[Freeipa-devel] [PATCH] 0174-0175 ipa-kdb fixes

Sumit Bose sbose at redhat.com
Mon Feb 16 15:32:39 UTC 2015


On Mon, Jan 26, 2015 at 10:44:09AM -0500, Simo Sorce wrote:
> On Wed, 21 Jan 2015 12:03:48 +0200
> Alexander Bokovoy <abokovoy at redhat.com> wrote:
> 
> > Hi,
> > 
> > couple patches to fix Kerberos DAL driver in relation to trusts.
> > 
> > Patch 0174:
> > Allow using CA paths defined in krb5.conf on top of what we define
> > automatically for trusted domains.
> > https://fedorahosted.org/freeipa/ticket/4791
> > 
> > Patch 0175:
> > Change error code reported back to Kerberos client when a principal
> > from a disabled trusted domain attempts to access resources we
> > control.
> > 
> > The error code will help older SSSD to properly reflect error message
> > in the PAM stack.
> > https://fedorahosted.org/freeipa/ticket/4788
> > 
> 
> 
> They both LGTM.

sorry for the delay, I tested the patches some time ago, but forgot the
send the ACK, so

ACK

bye,
Sumit

> 
> Simo.
> 
> -- 
> Simo Sorce * Red Hat, Inc * New York
> 
> _______________________________________________
> Freeipa-devel mailing list
> Freeipa-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel




More information about the Freeipa-devel mailing list