Apply TLS certificates to Samba DC

[DavidePrincipi]

Samba DC always uses a self-generated TLS certificate, ignoring the TLS certificates configured in the cluster-admin UI.

As a result, the certificate associated with the Samba DC FQDN is never applied, even when a valid certificate is available in the cluster.

Expected behavior
Samba DC should retrieve and apply the TLS certificate matching its FQDN by using the get-certificate helper command, in the same way other applications already do (for example, Mail).

See also

• https://community.nethserver.org/t/installing-custom-ldaps-certificate-for-samba/26269
• Discussion https://mattermost.nethesis.it/nethserver/pl/z4gfknz5wffkicct1w7b5na4fh
• Discussion (PVT) https://mattermost.nethesis.it/nethserver/pl/4nz796z4938bzxjo1kdrpcxsah

[DavidePrincipi]

In Testing samba 3.4.2-dev.2

Test case

• Generate a certificate for DC FQDN with a private CA.
• Follow documentation Add documentation about OS certificate store ns8-docs#216 to add the CA cert into the node TLS trust store.
• Upload the DC certificate in TLS certificates page

Check that Samba is restarted and the uploaded certificate is used for LDAPS connections.