[SSSD] [PATCH] Fix man page

Stephen Gallagher sgallagh at redhat.com
Fri Nov 19 12:38:26 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/19/2010 06:39 AM, Stephen Gallagher wrote:
> On 11/19/2010 04:44 AM, Sumit Bose wrote:
>> Hi,
> 
>> I've found a misleading statement in the man page, this patch should
>> fix it.
> 
> 
> Nack. GSSAPI does not guarantee that Kerberos is available for user
> logins. It's strongly indicative, but it WOULD be possible for an
> environment to be set up to use GSSAPI instead of certificates for
> maintaining client->LDAP connectivity, without using Kerberos for auth.
> 
> Yes, it would make more SENSE to use Kerberos for auth in this
> situation, but it's not mandatory.
> 
> Also, I was under the impression that we DID support authentication over
> GSSAPI. If that's not true, please file an enhancement bug.
> 

After discussion with Sumit on IRC, I withdraw my nack. This is
something we can add later if we actually get a request for it.

Ack to the manpage change.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkzmb8IACgkQeiVVYja6o6PoQwCfRMMzeCMbs+WfsEeHRIXpMAPU
5B0AoJ9s4zYZ7kwSdnemXONNj8rvXaAA
=nDY5
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list