[SSSD] [PATCH] AD: kinit with the local DC even when talking to a GC

Jakub Hrozek jhrozek at redhat.com
Wed Jun 26 21:38:38 UTC 2013


On Wed, Jun 26, 2013 at 09:44:07PM +0200, Sumit Bose wrote:
> On Wed, Jun 26, 2013 at 06:47:00PM +0200, Jakub Hrozek wrote:
> > The attached patch should fix trouble we had with SRV discovery and
> > trusts.
> > 
> > We tried to use the GC address even for kinit which gave us errors like:
> > "Realm not local to KDC while getting initial credentials".
> > 
> > This patch adds a new AD_GC service that is only used for ID lookups,
> > any sort of Kerberos operations are done against the local servers.
> 
> ACK, now even my use case where I do not join the forest root but some
> other domain in the forest is working.
> 
> bye,
> Sumit

Thank you for testing, pushed to master.



More information about the sssd-devel mailing list