[SSSD] [PATCH] krb5: do not send pac for IPA users from the local domain

Jakub Hrozek jhrozek at redhat.com
Tue Jun 25 12:28:27 UTC 2013


On Tue, Jun 25, 2013 at 11:54:07AM +0200, Sumit Bose wrote:
> Hi,
> 
> thoses two patches restore the original behaviour that the PAC for IPA
> users is not send to the PAC responder during password authentication.
> 
> Fixes https://fedorahosted.org/sssd/ticket/1995
> 
> bye,
> Sumit

0001: Ack
0002: Ack

For patch #2 I tested IPA "native" users, password authentication as a
trusted user and because the enterprise renewal patch must be applied on
top of these, I also tested the AD provider with both normal and enterprise
principals. Logins with all these types of accounts worked fine for me.



More information about the sssd-devel mailing list