samba.git/source3/libads/ads_proto.h, branch talloc-2.3.2

s3: libads: Add utility function ads_zero_ldap().

2020-08-18T08:25:39+00:00

When initializing or re-initializing the ldap part of the ADS_STRUCT,
we should call this to ensure that ads->ldap.ss is correctly recognized
as a zero IPaddr by is_zero_addr(). It zeros out the ads->ldap but
then adds zero_sockaddr() to initialize as AF_INET. Otherwise it's
left by accident as AF_UNSPEC (0).

Not yet used.

Signed-off-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

Fix ads_set_sasl_wrap_flags to only change sasl flags

2020-07-13T10:41:38+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14439

Signed-off-by: Isaac Boukris 
Reviewed-by: Andreas Schneider

Add msDS-AdditionalDnsHostName entries to the keytab

2020-05-29T12:11:29+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14396

Signed-off-by: Isaac Boukris 
Reviewed-by: Andreas Schneider

s3:libads: Fix creating machine account using LDAP

2019-10-09T07:06:35+00:00

This implements the same behaviour as Windows.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13884

Pair-Programmed-With: Guenther Deschner 
Signed-off-by: Guenther Deschner 
Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy

s3:libnet: Require sealed LDAP SASL connections for joining

2019-10-09T07:06:35+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy

s3:libads: add param to prevent writing spn(s) to ads

2018-03-02T13:07:15+00:00

'net ads keytab add' currently in addition to adding to the
keytab file this command also can update AD computer objects
via ldap. This behaviour isn't very intuitive or expected given
the command name. By default we shouldn't write to the ADS.

Prepare to change the default behaviour by modifying the function
'ads_keytab_add_entry' to take a paramater to modify the existing
behaviour to optionally update the AD (or not).

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

s3:utils: add new 'net ads setspn delete' subcommand

2018-03-02T13:07:14+00:00

This patch adds 'delete' to the 'net ads setspn' subcommand

(see https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc731241(v=ws.11)

Usage:

    net ads setspn delete  

Note:  is optional, if not specified the computer account
associated with value returned by lp_netbios_name() is used instead.

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

s3:utils: add new 'net ads setspn add' subcommand

2018-03-02T13:07:14+00:00

This patch adds 'add' to the 'net ads setspn' subcommand

(see https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc731241(v=ws.11)

Usage:

     net ads setspn add  

Note:  is optional, if not specified the computer account
associated with value returned by lp_netbios_name() is used instead.

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

s3:utils: add new 'net ads setspn list' subcommand

2018-03-02T13:07:14+00:00

This patch adds basic functionality not unlike the setspn.exe
command that is provided by windows for adminsistering SPN on
the AD. (see https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc731241(v=ws.11)

Only the basic list operation (that corresponds to the -l
    switch for setspn.exe is implemented)

Usage:

     net ads setspn list 

Note:  is optional, if not specified the computer account
associated with value returned by lp_netbios_name() is used instead.

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

s3:libads: change ads_add_service_principal_name implementation

2018-03-02T13:07:14+00:00

Previously the function 'ads_add_service_principal_name' created
the SPNs based on the machine_name and dns name passed to the function.
In order to prepare for a future patch that will also need to write
SPN(s) to the AD computer account, the function implementation will
need to be changed. Instead of the function creating the SPN(s) it
will now take the list SPN(s) to write to the AD 'machine_name' account
as an input param instead.
The name of the function has been changed to
'ads_add_service_principal_names' to reflect this. Additionally  client
code now needs to construct the SPNs to be passed into the function.

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison 
Reviewed-by: Andreas Schneider