Bug 14020 - why 'net ads gpo list <>' asks password while samba-tool does not
Summary: why 'net ads gpo list <>' asks password while samba-tool does not
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Tools (show other bugs)
Version: 4.10.4
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-06-28 14:51 UTC by Amit Kumar
Modified: 2019-06-28 14:51 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Amit Kumar 2019-06-28 14:51:40 UTC 
1. Every time we need GPO related information from 'net' tool it asks for password. Why, can't we cache?

# net ads gpo listall
Enter root's password:
Got 5 replies

---------------------
name:			{31B2F340-016D-11D2-945F-00C04FB984F9}
displayname:		Default Domain Policy
security descriptor:
---------------------
name:			{6AC1786C-016F-11D2-945F-00C04fB984F9}
displayname:		Default Domain Controllers Policy
---------------------
name:			{398F2193-BCB5-438D-AB47-EC65512E221C}
displayname:		smart-card-gpo
---------------------
name:			{0C7EBE47-2264-4A4C-868C-B31CDDC999B5}
displayname:		test-Computers-GPO-1
---------------------
name:			{8D86E985-594F-4D32-95E6-272647F9CDF4}
displayname:		test-Users-GPO-1


2. While samba-tool does not ask.
# samba-tool gpo listall
GPO          : {0C7EBE47-2264-4A4C-868C-B31CDDC999B5}
display name : test-Computers-GPO-1

GPO          : {31B2F340-016D-11D2-945F-00C04FB984F9}
display name : Default Domain Policy

GPO          : {398F2193-BCB5-438D-AB47-EC65512E221C}
display name : smart-card-gpo

GPO          : {6AC1786C-016F-11D2-945F-00C04fB984F9}
display name : Default Domain Controllers Policy

GPO          : {8D86E985-594F-4D32-95E6-272647F9CDF4}
display name : test-Users-GPO-1


Machine is acting as domain member.

Ask is can we make 'net ads gpo <>' cache password same as samba-tool, or net command itself?
Since net takes admin password at time of joining domain.