Alexander Bokovoy 5fd8e53f66 ipaserver/dcerpc: Ensure LSA pipe has session key before using it ...

With Samba 4.2 there is a bug that prevents Samba to consider Kerberos
credentials used by IPA httpd process when talking to smbd. As result,
LSA RPC connection is seen as anonymous by Samba client code and we cannot
derive session key to use for encrypting trust secrets before transmitting
them.

Additionally, rewrite of the SMB protocol support in Samba caused previously
working logic of choosing DCE RPC binding string to fail. We need to try
a different set of priorities until they fail or succeed.

Requires Samba fixes from https://bugzilla.redhat.com/show_bug.cgi?id=1219832

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1219834

Reviewed-By: Tomas Babej <tbabej@redhat.com>

2015-05-25 16:36:43 +02:00

..

advise

advise: Add separate API object for ipa-advise

2015-03-05 11:01:36 +01:00

install

Server Upgrade: Fix: execute schema update

2015-05-22 15:56:33 +02:00

plugins

allow to call ldap2.destroy_connection multiple times

2015-05-07 18:13:57 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipaserver/dcerpc: Ensure LSA pipe has session key before using it

2015-05-25 16:36:43 +02:00

rpcserver.py

use Connectible.disconnect() instead of .destroy_connection()

2015-05-07 18:16:16 +02:00