URL:
https://github.com/SSSD/sssd/pull/700
Title: #700: LDAP: Only authenticate the auth connection if we need to look up user
information
sumit-bose commented:
"""
thank, I'm fine with the current version, so ACK in Acepted are still valid.
About "If we want to do additional hardening, we can even save the value of the
SDAP_DISABLE_AUTH_TLS variable and unless it is set to TRUE, we can even abort the
authentication if no encryption is selected." I was thinking about this as well. But
since the PR is mainly about fixing an authentication issues I think we do not want to
risk to add another failure in a different special setup and better add this functionality
in a different PR.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/700#issuecomment-441623455