2 exec smbscript "$0" ${1+"$@"}
4 provision a Samba4 server
5 Copyright Andrew Tridgell 2005
6 Released under the GNU GPL v2 or later
9 options = GetOptions(ARGV,
12 "POPT_COMMON_VERSION",
13 "POPT_COMMON_CREDENTIALS",
37 if (options == undefined) {
38 println("Failed to parse options");
42 libinclude("base.js");
43 libinclude("provision.js");
46 print a message if quiet is not set
50 if (options["quiet"] == undefined) {
51 print(vsprintf(arguments));
64 --realm REALM set realm
65 --domain DOMAIN set domain
66 --domain-guid GUID set domainguid (otherwise random)
67 --domain-sid SID set domainsid (otherwise random)
68 --host-name HOSTNAME set hostname
69 --host-ip IPADDRESS set ipaddress
70 --host-guid GUID set hostguid (otherwise random)
71 --invocationid GUID set invocationid (otherwise random)
72 --adminpass PASSWORD choose admin password (otherwise random)
73 --krbtgtpass PASSWORD choose krbtgt password (otherwise random)
74 --machinepass PASSWORD choose machine password (otherwise random)
75 --root USERNAME choose 'root' unix username
76 --nobody USERNAME choose 'nobody' user
77 --nogroup GROUPNAME choose 'nogroup' group
78 --wheel GROUPNAME choose 'wheel' privileged group
79 --users GROUPNAME choose 'users' group
81 --blank do not add users or groups, just the structure
82 --ldap-base output only an LDIF file, suitable for creating an LDAP baseDN
83 --ldap-backend LDAPSERVER LDAP server to use for this provision
84 --ldap-module= MODULE LDB mapping module to use for the LDAP backend
85 --aci= ACI An arbitary LDIF fragment, particularly useful to loading a backend ACI value into a target LDAP server
86 You must provide at least a realm and domain
92 if (options['host-name'] == undefined) {
93 options['host-name'] = hostname();
99 if (options["realm"] == undefined ||
100 options["domain"] == undefined ||
101 options["host-name"] == undefined) {
105 /* cope with an initially blank smb.conf */
106 var lp = loadparm_init();
107 lp.set("realm", options.realm);
108 lp.set("workgroup", options.domain);
111 var subobj = provision_guess();
113 var key = strupper(join("", split("-", r)));
114 subobj[key] = options[r];
117 var blank = (options["blank"] != undefined);
118 var ldapbase = (options["ldap-base"] != undefined);
119 var ldapbackend = (options["ldap-backend"] != undefined);
120 var ldapmodule = (options["ldap-module"] != undefined);
122 if (options["aci"] != undefined) {
123 println("set ACI: " + subobj["ACI"]);
128 subobj["LDAPMODULE"] = "entryUUID";
130 subobj["DOMAINDN_LDB"] = subobj["LDAPBACKEND"];
131 subobj["DOMAINDN_MOD"] = subobj["LDAPMODULE"] + ",paged_searches";
134 if (!provision_validate(subobj, message)) {
138 var system_session = system_session();
139 var creds = options.get_credentials();
140 var paths = provision_default_paths(subobj);
141 message("Provisioning for %s in realm %s\n", subobj.DOMAIN, subobj.REALM);
142 message("Using administrator password: %s\n", subobj.ADMINPASS);
144 provision_ldapbase(subobj, message, paths);
146 provision(subobj, message, blank, paths, system_session, creds, ldapbackend);
147 provision_dns(subobj, message, paths, system_session, creds);