[SSSD] [PATCH] Use realm for basedn instead of IPA domain

Jakub Hrozek jhrozek at redhat.com
Thu Feb 24 11:23:05 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/23/2011 06:18 PM, Sumit Bose wrote:
> On Wed, Feb 23, 2011 at 05:59:13PM +0100, Jakub Hrozek wrote:
> On 02/23/2011 05:33 PM, Sumit Bose wrote:
>>>> On Wed, Feb 23, 2011 at 05:24:20PM +0100, Jakub Hrozek wrote:
>>>> https://fedorahosted.org/sssd/ticket/807
>>>>
>>>>> NACK, please use the "new" option from 'Add krb5_realm to the basic IPA
>>>>> options'
>>>>
>>>>> bye,
>>>>> Sumit
>>>>
> 
> See, that's what I get for not reading today's patches.
> 
> New one attached. I also explicitly set IPA_KRB5_REALM for cases where
> we use the uppercase domain as realm value so it's always available.
> 
>> Patch looks good, would you mind to add a paragraph to the man page of
>> the IPA provider which explains the special role of krb5_realm for the
>> IPA provider?
> 
>> bye,
>> Sumit

Of course. A new patch is attached. I did one more modification - the
values of SDAP_KRB5_REALM and KRB5_REALM for ipa_id and ipa_auth
respectively now default to IPA_KRB5_REALM, not IPA_DOMAIN.toupper(). It
should technically be the same, but I think the new way is more consistent.

	Jakub
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1mP5kACgkQHsardTLnvCVjigCfXS0ioFiWeSzYG051H/13Ri7r
iC4AnR9NNqcJ10gHZXNw09AgGdoYQC5R
=HOE/
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Use-realm-for-basedn-instead-of-IPA-domain.patch
Type: text/x-patch
Size: 7351 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110224/9a47745f/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Use-realm-for-basedn-instead-of-IPA-domain.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110224/9a47745f/attachment.sig>


More information about the sssd-devel mailing list