[SSSD] [PATCH] krb5: do not send pac for IPA users from the local domain

Jakub Hrozek jhrozek at redhat.com
Tue Jun 25 12:59:35 UTC 2013


On Tue, Jun 25, 2013 at 02:28:27PM +0200, Jakub Hrozek wrote:
> On Tue, Jun 25, 2013 at 11:54:07AM +0200, Sumit Bose wrote:
> > Hi,
> > 
> > thoses two patches restore the original behaviour that the PAC for IPA
> > users is not send to the PAC responder during password authentication.
> > 
> > Fixes https://fedorahosted.org/sssd/ticket/1995
> > 
> > bye,
> > Sumit
> 
> 0001: Ack
> 0002: Ack
> 
> For patch #2 I tested IPA "native" users, password authentication as a
> trusted user and because the enterprise renewal patch must be applied on
> top of these, I also tested the AD provider with both normal and enterprise
> principals. Logins with all these types of accounts worked fine for me.

Pushed to master.



More information about the sssd-devel mailing list