diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2016-12-12 10:30:51 +0200 |
|---|---|---|
| committer | Martin Babinsky <mbabinsk@redhat.com> | 2016-12-12 16:39:32 +0100 |
| commit | 38cc01b1c92da36653e0ce4d8f7066282fd1d102 (patch) | |
| tree | 41ae59270eaa720219fe02363820e91ec6f1776e /install/share | |
| parent | 15351ab6e7c188fb492e6815026d1d75c4d4d29b (diff) | |
| download | freeipa-38cc01b1c92da36653e0ce4d8f7066282fd1d102.tar.gz freeipa-38cc01b1c92da36653e0ce4d8f7066282fd1d102.tar.xz freeipa-38cc01b1c92da36653e0ce4d8f7066282fd1d102.zip | |
adtrust: remove FILE: prefix from 'dedicated keytab file' in smb.conf
Samba 4.5 does not allow to specify access mode for the keytab (FILE: or
WRFILE:) from external sources. Thus, change the defaults to a path
(implies FILE: prefix) while Samba Team fixes the code to allow the
access mode prefix for keytabs.
On upgrade we need to replace 'dedicated keytab file' value with the
path to the Samba keytab that FreeIPA maintains. Since the configuration
is stored in the Samba registry, we use net utility to manipulate the
configuration:
net conf setparm global 'dedicated keytab file' /etc/samba/samba.keytab
Fixes https://fedorahosted.org/freeipa/ticket/6551
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'install/share')
| -rw-r--r-- | install/share/smb.conf.template | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/install/share/smb.conf.template b/install/share/smb.conf.template index 2908b998c..17bde5d8d 100644 --- a/install/share/smb.conf.template +++ b/install/share/smb.conf.template @@ -3,7 +3,7 @@ workgroup = $NETBIOS_NAME netbios name = $HOST_NETBIOS_NAME realm = $REALM kerberos method = dedicated keytab -dedicated keytab file = FILE:/etc/samba/samba.keytab +dedicated keytab file = /etc/samba/samba.keytab create krb5 conf = no security = user domain master = yes |