samba.git/python/samba/domain_update.py, branch master

provision: Match Windows 2022 and set msDS-ExpirePasswordsOnSmartCardOnlyAccounts by default

2024-06-10T04:27:31+00:00

We do this by telling the Domain Functional Level upgrade code that
this is a new install.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

python: Remove unused imports

2023-08-30T02:15:29+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

python:samba: Fix code spelling

2023-06-23T14:51:14+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jun 23 14:51:14 UTC 2023 on atb-devel-224

domain_update: implement updates 82-89 in order to reach the latest w2016 level

2023-03-22T22:10:32+00:00

I implemented them by looking at
source4/setup/adprep/WindowsServerDocs/Domain-Wide-Updates.md.unused
and looking at a network capture where a Windows 2022 joins an
Windows 2008R2 domain.

The strange thing is that Windows (tested with server 2022) uses
c81fc9cc-0130-f4d1-b272-634d74818133 for update 83, while
Domain-Wide-Updates.md and a fresh installation use
c81fc9cc-0130-4fd1-b272-634d74818133. In order to match a fresh
installation we use c81fc9cc-0130-4fd1-b272-634d74818133.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

domain_update: make use of self.sd_utils.update_aces_in_dacl()

2023-03-22T22:10:32+00:00

There's only a single domainDNS object in a domain and it's
the partition base object...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

domain_update: remove useless searches to '(objectClass=samDomain)'

2023-03-22T22:10:32+00:00

samDomain is an auxiliary class of domainDNS, so we'll handle them
in the search for domainDNS anyway. In addition searches for auxiliary
classes will never be found in searches.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

domain_update: make use of '"CN"' in sddl instead of using an explicit SID

2023-03-22T22:10:32+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

domain_update: be more verbose about updates

2023-03-22T22:10:32+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

python: Handle LdbError thrown from functions operating on DNs

2022-10-05T04:23:32+00:00

None of these functions can return False now. Instead we must catch the
LdbError if we want to perform further error handling.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

python/domain_update: remove unused imports

2018-10-25T19:45:53+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Noel Power