URL:
https://github.com/SSSD/sssd/pull/950
Author: chenxiaolong
Title: #950: ad: Add support for passing --add-samba-data to adcli
Action: opened
PR body:
"""
This adds a new option named `ad_update_samba_machine_account_password`,
which when enabled, will pass `--add-samba-data` to the adcli command
for updating the machine account password in Samba's secrets.tdb
database.
This option is necessary when Samba is configured to use AD for
authentication. For Kerberos auth, Samba can use the system keytab, but
for NTLM, Samba uses its own copy of the machine account password in its
secrets.tdb database.
See:
https://pagure.io/SSSD/sssd/issue/3920
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/950/head:pr950
git checkout pr950