[SCM] Samba Shared Repository - branch v3-devel updated - release-3-2-0pre2-3818-g543dfdc

[Andrew Bartlett]

On Mon, 2008-08-25 at 11:54 +0200, Volker Lendecke wrote:
> On Mon, Aug 25, 2008 at 04:40:25AM -0500, Günther Deschner wrote:
> > commit 543dfdc1cf6baf60bffc23c6aebc542fd58d2d2e
> > Author: Günther Deschner <gd at samba.org>
> > Date:   Mon Aug 25 11:37:57 2008 +0200
> > 
> >     winbindd: only create machine pwd change event when in
> >     primary domain child.
> 
> Now difficult would it be to extend this to interdomain
> trust account passwords? Not sure though they are normally
> changed by Windows.

MS-ADTS: 
7.1.6.8.5.1     Trust Secret Cycling
  The keys used to validate trusts periodically expire (typically every
30 days). This is performed by
  the Netlogon service, which performs this operation when establishing
the Secure Channel.
  Resetting the secure channel secret is discussed in [MS-NRPC] section
3.5.4.3.5.


-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20080825/46878d6a/attachment.bin