From 8dd0558573e0d4c09c1e50ebdbc50c3f3bab9256 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Fri, 31 Jul 2015 11:05:48 +0200 Subject: [PATCH 2/3] krb5: do not create kdcinfo file if proxy configuration exists Resolves https://fedorahosted.org/sssd/ticket/2652 --- src/providers/krb5/krb5_common.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/providers/krb5/krb5_common.c b/src/providers/krb5/krb5_common.c index 81d4048b63dba98706bbef1936df7f10f79e1ae5..be6c9e3540ad470307f4edb168f0ff6cc581632f 100644 --- a/src/providers/krb5/krb5_common.c +++ b/src/providers/krb5/krb5_common.c @@ -428,6 +428,13 @@ errno_t write_krb5info_file(const char *realm, const char *server, return EINVAL; } + if (sss_krb5_realm_has_proxy(realm)) { + DEBUG(SSSDBG_CONF_SETTINGS, + "KDC Proxy available for realm [%s], no kdcinfo file created.\n", + realm); + return EOK; + } + if (strcmp(service, SSS_KRB5KDC_FO_SRV) == 0) { name_tmpl = KDCINFO_TMPL; } else if (strcmp(service, SSS_KRB5KPASSWD_FO_SRV) == 0) { -- 2.1.0