On Wed, Jul 20, 2016 at 12:48:16PM +0200, Sumit Bose wrote:
> Hi,
>
> please find attached a fix for https://fedorahosted.org/sssd/ticket/3103
> which turned out to be an issue with the way SSSD generates the capaths
> section in the krb5.conf snippet.
>
> bye,
> Sumit
>
Before the patch:
[domain_realm]
.win.trust.test = WIN.TRUST.TEST
win.trust.test = WIN.TRUST.TEST
.subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
[capaths]
WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
IPA.TEST = {
WIN.TRUST.TEST = WIN.TRUST.TEST
}
SUBDOM.WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
IPA.TEST = {
SUBDOM.WIN.TRUST.TEST = WIN.TRUST.TEST
}
After the patch:
[domain_realm]
.win.trust.test = WIN.TRUST.TEST
win.trust.test = WIN.TRUST.TEST
.subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
subdom.win.trust.test = SUBDOM.WIN.TRUST.TEST
[capaths]
WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
SUBDOM.WIN.TRUST.TEST = {
IPA.TEST = WIN.TRUST.TEST
}
IPA.TEST = {
WIN.TRUST.TEST = WIN.TRUST.TEST
SUBDOM.WIN.TRUST.TEST = WIN.TRUST.TEST
}
The second form agrees with what is in man krb5.conf.
--> ACK
There are no Coverity issues found. I didn't run CI, because I have some
issues pushing into the CI repo, but only existing files were patched and
all the unit tests passed.
_______________________________________________
sssd-devel mailing list
[email protected]
https://lists.fedorahosted.org/admin/lists/[email protected]
