mirror of
https://github.com/samba-team/samba.git
synced 2025-07-23 20:59:10 +03:00
r21135: Instead of having hooks to update keytabs as an explicit thing, update
them as a hook on ldb modify, via a module.
This should allow the secrets.ldb to be edited by the admin, and to
have things update in the on-disk keytab just as an in-memory keytab
would.
This isn't really a dsdb plugin, but I don't have any other good ideas
about where to put it.
Andrew Bartlett
(This used to be commit 6ce557a1af
)
This commit is contained in:
committed by
Gerald (Jerry) Carter
parent
627595b7a3
commit
744dddd75b
@ -488,16 +488,14 @@ function provision_become_dc(subobj, message, paths, session_info)
|
||||
assert(ok);
|
||||
|
||||
message("Setting up " + paths.secrets + "\n");
|
||||
setup_ldb("secrets.ldif", info, paths.secrets);
|
||||
setup_ldb("secrets_init.ldif", info, paths.secrets);
|
||||
|
||||
setup_ldb("secrets.ldif", info, paths.secrets, false);
|
||||
|
||||
tmp = lp.get("secrets database");
|
||||
ok = lp.set("secrets database", paths.secrets);
|
||||
assert(ok);
|
||||
|
||||
message("Setting up keytabs\n");
|
||||
var keytab_ok = credentials_update_all_keytabs();
|
||||
assert(keytab_ok);
|
||||
|
||||
ok = lp.set("secrets database", tmp);
|
||||
assert(ok);
|
||||
|
||||
@ -547,12 +545,9 @@ function provision(subobj, message, blank, paths, session_info, credentials, lda
|
||||
setup_ldb("share.ldif", info, paths.shareconf);
|
||||
}
|
||||
|
||||
message("Setting up secrets.ldb\n");
|
||||
setup_ldb("secrets.ldif", info, paths.secrets);
|
||||
|
||||
message("Setting up keytabs\n");
|
||||
var keytab_ok = credentials_update_all_keytabs();
|
||||
assert(keytab_ok);
|
||||
message("Setting up " + paths.secrets + "\n");
|
||||
setup_ldb("secrets_init.ldif", info, paths.secrets);
|
||||
setup_ldb("secrets.ldif", info, paths.secrets, false);
|
||||
|
||||
message("Setting up hklm.ldb\n");
|
||||
setup_ldb("hklm.ldif", info, paths.hklm);
|
||||
|
Reference in New Issue
Block a user