summaryrefslogtreecommitdiffstats
path: root/source4/setup
Commit message (Collapse)AuthorAgeFilesLines
* s4 provision: Default to win2k3 domain function levelKai Blin2011-10-171-1/+1
|
* s4 provision: Reword opinionated dns backend help text, add NONE backendKai Blin2011-10-171-3/+11
|
* s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILEKai Blin2011-10-171-2/+2
|
* provision: fix the docMatthieu Patou2011-10-161-1/+1
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Oct 16 01:31:21 CEST 2011 on sn-devel-104
* s4: check that the xattr are supported in the folder where we want to provisionMatthieu Patou2011-10-161-1/+5
| | | | | | | By default we were checking this on the default folder for tempfile.NamedTemporaryFile (usualy /tmp) but this folder can be mounted on tmpfs (which didn't support xattr currently). Now we should check on the filesystem where the provision will be done.
* s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher2011-10-071-0/+1
| | | | | | | | | | Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
* s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell2011-10-061-0/+1
| | | | | | this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell2011-10-041-0/+1
| | | | | | | | this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4 provision: Set server role default when called from command line to 'dc'Kai Blin2011-10-021-0/+3
|
* s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell2011-09-221-0/+1
| | | | | | | this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
* s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett2011-09-131-4/+25
| | | | | | | | | | | | | The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
* s4-provision Perform 'modify' operations as systemAndrew Bartlett2011-09-132-8/+7
| | | | | | | | | | We need this so that we can modify the cn=configuration partition when we are setting up a new subdomain. The serverReference on our ${SERVERDN} is in that partition, and without this change creating a new subdomain fails due to ACLs. Andrew Bartlett
* s4-provision Split addition of users and well known principalsAndrew Bartlett2011-09-132-136/+136
| | | | | | | If we are provisioning a subdomain, then these are already in cn=configuration. Andrew Bartlett
* s4-provision Add initial support for joining as a new subdomainAndrew Bartlett2011-09-134-50/+52
| | | | | | | | To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
* s4-python: Fix some formatting issues.Jelmer Vernooij2011-09-131-156/+163
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Sep 13 03:51:13 CEST 2011 on sn-devel-104
* s4-s3-upgrade Remove upgrade_from_s3 script, use samba-tool domain samba3upgradeAndrew Bartlett2011-09-122-134/+5
|
* s4-provision: Add named.conf template for BIND9 with DLZ supportAmitay Isaacs2011-09-121-0/+14
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Add Seperate instructions for BIND 9.7.x and 9.8.x.Amitay Isaacs2011-09-121-33/+53
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Enable SPNs for DNSAmitay Isaacs2011-09-121-3/+3
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs2011-09-081-0/+3
| | | | | | | | | | This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
* s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs2011-09-085-3/+129
| | | | | | | This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Add DNS backend option to provisionAmitay Isaacs2011-09-081-0/+4
| | | | | | | This option is introduced temporarily to test bind9 backend with and without dlz_dlopen module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: exit is not imported directed, use sys.exitAmitay Isaacs2011-09-081-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Extract dns account creation as separate ldifAmitay Isaacs2011-09-082-92/+12
| | | | | | | MicrosoftDNS container and LDAP entries for root servers will be added by sambadns.py directly. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision Use ProvisioningError and the eadbAndrew Bartlett2011-09-051-1/+22
| | | | | | | | | | The eadb flag tells us to avoid using system extended attributes, typcially if we are not running as root (ie, in a test environment). The ProvisioningError class allows us to return failures to the upgrade_from_s3 script which can then be detected correctly by the selftest framework. Andrew Bartlett
* s4-provision Add realm to DC configuration in upgrade_from_s3 testAndrew Bartlett2011-09-051-0/+1
|
* s3_upgrade: Set lock directory to correct directoryAmitay Isaacs2011-08-261-1/+2
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3_upgrade: Update commandline options and use updated samba3 python moduleAmitay Isaacs2011-08-262-22/+65
| | | | | | | | | | | | | | | | | | | | | | | upgrade_from_s3 script now requires samba3 configuration file and target directory for samba4 database. In addition, it either uses --libdir option or --testparm option to correctly guess the paths for samba3 databases (private dir and state directory). Usage: upgrade_from_s3 [options] <configuration_file> <targetdir> Input arguments are: <configuration_file> - path to existing smb.conf <targetdir> - directory in which samba4 database will be created In addition, specify either samba3 database directory (with --libdir) or samba3 testparm utility (with --testparm). Before using passdb interface, initialize s3 loadparm context using correct path settings for private dir and state directory. Export account policy from s3 to s4. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-dns: fixed dns_update_list for multi-domain forestsAndrew Tridgell2011-08-251-13/+28
| | | | | | this should now match the DNS entries of w2k8r2c Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-dns: fixed DNS and SPN update lists for multi-domain supportAndrew Tridgell2011-08-252-3/+3
| | | | | | fixed DNS to point at forest root Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* s4-provision set passdb backend to 'samba4' in template smb.conf filesAndrew Bartlett2011-08-223-0/+8
| | | | | | | This will allow smbpasswd, net sam and pdbedit to 'just work' against the newly created databases. Andrew Bartlett
* upgrade: Add missing bits for the s3 to s4 upgrade scriptAmitay Isaacs2011-08-131-17/+6
| | | | | | | | | Use passdb backend to import/export users Remove unused options for upgrade_from_s3 command (--blank) and credentials options Config file is specified with -s/--configfile option and no need to specify as an argument. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* tests: Update test for s3 to s4 upgrade with two casesAmitay Isaacs2011-08-131-0/+62
| | | | | | S3-member to S4-member and S3-dc to S4-dc Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-scripting Rename passdb upgrade routine to avoid conflict with ↵Andrew Bartlett2011-08-131-4/+4
| | | | upgradeprovision
* s4-provision: create dsServiceName in @ROOTDSE in GUID formAndrew Tridgell2011-08-121-0/+2
| | | | | | this allows for handling of server renames as the GUID doesn't change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: added a new always-fail ldap extended match OIDAndrew Tridgell2011-08-041-0/+8
| | | | | | | this is used when rewriting filter rules to replace a filter rule with one that is guaranteed not to match Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* samba-tool: updated test suite to account for newuser changeGiampaolo Lauria2011-07-283-5/+5
| | | | | | | Updated test suite invocations of newuser to "user add" as the newuser functionality is now being moved to "user add" Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: fixed samba-tool user syntaxAndrew Tridgell2011-07-211-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* samba-tool: update test suite for the new domain objectGiampaolo Lauria2011-07-211-1/+1
| | | | | | Changed test suite to reflect the changes from setpassword to "domain setpassword" to fit the object-action model Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: update test suite for add setpasswordGiampaolo Lauria2011-07-212-5/+5
| | | | | | The test suite needs to change from setpassword to "user setpassword" to reflect the new cmd syntax Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:param: add "state dir" and "cache dir" optionsStefan Metzmacher2011-07-123-0/+6
| | | | metze
* s4 provision: Add some of the AD-specific DNS records to the directoryKai Blin2011-07-071-1/+1
| | | | | | | Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Jul 7 02:29:53 CEST 2011 on sn-devel-104
* s4 provision: split up DNS provisioning into generic and samba-specific ldifsKai Blin2011-07-072-19/+21
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s4-provision: Remove hard coded SD for CN=Sites containerMatthieu Patou2011-06-191-1/+0
| | | | | | | | With the fix introduced by Nadya in changeset 622ef6aed82a2f2f7748c2a88535486af77487de we are now able to generate correct SD (at least the same as W2k3R2 with a Forest Level of 2003), so there is no need for this fix anymore as it makes SDs for Forest Level 2003 and lower incorrect.
* s4-build: install a build link bin/provisionAndrew Tridgell2011-06-071-0/+2
|
* s4-param Remove 'sid generator'Andrew Bartlett2011-06-063-3/+0
| | | | | | | This was only used by the Fedora DS backend for Samba4. We agreed to no longer support external LDAP backends. Andrew Bartlett
* s4-ipv6: added IPv6 support to samba_dnsupdateAndrew Tridgell2011-06-061-0/+2
|
* s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>Theresa Halloran2011-06-011-4/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.Theresa Halloran2011-06-011-2/+2
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-provision Use correct tkey-gssapi-credentialAndrew Bartlett2011-05-251-1/+1
| | | | | | | | We changed to ${DNSNAME} (the fully qualified domain name) a while back, and while it's usually functionally idential to the previous setting, this breaks down if there is more than one DNS server. Andrew Bartlett