From f80780925fa1dfd15dc18b5b307d7ff4bd72a795 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 27 Aug 2014 15:09:22 +1200 Subject: provision: explain why this is required Change-Id: Iaf8b13010b52e03db2eefe1ad565d7ca768ffb48 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher --- python/samba/provision/sambadns.py | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'python/samba') diff --git a/python/samba/provision/sambadns.py b/python/samba/provision/sambadns.py index 9dbea4ef2a..29224c8cf6 100644 --- a/python/samba/provision/sambadns.py +++ b/python/samba/provision/sambadns.py @@ -801,6 +801,14 @@ def create_samdb_copy(samdb, logger, paths, names, domainsid, domainguid): logger.error( "Failed to setup database for BIND, AD based DNS cannot be used") raise + + # This line is critical to the security of the whole scheme. + # We assume there is no secret data in the (to be left out of + # date and essentially read-only) config, schema and metadata partitions. + # + # Only the stub of the domain partition is created above. + # + # That way, things like the krbtgt key do not leak. del partfile[domaindn] # Link dns partitions and metadata -- cgit