[SSSD] [PATCH] AD: Fix defaults for krb5_canonicalize

Jakub Hrozek jhrozek at redhat.com
Wed Jul 18 18:28:46 UTC 2012


On Wed, Jul 18, 2012 at 02:23:31PM -0400, Stephen Gallagher wrote:
> The AD provider cannot function with canonicalization because of
> a bug in Active Directory rendering it unable to complete a
> password-change while canonicalization is enabled.
> 
> I had set the default properly in the LDAP options, but forgot to set it
> the same in the Kerberos options, resulting in unpredictable (and bad)
> behavior.
> 
> This changes both versions to specify BOOL_FALSE for the default. The
> last option on the dp_options structure is ignored for booleans, but I
> changed it to BOOL_FALSE as well, just for consistency.

Ack



More information about the sssd-devel mailing list