* New features (LP: #1893784):
- d/p/tools-add-show-computer-command.patch: add a show-computer
command to print the LDAP attrs of the computer object
- d/p/add-description-option-to-join-and-update.patch: allow setting
an optional description on the computer account
* Handle new Active Directory requirements from https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023
(LP: #1868703):
- d/p/Use-GSS-SPNEGO-if-available.patch: prefer GSS-SPNEGO over
GSSAPI if available, as that can handle some of the more advanced
features which can be required by an AD server
- d/p/add-option-use-ldaps.patch: add option to use LDAPS, useful
if for some reason the LDAP port is blocked.
* Documentation fixes:
- d/p/man-move-note-to-the-right-section.patch: move note about
password lifetime to the update section
- d/p/man-explain-optional-parameter-of-login-ccache-bette.patch,
d/p/man-make-handling-of-optional-credential-cache-more-.patch:
better explain the login-ccache and -C parameters
- d/p/tools-fix-typo-in-show-password-help-output.patch: typo fix
* Other fixes:
- d/p/discovery-fix.patch: do not continue processing on a closed
connection
- d/p/delete-do-not-exit-if-keytab-cannot-be-read.patch: fix computer
deletion when keytab cannot be read
- d/p/tools-disable-SSSD-s-locator-plugin.patch: ignore MIT's locator
plugin to avoid conflicts if it returns a different DC than the one
used for the LDAP connection
This bug was fixed in the package adcli - 0.9.0-1ubuntu1
---------------
adcli (0.9.0-1ubuntu1) groovy; urgency=medium
* New features (LP: #1893784): add-show- computer- command. patch: add a show-computer description- option- to-join- and-update. patch: allow setting /portal. msrc.microsoft. com/en- us/security- guidance/ advisory/ ADV190023 GSS-SPNEGO- if-available. patch: prefer GSS-SPNEGO over option- use-ldaps. patch: add option to use LDAPS, useful move-note- to-the- right-section. patch: move note about explain- optional- parameter- of-login- ccache- bette.patch, p/man-make- handling- of-optional- credential- cache-more- .patch: fix-typo- in-show- password- help-output. patch: typo fix fix.patch: do not continue processing on a closed do-not- exit-if- keytab- cannot- be-read. patch: fix computer disable- SSSD-s- locator- plugin. patch: ignore MIT's locator
- d/p/tools-
command to print the LDAP attrs of the computer object
- d/p/add-
an optional description on the computer account
* Handle new Active Directory requirements from
https:/
(LP: #1868703):
- d/p/Use-
GSSAPI if available, as that can handle some of the more advanced
features which can be required by an AD server
- d/p/add-
if for some reason the LDAP port is blocked.
* Documentation fixes:
- d/p/man-
password lifetime to the update section
- d/p/man-
d/
better explain the login-ccache and -C parameters
- d/p/tools-
* Other fixes:
- d/p/discovery-
connection
- d/p/delete-
deletion when keytab cannot be read
- d/p/tools-
plugin to avoid conflicts if it returns a different DC than the one
used for the LDAP connection
-- Andreas Hasenack <email address hidden> Wed, 02 Sep 2020 09:50:18 -0300