** Summary changed: - Apply some useful unreleased fixes + Apply some useful unreleased changes
** Description changed: - We should cherry-pick these fixes: + We should cherry-pick these changes which introduce new useful + funcionality: + + a) + https://gitlab.freedesktop.org/realmd/adcli/-/commit/3937a2a7db90611aa7a93248233b0c5d31e85a3e + + add description option to join and update + + This new option allows to set the description LDAP attribute for the AD + computer object. + + Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 - a) Use GSS-SPNEGO if available + b) + https://gitlab.freedesktop.org/realmd/adcli/-/commit/0a169bd9b2687293f74bb57694eb82f9769610c9 - Currently adcli uses the GSSAPI SASL mechanism for LDAP authentication - and to establish encryption. While this works in general it does not - handle some of the more advanced features which can be required by AD - DCs. + tools: add show-computer command - The GSS-SPNEGO mechanism can handle them and is used with this patch by - adcli if the AD DC indicates that it supports it. + The show-computer command prints the LDAP attributes of the related + computer object from AD. - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1762420 - https://gitlab.freedesktop.org/realmd/adcli/commit/a6f795ba3d6048b32d7863468688bf7f42b2cafd - - - b) add option use-ldaps - - In general using the LDAP port with GSS-SPNEGO should satifiy all - requirements an AD DC should have for authentication on an encrypted - LDAP connection. - - But if e.g. the LDAP port is blocked by a firewall using the LDAPS port - with TLS encryption might be an alternative. For this use case the - --use-ldaps option is added. - - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1762420 - https://gitlab.freedesktop.org/realmd/adcli/-/commit/85097245b57f190337225dbdbf6e33b58616c092 + Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 ** Summary changed: - Apply some useful unreleased changes + [FFe]: apply some useful upstream changes ** Description changed: We should cherry-pick these changes which introduce new useful funcionality: - a) - https://gitlab.freedesktop.org/realmd/adcli/-/commit/3937a2a7db90611aa7a93248233b0c5d31e85a3e - + a) https://gitlab.freedesktop.org/realmd/adcli/-/commit/3937a2a7db90611aa7a93248233b0c5d31e85a3e + """ add description option to join and update - This new option allows to set the description LDAP attribute for the AD computer object. - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 + """ + The above is an optional new parameter to the join and update commands. I tested it with an actual AD server (windows 2019). - b) - https://gitlab.freedesktop.org/realmd/adcli/-/commit/0a169bd9b2687293f74bb57694eb82f9769610c9 - + b) https://gitlab.freedesktop.org/realmd/adcli/-/commit/0a169bd9b2687293f74bb57694eb82f9769610c9 + """ tools: add show-computer command - The show-computer command prints the LDAP attributes of the related computer object from AD. + Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 + """ - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 + This is a new command to show details about a computer account in AD, + like OS, OS version, description (added by (a) above) and others. I also + tested it with a live AD windows 2019 server. + + + Both new parameters or commands are not used by the realm tool, from the realmd package, so there is no risk of regression there. ** Description changed: - We should cherry-pick these changes which introduce new useful - funcionality: + As part of our roadmap commitment to better support integration with + Active Directory, and since adcli was recently moved to main, we should + cherry-pick these changes which introduce new useful funcionality: a) https://gitlab.freedesktop.org/realmd/adcli/-/commit/3937a2a7db90611aa7a93248233b0c5d31e85a3e """ add description option to join and update This new option allows to set the description LDAP attribute for the AD computer object. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 """ The above is an optional new parameter to the join and update commands. I tested it with an actual AD server (windows 2019). - b) https://gitlab.freedesktop.org/realmd/adcli/-/commit/0a169bd9b2687293f74bb57694eb82f9769610c9 """ tools: add show-computer command The show-computer command prints the LDAP attributes of the related computer object from AD. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 """ This is a new command to show details about a computer account in AD, like OS, OS version, description (added by (a) above) and others. I also tested it with a live AD windows 2019 server. - - Both new parameters or commands are not used by the realm tool, from the realmd package, so there is no risk of regression there. + Both new parameters or commands are not used by the realm tool, from the + realmd package, so there is no risk of regression there. ** Description changed: As part of our roadmap commitment to better support integration with Active Directory, and since adcli was recently moved to main, we should cherry-pick these changes which introduce new useful funcionality: a) https://gitlab.freedesktop.org/realmd/adcli/-/commit/3937a2a7db90611aa7a93248233b0c5d31e85a3e """ add description option to join and update This new option allows to set the description LDAP attribute for the AD computer object. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 """ The above is an optional new parameter to the join and update commands. I tested it with an actual AD server (windows 2019). b) https://gitlab.freedesktop.org/realmd/adcli/-/commit/0a169bd9b2687293f74bb57694eb82f9769610c9 """ tools: add show-computer command The show-computer command prints the LDAP attributes of the related computer object from AD. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 """ This is a new command to show details about a computer account in AD, like OS, OS version, description (added by (a) above) and others. I also tested it with a live AD windows 2019 server. Both new parameters or commands are not used by the realm tool, from the realmd package, so there is no risk of regression there. + + + PPA with test builds: https://launchpad.net/~ahasenack/+archive/ubuntu + /adcli-fixes ** Description changed: As part of our roadmap commitment to better support integration with - Active Directory, and since adcli was recently moved to main, we should - cherry-pick these changes which introduce new useful funcionality: + Active Directory, and adcli was recently moved to main as a result of + that, we should cherry-pick these changes which introduce new useful + funcionality: a) https://gitlab.freedesktop.org/realmd/adcli/-/commit/3937a2a7db90611aa7a93248233b0c5d31e85a3e """ add description option to join and update This new option allows to set the description LDAP attribute for the AD computer object. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 """ The above is an optional new parameter to the join and update commands. I tested it with an actual AD server (windows 2019). b) https://gitlab.freedesktop.org/realmd/adcli/-/commit/0a169bd9b2687293f74bb57694eb82f9769610c9 """ tools: add show-computer command The show-computer command prints the LDAP attributes of the related computer object from AD. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1737342 """ This is a new command to show details about a computer account in AD, like OS, OS version, description (added by (a) above) and others. I also tested it with a live AD windows 2019 server. Both new parameters or commands are not used by the realm tool, from the realmd package, so there is no risk of regression there. - PPA with test builds: https://launchpad.net/~ahasenack/+archive/ubuntu /adcli-fixes -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1893784 Title: [FFe]: apply some useful upstream changes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1893784/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
