#2040 Enable ad_compat sasl option
Closed: Fixed None Opened 6 years ago by simo.

The sasl library has introduced an option to keep AD happy when SASL/GSSAPI is being used: http://git.cyrusimap.org/cyrus-sasl/commit/plugins/gssapi.c?id=cccc5a5a87a74cd434fbdf5e87c4158e21ebcf19

Take advantage of this option in the sssd_ad code.

I'll leave the ticket open for now until our weekly meeting where we decide about RHEL.

owner: somebody => simo

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12 beta

resolution: => fixed
status: new => closed

Fields changed

changelog: => This enhancement enables the SSSD to work fine in AD environments where LDAP signing is enabled on the AD side, as per https://support.microsoft.com/kb/935834
design: => N/A

Fields changed

type: defect => enhancement

Metadata Update from @simo:
- Issue assigned to simo
- Issue set to the milestone: SSSD 1.12 beta

2 years ago

Login to comment on this ticket.