On Fri, Apr 22, 2016 at 03:20:56PM +0200, Jakub Hrozek wrote: > On Wed, Apr 13, 2016 at 03:45:22PM +0200, Sumit Bose wrote: > > Hi, > > > > this is a bit of a follow-up patch to "subdomains: inherit > > ldap_krb5_keytab". It turned out that if the default keytab contains > > some completely unrelated keys the SASL initialization might e.g. pick a > > wrong realm name because the alternative keytab was only added later > > during the initialization. > > > > bye, > > Sumit > > > > How do I test this patch? I tried to set: > krb5_keytab = /tmp/another.keytab > which was just a copy of the ordinary host keytab, but then lookups of > users from trusted domains stopped working..
did you set 'subdomain_inherit = ldap_krb5_keytab' as well? bye, Sumit > _______________________________________________ > sssd-devel mailing list > sssd-devel@lists.fedorahosted.org > https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org _______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org
