1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-24 13:57:43 +03:00

WHATSNEW: Automatic keytab update after machine password changes

BUG: https://bugzilla.samba.org/show_bug.cgi?id=6750

Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Pavel Filipensky <pfilipensky@samba.org>
Autobuild-Date(master): Fri Jul 26 18:16:15 UTC 2024 on atb-devel-224
This commit is contained in:
Pavel Filipenský 2024-02-12 10:25:06 +01:00 committed by Pavel Filipensky
parent 6a97f8e16d
commit e61f53b656

View File

@ -183,10 +183,27 @@ groups. To apply a veto or hide directive to a filename for a specific user or
group, prefix the filename with "../USERNAME/" or "../GROUPNAME/". For details
consult the updated smb.conf manpage.
Automatic keytab update after machine password change
-----------------------------------------------------
When machine account password is updated, either by winbind doing regular
updates or manually (e.g. net ads changetrustpw), now winbind will also support
update of keytab entries in case you use newly added option
'sync machine password to keytab'.
The new parameter allows you to describe what keytabs and how should be updated.
A new parameter 'sync machine password script' allows to specify external script
that will be triggered after the automatic keytab update. For detailed
information check the smb.conf manpage.
REMOVED FEATURES
================
Following commands are removed:
net ads keytab add <principal>
net ads keytab delete <principal>
net ads keytab add_update_ads
smb.conf changes
================
@ -205,6 +222,8 @@ smb.conf changes
write list Hardening
veto files Added per-user and per-group vetos
hide files Added per-user and per-group hides
sync machine password to keytab keytabs
sync machine password script script
KNOWN ISSUES