Alexander Bokovoy 32df84f04b subdomains: Use AD admin credentials when trust is being established ...

When AD administrator credentials passed, they stored in realm_passwd,
not realm_password in the options.

When passing credentials to ipaserver.dcerpc.fetch_domains(), make sure
to normalize them.

Additionally, force Samba auth module to use NTLMSSP in case we have
credentials because at the point when trust is established, KDC is not
yet ready to issue tickets to a service in the other realm due to
MS-PAC information caching effects. The logic is a bit fuzzy because
credentials code makes decisions on what to use based on the smb.conf
parameters and Python bindings to set parameters to smb.conf make it so
that auth module believes these parameters were overidden by the user
through the command line and ignore some of options. We have to do calls
in the right order to force NTLMSSP use instead of Kerberos.

Fixes https://fedorahosted.org/freeipa/ticket/4046

2013-11-29 13:13:55 +01:00

..

advise

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

install

trusts: Always stop and disable smb service on uninstall

2013-11-26 15:23:42 +01:00

plugins

Remove unused method get_api of the ldap2 plugin.

2013-11-27 13:46:42 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

subdomains: Use AD admin credentials when trust is being established

2013-11-29 13:13:55 +01:00

rpcserver.py

Add server/protocol type to rpcserver logs

2013-11-26 16:59:59 +01:00