Distribution EOLE » Modules » EOLE AD DC

Voir le comportement par défaut:

[[https://gitlab.com/samba-team/samba/commit/3dbff676eaadb5140296b5ede7aba93a6d0311b7]]

static void init_locals(void)
{
    /*
     * We run this check once the [globals] is parsed, to force
     * the VFS objects and other per-share settings we need for
     * the standard way a AD DC is operated.  We may change these
     * as our code evolves, which is why we force these settings.
     *
     * We can't do this at the end of lp_load_ex(), as by that
     * point the services have been loaded and they will already
     * have "" as their vfs objects.
     */
    if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC) {
        const char **vfs_objects = lp_vfs_objects(-1);
        if (!vfs_objects || !vfs_objects[0]) {
            if (lp_parm_const_string(-1, "xattr_tdb", "file", NULL)) {
                lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr xattr_tdb");
            } else if (lp_parm_const_string(-1, "posix", "eadb", NULL)) {
                lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr posix_eadb");
            } else {
                lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr");
            }
        }

        lp_do_parameter(-1, "map hidden", "no");
        lp_do_parameter(-1, "map system", "no");
        lp_do_parameter(-1, "map readonly", "no");
        lp_do_parameter(-1, "map archive", "no");
        lp_do_parameter(-1, "store dos attributes", "yes");
    }
}

...

static void lp_enforce_ad_dc_settings(void)
{
    lp_do_parameter(GLOBAL_SECTION_SNUM, "passdb backend", "samba_dsdb");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "winbindd:use external pipes", "true");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:default", "external");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:svcctl", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:srvsvc", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:eventlog", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:ntsvcs", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:winreg", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:spoolss", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_daemon:spoolssd", "embedded");
    lp_do_parameter(GLOBAL_SECTION_SNUM, "rpc_server:tcpip", "no");
}