r8660: Use templates for the initial provision of user and computer accounts.

[kai/samba.git] / source / scripting / libjs / provision.js

diff --git a/source/scripting/libjs/provision.js b/source/scripting/libjs/provision.js
index d3b94c1d1c4805aa04d3d37e0f16c22279d05c31..38f3fc066ebed101a52c20e27aca2d1404ed6296 100644 (file)
--- a/source/scripting/libjs/provision.js
+++ b/source/scripting/libjs/provision.js
@@ -9,6 +9,27 @@ provision_next_usn = 1;
 
 sys = sys_init();
 
+/*
+  return true if the current install seems to be OK
+*/
+function install_ok()
+{
+       var lp = loadparm_init();
+       var ldb = ldb_init();
+       if (lp.get("realm") == "") {
+               return false;
+       }
+       var ok = ldb.connect(lp.get("sam database"));
+       if (!ok) {
+               return false;
+       }
+       var res = ldb.search("(name=Administrator)");
+       if (res.length != 1) {
+               return false;
+       }
+       return true;
+}
+
 /*
   find a user or group from a list of possibilities
 */
@@ -92,7 +113,7 @@ function hostip()
 }
 
 /*
-  return current time as a ldap time string
+  return next USN in the sequence
 */
 function nextusn()
 {
@@ -139,15 +160,21 @@ function ldb_erase(ldb)
  */
 function setup_ldb(ldif, dbname, subobj)
 {
+       var erase = true;
        var extra = "";
        var ldb = ldb_init();
+       var lp = loadparm_init();
 
-       if (arguments.length == 4) {
+       if (arguments.length >= 4) {
                extra = arguments[3];
        }
 
+       if (arguments.length == 5) {
+               erase = arguments[4];
+        }
+
        var dbfile = dbname;
-       var src = lpGet("setup directory") + "/" + ldif;
+       var src = lp.get("setup directory") + "/" + ldif;
 
        var data = sys.file_load(src);
        data = data + extra;
@@ -156,7 +183,9 @@ function setup_ldb(ldif, dbname, subobj)
        var ok = ldb.connect(dbfile);
        assert(ok);
 
-       ldb_erase(ldb);
+       if (erase) {
+               ldb_erase(ldb); 
+       }
 
        ok = ldb.add(data);
        assert(ok);
@@ -167,8 +196,9 @@ function setup_ldb(ldif, dbname, subobj)
  */
 function setup_file(template, fname, subobj)
 {
-       var f = lpGet("private dir") + "/" + fname;
-       var src = lpGet("setup directory") + "/" + template;
+       var lp = loadparm_init();
+       var f = fname;
+       var src = lp.get("setup directory") + "/" + template;
 
        sys.unlink(f);
 
@@ -185,6 +215,9 @@ function setup_file(template, fname, subobj)
 function provision(subobj, message)
 {
        var data = "";
+       var lp = loadparm_init();
+       var sys = sys_init();
+       var smbconf = lp.get("config file");
 
        /*
          some options need to be upper/lower case
@@ -202,16 +235,29 @@ function provision(subobj, message)
 
        provision_next_usn = 1;
 
+       /* only install a new smb.conf if there isn't one there already */
+       var st = sys.stat(smbconf);
+       if (st == undefined) {
+               message("Setting up smb.conf\n");
+               setup_file("provision.smb.conf", smbconf, subobj);
+               lp.reload();
+       }
        message("Setting up hklm.ldb\n");
        setup_ldb("hklm.ldif", "hklm.ldb", subobj);
-       message("Setting up sam.ldb\n");
-       setup_ldb("provision.ldif", "sam.ldb", subobj, data);
+       message("Setting up sam.ldb attributes\n");
+       setup_ldb("provision_init.ldif", "sam.ldb", subobj);
+       message("Setting up sam.ldb templates\n");
+       setup_ldb("provision_templates.ldif", "sam.ldb", subobj, NULL, false);
+       message("Setting up sam.ldb data\n");
+       setup_ldb("provision.ldif", "sam.ldb", subobj, data, false);
        message("Setting up rootdse.ldb\n");
        setup_ldb("rootdse.ldif", "rootdse.ldb", subobj);
        message("Setting up secrets.ldb\n");
        setup_ldb("secrets.ldif", "secrets.ldb", subobj);
        message("Setting up DNS zone file\n");
-       setup_file("provision.zone", subobj.DNSDOMAIN + ".zone", subobj);
+       setup_file("provision.zone", 
+                  lp.get("private dir") + "/" + subobj.DNSDOMAIN + ".zone", 
+                  subobj);
 }
 
 /*
@@ -221,10 +267,17 @@ function provision_guess()
 {
        var subobj = new Object();
        var nss = nss_init();
+       var lp = loadparm_init();
+       random_init(local);
 
-       subobj.REALM        = lpGet("realm");
-       subobj.DOMAIN       = lpGet("workgroup");
+       subobj.REALM        = lp.get("realm");
+       subobj.DOMAIN       = lp.get("workgroup");
        subobj.HOSTNAME     = hostname();
+
+       assert(subobj.REALM);
+       assert(subobj.DOMAIN);
+       assert(subobj.HOSTNAME);
+
        subobj.HOSTIP       = hostip();
        subobj.DOMAINGUID   = randguid();
        subobj.DOMAINSID    = randsid();
@@ -271,8 +324,10 @@ function searchone(ldb, expression, attribute)
 */
 function newuser(username, unixname, password, message)
 {
-       var samdb = lpGet("sam database");
+       var lp = loadparm_init();
+       var samdb = lp.get("sam database");
        var ldb = ldb_init();
+       random_init(local);
 
        /* connect to the sam */
        var ok = ldb.connect(samdb);