[SSSD] [PATCH] krb5: do not send pac for IPA users from the local domain
Jakub Hrozek
jhrozek at redhat.com
Tue Jun 25 12:59:35 UTC 2013
On Tue, Jun 25, 2013 at 02:28:27PM +0200, Jakub Hrozek wrote:
> On Tue, Jun 25, 2013 at 11:54:07AM +0200, Sumit Bose wrote:
> > Hi,
> >
> > thoses two patches restore the original behaviour that the PAC for IPA
> > users is not send to the PAC responder during password authentication.
> >
> > Fixes https://fedorahosted.org/sssd/ticket/1995
> >
> > bye,
> > Sumit
>
> 0001: Ack
> 0002: Ack
>
> For patch #2 I tested IPA "native" users, password authentication as a
> trusted user and because the enterprise renewal patch must be applied on
> top of these, I also tested the AD provider with both normal and enterprise
> principals. Logins with all these types of accounts worked fine for me.
Pushed to master.
More information about the sssd-devel
mailing list