Distribution EOLE » Modules » EOLE AD DC

La version 2.6.0 est celle à privilégier pour SETH 2.6.1, cette version est annoncée pour le 07/03/2017.

Elle intègre des améliorations notables permettant le fonctionnement des RODC :

RODC password forwarding to PDC support :

"The RODC should, when the password is found locally, but found to be incorrect, first check with the PDC to see if the password has been recently changed.  This has two functions:
 - to avoid failures directly after a password reset or change
 - to ensure the badPwdCount is updated on the PDC emulator, so that the auto-lock flag is set on a global, rather than a per-DC basis.

A large part of this work is in winbindd on the Samba DC, to ensure it understands the need to talk to the PDC emulator for NETLOGON connections, rather than the local DC on loopback.

A final part of this task will be to ensure that password changes over SAMR are recorded on the PDC emulator.  This is not currently done in AD, and Microsoft have been advised, but choose not to have this behaviour." 

Test and prove RODC behaviour

"Testing RODC behaviour for NTLM and Kerberos logons and for correct behaviour 
* when a password is changed (the password should be removed)
* when a password is not present (the password should be fetched shortly)
* when the password is wrong (the password should be checked remotely, and then fetched)"