[SSSD] [PATCH] Allow protocol fallback for SRV queries

Jakub Hrozek jhrozek at redhat.com
Mon Nov 29 10:29:39 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/26/2010 11:59 AM, Sumit Bose wrote:
> On Thu, Nov 25, 2010 at 03:19:02PM +0100, Jakub Hrozek wrote:
> https://fedorahosted.org/sssd/ticket/691
> 
> In this version of patch, I only allowed the fallback in Kerberos where
> I also switched from TCP do UDP as the default search protocol.
> 
>> The code is working as expected. We might want to change it when other
>> protocols as tcp and udp needs to be supported, because then it might
>> not make sense to fallback back to all other supported protocols, but
>> chances are that this will never happen.
> 

As discussed on IRC with Sumit, we are probably only going to use TCP
and UDP anyway, so we're not going to over-engineer the solution.

>> But I think it is a good idea to document the changes in the man pages,
>> too. Especially the behaviour of the krb5 provider where there is a
>> fallback from udp to tcp and where the Kerberos library will always try
>> udp first independent of the result of the DNS SRV lookup.
> 

Done, new patch attached.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkzzgJMACgkQHsardTLnvCXiWwCg4sM+d/QRaDvogtjSs9FUkq6w
p/0An1P6SPttscZOk5hBf9duCfXHPcWN
=L/dQ
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Allow-protocol-fallback-for-SRV-queries.patch
Type: text/x-patch
Size: 9070 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101129/2ca04749/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Allow-protocol-fallback-for-SRV-queries.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101129/2ca04749/attachment.sig>


More information about the sssd-devel mailing list