PATCH: adjust 'net ads add keytab' for windows SPN(s) & add new 'net ads setspn' subcommand

Noel Power nopower at suse.com
Fri Feb 2 10:08:44 UTC 2018


Hi,

This patch set (already reviewed-by Andreas) contains a number of
changes related to handling of windows SPN(s)

In summary the first couple of patches clean up some existing code a
little, the main patches however are to

a) change the behaviour of 'net ads add keytab'

     Note: the change here is properly handle a windows format SPN. e.g.
'net ads add keytab nfs/my.fully.qualified.domain' both to update the
keytab with the expected value and to also add the SPN to the computer
account at the AD. Legacy behaviour is preserved (see commit message in 
attached PATCH(s) 04/05 for more detail)

b) introduce a new 'setspn' subcommand.

   While working on 'net ads add keytab' changes above it seemed a good
idea to provide similar SPN management as provided by the windows tool
setspn.exe

    see
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc731241(v=ws.11)
and commit message in PATCH 07 for more details

c) some blackbox tests for the above

please have a look.

Noel

-------------- next part --------------
A non-text attachment was scrubbed...
Name: keytab_setspn_and_tests.patch
Type: text/x-patch
Size: 49761 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20180202/5728e7fb/keytab_setspn_and_tests.bin>


More information about the samba-technical mailing list