[SSSD] Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON

Stephen Gallagher sgallagh at redhat.com
Fri Aug 26 20:54:49 UTC 2011


On Fri, 2011-08-26 at 19:56 +0200, Jakub Hrozek wrote:
> On Fri, Aug 26, 2011 at 12:15:13PM -0400, Stephen Gallagher wrote:
> > On Fri, 2011-08-26 at 17:37 +0200, Jakub Hrozek wrote:
> > > https://fedorahosted.org/sssd/ticket/978
> > > 
> > > This is currently not testable on Fedora 15 due to a number of bugs
> > > (#733675, #733056). I used RHEL 6.2 to test the patch.
> > > 
> > > To test:
> > >  * change the PTR record of the IPA server to point to something else
> > >    than its hostname
> > >  * on the client, run getent passwd admin
> > > 
> > > With the unpatched version, ldap_sasl_bind() would fail with a "Local
> > > error". With the patch, which turns off canonicalization by default, the
> > > user lookup should succeed.
> > > 
> > > The patch does not apply cleanly on 1.5. I'll send a 1.5 version once
> > > this one is acked.
> > 
> > Ack, looks good (within the limitation of the third-party bugs)
> 
> Attached is a version that applies cleanly on the 1.5 branch.


Pushed to sssd-1-5.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110826/25b579d2/attachment.sig>


More information about the sssd-devel mailing list