[SSSD] [PATCH] AD: Fix defaults for krb5_canonicalize
Jakub Hrozek
jhrozek at redhat.com
Wed Jul 18 18:28:46 UTC 2012
On Wed, Jul 18, 2012 at 02:23:31PM -0400, Stephen Gallagher wrote:
> The AD provider cannot function with canonicalization because of
> a bug in Active Directory rendering it unable to complete a
> password-change while canonicalization is enabled.
>
> I had set the default properly in the LDAP options, but forgot to set it
> the same in the Kerberos options, resulting in unpredictable (and bad)
> behavior.
>
> This changes both versions to specify BOOL_FALSE for the default. The
> last option on the dp_options structure is ignored for booleans, but I
> changed it to BOOL_FALSE as well, just for consistency.
Ack
More information about the sssd-devel
mailing list