changelog

samba服务器！

# $Source: /opt/cvs/samba/smbldap-tools/ChangeLog,v $
# $id: $
#
## ChangeLog for SMBLDAP-TOOLS




2005-01-03: new tag (v0-9-2 for rpm version 0.9.2)
2005-10-31
	. Option 'P' to set password was not possible in smbldap-useradd when usernames contained
	  space character
	. smbldap-populate and smbldap_tools.pm: classes hierarchical is specified completly to avoid
	  problem with others directories then OpenLDAP.
	. smbldap-useradd: users are not added to to group if the group is their primary one
	. smbldap-useradd and smbldap_tools: new function is_nonldap_unix_user to allow adding non
	  ldap users to group. This is typically used to add users from a trusted domains (winbind)
	. when adding trusted account (smbldap-useraddd -i) '$' caracter is added to the name if
	  not present
	. if with_smbpasswd="1", we let samba adding the sambaPrimaryGroupSID entry
	. smbldap-passwd: new option -s and -u to only update samba password or unix password
	. smbldap-passwd: regular users can change their passwords when TLS is forced
	. parsing smb.conf is correct if parameters are defined in several lines (using \ caracter)
	. automatic creation of the OU of a new user if it does not exist (smbldap-useradd -o ou=xxx)
	  The new OU must me relative to the $config{usersdn} parameter
2005-07-12
	. sambaPrimaryGroupSID for samba users is set to DOMAIN_SID-513, whatever is
	  the defaultUserGid parameter value defined in smbldap.conf
2005-06-07
	. sambaBadPasswordCount is set to 0 when using smbldap-passwd
	. update for respect with RFC 2256:
	  sn <-> nom (option S)
	  givenName <-> prenom (option N)
	  cn <-> person's full name
	. UTF8 support for givenName (option N) and sn (option S)
2005-05-26: new tag (v0-9-1 for rpm version 0.9.1)
	. bugs correction and updates in configure.pl
2005-05-17: new tag (v0-9-0 for rpm version 0.9.0)
2005-05-16
	. update release version 0.9.0 for synchronisation with examples of the "Samba3 by examples"
	  book of John H Terpstra.
	. default configuration files for the smbldap-tools can be place in
	  /etc/opt/IDEALX/smbldap-tools or /etc/smbldap-tools/
	. default configuration file for samba can be /etc/samba/smb.conf or
	  /usr/local/samba/lib/smb.conf
	. new parameter userHomeDirectoryMode in smbldap.conf to set the default directory mode used
	  for user's homeDirectory
	. enhancements and fixes in configure.pl
2005-04-27
	. error in group type documentation in smbldap-groupadd
2005-04-17
	. warnings was displayed when samba configuraton file (smb.conf) had single quotes in
	  parameters definition (thanks to Tom Burkart <[e-mail]>)
	. 'idmapdn' is now also optional in smbldap.conf (if needed and defined in smb.conf)
2005-04-03: new tag (v0-8-8 for rpm version 0.8.8)
2005-03-09
	. Four more options are now optional in smbldap.conf. Default values are:
	  > slaveLDAP="127.0.0.1"
	  > slavePort="389"
	  > masterLDAP="127.0.0.1"
	  > masterPort="389"
	  > ldapTLS="0"
	. the following suffix can be used with the smbldap-tools:
	  > suffix="dc=dpt,dc=idealx,dc=org", suffix="dc=idealx,dc=org" or suffix="dc=idealx"
	. update to smbldap-populate:
	    . administrator account is now called 'root'
	    . default uidNumber for root is set to 0
	    . default rid for root is set to 500
	    . default gidNumber for administrator is set to 0
	  uidNumber and gidNumber can be changed with option -k and -m
2005-03-08
	. Four parameters in smbldap.conf are now optional:
	  'suffix', 'usersdn', 'computersdn' and 'groupsdn'
	  If those parameters are not set, they are respectivly taken from the following
	  parameters in smb.conf :
	  'ldap suffix', 'ldap user suffix', 'ldap machine suffix' and 'ldap group suffix'
	. renaming two files:
	  $ mv smbldap-migrate-accounts smbldap-migrate-pwdump-accounts 
	  $ mv smbldap-migrate-groups smbldap-migrate-pwdump-groups
2005-02-26
	. New option '-t time' to smbldap-useradd: wait <time> seconds before exiting script when
	  adding computer's account. This is useful when Master/PDC and Slaves/BDCs are connected
	  through the internet (replication is not real time).
	  The Samba smb.conf configuration file should then look like this :
	  > add machine script = /opt/IDEALX/sbin/smbldap-useradd -t 30 -w "%u"
	  This options can only be used with the -w to add computers's account.
	  bug report: https://bugzilla.samba.org/show_bug.cgi?id=2384
	. three parameters are now optional in smbldap.conf
	  . 'sambaUnixIdPooldn': If not defined, next uidNumber and gidNumber available for new
	    users and groups are stored in sambaDomainName object
	  . 'SID': If not defined, parameter is taking from "net getlocalsid" return
	  . 'sambaDomain': If not defined, parameter is taking from smb.conf configuration file
	. add 'sambaDomain' parameter in smbldap.conf. If not defined 'workgroup' parameter in
	  smb.conf is used
2005-02-13: new tag (v0-8-7 for rpm version 0.8.7)
	. update smbldap-populate: check previously if entries exist. If the sambaDomain entry
	  already exist when using smbldap-populate, we just modify it to add the sambaUnixIdPool
	  objectclass which store the first uidNumber and gidNumber available.
	. update connection procedure to the directory in smbldap-passwd
	. new script smbldap-userinfo from Pawel Wieleba to allow people update their own
	  informations like telephoneNumber, name and some others (need proper ACL in ldap
	  configuration)
	. new migration scripts from Pawel Wieleba smbldap-migrate-unix-accounts and
	  smbldap-migrate-unix-groups to help migrating users and groups defined in /etc/passwd (and/or
	  /etc/shadow) and /etc/group.
2005-01-29
	. bug in smbldap-populate: the -b option (guest login name) was broken
	. new option '-k' and '-l' to smbldap-populate to defined the uidNumber of administrator and
	  guest accounts
	. group "Account Operators" is now created with smbldap-populate
	. Administrator account does not need anymore uidNumber=0 (using 998)
	. update in smbldap-populate and smbldap.conf:
	  . next uidNumber and gidNumber available for new users and new groups are now
	    stored in the sambaDomainName object. This allow the sambaUnixIdPooldn to not
	    been viewed as a real user under IMC (http://www.idealx.org/prj/imc/)
	    sambaUnixIdPooldn in configuration file smbldap.conf must look like
	    > sambaUnixIdPooldn="sambaDomainName=MYDOMAIN,${suffix}"
	  . the sambaDomainName is determine by 
	    - the sambaUnixIdPooldn parameter of smbldap.conf, or
	    - the workgroup parameter of smb.conf if sambaUnixIdPooldn is not a sambaDomainName
	      object
	. patch to smbldap-useradd: $modify->code was executed even if no modification was required,
	  this can cause error mesage with some ldap directory.
	. small typo corrections
2005-16-01: new tag (v0-8-6 for rpm version 0.8.6)
2005-06-01:
	. new location /opt/IDEALX and /etc/opt/IDEALX/ (instead of /usr/local and /etc)
	  to conform to FHS/LSB
	. update typo correction in documentation
	. patch to smbldap-passwd from Pawel Wieleba <[e-mail]>:
	   see www.iem.pw.edu.pl/~wielebap/ldap/smbldap-tools/smbldap-tools_doc.pdf
	  . use of slappasswd was insecure as external program. Now slappasswd is run in
	    a child process and shell is not used
	  . it is now possible to not use slappasswd but perl module only
	  . new parameter 'with_slappasswd' in smbldap.conf to allow not use 'slappasswd'
	    but perl module only
	. new option '-r' to smbldap-usermod for renaming a user. Exemple:
	  $ smbldap-usermod -d /home/new_user -r new_user old_user
2004-10-28: new tag (v0-8-5-3 for rpm version 0.8.5-3)
2004-10-07:
	. smbldap-useradd: set sambaPwdLastSet to the current date, and sambaPwdMustChange
	  to 2147483647 for trust account to work
	. patch from Quentin Delance <[e-mail]>:
	  added test to not being able to remove primary group of a user
2004-08-29: new tag (v0-8-5-2 for rpm version 0.8.5-2)
	. small corrections
	. computer's account have the 'gecos' attribute set to 'computer': computers may not
	  join the domain if this attribute is not defined (thanks to "Dominik 'Rathann' Mierzejewski")
2004-06-25:
	. patch to smbldap_tools.pm: the 'search' to sambaUnixIdPool objectclass is done
	  directly to the object defined in the configuration file (sambaUnixIdPooldn="...").
	  This allow to have more then one object having the sambaUnixIdPool objectclass.
	. patch smbldap-useradd. The -P and -T options had no effect if the -a was not used.
	. update configure.pl
2004-06-21:
	. new '-o' option in smbldap-useradd to set the organizatinal unit where the account
	  will be created. It is relative of the user suffix dn ($usersdn) defined in the
	  configuration file
2004-06-17: new tag (v0-8-5-1 for rpm version 0.8.5-1)
	. update documentation
2004-05-25:
	. patch to smbldap-populate:
	  fix sambaSID and sambaGroupType error for builtin groups
	. new entry in /etc/smbldap-tools/smbldap.conf for idmap ou:
	  > idmapdn="ou=Idmap,${suffix}"
2004-05-10:
	. patch from Ross Becker <[e-mail]> :
	  new option in smbldap.conf to set the salt format if CRYPT hash is used.