provision: add a default root key

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/provision/__init__.py b/python/samba/provision/__init__.py
index 56ca74964078861bda8573547717525a3a7c51ef..c8731c4962f59ad4d561d57f21037cd12c7b1121 100644 (file)
--- a/python/samba/provision/__init__.py
+++ b/python/samba/provision/__init__.py
@@ -2401,6 +2401,10 @@ def provision(logger, session_info, smbconf=None,
                 if updates_allowed_overridden:
                     lp.set("dsdb:schema update allowed", "no")
 
+                gkdi_root_key_dn = samdb.new_gkdi_root_key()
+                logger.info("gkdi/gmsa root key added with guid "
+                            f"{gkdi_root_key_dn.get_rdn_value()}")
+
         if not is_heimdal_built():
             create_kdc_conf(paths.kdcconf, realm, domain, os.path.dirname(lp.get("log file")))
             logger.info("The Kerberos KDC configuration for Samba AD is "

diff --git a/selftest/knownfail.d/gkdi-root-key-at-provision b/selftest/knownfail.d/gkdi-root-key-at-provision
deleted file mode 100644 (file)
index 9ef4f22..0000000
--- a/selftest/knownfail.d/gkdi-root-key-at-provision
+++ /dev/null
@@ -1 +0,0 @@
-^samba.tests.dsdb_quiet_provision_tests.+test_dsdb_dn_gkdi_gmsa_root_keys_exist
\ No newline at end of file