summaryrefslogtreecommitdiff
path: root/source4/scripting/python/samba/netcmd/ntacl.py
AgeCommit message (Collapse)AuthorFilesLines
2013-03-02Move python modules from source4/scripting/python/ to python/.Jelmer Vernooij1-260/+0
Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sat Mar 2 03:57:34 CET 2013 on sn-devel-104
2013-01-08samba-tool Add --service argument to samba-tool ntacl get/setAndrew Bartlett1-6/+10
This also ensures a VFS connect is done to the correct service. Andrew Bartlett Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jan 8 03:39:21 CET 2013 on sn-devel-104
2012-10-09samba-tool: Some more unifications...Karolin Seeger1-1/+1
in the usage message. Karolin
2012-10-08samba-tool: Unify usage messages.Karolin Seeger1-4/+4
Karolin Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Mon Oct 8 14:26:52 CEST 2012 on sn-devel-104
2012-09-27s4-python: Various formatting fixes.Jelmer Vernooij1-10/+8
* Trailing whitespace * use of "==" where "is" should be used * double spaces
2012-09-20Correct command help messageDaniele Dario1-1/+1
Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Thu Sep 20 16:55:17 CEST 2012 on sn-devel-104
2012-09-05samba_tool: Improve samba-tool ntacl get/set to use the local sam.ldb SIDAndrew Bartlett1-19/+53
This gets the SID for the local machine correctly. We also add options for --use-ntvfs and --use-s3fs to help control exactly which database is being read and written. Andrew Bartlett
2012-09-05samba_tool: Fix ntacl get to correctly output in sddlAndrew Bartlett1-3/+3
2012-09-04s3-passdb: Rename pdb_samba4 to samba_dsdb and autoconfigure when we are a AD DCAndrew Bartlett1-2/+2
The name samba_dsdb is not ideal, but it matches the primary ldb module we use, and more importantly it avoids having '4' in the name. We should slowly avoid using the term samba4 in long-term places like the smb.conf because it is confusing to users given we are shipping Samba 4.0 as an AD DC as well as all the other supported roles (domain member/standalone server/classic DC) Additionally, samba4 will be an odd name when we eventually release Samba 5.0! samba4 remains accepted as an alias to ensure existing smb.conf files load, but to allow changes here in the future, we set the value during the smb.conf load, and not during the provision when we are an AD DC. This simplifies the default smb.conf for the vast majority of our users and reduces the number of things listed in smb.conf files that we later have to work around if we wish to change the name/implementation of the passdb glue module again. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Sep 4 04:45:16 CEST 2012 on sn-devel-104
2012-08-23s4-samba-tool: Add samba-tool ntacl sysvolcheck commandAndrew Bartlett1-0/+34
This command verifies that the current on-disk ACLs match the directory and the defaults from provision. Unlike sysvolreset, this does not change any of the permissions. Andrew Bartlett
2012-08-23s4-samba-tool: Add 'samba-tool ntacl sysvolreset' toolAndrew Bartlett1-1/+73
This will reset the NT ACL on the sysvol share to the default from provision, with GPO objects matching the LDAP ACL (as required). Andrew Bartlett
2012-03-13s4-python: Remove env from non-executable netcmd scripts.Andreas Schneider1-2/+0
2012-02-25ntacl: There is no 'secrets database' configuration option.Jelmer Vernooij1-1/+1
2012-02-07Revert "samba-tool: moved takes_optiongroups definition to Command base class"Jelmer Vernooij1-1/+12
This reverts commit f6fa8684896b8f3f9f8b7bd3742c99906973274c. This keeps the main command class fairly slim, and makes it a bit more obvious where the arguments to run() are coming from. Conflicts: source4/scripting/python/samba/netcmd/__init__.py source4/scripting/python/samba/netcmd/domain.py source4/scripting/python/samba/netcmd/gpo.py source4/scripting/python/samba/netcmd/newuser.py source4/scripting/python/samba/netcmd/testparm.py source4/scripting/python/samba/netcmd/user.py source4/scripting/python/samba/tests/samba_tool/__init__.py
2011-10-14samba-tool: Add test to make sure all commands have a synopsis set.Jelmer Vernooij1-0/+1
2011-10-14samba-tool: Don't require full prog line to be in synopsis.Jelmer Vernooij1-2/+2
2011-10-14creds: Remove unnecessary calls to credopts.get_credentials.Jelmer Vernooij1-2/+0
2011-10-13samba-tool: Use self.outf in a few more places.Jelmer Vernooij1-3/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Oct 13 05:06:52 CEST 2011 on sn-devel-104
2011-09-09samba-tool: Fixed "ntacl" subcommands syntaxGiampaolo Lauria1-2/+2
Removed options from syntax Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-09samba-tool: Added "ntacl" commandGiampaolo Lauria1-5/+9
Added "ntacl" command to substitute "acl nt" command Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-07-21samba-tool: moved takes_optiongroups definition to Command base classGiampaolo Lauria1-12/+1
The option groups should be defined at the Command base class level as they are in common across all samba-tool commands. Major move advantages: 1. more OOP approach 2. enforcing consistency across commands 3. avoiding the need of declaring for every new command Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-11-29s4-samba-tool: fixed exception handling in subcommandsAndrew Tridgell1-3/+2
this switches to the new pattern of: except Exception, e: raise CommandError("some error message", e)
2010-06-24s4-python: python is not always in /usr/binAndrew Tridgell1-1/+1
Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-04-08s4-python: More cleanups.Jelmer Vernooij1-1/+2
2010-03-16Added a net acl ds command for modification of ACLs on directory objectsNadezhda Ivanova1-1/+1
At present the command supports only addition of control access rigts, done so DRS access checks can be tested. It will be expanded to deal with most ways to modify and view a DS ACL. Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed to this, which is "net acl ds" ./bin/net acl ds set --help Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn Options: -h, --help show this help message and exit --host=HOST LDB URL for database or target server --car=CAR The access control right to allow or deny --action=ACTION Deny or allow access --objectdn=OBJECTDN DN of the object whose SD to modify --trusteedn=TRUSTEEDN DN of the entity that gets access Samba Common Options: -s FILE, --configfile=FILE Configuration file Credentials Options: --simple-bind-dn=DN DN to use for a simple bind --password=PASSWORD Password -U USERNAME, --username=USERNAME Username -W WORKGROUP, --workgroup=WORKGROUP Workgroup -N, --no-pass Don't ask for a password -k KERBEROS, --kerberos=KERBEROS Use Kerberos
2010-03-01ntacl: Use existing infrastructure.Jelmer Vernooij1-26/+26
2010-02-11python-s4: use secrets.ldb instead of sam.ldb for reading domain SIDMatthieu Patou1-2/+2
This allow to be able to run net acl set xxx yyy on DC, but also on domain member. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-21s4: utils recreate in python setntacl and getntaclMatthieu Patou1-0/+119
setntacl is able to set NTACL attribute from command line getntacl now use getopt for parsing command line option and is also able to dump the acl in the SDDL format.