Re: [Freeipa-devel] [PATCH] bynd-dyndb-ldap: Add separate keytab principal option

2011-01-03 Thread Adam Tkac
On Tue, Dec 21, 2010 at 08:36:17PM -0500, Simo Sorce wrote: > > Attached find a patch in the proper git format. > > Adam can you push it if you think it is ok ? I added "#include " into the ldap_helper.c to fix following warning: ldap_helper.c: In function 'new_ldap_instance': ldap_helper.c:394

Re: [Freeipa-devel] [PATCH] bynd-dyndb-ldap: Add separate keytab principal option

2010-12-21 Thread Simo Sorce
Attached find a patch in the proper git format. Adam can you push it if you think it is ok ? Thanks, Simo. On Fri, 17 Dec 2010 18:15:22 +0100 Zoran Pericic wrote: > On 12/16/2010 08:25 PM, Simo Sorce wrote: > > >> +(str_casecmp_char(ldap_inst->sasl_mech, "GSSAPI") == 0)) { > >> +

Re: [Freeipa-devel] [PATCH] bynd-dyndb-ldap: Add separate keytab principal option

2010-12-17 Thread Zoran Pericic
On 12/16/2010 08:25 PM, Simo Sorce wrote: +(str_casecmp_char(ldap_inst->sasl_mech, "GSSAPI") == 0)) { +if((ldap_inst->krb5_principal == NULL)&& +(str_len(ldap_inst->krb5_principal) == 0)) { +if((ldap_inst->sasl_user == NULL)&& +(str_len(lda

Re: [Freeipa-devel] [PATCH] bynd-dyndb-ldap: Add separate keytab principal option

2010-12-16 Thread Simo Sorce
On Thu, 16 Dec 2010 19:47:41 +0100 Zoran Pericic wrote: > This patch separate sasl_user from keytab. > > For some reason OpenLDAP refuse login if I use sasl_user. OpenLDAP > try to do proxy login which always fail. openldap clients > (ldapsearch) sends empty sasl_user for GSSAPI login. To send e

Re: [Freeipa-devel] [PATCH] bynd-dyndb-ldap: Add separate keytab principal option

2010-12-16 Thread Simo Sorce
On Thu, 16 Dec 2010 19:47:41 +0100 Zoran Pericic wrote: > This patch separate sasl_user from keytab. Any chance you can send the patch in git format using the following flags: -M -C --patience --full-index Will comment on the patches themselves separately. Simo. -- Simo Sorce * Red Hat, Inc

[Freeipa-devel] [PATCH] bynd-dyndb-ldap: Add separate keytab principal option

2010-12-16 Thread Zoran Pericic
This patch separate sasl_user from keytab. For some reason OpenLDAP refuse login if I use sasl_user. OpenLDAP try to do proxy login which always fail. openldap clients (ldapsearch) sends empty sasl_user for GSSAPI login. To send empty sasl_user we need separate option for krb5 principal so we