freeipa/ipaserver
Alexander Bokovoy 5fd8e53f66 ipaserver/dcerpc: Ensure LSA pipe has session key before using it
With Samba 4.2 there is a bug that prevents Samba to consider Kerberos
credentials used by IPA httpd process when talking to smbd. As result,
LSA RPC connection is seen as anonymous by Samba client code and we cannot
derive session key to use for encrypting trust secrets before transmitting
them.

Additionally, rewrite of the SMB protocol support in Samba caused previously
working logic of choosing DCE RPC binding string to fail. We need to try
a different set of priorities until they fail or succeed.

Requires Samba fixes from https://bugzilla.redhat.com/show_bug.cgi?id=1219832

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1219834

Reviewed-By: Tomas Babej <tbabej@redhat.com>
2015-05-25 16:36:43 +02:00
..
advise advise: Add separate API object for ipa-advise 2015-03-05 11:01:36 +01:00
install Server Upgrade: Fix: execute schema update 2015-05-22 15:56:33 +02:00
plugins allow to call ldap2.destroy_connection multiple times 2015-05-07 18:13:57 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py ipaserver/dcerpc: Ensure LSA pipe has session key before using it 2015-05-25 16:36:43 +02:00
rpcserver.py use Connectible.disconnect() instead of .destroy_connection() 2015-05-07 18:16:16 +02:00