[SSSD] [PATCH] Minor AD dyndns fixes

Jakub Hrozek jhrozek at redhat.com
Mon May 13 15:00:55 UTC 2013


On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 05/11/2013 03:08 PM, Jakub Hrozek wrote:
> > Hi,
> > 
> > the attached small patches fix smallish issues reported by users 
> > after 1.10beta1 was released. The biggest change is enabling the 
> > updates by default in the AD provider. They were disabled by 
> > default (I guess to have the same settings in both IPA and AD 
> > providers), but in AD it makes sense to enable the update by 
> > default.
> > 
> > [PATCH 1/3] Fix a typo in sssd-ad man page s/IPA/AD/
> > 
> > [PATCH 2/3] Enable the AD dynamic DNS updates by default 
> > https://fedorahosted.org/sssd/ticket/1915
> > 
> > [PATCH 3/3] man: Clarify that AD dyndns updates are secured using 
> > GSS-TSIG https://fedorahosted.org/sssd/ticket/1910
> > 
> > 
> 
> Ack to all three.

Pushed to master.

> Additionally, can you add a patch to make a similar
> comment about GSS-TSIG in the IPA provider? It would be useful to let
> users know that it's a secure operation.

Sure, a new patch is attached.
-------------- next part --------------
>From 92cd6b019c93ff6d73891571ae2773cab41d43e0 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Mon, 13 May 2013 17:00:17 +0200
Subject: [PATCH] man: Note that IPA updates are secured with GSS-TSIG

---
 src/man/sssd-ipa.5.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index ad8ba08613473654e8bd5bdd8ec65436bbe5a9f2..faa3579158fabb6277087cd261f37c037b185e1e 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -118,7 +118,8 @@
                         <para>
                             Optional. This option tells SSSD to automatically
                             update the DNS server built into FreeIPA v2 with
-                            the IP address of this client.
+                            the IP address of this client. The update is
+                            secured using GSS-TSIG.
                         </para>
                         <para>
                             NOTE: On older systems (such as RHEL 5), for this
-- 
1.8.2.1



More information about the sssd-devel mailing list