[SSSD] [PATCH] IPA: Ignore dns_discovery_domain in server mode

Jakub Hrozek jhrozek at redhat.com
Wed Sep 25 09:12:02 UTC 2013


Hi,

the attached patch fixes
https://fedorahosted.org/sssd/ticket/2079


I also opened https://fedorahosted.org/freeipa/ticket/3947 to stop
setting the dns_discovery_domain parameter from the IPA installer
completely.
-------------- next part --------------
>From e714f3ef180934fa92ca805384ddbf1a510051c8 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 25 Sep 2013 11:03:16 +0200
Subject: [PATCH] IPA: Ignore dns_discovery_domain in server mode

https://fedorahosted.org/sssd/ticket/2079
---
 src/providers/ipa/ipa_init.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/providers/ipa/ipa_init.c b/src/providers/ipa/ipa_init.c
index a5ab881821c3d169285cb1dca7605a221b4cf604..f5e482344f405abd453bf54ed24110cebc65fb65 100644
--- a/src/providers/ipa/ipa_init.c
+++ b/src/providers/ipa/ipa_init.c
@@ -256,6 +256,18 @@ int sssm_ipa_id_init(struct be_ctx *bectx,
         be_fo_set_srv_lookup_plugin(bectx, ipa_srv_plugin_send,
                                     ipa_srv_plugin_recv, srv_ctx, "IPA");
     } else if (server_mode == true) {
+        /* In server mode we need to ignore the dns_discovery_domain if set
+         * and only discover servers based on AD domains
+         */
+        ret = dp_opt_set_string(bectx->be_res->opts, DP_RES_OPT_DNS_DOMAIN,
+                                NULL);
+        if (ret != EOK) {
+            DEBUG(SSSDBG_MINOR_FAILURE, ("Could not reset the "
+                  "dns_discovery_domain, trusted AD domains discovery "
+                  "might fail. Please remove dns_discovery_domain "
+                  "from the config file and restart the SSSD\n"));
+        }
+
         ipa_servers = dp_opt_get_string(ipa_options->basic, IPA_SERVER);
         if (srv_in_server_list(ipa_servers) == true) {
             DEBUG(SSSDBG_MINOR_FAILURE, ("SRV resolution enabled on the IPA server. "
-- 
1.8.3.1



More information about the sssd-devel mailing list