[SSSD] [PATCH] AD: Fix defaults for krb5_canonicalize

Stephen Gallagher sgallagh at redhat.com
Wed Jul 18 19:09:50 UTC 2012


On Wed, 2012-07-18 at 20:28 +0200, Jakub Hrozek wrote:
> On Wed, Jul 18, 2012 at 02:23:31PM -0400, Stephen Gallagher wrote:
> > The AD provider cannot function with canonicalization because of
> > a bug in Active Directory rendering it unable to complete a
> > password-change while canonicalization is enabled.
> > 
> > I had set the default properly in the LDAP options, but forgot to set it
> > the same in the Kerberos options, resulting in unpredictable (and bad)
> > behavior.
> > 
> > This changes both versions to specify BOOL_FALSE for the default. The
> > last option on the dp_options structure is ignored for booleans, but I
> > changed it to BOOL_FALSE as well, just for consistency.
> 
> Ack

Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120718/ecec41e3/attachment.sig>


More information about the sssd-devel mailing list