[SSSD] [PATCH] IPA: Default to krb5_use_fast=try

Pavel Březina pbrezina at redhat.com
Wed Feb 12 12:09:44 UTC 2014


On 02/11/2014 05:32 PM, Jakub Hrozek wrote:
> Hi,
>
> as agreed with Nathaniel, we should change the defaults of krb_use_fast
> to "try" with the IPA backend and also change the default of
> krb5_fast_principal to "host/$client_hostname".
>
> So far I've tested this patch on F-20 only with IPA server
> 3.3.90GIT0f82cbf. More testing is needed with older IPA servers as well,
> but that shouldn't block the patch review.

Nack.

You set value variable to host/$client, but you also need to set the 
krb5_fast_principal option via dp_opt_set_string(). Or am I missing 
anything?



More information about the sssd-devel mailing list