URL: https://github.com/freeipa/freeipa/pull/3105
Author: abbra
Title: #3105: Revert "Require a minimum SASL security factor of 56"
Action: opened
PR body:
"""
This reverts commit 350954589774499d99bf87cb5631c664bb0707c4.
We cannot force increase in minimum SASL security factor until our
consumers are ready to deal with it. Unfortunately, realmd uses
anonymous connection for discovery and validation of IPA LDAP server.
The way it is done is fragile (it doesn't take into account an
advertised IPA version, only checks that 'IPA' string exists in the info
field) but since bumping of minimum SSF prevents reading IPA info field
using anonymous connection, client enrollment fails.
We should get back to bumping minimum SSF after realmd and other
potential consumers are fixed.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3105/head:pr3105
git checkout pr3105