On (13/02/14 19:06), Jakub Hrozek wrote:
On Wed, Feb 12, 2014 at 02:08:46PM +0100, Jakub Hrozek wrote:
> On Wed, Feb 12, 2014 at 01:09:44PM +0100, Pavel Březina wrote:
> > On 02/11/2014 05:32 PM, Jakub Hrozek wrote:
> > >Hi,
> > >
> > >as agreed with Nathaniel, we should change the defaults of krb_use_fast
> > >to "try" with the IPA backend and also change the default of
> > >krb5_fast_principal to "host/$client_hostname".
> > >
> > >So far I've tested this patch on F-20 only with IPA server
> > >3.3.90GIT0f82cbf. More testing is needed with older IPA servers as well,
> > >but that shouldn't block the patch review.
> >
> > Nack.
> >
> > You set value variable to host/$client, but you also need to set the
> > krb5_fast_principal option via dp_opt_set_string(). Or am I missing
> > anything?
>
> No, you're not missing anything, this just happens when half of the
> patch is written on a local machine and the other on a VM..and then you
> send the local version without syncing. Oh well, thanks for the catch.
>
> New patch is attached.
The patch that Pavel, Alexander and Nathaniel acked is still valid for
sssd-1-11, however, master already uses different DEBUG macros. Attached
is a patch for master only which differs only in DEBUG macro invocation.
From cce8f8256cfffa03eb887643719d08dd8e0bf0f1 Mon Sep 17 00:00:00
2001
From: Jakub Hrozek <jhrozek(a)redhat.com>
Date: Tue, 11 Feb 2014 15:36:04 +0100
Subject: [PATCH] IPA: Default to krb5_use_fast=try
---
src/providers/ipa/ipa_common.c | 27 +++++++++++++++++++++++++++
src/providers/ipa/ipa_opts.h | 2 +-
2 files changed, 28 insertions(+), 1 deletion(-)
ACK for master
LS