On Wed, Jul 20, 2016 at 12:48:16PM +0200, Sumit Bose wrote:
Hi,
please find attached a fix for
https://fedorahosted.org/sssd/ticket/3103
which turned out to be an issue with the way SSSD generates the capaths
section in the krb5.conf snippet.
bye,
Sumit
Before the patch:
[domain_realm]
.win.trust.test = WIN.TRUST.TEST
win.trust.test = WIN.TRUST.TEST
.subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
[capaths]
WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
IPA.TEST = {
WIN.TRUST.TEST = WIN.TRUST.TEST
}
SUBDOM.WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
IPA.TEST = {
SUBDOM.WIN.TRUST.TEST = WIN.TRUST.TEST
}
After the patch:
[domain_realm]
.win.trust.test = WIN.TRUST.TEST
win.trust.test = WIN.TRUST.TEST
.subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
[capaths]
WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
SUBDOM.WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
IPA.TEST = {
WIN.TRUST.TEST = WIN.TRUST.TEST
SUBDOM.WIN.TRUST.TEST = WIN.TRUST.TEST
}
The second form agrees with what is in man krb5.conf.
--> ACK
There are no Coverity issues found. I didn't run CI, because I have some
issues pushing into the CI repo, but only existing files were patched and
all the unit tests passed.