[Freeipa-users] SSS problems with eDirectory

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/23/2010 05:45 PM, Scott Duckworth wrote:
> On Thu, Jul 22, 2010 at 5:24 PM, Sumit Bose <sbose at redhat.com
> 
> 
>>     I can prepare a special build for you which prints the
>>     LDAP_OPT_DIAGNOSTIC_MESSAGE LDAP option and let you use wireshark. But
>>     I'm afraid this has to wait until tomorrow, it's nearly half to
>>     midnight, here.
> 
> 
>> That may be useful to others, too.  Why not put it in the production build?
> 

I have just built a scratch build in Koji containing two additional patches:

1) Print the LDAP_OPT_DIAGNOSTIC_MESSAGE as Sumit suggested. This patch
will likely go upstream, as you are correct that it is very useful.

2) Custom for you, there is a patch included that will allow you to
perform auth unencrypted, so you can examine the wire data. This patch
will NOT go upstream, since we really don't want people doing this in
the real world.

Please try the build available at
http://koji.fedoraproject.org/koji/taskinfo?taskID=2351272  (it will
only be available for about two weeks from today)

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxNj2UACgkQeiVVYja6o6MhZQCdEUKpx2R0DSA1ARLQmwqlPpyh
Rv0AoKnIfR2ZkaNziIHpvHPaZ7i3cIeR
=k+lz
-----END PGP SIGNATURE-----