summaryrefslogtreecommitdiff
path: root/source4/setup/secrets_dc.ldif
AgeCommit message (Collapse)AuthorFilesLines
2008-09-29Use the new 'samba4' name for our internal hdb plugin.Andrew Bartlett1-1/+1
2008-05-18provision: Allow DNS GSS-TSIG updates to work.Andrew Kroeger1-0/+1
This change ensures the KVNO of the principal in secrets.ldb (which is also exported to the dns.keytab) matches the KVNO associated with the "dns" user. Without explicitly setting msDS-KeyVersionNumber, the KVNO exported into the dns.keytab was 0. KVNO needs to be > 0, as the client libs (at least MIT libs on Fedora) consider KVNO == 0 as a sign to ignore that particular key. (This used to be commit 572efc8e65457a982a8cbb04d3b10e3aae22d574)
2008-01-24Remove useless subs from the ejs provisionAndrew Bartlett1-6/+0
The less things we manually place into the templates, the easier the conversion to python will be. Andrew Bartlett (This used to be commit f65e5c164476b80468aa19452b108db17c642f8b)
2007-10-10r25299: Modify the provision script to take an additional argument: ↵Andrew Bartlett1-0/+44
--server-role This must be set to either 'domain controller', 'domain member' or 'standalone'. The default for the provision now changes to 'standalone'. This is not because Samba4 is particularlly useful in that mode, but because we still want a positive sign from the administrator that we should advertise as a DC. We now do more to ensure the 'standalone' and 'member server' provision output is reasonable, and try not to set odd things into the database that only belong for the DC. Andrew Bartlett (This used to be commit 4cc4ed7719aff712e735628410bd3813c7d6aa40)