[PATCH] libads - Add net ads leave --keep-account option

[Ralph Böhme]

On Fri, Jul 06, 2018 at 05:13:42PM +0200, Andreas Schneider wrote:
>On Friday, 6 July 2018 17:02:47 CEST Ralph Böhme via samba-technical wrote: 
>>On Fri, Jun 29, 2018 at 10:26:13AM -0400, Justin Stephenson via samba- 
>technical wrote: 
>>>Please see attached patch to add the --keep-account net ads leave argument, 
>>>allowing to leave the domain without removing the machine account object. 
>>
>>I'm not sure I understand how the test can work. It uses local ldbsearch to 
>>check the account is still there after an net ads leave --keep-account. How 
>>can the ldbsearch work on a member? 
>
>source4/selftest/tests.py 
>439:plantestsuite("samba4.blackbox.net_ads(ad_dc:client)", "ad_dc:client", 
>[os.path.join(bbdir, "test_net_ads.sh"), '$DC_SERVER', '$DC_USERNAME', 
>'$DC_PASSWORD', '$PREFIX_ABS']) 
>
>The env is an 'ad_dc' client. So we have access to the ad_dc ldb files because 
>we are in the matrix! ;-) 

:) 

>Better ideas to verify that the account exits are welcome. 

Just go over LDAP?

-slow

-- 
Ralph Boehme, Samba Team       https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
GPG Key Fingerprint:           FAE2 C608 8A24 2520 51C5
                               59E4 AA1E 9B71 2639 9E46