New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
adtrust: remove FILE: prefix from 'dedicated keytab file' in smb.conf #326
Conversation
04aba48
to
93c1e57
Compare
| @@ -1653,6 +1674,7 @@ def upgrade_configuration(): | |||
|
|
|||
| cleanup_kdc(fstore) | |||
| cleanup_adtrust(fstore) | |||
| upgrade_atrust_config() | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Typo here, should be upgrade_adtrust_config
|
Pylint complaints about undefined function because you made a typo. |
93c1e57
to
74fcf5c
Compare
|
Thanks, fixed it. |
|
The branch needs a rebase. Otherwise works as expected and has no PEP8 errors despite what crazy Travis CI claims. |
Samba 4.5 does not allow to specify access mode for the keytab (FILE: or
WRFILE:) from external sources. Thus, change the defaults to a path
(implies FILE: prefix) while Samba Team fixes the code to allow the
access mode prefix for keytabs.
On upgrade we need to replace 'dedicated keytab file' value with the
path to the Samba keytab that FreeIPA maintains. Since the configuration
is stored in the Samba registry, we use net utility to manipulate the
configuration:
net conf setparm global 'dedicated keytab file' /etc/samba/samba.keytab
Fixes https://fedorahosted.org/freeipa/ticket/6551
74fcf5c
to
912b131
Compare
|
Rebased to git master. |
|
Fixed upstream |
|
Rebased and pushed to ipa-4-4 https://fedorahosted.org/freeipa/changeset/fd8c17252fbc3efccad66cdcd373195c0fc53ce3 |
Samba 4.5 does not allow to specify access mode for the keytab (FILE: or
WRFILE:) from external sources. Thus, change the defaults to a path
(implies FILE: prefix) while Samba Team fixes the code to allow the
access mode prefix for keytabs.
On upgrade we need to replace 'dedicated keytab file' value with the
path to the Samba keytab that FreeIPA maintains. Since the configuration
is stored in the Samba registry, we use net utility to manipulate the
configuration:
Fixes https://fedorahosted.org/freeipa/ticket/6551