How to make schema changes in containerized NSDC

[dnutan (Marc)]

Anything useful to your request from these?

User's Remote shell (SSH) access

Just too easy, use “-Z” parameter and it’s done, certs were ready all the time! Before: [root@server ~]# ldapmodify -h 192.168.1.12 -D admin@cmb.local -w SECRET -f test.ldif ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. After: [root@server ~]# ldapmodify -Z -h 192.168.1.12 -D admin@cmb.local -w SECRET -f test.ldif modifying entry "cn=markus,cn=Users,dc=cmb,dc=local"

User's Remote shell (SSH) access

I’d rather call “ldbmodify” inside nsdc, like we do with other “samba-tool” invocations. I don’t like the “Accounts operator” group membership of the machine account. It is required during upgrade/migration, but could be replaced by “ldbmodify” calls… An upstream patch to samba-tool is welcome though…