freeipa/ipaserver
Alexander Bokovoy 1ef0fe8bb8 adtrust: define Guests mapping after creating cifs/ principal
All Samba utilities load passdb modules from the configuration file. As
result, 'net groupmap' call would try to initialize ipasam passdb module
and that one would try to connect to LDAP using Kerberos authentication.

We should be running it after cifs/ principal is actually created in
ipa-adtrust-install or otherwise setting up group mapping will fail.

This only affects new installations. For older ones 'net groupmap' would
work just fine because adtrust is already configured and all principals
exist already.

A re-run of 'ipa-server-upgrade' is a workaround too but better to fix
the initial setup.

Related: https://pagure.io/freeipa/issue/7705
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2018-10-10 11:36:00 +02:00
..
advise Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
dnssec Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
install adtrust: define Guests mapping after creating cifs/ principal 2018-10-10 11:36:00 +02:00
plugins Find orphan automember rules 2018-10-10 09:56:40 +02:00
secrets Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
dns_data_management.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
p11helper.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
rpcserver.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
servroles.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00
topology.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00