[SSSD] [PATCH] Use service discovery in backends (sssd 1.2)

Sumit Bose sbose at redhat.com
Mon May 3 13:16:09 UTC 2010


On Fri, Apr 30, 2010 at 05:42:46PM +0200, Jakub Hrozek wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> This is a rebased version of the patch that applies on top of the recent
> changes that went into 1.2.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAkva+nYACgkQHsardTLnvCU0mwCeI3089fLmEpEiMyJ33MFSY/uA
> +d4AoKW2vzUrQmu/ZVZOddLrCWSXKjJH
> =/zHm
> -----END PGP SIGNATURE-----

There is a warning about 'new blank line at EOF', I think it is from
src/man/include/service_discovery.xml.

>  
> +#define SSS_LDAP_ID_SRV "ldap"
> +#define SSS_LDAP_AUTH_SRV "ldaps"
> +

the auth provider does an explicit StartTLS. So I think ldap is safe
here in both cases. But it might be useful to have an option to change
the default from "ldap" to "ldaps"?

bye,
Sumit




More information about the sssd-devel mailing list