On Fri, Aug 26, 2011 at 12:15:13PM -0400, Stephen Gallagher wrote:
On Fri, 2011-08-26 at 17:37 +0200, Jakub Hrozek wrote:
> This is currently not testable on Fedora 15 due to a number of bugs
> (#733675, #733056). I used RHEL 6.2 to test the patch.
> To test:
> * change the PTR record of the IPA server to point to something else
> than its hostname
> * on the client, run getent passwd admin
> With the unpatched version, ldap_sasl_bind() would fail with a "Local
> error". With the patch, which turns off canonicalization by default, the
> user lookup should succeed.
> The patch does not apply cleanly on 1.5. I'll send a 1.5 version once
> this one is acked.
Ack, looks good (within the limitation of the third-party bugs)
Attached is a version that applies cleanly on the 1.5 branch.