18 Commits

Author	SHA1	Message	Date
Björn Baumbach	d6428319d4	s4: samba_spnupdate: fix "if we are DNS server" check ... We need to check if we have hasMasterNCs. If we are RODC we have hasFullReplicaNCs instead of hasMasterNCs. TODO: maybe check for hasFullReplicaNCs, too? Signed-off-by: Stefan Metzmacher <metze@samba.org>	2012-08-03 08:11:33 +02:00
Matthieu Patou	89cb1a4676	samba_spnupdate: don't try to register DNS related SPN if we are not mastering the NC ... For RW DC the impact is pretty small but for RODC the whole SPN set is rejected by the target DC as RODC hasn't the right to register DNS SPN if it is not mastering this NC.	2012-04-19 10:57:10 +02:00
Matthias Dieter Wallnöfer	179bf9b51c	s4:libnet/py_net.c: "py_net_finddc" - add an "address" parameter ... This is useful for a new "samba-tool domain info" command. Patch inspired by Matthieu Patou. Signed-off-by: Stefan Metzmacher <metze@samba.org>	2011-11-26 10:34:58 +01:00
Andrew Tridgell	717706cb96	s4-dns/spn: fixed DNS and SPN scripts to setup forest DNS name	2011-08-25 07:39:38 +10:00
Andrew Tridgell	33fb1f85df	s4-spnupdate: fixed searches on domain NC ... Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>	2011-08-25 07:39:37 +10:00
Andrew Bartlett	1565da7694	s4-param Remove 'secrets database' parameter ... This is now just secrets.ldb in the private dir, which remains.	2011-06-06 15:02:39 +10:00
Andrew Bartlett	c091a92be5	s4-param Remove 'sam database' parameter ... This now just relies on the private dir parameter, which remains. Andrew Bartlett	2011-06-06 15:02:38 +10:00
Andrew Tridgell	6d0be9e3d1	s4-test: fixed a problem with very verbose NDR debug ... lp.get("log level") returns a string, not an integer. It needs to be cast to an integer for comparison with a number Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 6 08:58:05 CEST 2011 on sn-devel-104	2011-04-06 08:58:05 +02:00
Andrew Tridgell	949427c208	python: use os.environ[] instead of os.putenv() ... using os.putenv() causes too much confusion, as it doesn't update os.getenv() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>	2011-02-22 02:51:10 +01:00
Andrew Tridgell	3f952aba2b	s4-spnupdate: only enable NDR print at log level above 5	2010-11-18 23:12:25 +01:00
Andrew Tridgell	e59bf5efb5	s4-join: modify join behaviour according to domain level ... Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Nov 7 23:32:16 UTC 2010 on sn-devel-104	2010-11-07 23:32:16 +00:00
Matthias Dieter Wallnöfer	971ce6c5ed	s4:scripting/bin/samba_spnupdate - also support adding all possible "servicePrincipalName"s	2010-10-31 18:44:06 +00:00
Andrew Tridgell	694f2876c9	s4-spn: don't try and send an empty SPN list ... Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>	2010-09-30 20:11:15 -07:00
Andrew Tridgell	31310826e0	s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS call ... we can't do SPN updates via sam writes and replication, as the sam is read-only	2010-09-29 03:55:04 +00:00
Andrew Tridgell	06022dad70	s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers ... Our helper scripts can fail on Fedora with the PDT timezone (Western USA). This is the same issue we found with Heimdal earlier today, the 24 second difference between GMT and UTC, but this time in MIT Kerberos as linked into bind9. By forcing TZ=GMT in these scripts we avoid the problem Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>	2010-09-29 03:55:04 +00:00
Andrew Tridgell	f3ceec9b1b	s4-spn: don't try to do SPN updates as a RODC ... we don't have the permissions to do it	2010-09-26 06:29:06 +00:00
Endi S. Dewata	7cb98a0cdc	s4/spnupdate: Fixed spnupdate to use secrets credentials when accessing SamDB. ... Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>	2010-06-28 19:33:47 +02:00
Andrew Tridgell	fa26383884	s4-dsdb: added samba_spnupdate ... this script adds all our required servicePrincipalName entries at runtime. The admin can add more entries to spn_update_list as needed	2010-04-27 19:27:18 +10:00