Blame SOURCES/0001-tools-disable-SSSD-s-locator-plugin.patch
|
 |
ebcf82 |
From 50d580c58dab5928cadfc6ca82aedccee58eaced Mon Sep 17 00:00:00 2001
|
|
|
ebcf82 |
From: Sumit Bose <sbose@redhat.com>
|
|
|
ebcf82 |
Date: Fri, 5 Jun 2020 17:28:28 +0200
|
|
|
ebcf82 |
Subject: [PATCH] tools: disable SSSD's locator plugin
|
|
|
ebcf82 |
|
|
|
ebcf82 |
MIT's libkrb5 checks available locator plugins first before checking the
|
|
|
ebcf82 |
config file. This might cause issues when the locator plugin returns a
|
|
|
ebcf82 |
different DC than the one used for the LDAP connection if some data must
|
|
|
ebcf82 |
be replicated.
|
|
|
ebcf82 |
|
|
|
ebcf82 |
This patch sets the SSSD_KRB5_LOCATOR_DISABLE environment variable to
|
|
|
ebcf82 |
'true' to disable SSSD's locator plugin for adcli.
|
|
|
ebcf82 |
|
|
|
ebcf82 |
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1762633
|
|
|
ebcf82 |
---
|
|
|
ebcf82 |
tools/tools.c | 2 ++
|
|
|
ebcf82 |
1 file changed, 2 insertions(+)
|
|
|
ebcf82 |
|
|
|
ebcf82 |
diff --git a/tools/tools.c b/tools/tools.c
|
|
|
ebcf82 |
index 9d422f2..1b6d879 100644
|
|
|
ebcf82 |
--- a/tools/tools.c
|
|
|
ebcf82 |
+++ b/tools/tools.c
|
|
|
ebcf82 |
@@ -296,6 +296,7 @@ cleanup_krb5_conf_directory (void)
|
|
|
ebcf82 |
}
|
|
|
ebcf82 |
|
|
|
ebcf82 |
unsetenv ("KRB5_CONFIG");
|
|
|
ebcf82 |
+ unsetenv ("SSSD_KRB5_LOCATOR_DISABLE");
|
|
|
ebcf82 |
}
|
|
|
ebcf82 |
|
|
|
ebcf82 |
static void
|
|
|
ebcf82 |
@@ -394,6 +395,7 @@ setup_krb5_conf_directory (adcli_conn *conn)
|
|
|
ebcf82 |
adcli_krb5_conf_filename = filename;
|
|
|
ebcf82 |
adcli_krb5_d_directory = snippets;
|
|
|
ebcf82 |
setenv ("KRB5_CONFIG", adcli_krb5_conf_filename, 1);
|
|
|
ebcf82 |
+ setenv ("SSSD_KRB5_LOCATOR_DISABLE", "true", 1);
|
|
|
ebcf82 |
|
|
|
ebcf82 |
} else {
|
|
|
ebcf82 |
free (filename);
|
|
|
ebcf82 |
--
|
|
|
ebcf82 |
2.26.2
|
|
|
ebcf82 |
|