URL:
https://github.com/freeipa/freeipa/pull/6017
Author: stanislavlevin
Title: #6017: krb5: Pin kpasswd server to a primary one
Action: opened
PR body:
"""
There are time gaps in which kpasswd requests may fail due to offlined SSSD's locator
and replication delays. This results in a password was changed on replica but was not
replicated to master
(kinit(master)->master(initial)->replica(kpasswd)->master(initial)).
- added `kpasswd_server` serves as a fallback for the offlined locator
- added debugging of locator plugin
Fixes:
https://pagure.io/freeipa/issue/8353
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6017/head:pr6017
git checkout pr6017