[SSSD] [PATCH] IPA: Ignore dns_discovery_domain in server mode
Jakub Hrozek
jhrozek at redhat.com
Wed Sep 25 09:12:02 UTC 2013
Hi,
the attached patch fixes
https://fedorahosted.org/sssd/ticket/2079
I also opened https://fedorahosted.org/freeipa/ticket/3947 to stop
setting the dns_discovery_domain parameter from the IPA installer
completely.
-------------- next part --------------
>From e714f3ef180934fa92ca805384ddbf1a510051c8 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 25 Sep 2013 11:03:16 +0200
Subject: [PATCH] IPA: Ignore dns_discovery_domain in server mode
https://fedorahosted.org/sssd/ticket/2079
---
src/providers/ipa/ipa_init.c | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/src/providers/ipa/ipa_init.c b/src/providers/ipa/ipa_init.c
index a5ab881821c3d169285cb1dca7605a221b4cf604..f5e482344f405abd453bf54ed24110cebc65fb65 100644
--- a/src/providers/ipa/ipa_init.c
+++ b/src/providers/ipa/ipa_init.c
@@ -256,6 +256,18 @@ int sssm_ipa_id_init(struct be_ctx *bectx,
be_fo_set_srv_lookup_plugin(bectx, ipa_srv_plugin_send,
ipa_srv_plugin_recv, srv_ctx, "IPA");
} else if (server_mode == true) {
+ /* In server mode we need to ignore the dns_discovery_domain if set
+ * and only discover servers based on AD domains
+ */
+ ret = dp_opt_set_string(bectx->be_res->opts, DP_RES_OPT_DNS_DOMAIN,
+ NULL);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_MINOR_FAILURE, ("Could not reset the "
+ "dns_discovery_domain, trusted AD domains discovery "
+ "might fail. Please remove dns_discovery_domain "
+ "from the config file and restart the SSSD\n"));
+ }
+
ipa_servers = dp_opt_get_string(ipa_options->basic, IPA_SERVER);
if (srv_in_server_list(ipa_servers) == true) {
DEBUG(SSSDBG_MINOR_FAILURE, ("SRV resolution enabled on the IPA server. "
--
1.8.3.1
More information about the sssd-devel
mailing list