[SSSD] [PATCH] Minor AD dyndns fixes
Jakub Hrozek
jhrozek at redhat.com
Mon May 13 15:00:55 UTC 2013
On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/11/2013 03:08 PM, Jakub Hrozek wrote:
> > Hi,
> >
> > the attached small patches fix smallish issues reported by users
> > after 1.10beta1 was released. The biggest change is enabling the
> > updates by default in the AD provider. They were disabled by
> > default (I guess to have the same settings in both IPA and AD
> > providers), but in AD it makes sense to enable the update by
> > default.
> >
> > [PATCH 1/3] Fix a typo in sssd-ad man page s/IPA/AD/
> >
> > [PATCH 2/3] Enable the AD dynamic DNS updates by default
> > https://fedorahosted.org/sssd/ticket/1915
> >
> > [PATCH 3/3] man: Clarify that AD dyndns updates are secured using
> > GSS-TSIG https://fedorahosted.org/sssd/ticket/1910
> >
> >
>
> Ack to all three.
Pushed to master.
> Additionally, can you add a patch to make a similar
> comment about GSS-TSIG in the IPA provider? It would be useful to let
> users know that it's a secure operation.
Sure, a new patch is attached.
-------------- next part --------------
>From 92cd6b019c93ff6d73891571ae2773cab41d43e0 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Mon, 13 May 2013 17:00:17 +0200
Subject: [PATCH] man: Note that IPA updates are secured with GSS-TSIG
---
src/man/sssd-ipa.5.xml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index ad8ba08613473654e8bd5bdd8ec65436bbe5a9f2..faa3579158fabb6277087cd261f37c037b185e1e 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -118,7 +118,8 @@
<para>
Optional. This option tells SSSD to automatically
update the DNS server built into FreeIPA v2 with
- the IP address of this client.
+ the IP address of this client. The update is
+ secured using GSS-TSIG.
</para>
<para>
NOTE: On older systems (such as RHEL 5), for this
--
1.8.2.1
More information about the sssd-devel
mailing list