[SSSD] [PATCH] IPA: default krb5_fast_principal to host/$client@$realm

Pavel Březina pbrezina at redhat.com
Fri Feb 14 10:52:26 UTC 2014


IPA: default krb5_fast_principal to host/$client@$realm

If krb5_fast_principal is not set in sssd.conf it was set to
host/$client, KRB5 default realm was used which doesn't have to be the
same as realm used for IPA, thus authentication failed when using FAST.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-IPA-default-krb5_fast_principal-to-host-client-realm.patch
Type: text/x-patch
Size: 1764 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140214/b76d585b/attachment.bin>


More information about the sssd-devel mailing list