[Freeipa-devel] [PATCH] 0174-0175 ipa-kdb fixes

[Simo Sorce]

On Wed, 21 Jan 2015 12:03:48 +0200
Alexander Bokovoy <abokovoy at redhat.com> wrote:

> Hi,
> 
> couple patches to fix Kerberos DAL driver in relation to trusts.
> 
> Patch 0174:
> Allow using CA paths defined in krb5.conf on top of what we define
> automatically for trusted domains.
> https://fedorahosted.org/freeipa/ticket/4791
> 
> Patch 0175:
> Change error code reported back to Kerberos client when a principal
> from a disabled trusted domain attempts to access resources we
> control.
> 
> The error code will help older SSSD to properly reflect error message
> in the PAM stack.
> https://fedorahosted.org/freeipa/ticket/4788
> 


They both LGTM.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York