sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code
ddcf20b518
samba-mirror/source4/setup/secrets_dns.ldif

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

13 lines
390 B
Plaintext
Raw Normal View History

s4:provision split provision of DNS zone and self join keytab
2009-09-20 07:40:17 +04:00
#Update a keytab for the external DNS server to use
s4-provision: switch to dns-HOSTNAME instead of dns We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-25 10:25:49 +04:00
dn: samAccountName=dns-${HOSTNAME},CN=Principals
s4:provision split provision of DNS zone and self join keytab
2009-09-20 07:40:17 +04:00
objectClass: top
objectClass: secret
objectClass: kerberosSecret
realm: ${REALM}
s4-setup: Add saltPrincipal to secrets_dns.ldif This adds the correct salt principal to the secretsdb so that we generate a valid keytab entries for AES and DES keys. The test doesn't fails with Heimdal cause it always uses RC4 which doesn't have a salt. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Apr 24 13:02:37 CEST 2015 on sn-devel-104
2015-04-23 19:35:51 +03:00
saltPrincipal: dns-${HOSTNAME}@${REALM}
s4-provision: switch to dns-HOSTNAME instead of dns We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-25 10:25:49 +04:00
servicePrincipalName: DNS/${DNSNAME}
scripting/join.py: Handle creating the dns-NAME account during a DC join This will ensure that the DLZ plugin works out of the box when joining a second Samba DC to the domain. Andrew Bartlett Reviewed-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-12-24 01:56:50 +04:00
msDS-KeyVersionNumber: ${KEY_VERSION_NUMBER}
s4:provision split provision of DNS zone and self join keytab
2009-09-20 07:40:17 +04:00
privateKeytab: ${DNS_KEYTAB}
secret:: ${DNSPASS_B64}
s4-provision: switch to dns-HOSTNAME instead of dns We now use a host specific account name for the DNS account, which is the account used for dynamic DNS updates. We also setup the servicePrincipalName for automatic update, and add both DNS/${DNSDOMAIN} and DNS/${DNSNAME} for compatibility with both the old and new SPNs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-25 10:25:49 +04:00
samAccountName: dns-${HOSTNAME}
Copy Permalink