samba.git/source4/setup/provision_basedn.ldif, branch talloc-2.3.4 Unnamed repository; edit this file 'description' to name the repository. s4:provision - adapt the "provision" so that SIDs are only set on entry creation 2010-11-01T11:25:24+00:00 Matthias Dieter Wallnöfer mdw@samba.org 2010-11-01T10:30:19+00:00 7578e04fb8022ba13fa07fb88eb3d00474337ea1 SID modifications are denied. 
SID modifications are denied.
Added security descriptor for the domain NC to provisioning. 2009-11-04T13:58:54+00:00 Nadezhda Ivanova nadezhda.ivanova@postpath.com 2009-11-04T13:58:54+00:00 b8ecf39d9f6f75a31f3eeee9ceca2e20001bbf42 Necessary for correct descriptor inheritance. Based on the default state of a single DC. Will be modified later when we support multiple DCs. 
Necessary for correct descriptor inheritance. Based on the default state
of a single DC. Will be modified later when we support multiple DCs.
s4:provision Remove all references to samba4LocalDomain 2009-10-12T05:50:49+00:00 Andrew Bartlett abartlet@samba.org 2009-10-12T05:44:19+00:00 1dfa2ed42361bb8d22446513a85f0523a740982c This was a bad idea all along, as Simo said at the time. With the full MS schema and enforcement of it, it is an even worse idea. This fixes the provision of the member server in 'make test' Andrew Bartlett 
This was a bad idea all along, as Simo said at the time.  With the
full MS schema and enforcement of it, it is an even worse idea.

This fixes the provision of the member server in 'make test'

Andrew Bartlett
s4:dsdb rework instanceType module - put instanceType in provision 2009-10-02T10:45:07+00:00 Andrew Bartlett abartlet@samba.org 2009-09-24T22:06:11+00:00 984ea88156767776dc2ab0b7da84c9701c34f345 The instanceType needs to be specified in future because that's how the partitions are actually created. 
The instanceType needs to be specified in future because that's how
the partitions are actually created.
s4: Improve provisioning: use relax control 2009-10-02T10:45:01+00:00 Matthieu Patou mat@matws.net 2009-09-22T21:49:22+00:00 8bf517d340b4abbbcbda39c35e449d3c896a3728 Give the possibility to specify controls when loading ldif files. Relax control is specified by default for all ldb_add_diff (request Andrew B). Set domainguid if specified at the creation of object instead of modifying afterward Allow to specify objectGUID for NTDS object of the first DC this option is used during provision upgrade. 
Give the possibility to specify controls when loading ldif files.
  Relax control is specified by default for all ldb_add_diff (request Andrew B).
  Set domainguid if specified at the creation of object instead of modifying afterward
  Allow to specify objectGUID for NTDS object of the first DC this option is used during provision upgrade.
s4:provision Remove the ACI element from the provision templates 2009-08-16T23:50:56+00:00 Andrew Bartlett abartlet@samba.org 2009-08-13T00:01:00+00:00 e1e99a7c7bb3a69d2c522ef272301b0ba73efd7f We need to find a better way to apply this (used in the Fedora DS LDAP backend), not by trying to tunnel this down the module stack. Andrew Bartlett 
We need to find a better way to apply this (used in the Fedora DS LDAP
backend), not by trying to tunnel this down the module stack.

Andrew Bartlett
Rework to have member server 'domains' be CN=NETBIOSNAME 2008-03-13T00:36:58+00:00 Andrew Bartlett abartlet@samba.org 2008-03-13T00:36:58+00:00 0c882402360a10b19a038bce9f87e241051c9ba8 This reworks quite a few parts of our provision system to use CN=NETBIOSNAME as the domain for member servers. This makes it clear that these domains are not in the DNS structure, while complying with our own schema (found by OpenLDAP's schema validation). Andrew Bartlett (This used to be commit bda6a38b055fed2394e65cdc0b308a1442116402) 
This reworks quite a few parts of our provision system to use
CN=NETBIOSNAME as the domain for member servers.

This makes it clear that these domains are not in the DNS structure,
while complying with our own schema (found by OpenLDAP's schema
validation).

Andrew Bartlett
(This used to be commit bda6a38b055fed2394e65cdc0b308a1442116402)
Kill another sub that the modules will handle for us. 2008-01-24T00:33:37+00:00 Andrew Bartlett abartlet@samba.org 2008-01-24T00:33:37+00:00 1557e7b930b95fa5309390c46f72e14628447703 (This used to be commit e9bb130d63e86fafc4cbf379e2e237354b88bcf8) 
(This used to be commit e9bb130d63e86fafc4cbf379e2e237354b88bcf8)
provision: simplfy by removing old code to manually create baseDNs. 2008-01-17T01:00:27+00:00 Andrew Bartlett abartlet@samba.org 2008-01-17T01:00:27+00:00 f1e177a7b8e660b245d5fb9b11a66b43c9b69784 Previously, we would create the first record in the DB as an LDIF file, with the expectation that the administrator would use slapadd to create the database. We now do everything over LDAP, which is far simpler, and allows the LDB module chain to do its work, without special cases. Also fix naming of the output schema when suggesting the comamnd line to run ad2oLschema in provision-backend. Andrew Bartlett (This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f) 
Previously, we would create the first record in the DB as an LDIF
file, with the expectation that the administrator would use slapadd to
create the database.

We now do everything over LDAP, which is far simpler, and allows the
LDB module chain to do its work, without special cases.

Also fix naming of the output schema when suggesting the comamnd line
to run ad2oLschema in provision-backend.

Andrew Bartlett
(This used to be commit e77375758d66e94e5e0b6e61a97c9281c3d9c71f)
r20557: use ${DOMAINDN} instead of ${BASEDN} 2007-10-10T19:36:56+00:00 Stefan Metzmacher metze@samba.org 2007-01-05T17:40:43+00:00 8f0a0ebcb380acf57d418a6598c75e42b0bf24dc metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f) 
metze
(This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)