On Fri, Apr 13, 2012 at 08:24:18AM +0200, Jan Zelený wrote:
> On Thu, Apr 12, 2012 at 09:52:14PM +0200, Jan Zeleny wrote:
> > Jakub Hrozek <jhrozek(a)redhat.com> wrote:
> > > On Tue, Apr 10, 2012 at 12:38:31AM -0400, Jakub Hrozek wrote:
>
> This works fine, but the new option should be added to the configAPI
> (sorry, I hope this would be the last iteration).
My mistake, I knew I'm missing something but late hour was stronger than my
will to re-check everything.
> The DEBUG message level is set to SSSDBG_CRIT_FAILURE, which seems quite
> high because this DEBUG message is emited for any back end which does
> not support subdomains which is everything but IPA. This should be a
> MINOR failure at best, maybe even lower.
I will change this in separate patch
> Also, instead of defaulting to "not set", would it be a good idea to
> default to "ipa" in the IPA provider and maybe check during the first
> request if subdomains are enabled on the server -- provided that runtime
> detection is possible which I honestly don't know. That way the clients
> wouldn't have to be reconfigured if trusts are added on the server.
I'm not completely sure about this since Sumit did the part where SSSD
communicates with IPA. I will discuss it with him once he is back from
vacation. I'll send the patch set then.
yes, please activate subdomains for the IPA provider by default, the
detection if subdomains are available is always done at runtime.
bye,
Sumit
Jan
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel