update_machine_account_password

[Andrew Bartlett]

On Fri, 2009-11-27 at 20:23 +0300, Matthieu Patou wrote:
> Andrew B,
> 
> For a reason that I can't explain update_machine_account_password do not 
> work properly to update the supplementalCredentials and that's why using 
> smbclient for s4 against the updated tridge provision is failing 
> (because it's provision use w2K8 domain level and everything is done so 
> that aes is activated).
> 
> I tried several trick and failed so a guru of this stuff is required.
> Note that setting the password with sbin/setpassword but things back in 
> order (well once the kvno has been modified to put secrets.ldb and 
> sam.ldb in sync)
> 
> Could you have a look ?

The easy answer it to simply use the same code as setpassword, whatever
that is.  (That way, we keep this script using well known and otherwise
tested code). 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20091129/5e072bfd/attachment.pgp>