[SSSD] [PATCH] Add krb5_kadmin option

Stephen Gallagher sgallagh at redhat.com
Thu Mar 11 12:19:13 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/10/2010 11:18 AM, Sumit Bose wrote:
> Hi,
> 
> this is an attempt to fix bz#571896 aka trac#415. A new parameter
> krb5_kadmin is introduced together with a new failover service in the
> Kerberos provider. If the change password service is not available the
> backend is not switched to offline mode unless authentication isn't
> possible too.
> 
> I haven't add to option to the IPA provider, because I think here the
> kpasswd always runs together with the KDC.
> 
> bye,
> Sumit
> 

To sum up a conversation we had on IRC yesterday:

Nack, please use krb5_kpasswd instead of krb5_kadmin.

Additionally, this patch brought to mind that we need to handle
non-standard ports for both krb5_kdcip and krb5_kpasswd.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEUEARECAAYFAkuY38EACgkQeiVVYja6o6N98gCfR3Kjk0OlFHq9bHLJMVgJD8Vy
ZbkAmIYbb3T1Cjl80YQEjTfTRJtXe1w=
=+ZZP
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list