ad-server: specify tls cacert file

e0038998 · Lars Beckers · 0cde4f72 · e0038998
Commit e0038998 authored May 21, 2017 by Lars Beckers
--- a/ad-server/templates/smb.conf.j2
+++ b/ad-server/templates/smb.conf.j2
@@ -19,6 +19,7 @@
        kdc:renewal lifetime = {{ renewal_lifetime }}

        tls enabled = yes
+        tls cafile = /etc/ssl/certs/rwth_chain.pem
        tls keyfile = {{smb_tls_key}}
        tls certfile = {{smb_tls_cert}}