#50567 Strict host checking should be false
Closed: wontfix 4 years ago by firstyear. Opened 4 years ago by firstyear.

Issue Description

strict host checking in setup should be false. It's only required with GSSAPI setup's, which are not the comment installation use case. This can surprise people with unexpected install failures when they want simple deployments.

Anyone who needs strict host checks should be able to enable them, or fix the hostnames later. Freeipa should be able to set the options from their side when they pass the options to create.


FreeIPA actually sets it to False since move to 389-ds 1.4 so I think we are OK.

@abbra You ... probably should be setting it to true in FreeIPA, but maybe I think you also do your own dns checks?

Metadata Update from @firstyear:
- Custom field origin adjusted to None
- Custom field reviewstatus adjusted to None

4 years ago

We do our own DNS check, yes. But since you changed that setting to False in 2017 in FreeIPA, there was no issue reported. So I guess we are actually ok.

Metadata Update from @firstyear:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

4 years ago

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/3623

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: fixed)

3 years ago

Login to comment on this ticket.

Metadata