mirror of
https://github.com/samba-team/samba.git
synced 2024-12-27 03:21:53 +03:00
2c029a8b96
The motivating factor is to not require more privileges for
the user account than Windows does when joining a domain.
The points of interest are
* net_ads_join() uses same rpc mechanisms as net_rpc_join()
* Enable CLDAP queries for filling in the majority of the
ADS_STRUCT->config information
* Remove ldap_initialized() from sam/idmap_ad.c and
libads/ldap.c
* Remove some unnecessary fields from ADS_STRUCT
* Manually set the dNSHostName and servicePrincipalName attribute
using the machine account after the join
Thanks to Guenther and Simo for the review.
Still to do:
* Fix the userAccountControl for DES only systems
* Set the userPrincipalName in order to support things like
'kinit -k' (although we might be able to just use the sAMAccountName
instead)
* Re-add support for pre-creating the machine account in
a specific OU
(This used to be commit
|
||
---|---|---|
.. | ||
idmap_ad.c | ||
idmap_ldap.c | ||
idmap_rid.c | ||
idmap_smbldap.c | ||
idmap_tdb.c | ||
idmap_util.c | ||
idmap.c |