X-Git-Url: http://git.samba.org/samba.git/?p=ira%2Fwip.git;a=blobdiff_plain;f=source4%2Fsetup%2Fsecrets_dc.ldif;h=b8251eece51ef8d0ed8ffa9f0d8a183b95456234;hp=8ae5578e6b4f6820762d4435e3148ebb9e4b6263;hb=6283f2caaa42c7238bdc9c2e8bc1246207645019;hpb=0fd0fc75c46b39a611c7f9a56081105714d73e36 diff --git a/source4/setup/secrets_dc.ldif b/source4/setup/secrets_dc.ldif index 8ae5578e6b4..b8251eece51 100644 --- a/source4/setup/secrets_dc.ldif +++ b/source4/setup/secrets_dc.ldif @@ -11,22 +11,7 @@ msDS-KeyVersionNumber: 1 objectSid: ${DOMAINSID} privateKeytab: ${SECRETS_KEYTAB} -# A hook from our credentials system into HDB, as we must be on a KDC, -# we can look directly into the database. -dn: samAccountName=krbtgt,flatname=${DOMAIN},CN=Principals -objectClass: top -objectClass: secret -objectClass: kerberosSecret -flatname: ${DOMAIN} -realm: ${REALM} -sAMAccountName: krbtgt -objectSid: ${DOMAINSID} -servicePrincipalName: kadmin/changepw -krb5Keytab: HDB:samba4:${SAM_LDB}: -#The trailing : here is a HACK, but it matches the Heimdal format. - -# A hook from our credentials system into HDB, as we must be on a KDC, -# we can look directly into the database. +#Update a keytab for the external DNS server to use dn: servicePrincipalName=DNS/${DNSDOMAIN},CN=Principals objectClass: top objectClass: secret