Author: jsuchome Date: Wed Apr 6 07:58:19 2011 New Revision: 63725 URL: http://svn.opensuse.org/viewcvs/yast?rev=63725&view=rev Log: - set the value of 'kerberos method' option for single sign on, add the API for its possible change (bnc#673982) - 2.17.19 Modified: branches/SuSE-Code-11-SP1-Branch/samba-client/VERSION branches/SuSE-Code-11-SP1-Branch/samba-client/package/yast2-samba-client.changes branches/SuSE-Code-11-SP1-Branch/samba-client/src/Samba.ycp branches/SuSE-Code-11-SP1-Branch/samba-client/src/SambaNetJoin.pm branches/SuSE-Code-11-SP1-Branch/samba-client/src/dialogs.ycp Modified: branches/SuSE-Code-11-SP1-Branch/samba-client/VERSION URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP1-Branch/samba-client/VERSION?rev=63725&r1=63724&r2=63725&view=diff ============================================================================== --- branches/SuSE-Code-11-SP1-Branch/samba-client/VERSION (original) +++ branches/SuSE-Code-11-SP1-Branch/samba-client/VERSION Wed Apr 6 07:58:19 2011 @@ -1 +1 @@ -2.17.18 +2.17.19 Modified: branches/SuSE-Code-11-SP1-Branch/samba-client/package/yast2-samba-client.changes URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP1-Branch/samba-client/package/yast2-samba-client.changes?rev=63725&r1=63724&r2=63725&view=diff ============================================================================== --- branches/SuSE-Code-11-SP1-Branch/samba-client/package/yast2-samba-client.changes (original) +++ branches/SuSE-Code-11-SP1-Branch/samba-client/package/yast2-samba-client.changes Wed Apr 6 07:58:19 2011 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Fri Feb 25 15:48:11 CET 2011 - jsuchome@suse.cz + +- set the value of 'kerberos method' option for single sign on, + add the API for its possible change (bnc#673982) +- 2.17.19 + +------------------------------------------------------------------- Thu Jul 15 08:54:37 CEST 2010 - jsuchome@suse.cz - tell kerberos client not to check for DNS when saving AD Modified: branches/SuSE-Code-11-SP1-Branch/samba-client/src/Samba.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP1-Branch/samba-client/src/Samba.ycp?rev=63725&r1=63724&r2=63725&view=diff ============================================================================== --- branches/SuSE-Code-11-SP1-Branch/samba-client/src/Samba.ycp (original) +++ branches/SuSE-Code-11-SP1-Branch/samba-client/src/Samba.ycp Wed Apr 6 07:58:19 2011 @@ -133,6 +133,9 @@ // original value of pam_mount_volumes, for detecting changes list<map> pam_mount_volumes_orig = nil; +// value of kerberos_method, if not empty (bnc#673982) +string kerberos_method = "secrets and keytab"; + // packages to install for specific arhitectures (#224418) global map arch_packages = $[ "krb5" : $[ @@ -517,6 +520,7 @@ ssh_was_enabled = (ssh == true); sshd_was_enabled = sshd; ssh_support = ssh_was_enabled && sshd_was_enabled; + kerberos_method = SambaConfig::GlobalGetStr ("kerberos method", kerberos_method); return ssh_support; } @@ -533,6 +537,8 @@ global define boolean SetSSHSupport (boolean enable) { ssh_support = enable; ssh_modified = (enable != (ssh_was_enabled && sshd_was_enabled)); + // bnc#673982 + SambaConfig::GlobalSetStr ("kerberos method", enable? kerberos_method : nil); return enable; } @@ -566,6 +572,26 @@ } /** + * Get the value of kerberos-method option + */ +global define string GetKerberosMethod () { + return kerberos_method; +} + +/** + * Set the new value for kerberos-method option + * return true if the value was changed + */ +global define boolean SetKerberosMethod (string new) { + if (new != kerberos_method) + { + kerberos_method = new; + return true; + } + return false; +} + +/** * Start/Stop and FAM service according to current settings * @param write_only do not start/stop services * @return success Modified: branches/SuSE-Code-11-SP1-Branch/samba-client/src/SambaNetJoin.pm URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP1-Branch/samba-client/src/SambaNetJoin.pm?rev=63725&r1=63724&r2=63725&view=diff ============================================================================== --- branches/SuSE-Code-11-SP1-Branch/samba-client/src/SambaNetJoin.pm (original) +++ branches/SuSE-Code-11-SP1-Branch/samba-client/src/SambaNetJoin.pm Wed Apr 6 07:58:19 2011 @@ -85,7 +85,13 @@ if ($protocol eq "ads") { my $krb_file = $tmpdir."/krb5.conf"; my $realm = SambaAD->Realm (); - SCR->Write (".target.string", $conf_file, "[global]\n\trealm = $realm\n\tsecurity = ADS\n\tworkgroup = $domain\n"); + my $content = "[global]\n\trealm = $realm\n\tsecurity = ADS\n\tworkgroup = $domain\n"; + + my $kerberos_method = SambaConfig->GlobalGetStr ("kerberos method", ""); + if ($kerberos_method) { + $content = $content."\tkerberos method = $kerberos_method\n"; + } + SCR->Write (".target.string", $conf_file, $content); $cmd = "KRB5_CONFIG=$krb_file "; SCR->Write (".target.string", $krb_file, "[realms]\n\t$realm = {\n\tkdc = $server\n\t}\n"); } Modified: branches/SuSE-Code-11-SP1-Branch/samba-client/src/dialogs.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP1-Branch/samba-client/src/dialogs.ycp?rev=63725&r1=63724&r2=63725&view=diff ============================================================================== --- branches/SuSE-Code-11-SP1-Branch/samba-client/src/dialogs.ycp (original) +++ branches/SuSE-Code-11-SP1-Branch/samba-client/src/dialogs.ycp Wed Apr 6 07:58:19 2011 @@ -549,6 +549,10 @@ // for domain ask to join symbol workgroup_type = CheckWorkgroup(workgroup); + // need to set this before the join + Samba::SetSSHSupport (use_winbind && + (boolean)UI::QueryWidget (`id(`ssh), `Value)); + if (Mode::config()) { foreach (string key, [ "user", "password", "machine" ], { @@ -647,8 +651,6 @@ (boolean)UI::QueryWidget(`id(`mkhomedir), `Value)); Samba::SetWinbindCaching (use_winbind && (boolean)UI::QueryWidget(`id(`caching), `Value)); - Samba::SetSSHSupport (use_winbind && - (boolean)UI::QueryWidget (`id(`ssh), `Value)); boolean new_share = (boolean)UI::QueryWidget(`id(`share_ch),`Value); if (new_share && ! allow_share && SharesExist (Samba::shares_dir)) -- To unsubscribe, e-mail: yast-commit+unsubscribe@opensuse.org For additional commands, e-mail: yast-commit+help@opensuse.org