[SSSD] [PATCH] IPA: Default to krb5_use_fast=try

Jakub Hrozek jhrozek at redhat.com
Thu Feb 13 18:37:26 UTC 2014


On Thu, Feb 13, 2014 at 07:15:26PM +0100, Lukas Slebodnik wrote:
> On (13/02/14 19:06), Jakub Hrozek wrote:
> >On Wed, Feb 12, 2014 at 02:08:46PM +0100, Jakub Hrozek wrote:
> >> On Wed, Feb 12, 2014 at 01:09:44PM +0100, Pavel Březina wrote:
> >> > On 02/11/2014 05:32 PM, Jakub Hrozek wrote:
> >> > >Hi,
> >> > >
> >> > >as agreed with Nathaniel, we should change the defaults of krb_use_fast
> >> > >to "try" with the IPA backend and also change the default of
> >> > >krb5_fast_principal to "host/$client_hostname".
> >> > >
> >> > >So far I've tested this patch on F-20 only with IPA server
> >> > >3.3.90GIT0f82cbf. More testing is needed with older IPA servers as well,
> >> > >but that shouldn't block the patch review.
> >> > 
> >> > Nack.
> >> > 
> >> > You set value variable to host/$client, but you also need to set the
> >> > krb5_fast_principal option via dp_opt_set_string(). Or am I missing
> >> > anything?
> >> 
> >> No, you're not missing anything, this just happens when half of the
> >> patch is written on a local machine and the other on a VM..and then you
> >> send the local version without syncing. Oh well, thanks for the catch.
> >> 
> >> New patch is attached.
> >
> >The patch that Pavel, Alexander and Nathaniel acked is still valid for
> >sssd-1-11, however, master already uses different DEBUG macros. Attached
> >is a patch for master only which differs only in DEBUG macro invocation.
> 
> >From cce8f8256cfffa03eb887643719d08dd8e0bf0f1 Mon Sep 17 00:00:00 2001
> >From: Jakub Hrozek <jhrozek at redhat.com>
> >Date: Tue, 11 Feb 2014 15:36:04 +0100
> >Subject: [PATCH] IPA: Default to krb5_use_fast=try
> >
> >---
> > src/providers/ipa/ipa_common.c | 27 +++++++++++++++++++++++++++
> > src/providers/ipa/ipa_opts.h   |  2 +-
> > 2 files changed, 28 insertions(+), 1 deletion(-)
> >
> ACK for master
> 
> LS

Pushed to master.



More information about the sssd-devel mailing list