On 14.01.2016 08:24, Alexander Bokovoy wrote:
On Thu, 03 Dec 2015, Simo Sorce wrote:
The first patch is preparatory and is needed in general now that we want
top allow alias and use krbCanonicalName as the canonical name when
multiple values are avilable in krbPrincipalName.

The second patch changes slightly how the interdomain trust account is
created so that the getkeytab control can generate the proper key (with
the right salt) for interop reasons with AD. The change should be
upgrade safe because keys are generate at account creation so older
accounts lacking the alias won't be a problem.

Fixes ##5495
This patchset seems to fall through cracks -- it was ACKed but not
IIRC all simo's ACKed patches which haven't been pushed depend on simo's patch 560, which has no ACK

If not then, patches need rebase, they have missing blobs

Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to