[SSSD] [PATCH] Allow krb5_realm to override ipa_domain

Stephen Gallagher sgallagh at redhat.com
Mon Feb 21 19:04:52 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/21/2011 11:45 AM, Stephen Gallagher wrote:
> On 02/21/2011 11:34 AM, Stephen Gallagher wrote:
>> It is possible to set up FreeIPA servers where the Kerberos realm
>> differs from the IPA domain name. We need to allow setting the
>> krb5_realm explicitly to handle this.
> 
>> Fixes https://bugzilla.redhat.com/show_bug.cgi?id=679082
> 
> 
> 
> Withdrawing this patch. I just realized it's incomplete.
> 

Un-withdrawing this patch (re-attaching for posterity).

I thought we were not honoring krb5_realm elsewhere, because we were
just doing dp_get_option(KRB5_REALM), but I discovered that
ipa_get_id_options() and ipa_get_auth_options() forcibly sets these
values to be correct.

So the only piece that was incorrect was ipa_service_init() (which only
uses the realm for writing the krb5info file.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1it1QACgkQeiVVYja6o6Nv3wCgks31OXyxAv/MrxtkOHN9r1aA
X1MAoK1o9rzXKtRw3miVh1HGCdQwc9zp
=Q3fi
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Allow-krb5_realm-to-override-ipa_domain.patch
Type: text/x-patch
Size: 4783 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110221/8bbe2c87/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Allow-krb5_realm-to-override-ipa_domain.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110221/8bbe2c87/attachment.sig>


More information about the sssd-devel mailing list