#1381 [RFE] Support failover authentication capabilities between Kerberos and LDAP
Closed: wontfix 4 years ago by pbrezina. Opened 11 years ago by dpal.

In cases when a server like AD or IPA provides Kerberos and LDAP authentication capabilities and Kerberos is not responding provide a way to failover to the LDAP authentication.

This is really a corner case as having different domain controllers and failover between them would most likely take care of the problem if one KDC is not reachable.
However there are cases when people do not deploy sufficient amount of replicas and thus the client needs to be able to try LDAP after failing with Kerberos.


Goes straight into the deferred bucket.

milestone: NEEDS_TRIAGE => SSSD Deferred

Metadata Update from @dpal:
- Issue set to the milestone: SSSD Patches welcome

7 years ago

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2423

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata