sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-12-12 12:23:50 +03:00
Code Activity

samba-tool: Use authentication file to pass credentials

Browse Source 
In order not to pass credentials in clear-text directly over command line, this is a patch to store username/password/domain in a file and use it during domain join for example.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15031

Signed-off-by: Nikola Radovanovic <radovanovic.extern@univention.de>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
This commit is contained in:
Nikola Radovanovic
2022-09-30 09:38:12 +02:00
committed by Andrew Bartlett
parent bff2bc9c7d
commit 6a5d03e2f7
3 changed files with 111 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
python/samba/getopt.py
View File

@@ -192,6 +192,10 @@ class CredentialsOptions(optparse.OptionGroup):
action="callback", type=str,
help="Kerberos Credentials cache",
callback=self._set_krb5_ccache)
self._add_option("-A", "--authentication-file", metavar="AUTHFILE",
action="callback", type=str,
help="Authentication file",
callback=self._set_auth_file)
# LEGACY
self._add_option("-k", "--kerberos", metavar="KERBEROS",
@@ -293,6 +297,12 @@ class CredentialsOptions(optparse.OptionGroup):
self.creds.set_kerberos_state(MUST_USE_KERBEROS)
self.creds.set_named_ccache(arg)
def _set_auth_file(self, option, opt_str, arg, parser):
if os.path.exists(arg):
self.creds.parse_file(arg)
self.ask_for_password = False
self.machine_pass = False
def get_credentials(self, lp, fallback_machine=False):
"""Obtain the credentials set on the command-line.