[SSSD] [PATCH] IPA: Default to krb5_use_fast=try

Lukas Slebodnik lslebodn at redhat.com
Thu Feb 13 18:15:26 UTC 2014


On (13/02/14 19:06), Jakub Hrozek wrote:
>On Wed, Feb 12, 2014 at 02:08:46PM +0100, Jakub Hrozek wrote:
>> On Wed, Feb 12, 2014 at 01:09:44PM +0100, Pavel Březina wrote:
>> > On 02/11/2014 05:32 PM, Jakub Hrozek wrote:
>> > >Hi,
>> > >
>> > >as agreed with Nathaniel, we should change the defaults of krb_use_fast
>> > >to "try" with the IPA backend and also change the default of
>> > >krb5_fast_principal to "host/$client_hostname".
>> > >
>> > >So far I've tested this patch on F-20 only with IPA server
>> > >3.3.90GIT0f82cbf. More testing is needed with older IPA servers as well,
>> > >but that shouldn't block the patch review.
>> > 
>> > Nack.
>> > 
>> > You set value variable to host/$client, but you also need to set the
>> > krb5_fast_principal option via dp_opt_set_string(). Or am I missing
>> > anything?
>> 
>> No, you're not missing anything, this just happens when half of the
>> patch is written on a local machine and the other on a VM..and then you
>> send the local version without syncing. Oh well, thanks for the catch.
>> 
>> New patch is attached.
>
>The patch that Pavel, Alexander and Nathaniel acked is still valid for
>sssd-1-11, however, master already uses different DEBUG macros. Attached
>is a patch for master only which differs only in DEBUG macro invocation.

>From cce8f8256cfffa03eb887643719d08dd8e0bf0f1 Mon Sep 17 00:00:00 2001
>From: Jakub Hrozek <jhrozek at redhat.com>
>Date: Tue, 11 Feb 2014 15:36:04 +0100
>Subject: [PATCH] IPA: Default to krb5_use_fast=try
>
>---
> src/providers/ipa/ipa_common.c | 27 +++++++++++++++++++++++++++
> src/providers/ipa/ipa_opts.h   |  2 +-
> 2 files changed, 28 insertions(+), 1 deletion(-)
>
ACK for master

LS



More information about the sssd-devel mailing list