[SSSD] [PATCH] Add option to disable TLS for LDAP auth

Jeff Schroeder jeffschroeder at computer.org
Wed Jan 26 13:11:17 UTC 2011


On Wed, Jan 26, 2011 at 3:54 AM, Stephen Gallagher <sgallagh at redhat.com> wrote:
...snip...
> Ok, so now that we know we have a patch to accomplish this... we have to
> ask ourselves this question: are we willing to push this upstream, or
> should we stick to the principles we've maintained up to this point?
>
> - --
> Stephen Gallagher

I actually agree with JR here. If a user is too lazy to setup ldap
certs for a specific server, they can simply set:
ldap_tls_reqcert = never

If they are too lazy to make their ldap servers support ldaps, they
shouldn't be running an ldap server. This seems most appropriate to
put the patch on bugzilla and then CLOSEDWONTFIX.

-- 
Jeff Schroeder

Don't drink and derive, alcohol and analysis don't mix.
http://www.digitalprognosis.com



More information about the sssd-devel mailing list