[Freeipa-devel] [PATCH] Add kerberos mapping for clients outside the IPA domain

Martin Kosek mkosek at redhat.com
Fri Oct 21 09:32:54 UTC 2011


On Thu, 2011-10-20 at 10:26 +0200, Lars Sjöström wrote:
> Hello,
> 
> Proposed patch for bug https://fedorahosted.org/freeipa/ticket/2006
> 
> Best regards,
> Lars

Hello Lars,

thank you for your investigation of the problem and the patch!

I had to refactor the patch a little, your patch updated just the
temporary krb5.conf, not the one put permanently to /etc/krb5.conf.

I also moved DNS update before the certmonger is being configured.
Otherwise certmonger may fail because the client does not have proper
DNS record.

Patch attached.

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-154-fix-client-krb5-domain-mapping-and-dns.patch
Type: text/x-patch
Size: 4167 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20111021/03158c4b/attachment.bin>


More information about the Freeipa-devel mailing list