summaryrefslogtreecommitdiff
path: root/source4/setup/adprep
AgeCommit message (Collapse)AuthorFilesLines
2025-08-27setup:adprep: Import the latest ↵Jennifer Sutton4-90/+428
{Domain-Wide,Forest-Wide,Read-Only-Domain-Controller,Schema}-Updates.md Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2025-08-27schema: Add Validated-Write-Computer Extended Right from Windows Server 2016Jennifer Sutton1-0/+13
Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2023-03-22setup/adprep: import the latest ↵Stefan Metzmacher9-4669/+48729
{Domain-Wide,Forest-Wide,Read-Only-Domain-Controller,Schema}-Updates.md We have Domain-Wide-Updates.md and Read-Only-Domain-Controller-Updates.md only for completeness, they are not parsed/used yet, so we added .unused in order to avoid confusion in future. Initially I tried to go with an ms_domain_updates_markdown.py, but it is easier to add the current updates by hand to domain_update.py, which will follow in the next commits. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20WindowsServerDocs: Update README for clarityGarming Sam1-10/+18
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20Forest-Wide-Updates.md: Include the description of forest wide updatesGarming Sam2-0/+113
This is sourced from the WindowsServerDocs repository on Github under an MIT/CC 4.0 attribution license. A huge thanks is required for these being provided and the work done in the process, as they mean a lot less work for us to repeat. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-20WindowsServerDocs: Update README to get rid of the references to ./gen/Garming Sam1-6/+6
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-14provision: RODC revision level should be at 2Garming Sam1-0/+6
This number had been mistakenly updated alongside the standard forest updates revision. This version number appears to be independent of the other revision levels. Also add the change to a new .ldf file, which can be used to apply the schema change to an existing Samba 4.7 (or earlier) instance. Update the provision/upgrade test to do just this (otherwise it complains about differences between a new provision and an older Samba 4.0.0 instance). Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-142008R2: Missing flags on optional features container for objectVersion 45Andrew Bartlett1-0/+10
To match Windows 2008R2, this should have the same flags as the recycle bin enabled feature. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2017-12-142008R2: Missing extended rights for objectVersion 45Andrew Bartlett1-0/+102
We appear to have been missing some extended rights from 2008R2. These were added in samba by the extended-rights.ldif On Windows this was in Sch45.ldf (triggered by adprep schema updates). We add these changes to adprep/samba-4.7-missing-for-schema-45.ldif, which can be used to apply the changes to an existing Samba instance. This is not extracted from the Sch45.ldf file provided by Microsoft but is instead extracted using ldapcmp against a Samba install running the new extended-rights.ldif. Finally, these schema changes mean that the upgradeprovision test starts failing. This is because it's using an old 4.0.0 schema (that doesn't have these schema changes), but it's comparing it against a fresh provision (which does have the changes). We can avoid this failure by using the 'samba-tool domain schemaupgrade' to bring the old 4.0.0 schema in line with a fresh provision. Note that the 'upgradeprovision --full' test doesn't need this change as it seems to more aggressively copy over any schema differences with a fresh provision. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2017-12-14adprep: Add the LDF data needed to upgrade to 2012R2 schemaGarming Sam9-0/+5511
This patch adds the LDF files corresponding to the changes that the Windows Adprep.exe tool makes when upgrading a AD schema to Windows 2012R2. This is based on information Microsoft has made public on github (Schema-Updates.md - see the README.txt for more details). The LDF files 48-56 are for upgrading to Windows Server 2012, and 57-69 are for Windows Server 2012 R2. Unfortunately, the raw LDF information from Microsoft wasn't enough to get the schema working. The .diff files contain changes we needed to make on top of the raw LDF content from Microsoft. The basic steps to regenerate the .LDF files are documented in the README.txt file. The files used to generate the .LDF files are in the WindowsServerDocs/ sub-directory. (The .LDF generation is done at runtime during provision). Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Tim Beale <timbeale@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>