From 4dacaef2eae46a8d5d4729c8a607b9d928c70c25 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 16 Sep 2013 09:39:12 -0700 Subject: dsdb: Use credentials.get_forced_sasl_mech() This will allow us to force the use of only DIGEST-MD5, for example, which is useful to avoid hitting GSSAPI, SPNEGO or NTLM when talking to OpenLDAP and Cyrus-SASL. Andrew Bartlett Signed-off-by: Andrew Bartlett Reviewed-by: Nadezhda Ivanova Autobuild-User(master): Nadezhda Ivanova Autobuild-Date(master): Tue Sep 17 01:41:41 CEST 2013 on sn-devel-104 --- python/samba/provision/backend.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'python') diff --git a/python/samba/provision/backend.py b/python/samba/provision/backend.py index 3fe947fdbe..b50055de9f 100644 --- a/python/samba/provision/backend.py +++ b/python/samba/provision/backend.py @@ -255,6 +255,7 @@ class LDAPBackend(ProvisionBackend): # Kerberos to an ldapi:// backend makes no sense self.credentials.set_kerberos_state(DONT_USE_KERBEROS) self.credentials.set_password(self.ldapadminpass) + self.credentials.set_forced_sasl_mech("DIGEST-MD5") self.secrets_credentials = Credentials() self.secrets_credentials.guess(self.lp) @@ -262,6 +263,7 @@ class LDAPBackend(ProvisionBackend): self.secrets_credentials.set_kerberos_state(DONT_USE_KERBEROS) self.secrets_credentials.set_username("samba-admin") self.secrets_credentials.set_password(self.ldapadminpass) + self.secrets_credentials.set_forced_sasl_mech("DIGEST-MD5") self.provision() -- cgit