On Thu, 2011-08-18 at 18:02 +0200, Jakub Hrozek wrote:
On Thu, Aug 18, 2011 at 05:38:11PM +0200, Sumit Bose wrote:
> On Thu, Aug 18, 2011 at 04:48:32PM +0200, Jan Zelený wrote:
> > The patches look fine, but I didn't manage to set up environment to test
the
> > new behavior. Nothing seems to be broken though
>
> If you have a running IPA server you can remove the krbPrincipalKey
> attribute from a user but keep userPassword. This should trigger sssd to
> run the migration code if you try to log in as this user.
>
> HTH
>
> bye,
> Sumit
>
If that doesn't work for you, feel free to ping me off list and use my
test environment.
I was trying to test this, but instead of quietly creating the kerberos
password, it's prompting me to change the password. I wonder if this is
related to LDAP password policy? I cannot ack this until we figure out
why this is happening.