From e00389983b590c474c4b09faaf1902df0c63f182 Mon Sep 17 00:00:00 2001
From: Lars Beckers <lars.beckers@rwth-aachen.de>
Date: Sun, 21 May 2017 22:14:37 +0200
Subject: [PATCH] ad-server: specify tls cacert file

---
 ad-server/templates/smb.conf.j2 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ad-server/templates/smb.conf.j2 b/ad-server/templates/smb.conf.j2
index 28331af..3bd4725 100644
--- a/ad-server/templates/smb.conf.j2
+++ b/ad-server/templates/smb.conf.j2
@@ -19,6 +19,7 @@
         kdc:renewal lifetime = {{ renewal_lifetime }}
 
         tls enabled = yes
+        tls cafile = /etc/ssl/certs/rwth_chain.pem
         tls keyfile = {{smb_tls_key}}
         tls certfile = {{smb_tls_cert}}
 
-- 
GitLab