summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* fixed make test reporting success when provision failsAndrew Tridgell2009-08-171-24/+51
| | | | | | | | | | | | | | We were getting build test 'pass' on the build farm when the provision is failing. The cause was the use of filter pipelines in the selftest code in the makefile. A bourne shell will by default report the error status of the last element of the pipeline, which means when provision failed, make thought everything had passed. We could use the bash 'pipefail' option to fix this, but it isn't portable, so instead I've modified the makefile to touch st/st_done when the first element in the pipeline completes successfully. That means we now get errors in make test, at the expense of making the makefile even more horrible than it was.
* s4: Fixed the int32 datatype supportMatthias Dieter Wallnöfer2009-08-172-4/+4
| | | | Should finally fix bug #6136 ("groupType", "sAMAccountType" ... attributes).
* fixed the buildAndrew Tridgell2009-08-171-3/+5
| | | | | the changes from Matthias didn't take account of url and lp being None in some ldb python instances in 'make test'
* s4: Major rework of the LDB/SAMDB/IDMAP python bindingsMatthias Dieter Wallnöfer2009-08-174-55/+57
| | | | | | | | | | - Centralise the lookups for the default domain (root) in the call "domain_dn" - Reduce the LDB connections attempts ("connect" calls) from three to one - tools should load faster - Make the LDB connection init more like the "ldb_wrap_connection" call - Load the right UTF8 casefolder which fixes up problems with special characters (discovered by me: e.g. small "Umlaute" (ä, ö, ü, ...) in the DN weren't upcased - so records "seemed" lost in TDB)
* s4:python tools - Centralise the lookups for the default domain (root) in ↵Matthias Dieter Wallnöfer2009-08-172-16/+7
| | | | the call "domain_dn" from SamDB
* s4:pyglue Add a wrapper for loading the correct UTF8 casefolderMatthias Dieter Wallnöfer2009-08-171-0/+20
| | | | Needed for special characters (e.g. in German "Umlaute")
* s4:ldb python bindings: Handle the parameters of the connect call in the ↵Matthias Dieter Wallnöfer2009-08-171-2/+8
| | | | right way
* Revert "s4:samdb python bindings - we don't need the attributes here"Matthias Dieter Wallnöfer2009-08-171-1/+2
| | | | | | | This reverts commit 53ef426e6f68728763436bd0cd3dd91180c00579. As abartlet pointed out this causes to load all attributes and therefore gives us more here than we need (only the check for the DN)!
* sigh - still not rightAndrew Tridgell2009-08-171-5/+5
|
* fixed up add_foreign againAndrew Tridgell2009-08-172-23/+23
| | | | | | my last patch was not even close ... I'll leave abartlet to work out how to fix the test case
* more fixups from provision changesAndrew Tridgell2009-08-172-24/+24
| | | | | | Andrew, can you please check this? The idmap.setup_name_mapping tests look totally out of place here. I'm also not sure I captured your intention with the other changes
* s4:build: require tevent 0.9.7 with tevent_req_cancel()Stefan Metzmacher2009-08-171-1/+1
| | | | metze
* skip the autoidl testAndrew Tridgell2009-08-171-0/+1
| | | | | The autoidl test is not needed now that we have IDL source available. It also generates a lot of errors in the logs.
* fixed up some provision errors from the recent changesAndrew Tridgell2009-08-171-3/+2
|
* s4:provision Add comments to the provision scriptAndrew Bartlett2009-08-171-1/+10
| | | | | | | Hopefully this will explain a bit more whey things are done the way that they are done. Andrew Bartlett
* s4:provision Avoid one more call to ltdb_reindexAndrew Bartlett2009-08-172-6/+19
| | | | | | | | | The Samba4 schema code (called via samdb.set_schema_from_ldb(schema.ldb)) manages the @ATTRIBUTES and @INDEXLIST records, so don't wipe them early. The chances are that we will not change them anyway. Andrew Bartlett
* s4:ldb Remove obsolete comment about ldb_tdb's sequence numAndrew Bartlett2009-08-171-2/+0
|
* make sure we update the current schema->prefixes when we add a new prefixAndrew Tridgell2009-08-171-0/+9
| | | | | | This triggered a failure in the updateNow schema test, as the current global schema was not being updated when a new schema element was added
* fixed the updateNow schema test to use a canonical OIDAndrew Tridgell2009-08-171-1/+2
| | | | | | | | The expression time.strftime("%s", time.gmtime())[3:] leads to a string with a leading 0. When added then read back from the prefix map this leads to a different string, so it is never found. Use the simpler str(random.randint(a,b)) expression instead
* s4:selftest Remove the 'subunit filter' from make testenv etcAndrew Bartlett2009-08-171-2/+2
| | | | | | | | | The extra filter is no use for 'testenv', as we are not running tests, but an xterm. The filter also breaks running 'GDB_PROVISION=yes make test', but at least if we can run 'GDB_PROVISION=yes make testenv' then we can debug provision. Andrew Bartlett
* s4:libcli/ldap Explain why we set a hostname for ldapi:// connectionsAndrew Bartlett2009-08-171-1/+3
| | | | | | | It is a pretty odd thing to do, and it's only because of the restrictions of DIGEST-MD5 in Cyrus SASL that we do it. Andrew Bartlett
* s4:provision Fix existing ldapi:// backend detection exceptionAndrew Bartlett2009-08-171-1/+1
| | | | | | Found by Oliver Liebel <oliver@itc.li> Andrew Bartlett
* s4:install Remove provision-backend script from 'make install'Andrew Bartlett2009-08-171-1/+1
| | | | | | Spotted by MICHAEL BROWN <mbrown@mesainc.com> Andrew Bartlett
* s4:provision Make sure that we don't use Kerberos to our LDAP backendAndrew Bartlett2009-08-171-1/+3
| | | | | | | This makes no sense, and just causes trouble - we are aiming for DIGEST-MD5 or NTLM. Andrew Bartlett
* s4:provison Print the LDAP backend admin username/passwordAndrew Bartlett2009-08-171-6/+14
|
* s4: Re-add --ldapadminpass as an option to provisionAndrew Bartlett2009-08-172-5/+12
| | | | | | | | This should make setting up LDAP servers more predictable. When not specified, it is random Andrew Bartlett
* s4:python Allow 'no such object' on the delete of the DNAndrew Bartlett2009-08-171-1/+5
| | | | | | | | | | This fixes the recursive delete in erase_partitions() For reasons I cannot understand, it is possible to get 'no such object' trying to delete a DN I just search for without error. Oh well... Andrew Bartlett
* s4:provision Keep a single transaction for the erase and rebuildAndrew Bartlett2009-08-171-15/+6
| | | | | | | | | Using a single transaction to both erase the bulk of the data and the rebuild of that data means that the in-memory index list is maintained, and not written out to disk until it is all compleated. All the writes then occour at the end. Andrew Bartlett
* s4:provision Fixes for Fedora DS schema mapping with full AD schemaEndi Sukma Dewata2009-08-171-0/+8
|
* s4:provision Rework provision-backend into provisionAndrew Bartlett2009-08-178-765/+594
| | | | | | | | | | | | | | | This removes a *lot* of duplicated code and the cause of much administrator frustration. We now handle starting and stopping the slapd (at least for the provision), and ensure that there is only one 'right' way to configure the OpenLDAP and Fedora DS backend We now run OpenLDAP in 'cn=config' mode for online configuration. To test what was the provision-backend code, a new --ldap-dryrun-mode option has been added to provision. It quits the provision just before it would start the LDAP binaries Andrew Bartlett
* s4:provision Move helper functions back to provisionAndrew Bartlett2009-08-171-21/+0
| | | | (These will be added back in a future commit)
* s4:setup Don't manually set @ATTRIBUTES any moreAndrew Bartlett2009-08-171-32/+0
| | | | | | | | We now set these as part of the schema load, and we now load the schema before the provision loads the DB, so setting them here is pointless Andrew Bartlett
* s4:python Push some helper functions from SamDB into samba.LdbAndrew Bartlett2009-08-172-64/+57
| | | | | | | | | | | | | | | This makes it possible to do a bit more of the provision with Samba helpers, but without some of the otherwise useful things (such as loading in the global schema) that SamDB does. Rewrite provision_erase to use a recursive search, rather than a looping subtree search. This is much more efficient, particularly now we have one-level indexes enabled. Delete the @INDEX and similar records *after* deleting all other visible records, this hopefully also assists performance. Andrew Bartlett
* s4:schema Allow a schema load on an unconnected databaseAndrew Bartlett2009-08-172-6/+7
| | | | | | | This helps ensure we don't load the schema too often in the provision (allowing a reference in of the schema before the modules load). Andrew Bartlett
* s4:provision Remove the ACI element from the provision templatesAndrew Bartlett2009-08-174-17/+14
| | | | | | | We need to find a better way to apply this (used in the Fedora DS LDAP backend), not by trying to tunnel this down the module stack. Andrew Bartlett
* s4:schema Provide a way to reference a loaded schema between ldbsAndrew Bartlett2009-08-173-16/+56
| | | | | | | | This allows us to load the schema against one ldb context, but apply it to another. This will be useful in the provision script, as we need the schema before we start the LDAP server backend. Adnrew Bartlett
* s4:samdb python bindings - we don't need the attributes hereMatthias Dieter Wallnöfer2009-08-141-2/+1
|
* s4:ldb - Free the asynchronous resultMatthias Dieter Wallnöfer2009-08-141-0/+2
|
* s4: Correct the parameter logic of the "setpassword" scriptMatthias Dieter Wallnöfer2009-08-141-7/+4
| | | | | Either the username or the filter are allowed. If both are given the filter is going to be used due to a higher precedence.
* s4: Better way to call "dom_sid_to_rid" from ldap.pyMatthias Dieter Wallnöfer2009-08-142-4/+12
|
* s4: Remove obsolete "samdb_password_quality_ok" function (it's just a ↵Matthias Dieter Wallnöfer2009-08-141-10/+1
| | | | one-line wrapper)
* s4: cracknames.c: Change the handling of the NT_STATUS_NO_MEMORY status resultsMatthias Dieter Wallnöfer2009-08-141-4/+6
| | | | | With the previous check I got random failures when trying to connect to the LDAP server.
* s4:ldap_server Correct removal of talloc_steal()Andrew Bartlett2009-08-141-1/+0
| | | | | | | | This corrects commit 7a82aed71b74af8bc2a8a4381541adbb22452d20. The steal did not set ent->attributes, so it was incorrect to assign to ent->attributes. Andrew Bartlett
* s4:ldap_server Remove another talloc_steal (with references)Andrew Bartlett2009-08-141-1/+1
| | | | | | | | This talloc_steal also conflicts with the ldb_map code, and like the previous commit, is rudundent given the talloc_steal of the whole msg above. Andrew Bartlett
* s4:ldap_server Don't talloc_steal (with references) in ldap_backendAndrew Bartlett2009-08-141-1/+1
| | | | | | | | There may or may not be a need to take a reference to the 'name' in the ldb_map code, but given we seal the whole msg just above here, it makes no senst to steal the name, but not the values. Andrew Bartlett
* libcli/smb: move smb2_create_blob code to libcli/smb/Stefan Metzmacher2009-08-124-165/+3
| | | | | | I want to use this in source3/smbd/ metze
* libcli: move some common SMB and SMB2 stuff into libcli/smb/Stefan Metzmacher2009-08-123-177/+1
| | | | | | This will hold code that's shared between source3 and source4. metze
* s4:operational - Remove some outdated commentsMatthias Dieter Wallnöfer2009-08-111-12/+0
|
* ldb: Don't break the standalone LDB build (operational module removed)Matthias Dieter Wallnöfer2009-08-111-2/+2
|
* s4:test for "primaryGroupToken"Matthias Dieter Wallnöfer2009-08-112-10/+81
| | | | | | | | Tests for the right behaviour of this introduced constructed attribute. Since we don't support the read-only-ness of those attributes yet, I commented some lines out. Also I had to add a function for python which converts domain SIDs in RIDs. And a small fix for the "groupType" test.
generated by cgit (git 2.34.1) at 2025-09-26 09:29:32 +0000