to "setup" | Matthias Dieter Wallnöfer | 2009-11-28 | 1 | -0/+86 |
| | | | | Suggested by Jelmer | ||||
* | s4:setup/provision - Rework | Matthias Dieter Wallnöfer | 2009-11-28 | 1 | -5/+24 |
| | | | | | | | - Revert change in "ask" - was previously correct - Readd accidentally removed checks for non-null realm and domainname - On interactive mode perform only one "ask" call per question - Inform the user about the unset administrator password | ||||
* | s4: fix SD update and password change in upgrade script | Matthieu Patou | 2009-11-28 | 1 | -1/+1 |
| | | | | | | | | | - reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org> | ||||
* | s4:setup/provision - make the interactive mode work again | Matthias Dieter Wallnöfer | 2009-11-27 | 1 | -13/+3 |
| | |||||
* | s4:upgrade script - rename it to "upgrade_from_s3" and do some rework | Matthias Dieter Wallnöfer | 2009-11-27 | 1 | -83/+0 |
| | | | | | | - Give a better name to the script - Move it to the location where also "upgradeprovision" resides - Fix up trailing whitespaces and tabs | ||||
* | s4:upgradeprovision add 'exit $failed' to blackbox test | Andrew Bartlett | 2009-11-27 | 1 | -0/+2 |
| | |||||
* | s4:selftest Add tests for upgradeprovision | Andrew Bartlett | 2009-11-27 | 1 | -0/+26 |
| |