From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 29 Feb 2024 13:08:55 +0000 (+0100)
Subject: s3:net_ads: make use of ads_connect_cldap_only() and ADS_AUTH_GENERATE_KRB5_CONFIG... 
X-Git-Tag: tdb-1.4.11~772
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cff7656e665c3e581c3f316a904d4d5bf58bac66;p=thirdparty%2Fsamba.git

s3:net_ads: make use of ads_connect_cldap_only() and ADS_AUTH_GENERATE_KRB5_CONFIG in net_ads_password()

We don't need a real ldap connection here.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/source3/utils/net_ads.c b/source3/utils/net_ads.c
index 5f3c4bc151c..df8517d1744 100644
--- a/source3/utils/net_ads.c
+++ b/source3/utils/net_ads.c
@@ -2654,7 +2654,8 @@ static int net_ads_password(struct net_context *c, int argc, const char **argv)
 
 	/* we don't actually need a full connect, but it's the easy way to
 		fill in the KDC's address */
-	ads_connect(ads);
+	ads->auth.flags |= ADS_AUTH_GENERATE_KRB5_CONFIG;
+	ads_connect_cldap_only(ads);
 
 	if (!ads->config.realm) {
 		d_fprintf(stderr, _("Didn't find the kerberos server!\n"));