Samba-tool-external: Difference between revisions

From SambaWiki
mNo edit summary
mNo edit summary
Line 14: Line 14:
<td>'''Object'''</td>
<td>'''Object'''</td>
<td>'''Description'''</td>
<td>'''Description'''</td>
<td>'''Parameters'''</td>
<td>'''Action'''</td>
<td>'''Options'''</td>
<td>'''Parameters - specific'''</td>
<td>'''Options - general'''</td>
<td>'''Proposed Changes'''</td>
<td>'''Proposed Changes'''</td>
</tr>
</tr>
Line 21: Line 22:
<td>acl</td>
<td>acl</td>
<td>get or set acls on a file</td>
<td>get or set acls on a file</td>
<td>get set</td>
<td>nt(file), ds(directory object)</td>
<td>nt(file), ds(directory object)</td>
<td>add options</td>
<td>general options</td>
<td>Should the object be fileacl / dsacl ?</td>
<td>Should the object be fileacl / dsacl ?</td>
</tr>
</tr>
Line 29: Line 31:
<td>Raises domain and forest function level</td>
<td>Raises domain and forest function level</td>
<td>show or raise</td>
<td>show or raise</td>
<td></td>
<td>add options</td>
<td>add options</td>
<td></td>
<td></td>
Line 36: Line 39:
<td>various directory replication services</td>
<td>various directory replication services</td>
<td>bind, kcc, replicate, showrepl, options</td>
<td>bind, kcc, replicate, showrepl, options</td>
<td></td>
<td>add options</td>
<td>add options</td>
<td></td>
<td></td>
Line 42: Line 46:
<td>enableaccount</td>
<td>enableaccount</td>
<td>enable a user</td>
<td>enable a user</td>
<td></td>
<td>username</td>
<td>username</td>
<td></td>
<td></td>
Line 50: Line 55:
<td>Dumps kerberos keys of the domain into a keytab</td>
<td>Dumps kerberos keys of the domain into a keytab</td>
<td>keytab</td>
<td>keytab</td>
<td></td>
<td></td>
<td></td>
<td>Change to '''keytab export''' to be consistent with object action</td>
<td>Change to '''keytab export''' to be consistent with object action</td>
Line 57: Line 63:
<td>Makes the target DC transfer or seize fsmo role (server connection needed)</td>
<td>Makes the target DC transfer or seize fsmo role (server connection needed)</td>
<td>show, transfer, seize</td>
<td>show, transfer, seize</td>
<td></td>
<td>Add options</td>
<td>Add options</td>
<td></td>
<td></td>
Line 63: Line 70:
<td>group</td>
<td>group</td>
<td>Add or delete groups or add members to or remove members from a group</td>
<td>Add or delete groups or add members to or remove members from a group</td>
<td>add, delete, addmembers, removemembers</td>
<td>add,delete,addmembers,removemembers</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
Line 70: Line 78:
<td>gpo2</td>
<td>gpo2</td>
<td>List group policies</td>
<td>List group policies</td>
<td>listall or list</td>
<td>list, listall</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
Line 78: Line 87:
<td>Join a domain as either a member or a backup domain controller (server connection required)</td>
<td>Join a domain as either a member or a backup domain controller (server connection required)</td>
<td>dns domain</td>
<td>dns domain</td>
<td></td>
<td>add options</td>
<td>add options</td>
<td>Change command to DOMAIN [JOINDC JOINRODC, JOINMEMBER, options] so consistent with object action format.<br>
<td>Change command to DOMAIN [JOINDC JOINRODC, JOINMEMBER, options] so consistent with object action format.<br>
Line 85: Line 95:
<td>ldapcmp</td>
<td>ldapcmp</td>
<td>compare two ldap databases</td>
<td>compare two ldap databases</td>
<td>URL1, URL2</td>
<td>UR1L, URL2</td>
<td></td>
<td>add options</td>
<td>add options</td>
<td>Change to split into ldap compare.</td>
<td>Change to split into ldap compare.</td>
Line 94: Line 105:
<td></td>
<td></td>
<td></td>
<td></td>
<td>Change to password machine show</td>
<td></td>
<td>Change to '''password machine show'''</td>
</tr>
</tr>
<tr>
<tr>
<td>newuser</td>
<td>newuser</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
Line 106: Line 119:
<td>pwsettings</td>
<td>pwsettings</td>
<td>Sets password settings</td>
<td>Sets password settings</td>
<td>show or set</td>
<td>set, show</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
Line 113: Line 127:
<td>password</td>
<td>password</td>
<td>set or change password, </td>
<td>set or change password, </td>
<td>set, change</td>
<td>user</td>
<td>user</td>
<td></td>
<td></td>
Line 120: Line 135:
<td>setexpiry</td>
<td>setexpiry</td>
<td>Sets the expiration of a user account</td>
<td>Sets the expiration of a user account</td>
<td></td>
<td>[username]</td>
<td>[username]</td>
<td>add options</td>
<td>add options</td>
Line 127: Line 143:
<td>setpassword</td>
<td>setpassword</td>
<td>set user password locally, need write access to ldb files</td>
<td>set user password locally, need write access to ldb files</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
Line 134: Line 151:
<td>time</td>
<td>time</td>
<td>Retrieve the time on a remote server (server connection needed)</td>
<td>Retrieve the time on a remote server (server connection needed)</td>
<td></td>
<td>[server-name]</td>
<td>[server-name]</td>
<td></td>
<td></td>
Line 141: Line 159:
<td>user</td>
<td>user</td>
<td>create or delete a user</td>
<td>create or delete a user</td>
<td></td>
<td>create, delete</td>
<td>create, delete</td>
<td>options</td>
<td>options</td>
Line 148: Line 167:
<td>vampire</td>
<td>vampire</td>
<td>Join and synchronise a remote AD domain to the local server (server connection needed)</td>
<td>Join and synchronise a remote AD domain to the local server (server connection needed)</td>
<td></td>
<td>domain</td>
<td>domain</td>
<td></td>
<td></td>

Revision as of 20:58, 20 April 2011

samba-tool

This wiki page will document the current externals of the samba-tool command with proposed changes to be made for consistency and usability.

The proposed format for all new / existing functions on the samba-tool command are as follows:

samba-tool <object> <action> <options>

Current commands listed in __init__.py in samba 4 Version 4.0.0alpha15-GIT-b12fbc2

samba-tools current commands:

Object Description Action Parameters - specific Options - general Proposed Changes
acl get or set acls on a file get set nt(file), ds(directory object) general options Should the object be fileacl / dsacl ?
domainlevel Raises domain and forest function level show or raise add options
drs various directory replication services bind, kcc, replicate, showrepl, options add options
enableaccount enable a user username Change to user enableaccount to be consistent with object action
export Dumps kerberos keys of the domain into a keytab keytab Change to keytab export to be consistent with object action
fsmo Makes the target DC transfer or seize fsmo role (server connection needed) show, transfer, seize Add options
group Add or delete groups or add members to or remove members from a group add,delete,addmembers,removemembers
gpo2 List group policies list, listall
join Join a domain as either a member or a backup domain controller (server connection required) dns domain add options Change command to DOMAIN [JOINDC JOINRODC, JOINMEMBER, options] so consistent with object action format.
not sure is the object of the join a domain?
ldapcmp compare two ldap databases UR1L, URL2 add options Change to split into ldap compare.
machinepw get machine PW out of SAM Change to password machine show
newuser combine function with user create
pwsettings Sets password settings set, show
password set or change password, set, change user re-write into python
code similar to gpo to tell me local or not
add machinepw to this command: password machine show
setexpiry Sets the expiration of a user account [username] add options Change to user setexpiry [username]?
setpassword set user password locally, need write access to ldb files Use password command
combine both commands local and remote into one external
time Retrieve the time on a remote server (server connection needed) [server-name] Change format
user create or delete a user create, delete options Add enable, add setexpiry?
vampire Join and synchronise a remote AD domain to the local server (server connection needed) domain hmmm...