Alexander Bokovoy 693c165ce8 SMB: switch IPA domain controller role ...

As a part of CVE-2020-25717 mitigations, Samba now assumes 'CLASSIC
PRIMARY DOMAIN CONTROLLER' server role does not support Kerberos
operations.  This is the role that IPA domain controller was using for
its hybrid NT4/AD-like operation.

Instead, 'IPA PRIMARY DOMAIN CONTROLLER' server role was introduced in
Samba. Switch to this role for new installations and during the upgrade
of servers running ADTRUST role.

Fixes: https://pagure.io/freeipa/issue/9031

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-11-11 16:11:05 -05:00

..

__init__.py

Installers: configure sid generation in server/replica installer

2021-11-03 11:02:00 +01:00

install.py

Installers: configure sid generation in server/replica installer

2021-11-03 11:02:00 +01:00

replicainstall.py

Installers: configure sid generation in server/replica installer

2021-11-03 11:02:00 +01:00

upgrade.py

SMB: switch IPA domain controller role

2021-11-11 16:11:05 -05:00