URL:
https://github.com/freeipa/freeipa/pull/5617
Author: antoniotorresm
Title: #5617: Add checks to prevent adding auth indicators to internal IPA services
Action: opened
PR body:
"""
Authentication indicators should not be enforced against internal
IPA services, since not all users of those servers are able to produce
Kerberos tickets with all the auth indicator options. This includes
`host`, `ldap`, `HTTP` and `cifs` in IPA server and `host` and `cifs` in IPA clients.
Fixes:
https://pagure.io/freeipa/issue/8206
Signed-off-by: Antonio Torres <antorres(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5617/head:pr5617
git checkout pr5617