diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2015-08-19 13:29:35 +1200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2015-10-26 05:11:21 +0100 |
| commit | d1d5ec311a6dd2fabe92b7dd89c156a4288490e4 (patch) | |
| tree | 0a841a7ba6b2b6c2021a2931ba0ed2ef8f8abc93 /python/samba/join.py | |
| parent | 4b25650577cd5c20729f3405c64c20ddf71b0ae3 (diff) | |
| download | samba-d1d5ec311a6dd2fabe92b7dd89c156a4288490e4.tar.gz | |
samba-tool drs clone-dc: Add --include-secrets option
This allows the creation of domain clones that have no secrets,
and so make it safer to examine databases that demonstrate issues
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Diffstat (limited to 'python/samba/join.py')
| -rw-r--r-- | python/samba/join.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/python/samba/join.py b/python/samba/join.py index 0f7dde237d1..cdfe45207cf 100644 --- a/python/samba/join.py +++ b/python/samba/join.py @@ -1206,7 +1206,7 @@ def join_DC(logger=None, server=None, creds=None, lp=None, site=None, netbios_na logger.info("Joined domain %s (SID %s) as a DC" % (ctx.domain_name, ctx.domsid)) def join_clone(logger=None, server=None, creds=None, lp=None, - targetdir=None, domain=None): + targetdir=None, domain=None, include_secrets=False): """Join as a DC.""" ctx = dc_join(logger, server, creds, lp, site=None, netbios_name=None, targetdir=targetdir, domain=domain, machinepass=None, use_ntvfs=False, dns_backend="NONE", promote_existing=False, clone_only=True) @@ -1222,6 +1222,8 @@ def join_clone(logger=None, server=None, creds=None, lp=None, drsuapi.DRSUAPI_DRS_PER_SYNC | drsuapi.DRSUAPI_DRS_FULL_SYNC_IN_PROGRESS | drsuapi.DRSUAPI_DRS_NEVER_SYNCED) + if not include_secrets: + ctx.replica_flags |= drsuapi.DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING ctx.domain_replica_flags = ctx.replica_flags ctx.do_join() |