samba.git/source3/libnet, branch ldb-1.2.3

libnet_join: fix "net rpc oldjoin"

2017-11-28T13:47:32+00:00

We need to open the ncacn_np (smb) transport connection with
anonymous credentials.

In order to do netr_ServerPasswordSet*() we need to
establish a 2nd netlogon connection using dcerpc schannel
authentication.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13149

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison 
(similar to commit d27f38d35bf111a5c0a898a5ef8b7dd0b320da0d)

Autobuild-User(v4-7-test): Karolin Seeger 
Autobuild-Date(v4-7-test): Tue Nov 28 14:47:32 CET 2017 on sn-devel-144

s3:libnet: make use of secrets_store_JoinCtx()

2017-06-27T14:57:46+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: pass the cleartext blob to netlogon_creds_cli_ServerPasswordSet*()

2017-06-27T14:57:46+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:secrets: let secrets_delete_machine_password_ex() also remove the des_salt key

2017-06-27T14:57:45+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:secrets: let secrets_delete_machine_password_ex() remove SID and GUID too

2017-06-27T14:57:45+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:secrets: move kerberos_secrets_*salt related functions to machine_account_secrets.c

2017-06-27T14:57:44+00:00

These don't use any krb5_context related functions and they just
work on secrets.tdb, so they really belong to machine_account_secrets.c.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:libnet: make use of kerberos_secrets_fetch_salt_princ()

2017-06-27T14:57:44+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:libnet_join: move kerberos_secrets_store_des_salt() to libnet_join_joindomain_store_secrets()

2017-06-27T14:57:44+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:libnet_join: move libnet_join_joindomain_store_secrets() to libnet_join_post_processing()

2017-06-27T14:57:44+00:00

We should not store the secrets before we did all remote changes
(except the optional dns updates).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

s3:libnet_join: call do_JoinConfig() after we did remote changes on the server

2017-06-27T14:57:44+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider