summaryrefslogtreecommitdiffstats
path: root/source4/setup
Commit message (Collapse)AuthorAgeFilesLines
...
* provision: Simplify handling of default for --function-level.Jelmer Vernooij2012-04-161-4/+3
|
* provision: Simplify handling of default for --dns-backend option.Jelmer Vernooij2012-04-161-6/+2
|
* Add an option to have s3fs as file server for samba4Matthieu Patou2012-04-161-1/+2
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 16 09:38:18 CEST 2012 on sn-devel-104
* s4-provision: Update configuration lines for dlz_bind9Amitay Isaacs2012-04-161-1/+6
| | | | | | | This adds configuration lines for BIND versions 9.8.x and 9.9.x. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Mon Apr 16 03:52:14 CEST 2012 on sn-devel-104
* LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD modeMatthias Dieter Wallnöfer2012-03-261-0/+1
| | | | | | | Achieve this by introducing a "disallowDNFilter" flag. Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: don't ask only 3 times for passwd in interactive modeBjörn Baumbach2012-03-211-1/+1
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s4-provision: add password verification in interactive modeBjörn Baumbach2012-03-211-3/+9
| | | | | | | Since we do not print the password out (anymore), it is necessary to verify the entered password. Signed-off-by: Michael Adam <obnox@samba.org>
* s4-selftest: create the st/provision if it didn't exists alreadyMatthieu Patou2012-03-081-0/+2
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Mar 8 00:25:24 CET 2012 on sn-devel-104
* provision: Write configuration without help of templates.Jelmer Vernooij2012-02-273-45/+0
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 27 00:52:46 CET 2012 on sn-devel-104
* provision: Leave result reporting up to caller.Jelmer Vernooij2012-02-261-1/+3
|
* provision: Make sure target directory is created early.Jelmer Vernooij2012-02-071-7/+13
| | | | | | | | This is necessary when using the target directory to store temporary files. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Feb 7 02:45:37 CET 2012 on sn-devel-104
* Use named argument 'dir' instead of 'prefix' on NamedTemporaryFile for ↵Horacio G. de Oro2012-02-071-2/+2
| | | | | | source4/setup/provision Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* selftest: Remove unused support for --exeextAndrew Bartlett2012-02-011-3/+3
|
* python: Change except: statement to except Exception:Amitay Isaacs2012-01-241-1/+1
| | | | | | | | This way we only catch true exceptions and keyboard interrupts are not caught here. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
* s4:provision: add a server services line to the smb.conf template for the dcMichael Adam2012-01-101-0/+2
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* setup: Fix phpldapadmin configuration for version 1.2.xAmitay Isaacs2011-12-141-18/+10
|
* s4-provision: Make BIND9_DLZ as the default backend for DNSAmitay Isaacs2011-11-291-3/+3
|
* s4-provision: Create a samdb copy for access by dlz_bind9 moduleAmitay Isaacs2011-11-291-0/+2
| | | | | | | | This creates a copy of rootdse, configuration and schema partitions for dlz_bind9 use in dns/ directory. Since dlz_bind9 requires write access to DNS partitions (DomainDnsZones and ForestDnsZones), those partitions are hard-linked (or symlinked) to the actual partitions. An empty domain partition is created so samdb layer can work.
* s4-s3-upgrade Test getdomainsid as wellAndrew Bartlett2011-11-171-0/+2
|
* s4-provision permit server role to be the ROLE_ strings from s3Andrew Bartlett2011-11-171-6/+1
| | | | | | | | Also convert between the aliases in one single place. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* s4-s3-upgrade Add test of net getlocalsid after the upgradeAndrew Bartlett2011-11-171-0/+4
| | | | Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* provision: Set the security descriptor while creating partitionsAmitay Isaacs2011-11-161-0/+2
| | | | | | | | With Matthieu's patch, the setting of security descriptor on partition dn at create time works correctly. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
* s4-setup Remove servicePrincipalName: DNS/${DNSDOMAIN} from new installationsAndrew Bartlett2011-11-102-2/+0
| | | | | | | | | | | | | This servicePrincipalName is incorrect (windows does not use that servicePrincipalName, as it targets the server it is updating, not the root of the DNS tree), and now that we have multiple DNS backends that use the internal database, it is quite incorrect (as it cannot exist on more than one account). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Nov 10 01:11:46 CET 2011 on sn-devel-104
* s4-provision: Create ldap records for DNS partitions similar to windowsAmitay Isaacs2011-11-091-4/+2
| | | | | | | this allows easy comparison between windows and samba ldap trees Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 9 08:27:46 CET 2011 on sn-devel-104
* s4-provision Remove options for LDAP backend to reduce user confusionAndrew Bartlett2011-11-082-28/+7
| | | | | | | | | | | | We do not support the LDAP backend any more, but keep the code in case someone comes up with an interesting use case that could leverage this in a very particular situation. In order to keep the code, we must test it, so we keep just this much of the support around. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 8 04:33:49 CET 2011 on sn-devel-104
* s4: samba-tool subcommand rename - change samba-tool user add to samba-tool ↵Theresa Halloran2011-10-233-5/+5
| | | | | | | user create Signed-off-by: Theresa Halloran <thallora@linux.vnet.ibm.com> Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4:wscript - install the two missing files "dlz_bind9.so" and "named.conf.dlz"Geza Gemes2011-10-271-2/+2
| | | | | | | | Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Oct 27 20:27:32 CEST 2011 on sn-devel-104
* s4-s3-upgrade rename samba-tool domain samba3upgrade --libdir to --dbdir for ↵Andrew Bartlett2011-10-191-2/+2
| | | | | | | | | | | | clarity The things pointed at are not typically in a directory called lib, so avoid confusing our administrators. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Oct 19 15:43:04 CEST 2011 on sn-devel-104
* s4-s3-upgrade test upgrade without a wins.datAndrew Bartlett2011-10-191-0/+3
|
* s4 provision: Default to win2k3 domain function levelKai Blin2011-10-171-1/+1
|
* s4 provision: Reword opinionated dns backend help text, add NONE backendKai Blin2011-10-171-3/+11
|
* s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILEKai Blin2011-10-171-2/+2
|
* provision: fix the docMatthieu Patou2011-10-161-1/+1
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Oct 16 01:31:21 CEST 2011 on sn-devel-104
* s4: check that the xattr are supported in the folder where we want to provisionMatthieu Patou2011-10-161-1/+5
| | | | | | | By default we were checking this on the default folder for tempfile.NamedTemporaryFile (usualy /tmp) but this folder can be mounted on tmpfs (which didn't support xattr currently). Now we should check on the filesystem where the provision will be done.
* s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OIDStefan Metzmacher2011-10-071-0/+1
| | | | | | | | | | Which allows the caller to pass a given 'pwdLastSet' value (every useful for migrations). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 7 15:28:13 CEST 2011 on sn-devel-104
* s4-dsdb: added DSDB_CONTROL_DBCHECKAndrew Tridgell2011-10-061-0/+1
| | | | | | this will be used for overrides by the dbcheck validator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICAAndrew Tridgell2011-10-041-0/+1
| | | | | | | | this control tells the partition module that the DN being created is a partial replica, so it should modify the @PARTITION object to add the partialReplica attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4 provision: Set server role default when called from command line to 'dc'Kai Blin2011-10-021-0/+3
|
* s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell2011-09-221-0/+1
| | | | | | | this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
* s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett2011-09-131-4/+25
| | | | | | | | | | | | | The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
* s4-provision Perform 'modify' operations as systemAndrew Bartlett2011-09-132-8/+7
| | | | | | | | | | We need this so that we can modify the cn=configuration partition when we are setting up a new subdomain. The serverReference on our ${SERVERDN} is in that partition, and without this change creating a new subdomain fails due to ACLs. Andrew Bartlett
* s4-provision Split addition of users and well known principalsAndrew Bartlett2011-09-132-136/+136
| | | | | | | If we are provisioning a subdomain, then these are already in cn=configuration. Andrew Bartlett
* s4-provision Add initial support for joining as a new subdomainAndrew Bartlett2011-09-134-50/+52
| | | | | | | | To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
* s4-python: Fix some formatting issues.Jelmer Vernooij2011-09-131-156/+163
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Sep 13 03:51:13 CEST 2011 on sn-devel-104
* s4-s3-upgrade Remove upgrade_from_s3 script, use samba-tool domain samba3upgradeAndrew Bartlett2011-09-122-134/+5
|
* s4-provision: Add named.conf template for BIND9 with DLZ supportAmitay Isaacs2011-09-121-0/+14
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Add Seperate instructions for BIND 9.7.x and 9.8.x.Amitay Isaacs2011-09-121-33/+53
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Enable SPNs for DNSAmitay Isaacs2011-09-121-3/+3
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs2011-09-081-0/+3
| | | | | | | | | | This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
* s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs2011-09-085-3/+129
| | | | | | | This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>