mirror of
https://github.com/samba-team/samba.git
synced 2025-11-09 20:23:51 +03:00
r21135: Instead of having hooks to update keytabs as an explicit thing, update
them as a hook on ldb modify, via a module. This should allow the secrets.ldb to be edited by the admin, and to have things update in the on-disk keytab just as an in-memory keytab would. This isn't really a dsdb plugin, but I don't have any other good ideas about where to put it. Andrew Bartlett
This commit is contained in:
committed by
Gerald (Jerry) Carter
parent
966c30ca59
commit
6ce557a1af
@@ -488,16 +488,14 @@ function provision_become_dc(subobj, message, paths, session_info)
|
||||
assert(ok);
|
||||
|
||||
message("Setting up " + paths.secrets + "\n");
|
||||
setup_ldb("secrets.ldif", info, paths.secrets);
|
||||
setup_ldb("secrets_init.ldif", info, paths.secrets);
|
||||
|
||||
setup_ldb("secrets.ldif", info, paths.secrets, false);
|
||||
|
||||
tmp = lp.get("secrets database");
|
||||
ok = lp.set("secrets database", paths.secrets);
|
||||
assert(ok);
|
||||
|
||||
message("Setting up keytabs\n");
|
||||
var keytab_ok = credentials_update_all_keytabs();
|
||||
assert(keytab_ok);
|
||||
|
||||
ok = lp.set("secrets database", tmp);
|
||||
assert(ok);
|
||||
|
||||
@@ -547,12 +545,9 @@ function provision(subobj, message, blank, paths, session_info, credentials, lda
|
||||
setup_ldb("share.ldif", info, paths.shareconf);
|
||||
}
|
||||
|
||||
message("Setting up secrets.ldb\n");
|
||||
setup_ldb("secrets.ldif", info, paths.secrets);
|
||||
|
||||
message("Setting up keytabs\n");
|
||||
var keytab_ok = credentials_update_all_keytabs();
|
||||
assert(keytab_ok);
|
||||
message("Setting up " + paths.secrets + "\n");
|
||||
setup_ldb("secrets_init.ldif", info, paths.secrets);
|
||||
setup_ldb("secrets.ldif", info, paths.secrets, false);
|
||||
|
||||
message("Setting up hklm.ldb\n");
|
||||
setup_ldb("hklm.ldif", info, paths.hklm);
|
||||
|
||||
Reference in New Issue
Block a user