[SSSD] Announcing SSSD 1.5.14

GOLLSCHEWSKY, Tim Tim.GOLLSCHEWSKY at suncorp.com.au
Fri Oct 28 05:17:51 UTC 2011


> On Thu, Oct 27, 2011 at 02:03:33PM +0200, Jakub Hrozek wrote:
> > I'm confused -- earlier you reported that ldapsearch only
> > worked when you used the -N option (=do not canonicalize).
> >
> > Passing -N to ldapsearch has the same effect as setting
> > ldap_sasl_canonicalize = false
> >
>
> I misread your earlier e-mail, you actually said that ldapsearch only
> works *without* the -N option. In that case, SSSD works as expected
> because SSSD default to "don't canonicalize", while ldapsearch defaults
> to "canonicalize".

Yes that's right, hence my confusion.

So I actually need to ENABLE this (the equivalent of NOT using -N)

  ldap_sasl_canonicalize = true

For sssd to work with the round-robin DNS name (for my ldap server).

Strange hey?

Tim.

This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related entities "Suncorp".
Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system.



More information about the sssd-devel mailing list