Bug 40290 – samba_dnsupdate should use localhost as KDC.

Bug 40290 - samba_dnsupdate should use localhost as KDC.


Summary:	samba_dnsupdate should use localhost as KDC.

Status:	CLOSED WONTFIX

Product:	UCS
Classification:	Unclassified
Component:	Samba4
Version:	UCS 4.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.0-5-errata
Assigned To:	Stefan Gohmann
QA Contact:	Arvid Requate

URL:
Keywords:

Depends on:	34908
Blocks:
	Show dependency tree / graph

Reported:	2015-12-18 06:08 CET by Stefan Gohmann
Modified:	2016-06-01 18:17 CEST (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stefan Gohmann

2015-12-18 06:08:51 CET

Backport for UCS 4.0-4

+++ This bug was initially created as a clone of Bug #34908 +++

samba_dnsupdate uses a private /var/lib/samba/private/krb5.conf with minman content. This file is created during provision from the template found in /usr/share/samba/setup/krb5.conf

This template doesn't specify some useful realm configuration options which we have in /etc/krb5.conf like:

        kdc = 127.0.0.1    # ucr get kerberos/kdc

To make the samba_dnsupdate run during samba join more deterministic and less error prone, I think it would be good to turn this file into an UCR template to at least set the kdc to localhost.

Comment 1 Stefan Gohmann

2016-04-19 15:35:46 CEST

Move to 4.0-5-errata.

Comment 2 Stefan Gohmann

2016-05-27 20:31:35 CEST

A backport is not really required.

Comment 3 Arvid Requate

2016-05-30 12:09:12 CEST

Ok.