summaryrefslogtreecommitdiff
path: root/python/samba/domain_update.py
AgeCommit message (Collapse)AuthorFilesLines
2024-06-10provision: Match Windows 2022 and set ↵Andrew Bartlett1-5/+18
msDS-ExpirePasswordsOnSmartCardOnlyAccounts by default We do this by telling the Domain Functional Level upgrade code that this is a new install. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
2023-08-30python: Remove unused importsJoseph Sutton1-3/+0
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-06-23python:samba: Fix code spellingAndreas Schneider1-1/+1
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Jun 23 14:51:14 UTC 2023 on atb-devel-224
2023-03-22domain_update: implement updates 82-89 in order to reach the latest w2016 levelStefan Metzmacher1-3/+248
I implemented them by looking at source4/setup/adprep/WindowsServerDocs/Domain-Wide-Updates.md.unused and looking at a network capture where a Windows 2022 joins an Windows 2008R2 domain. The strange thing is that Windows (tested with server 2022) uses c81fc9cc-0130-f4d1-b272-634d74818133 for update 83, while Domain-Wide-Updates.md and a fresh installation use c81fc9cc-0130-4fd1-b272-634d74818133. In order to match a fresh installation we use c81fc9cc-0130-4fd1-b272-634d74818133. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-22domain_update: make use of self.sd_utils.update_aces_in_dacl()Stefan Metzmacher1-90/+3
There's only a single domainDNS object in a domain and it's the partition base object... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-22domain_update: remove useless searches to '(objectClass=samDomain)'Stefan Metzmacher1-20/+0
samDomain is an auxiliary class of domainDNS, so we'll handle them in the search for domainDNS anyway. In addition searches for auxiliary classes will never be found in searches. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-22domain_update: make use of '"CN"' in sddl instead of using an explicit SIDStefan Metzmacher1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-22domain_update: be more verbose about updatesStefan Metzmacher1-4/+12
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2022-10-05python: Handle LdbError thrown from functions operating on DNsJoseph Sutton1-2/+6
None of these functions can return False now. Instead we must catch the LdbError if we want to perform further error handling. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2018-10-25python/domain_update: remove unused importsDouglas Bagnall1-13/+0
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Noel Power <npower@samba.org>
2018-05-12python/samba: py2/py3 compatability always decode result of b64encodeNoel Power1-1/+1
Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20domain_update: Add a new docstring for the main entry pointGarming Sam1-0/+7
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20domain_update: Add an additional error with revisionGarming Sam1-1/+6
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20domain_update: Allow the revision version to be setGarming Sam1-3/+8
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20domain_update: Respect the fix=False flagGarming Sam1-0/+16
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20domain_update: Create a module to apply domain prep updatesGarming Sam1-0/+406
These updates are referenced in documentation much like our Forest-Wide-Updates.md file under the same MIT and CC attribution licenses. https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/identity/ad-ds/deploy/Domain-Wide-Updates.md Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-07 02:14:20 +0000