From a1827a1deba04e0b4b2a508dc4e4e66603a46d16 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 14 Dec 2005 07:22:25 +0000 Subject: r12227: I realised that I wasn't yet seeing authenticated LDAP for the ldb backend. The idea is that every time we open an LDB, we can provide a session_info and/or credentials. This would allow any ldb to be remote to LDAP. We should also support provisioning to a authenticated ldap server. (They are separate so we can say authenticate as foo for remote, but here we just want a token of SYSTEM). Andrew Bartlett (This used to be commit ae2f3a64ee0b07575624120db45299c65204210b) --- source4/scripting/libjs/provision.js | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) (limited to 'source4/scripting/libjs/provision.js') diff --git a/source4/scripting/libjs/provision.js b/source4/scripting/libjs/provision.js index 0b6a31ae4f..aa4ea5bff8 100644 --- a/source4/scripting/libjs/provision.js +++ b/source4/scripting/libjs/provision.js @@ -280,6 +280,15 @@ function provision(subobj, message, blank, paths) setup_file("provision.smb.conf", paths.smbconf, subobj); lp.reload(); } + message("Setting up secrets.ldb\n"); + setup_ldb("secrets.ldif", paths.secrets, subobj); + message("Setting up DNS zone file\n"); + setup_file("provision.zone", + paths.dns, + subobj); + message("Setting up keytabs\n"); + var keytab_ok = credentials_update_all_keytabs(); + assert(keytab_ok); message("Setting up hklm.ldb\n"); setup_ldb("hklm.ldif", paths.hklm, subobj); message("Setting up sam.ldb attributes\n"); @@ -296,15 +305,6 @@ function provision(subobj, message, blank, paths) message("Setting up sam.ldb users and groups\n"); setup_ldb("provision_users.ldif", paths.samdb, subobj, data, false); } - message("Setting up secrets.ldb\n"); - setup_ldb("secrets.ldif", paths.secrets, subobj); - message("Setting up DNS zone file\n"); - setup_file("provision.zone", - paths.dns, - subobj); - message("Setting up keytabs\n"); - var keytab_ok = credentials_update_all_keytabs(); - assert(keytab_ok); } /* -- cgit