sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-27 22:50:26 +03:00
Code

docs-xml: Enable winbind use krb5 enterprise principals by default

Browse Source 
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
This commit is contained in:
Andreas Schneider 2021-06-15 16:14:11 +02:00 committed by Andreas Schneider
parent abb022b957
commit 106c2b3977
5 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
WHATSNEW.txt
View File

@ -128,6 +128,7 @@ smb.conf changes
-------------- ----------- -------
client use kerberos New desired
client protection New default
winbind use krb5 enterprise principals Changed Yes
KNOWN ISSUES

4
docs-xml/smbdotconf/winbind/winbindusekrb5enterpriseprincipals.xml
View File

@ -29,6 +29,6 @@
</para>
</description>
<value type="default">no</value>
<value type="example">yes</value>
<value type="default">yes</value>
<value type="example">no</value>
</samba:parameter>

4
lib/param/loadparm.c
View File

@ -2964,6 +2964,10 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
"acl flag inherited canonicalization",
"yes");
lpcfg_do_global_parameter(lp_ctx,
"winbind use krb5 enterprise principals",
"yes");
for (i = 0; parm_table[i].label; i++) {
if (!(lp_ctx->flags[i] & FLAG_CMDLINE)) {
lp_ctx->flags[i] |= FLAG_DEFAULT;

1
selftest/target/Samba3.pm
View File

@ -703,7 +703,6 @@ sub provision_ad_member
auth event notification = true
password server = $dcvars->{SERVER}
winbind scan trusted domains = no
winbind use krb5 enterprise principals = yes
winbind offline logon = $option_offline_logon
allow dcerpc auth level connect:lsarpc = yes

2
source3/param/loadparm.c
View File

@ -963,6 +963,8 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
Globals.client_protection = CRED_CLIENT_PROTECTION_DEFAULT;
Globals.winbind_use_krb5_enterprise_principals = true;
/* Now put back the settings that were set with lp_set_cmdline() */
apply_lp_set_cmdline();
}