#692 krb5_kdcip still used in IPA and LDAP provider
Closed: Fixed None Opened 13 years ago by sbose.

The LDAP and IPA provider still use the krb5_kdcip option for GSSAPI.

There might be a valid use for plain IP addresses here, because the GSSAPI libraries might resolve hostnames internally which will block the whole backend. But then we should use a different failover service name and state more clearly in the man pages when this option is used and that IP address should/must be used here.

As an alternative krb5_server can be used here, too.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.5.0
priority: minor => major

Fields changed

owner: somebody => sbose

Fields changed

status: new => assigned

Fixed by 8d163c0

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => 0

Metadata Update from @sbose:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.5.0

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1734

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata