[PATCH] Patch for bug 1703

Richard Sharpe realrichardsharpe at gmail.com
Mon May 2 16:57:45 UTC 2016


On Mon, May 2, 2016 at 8:50 AM, Ralph Boehme <slow at samba.org> wrote:
> Hi!
>
> Attached is a patch to fix bug 1703:
>
> s3:libnet:libnet_join: add netbios aliases as SPNs
>
> Add all listed smb.conf netbios aliases as SPNs to the machine account:
>
>   HOST/NETBIOS_ALIAS at REALM
>
> and
>
>   HOST/netbios_alias.dnsdomain.name at REALM
>
> I wasn't entirely sure where to pull the DNS name info from, but
> decided against calling getaddrinfo() on the netbios alias via
> name_to_fqdn(), but instead just pick up the DNS domain name from
> r->out.dns_domain_name.
>
> Please review and push if ok, thanks!

I notice that the bug also mentions net ads updatejoin or some such,
which no longer exists.

Recent tests indicate that if you modify the machine account at join
time to change the SD to allow modifying the servicePrincipalName
attribute, you can update SPNs using -P ...

Of course, code is required to do that ... the first bit was done with
a bunch of Python code.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)



More information about the samba-technical mailing list