summaryrefslogtreecommitdiffstats
path: root/source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2020-03-04 01:39:54 +0000
committer Eric Hameleers <alien@slackware.com>2020-03-04 08:59:31 +0100
commit05aafc282ba7bbef7d888d761c2d42341745bf50 (patch)
tree2b1222c91afa0939efe151439457cc754effccb2 /source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch
parent11403357f20e37f8613bb0ea1cdc51c34c51f8a6 (diff)
downloadcurrent-05aafc282ba7bbef7d888d761c2d42341745bf50.tar.gz
current-05aafc282ba7bbef7d888d761c2d42341745bf50.tar.xz
Wed Mar 4 01:39:54 UTC 202020200304013954
xap/seamonkey-2.53.1-x86_64-2.txz: Rebuilt. Fixed $LIBDIRSUFFIX for 32-bit. Thanks to ljb643.
Diffstat (limited to 'source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch')
-rw-r--r--source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch42
1 files changed, 0 insertions, 42 deletions
diff --git a/source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch b/source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch
deleted file mode 100644
index 643d3676d..000000000
--- a/source/n/samba/0002-samba-tool-create-working-private-krb5.conf.patch
+++ /dev/null
@@ -1,42 +0,0 @@
-From 5a084994144704a6c146b94f8a22cf57ce08deab Mon Sep 17 00:00:00 2001
-From: Alexander Bokovoy <ab@samba.org>
-Date: Mon, 7 Oct 2019 18:24:28 +0300
-Subject: [PATCH] samba-tool: create working private krb5.conf
-
-DNS update tool uses private krb5.conf which should have enough details
-to authenticate with GSS-TSIG when running nsupdate.
-
-Unfortunately, the configuration we provide is not enough. We set
-defaults to not lookup REALM via DNS but at the same time we don't
-provide any realm definition. As result, MIT Kerberos cannot actually
-find a working realm for Samba AD deployment because it cannot query DNS
-for a realm discovery or pick it up from the configuration.
-
-Extend private krb5.conf with a realm definition that will allow MIT
-Kerberos to look up KDC over DNS.
-
-Signed-off-by: Alexander Bokovoy <ab@samba.org>
-Reviewed-by: Andreas Schneider <asn@samba.org>
----
- source4/setup/krb5.conf | 8 ++++++++
- 1 file changed, 8 insertions(+)
-
-diff --git a/source4/setup/krb5.conf b/source4/setup/krb5.conf
-index b1bf6cf907d..ad6f2818fb5 100644
---- a/source4/setup/krb5.conf
-+++ b/source4/setup/krb5.conf
-@@ -2,3 +2,11 @@
- default_realm = ${REALM}
- dns_lookup_realm = false
- dns_lookup_kdc = true
-+
-+[realms]
-+${REALM} = {
-+ default_domain = ${DNSDOMAIN}
-+}
-+
-+[domain_realm]
-+ ${HOSTNAME} = ${REALM}
---
-2.21.0
-