#
# Unix SMB/CIFS implementation.
# provision a Samba4 server
-# Copyright (C) Andrew Tridgell 2005
# Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
+#
+# Based on the original in EJS:
+# Copyright (C) Andrew Tridgell 2005
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
import getopt
import optparse
-import sys
+import os, sys
# Add path to the library for in-tree use
sys.path.append("scripting/python")
from auth import system_session
import samba.getopt as options
import param
-from samba.provision import (provision, provision_guess,
- provision_default_paths, provision_ldapbase,
- provision_dns)
+from samba.provision import (provision,
+ provision_paths_from_lp)
parser = optparse.OptionParser("provision [options]")
parser.add_option_group(options.SambaOptions(parser))
help="choose 'wheel' privileged group")
parser.add_option("--users", type="string", metavar="GROUPNAME",
help="choose 'users' group")
-parser.add_option("--quiet", help="Be quiet")
-parser.add_option("--blank",
+parser.add_option("--quiet", help="Be quiet", action="store_true")
+parser.add_option("--blank", action="store_true",
help="do not add users or groups, just the structure")
-parser.add_option("--ldap-base",
- help="output only an LDIF file, suitable for creating an LDAP baseDN")
parser.add_option("--ldap-backend", type="string", metavar="LDAPSERVER",
help="LDAP server to use for this provision")
parser.add_option("--ldap-module=", type="string", metavar="MODULE",
parser.add_option("--aci", type="string", metavar="ACI",
help="An arbitary LDIF fragment, particularly useful to loading a backend ACI value into a target LDAP server. You must provide at least a realm and domain")
parser.add_option("--server-role", type="choice", metavar="ROLE",
- choices=["domain controller", "domain server"],
+ choices=["domain controller", "member server"],
help="Set server role to provision for (default standalone)")
parser.add_option("--partitions-only",
- help="Configure Samba's partitions, but do not modify them (ie, join a BDC)")
+ help="Configure Samba's partitions, but do not modify them (ie, join a BDC)", action="store_true")
+parser.add_option("--targetdir", type="string", metavar="DIR",
+ help="Set target directory")
opts = parser.parse_args()[0]
def message(text):
"""print a message if quiet is not set."""
- if opts.quiet:
+ if not opts.quiet:
print text
-hostname = opts.host_name
-
-if opts.realm is None or opts.domain is None or opts.host_name is None:
+if opts.realm is None or opts.domain is None:
if opts.realm is None:
print >>sys.stderr, "No realm set"
if opts.domain is None:
print >>sys.stderr, "No domain set"
- if opts.host_name is None:
- print >>sys.stderr, "No host name set"
- parser.print_help()
+ parser.print_usage()
sys.exit(1)
# cope with an initially blank smb.conf
-lp = param.ParamFile(opts.configfile)
-lp.set("realm", opts.realm);
-lp.set("workgroup", opts.domain);
-lp.set("server role", opts.server_role);
-lp.use()
-
-subobj = provision_guess(lp)
-subobj.domain_guid = opts.domain_guid
-subobj.host_guid = opts.host_guid
+lp = param.LoadParm()
+if opts.configfile:
+ lp.load(opts.configfile)
+if opts.targetdir is not None:
+ if not os.path.exists(opts.targetdir):
+ os.mkdir(opts.targetdir)
+ lp.set("private dir", os.path.abspath(opts.targetdir))
+ lp.set("lock dir", os.path.abspath(opts.targetdir))
+lp.set("realm", opts.realm)
+lp.set("workgroup", opts.domain)
+lp.set("server role", opts.server_role or "domain controller")
if opts.aci is not None:
- print "set ACI: %s" % subobj.aci
+ print "set ACI: %s" % opts.aci
-print "set domain sid: %s" % subobj.domainsid
-paths = provision_default_paths(lp, subobj)
+paths = provision_paths_from_lp(lp, opts.realm.lower())
paths.smbconf = opts.configfile
-subobj.fix(paths);
if opts.ldap_backend:
if opts.ldap_backend == "ldapi":
subobj.schemadn_mod2 = ",%s,paged_searches" % subobj.ldapmodule
message("LDAP module: %s on backend: %s" % (subobj.ldapmodule, subobj.ldap_backend))
-subobj.validate(lp)
-
creds = credopts.get_credentials()
-message("Provisioning for %s in realm %s" % (subobj.domain, subobj.realm))
-message("Using administrator password: %s" % subobj.adminpass)
setup_dir = opts.setupdir
if setup_dir is None:
setup_dir = "setup"
-if opts.ldap_base:
- provision_ldapbase(setup_dir, subobj, message, paths)
- message("Please install the LDIF located in %s, %s and into your LDAP server, and re-run with --ldap-backend=ldap://my.ldap.server" % (paths.ldap_basedn_ldif, paths.ldap_config_basedn_ldif, paths.ldap_schema_basedn_ldif))
-elif opts.partitions_only:
- provision_become_dc(setup_dir, subobj, message, False,
- paths, system_session, creds)
+if opts.partitions_only:
+ provision_become_dc(setup_dir, message, False,
+ paths, lp, system_session(), creds)
else:
- provision(lp, setup_dir, subobj, message, opts.blank, paths,
- system_session, creds, opts.ldap_backend)
- provision_dns(setup_dir, subobj, message, paths,
- system_session, creds)
- message("To reproduce this provision, run with:")
- message("--realm='" + subobj.realm_conf + "' --domain='" + subobj.domain_conf + "' --domain-guid='" + subobj.domain_guid + "' \\")
- message("--policy-guid='" + subobj.policyguid + "' --host-name='" + subobj.hostname + "' --host-ip='" + subobj.hostip + "' \\")
- message("--host-guid='" + subobj.host_guid + "' --invocationid='" + subobj.invocationid + "' \\")
- message("--adminpass='" + subobj.adminpass + "' --krbtgtpass='" + subobj.krbtgtpass + "' \\")
- message("--machinepass='" + subobj.machinepass + "' --dnspass='" + subobj.dnspass + "' \\")
- message("--root='" + subobj.root + "' --nobody='" + subobj.nobody + "' --nogroup-'" + subobj.nogroup + "' \\")
- message("--wheel='" + subobj.wheel + "' --users='" + subobj.users + "' --server-role='" + subobj.serverrole + "' \\")
- message("--ldap-backend='" + subobj.ldap_backend + "' --ldap-module='" + subobj.ldapmodule + "' \\")
- message("--aci='" + subobj.aci + "' \\")
+ provision(lp, setup_dir, message, opts.blank, paths,
+ system_session(), creds, opts.ldap_backend, realm=opts.realm,
+ domainguid=opts.domain_guid, domainsid=opts.domain_sid,
+ policyguid=opts.policy_guid, hostname=opts.host_name,
+ hostip=opts.host_ip, hostguid=opts.host_guid,
+ invocationid=opts.invocationid, adminpass=opts.adminpass,
+ krbtgtpass=opts.krbtgtpass, machinepass=opts.machinepass,
+ dnspass=opts.dnspass, root=opts.root, nobody=opts.nobody,
+ nogroup=opts.nogroup, wheel=opts.wheel, users=opts.users,
+ aci=opts.aci, serverrole=opts.server_role)
+ message("To reproduce this provision, run with:")
+ def shell_escape(arg):
+ if " " in arg:
+ return '"%s"' % arg
+ return arg
+ message(" ".join([shell_escape(arg) for arg in sys.argv]))
message("All OK")
git.samba.org / ira / wip.git / blobdiff