[sssd PR#798][opened] ipa: ipa_getkeytab don't call libnss_sss
by sumit-bose
URL: https://github.com/SSSD/sssd/pull/798
Author: sumit-bose
Title: #798: ipa: ipa_getkeytab don't call libnss_sss
Action: opened
PR body:
"""
ipa-getkeytab is a help process which might even get called during
the startup of SSSD. Hence it should not try to use any SSSD responder
especially not the NSS responder.
Typically we call helpers with the environment of the calling SSSD
component where then _SSS_LOOPS environment variable is set to 'NO' to
skip calls to SSSD in libnss_sss. Since we have to set the KRB5CCNAME
environment variable to the ccache with the current TGT for the host
principal when calling ipa-getkeytab execle() is used to call
ipa_getkeytab which unfortunately replaces the environment of the caller
with the one provided in the last argument of the call. To make sure
ipa_getkeytab does not call back into SSSD we have to set _SSS_LOOPS=NO
here as well.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/798/head:pr798
git checkout pr798
4 years, 2 months
[sssd PR#790][opened] Lookahead resolving of host names
by thalman
URL: https://github.com/SSSD/sssd/pull/790
Author: thalman
Title: #790: Lookahead resolving of host names
Action: opened
PR body:
"""
This is a continuation of issues #3973 and #3974.
If krb5_kdcinfo_lookahead is set to certain limit, then resolving of SRV record is
stopped once we reach that limit.
The krb5_kdcinfo_lookahead option contains two numbers separated by colon (for
example 5:2). First number specifies number of primary servers that we will use and
write to kdc info file. The second number specifies number of backup servers
Resolves:
https://pagure.io/SSSD/sssd/issue/3975
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/790/head:pr790
git checkout pr790
4 years, 2 months