[SSSD] [PATCH] AD: Fix defaults for krb5_canonicalize

Stephen Gallagher sgallagh at redhat.com
Wed Jul 18 18:23:31 UTC 2012


The AD provider cannot function with canonicalization because of
a bug in Active Directory rendering it unable to complete a
password-change while canonicalization is enabled.

I had set the default properly in the LDAP options, but forgot to set it
the same in the Kerberos options, resulting in unpredictable (and bad)
behavior.

This changes both versions to specify BOOL_FALSE for the default. The
last option on the dp_options structure is ignored for booleans, but I
changed it to BOOL_FALSE as well, just for consistency.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-AD-Fix-defaults-for-krb5_canonicalize.patch
Type: text/x-patch
Size: 1810 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120718/975b8906/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120718/975b8906/attachment.sig>


More information about the sssd-devel mailing list