[SSSD] [PATCH] krb5: do not send pac for IPA users from the local domain
Jakub Hrozek
jhrozek at redhat.com
Tue Jun 25 12:28:27 UTC 2013
On Tue, Jun 25, 2013 at 11:54:07AM +0200, Sumit Bose wrote:
> Hi,
>
> thoses two patches restore the original behaviour that the PAC for IPA
> users is not send to the PAC responder during password authentication.
>
> Fixes https://fedorahosted.org/sssd/ticket/1995
>
> bye,
> Sumit
0001: Ack
0002: Ack
For patch #2 I tested IPA "native" users, password authentication as a
trusted user and because the enterprise renewal patch must be applied on
top of these, I also tested the AD provider with both normal and enterprise
principals. Logins with all these types of accounts worked fine for me.
More information about the sssd-devel
mailing list