From: Noel Power Date: Mon, 12 Feb 2018 16:38:56 +0000 (+0000) Subject: WHATSNEW: Add info for 'net ads keytab' and 'net ads setspn' changes X-Git-Tag: talloc-2.1.12~283 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6ba2426089f6711ea058ecb9ace07cc057e671b6;p=thirdparty%2Fsamba.git WHATSNEW: Add info for 'net ads keytab' and 'net ads setspn' changes Signed-off-by: Noel Power Reviewed-by: Jeremy Allison Reviewed-by: Andreas Schneider Autobuild-User(master): Andreas Schneider Autobuild-Date(master): Fri Mar 2 19:12:08 CET 2018 on sn-devel-144 --- diff --git a/WHATSNEW.txt b/WHATSNEW.txt index ad045e336ff..7bd37927160 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -17,6 +17,42 @@ NEW FEATURES/CHANGES ==================== +net ads setspn +--------------- + +There is a new 'net ads setspn' sub command for managing Windows SPN(s) +on the AD. This command aims to give the basic functionaility that is +provided on windows by 'setspn.exe' e.g. ability to add, delete and list +Windows SPN(s) stored in a Windows AD Computer object. + +The format of the command is: + +net ads setspn list [machine] +net ads setspn [add | delete ] SPN [machine] + +'machine' is the name of the computer account on the AD that is to be managed. +If 'machine' is not specified the name of the 'client' running the command +is used instead. + +The format of a Windows SPN is + 'serviceclass/host:port/servicename' (servicename and port are optional) + +serviceclass/host is generally sufficient to specify a host based service. + +net ads keytab changes +---------------------- +net ads keytab add no longer attempts to convert the passed serviceclass +(e.g. nfs, html etc.) into a Windows SPN which is added to the Windows AD +computer object. By default just the keytab file is modified. + +A new keytab subcommand 'add_update_ads' has been added to preserve the +legacy behaviour. However the new 'net ads setspn add' subcommand should +really be used instead. + +net ads keytab create no longer tries to generate SPN(s) from existing +entries in a keytab file. If it is required to add Windows SPN(s) then +'net ads setspn add' should be used instead. + REMOVED FEATURES ================