diff options
| author | Michal Zidek <mzidek@redhat.com> | 2012-08-09 14:38:23 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-08-09 19:54:01 +0200 |
| commit | 4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df (patch) | |
| tree | ef4fce99b810ba0de827a46248fe13b37822d4cc /src/providers/ad | |
| parent | ceb40cb8846ff755f841466908954087f927eae7 (diff) | |
| download | sssd-4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df.tar.gz sssd-4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df.tar.bz2 sssd-4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df.zip | |
SRV resolution for backup servers should not be permitted.
https://fedorahosted.org/sssd/ticket/1463
Diffstat (limited to 'src/providers/ad')
| -rw-r--r-- | src/providers/ad/ad_common.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/src/providers/ad/ad_common.c b/src/providers/ad/ad_common.c index a4703ee7..800ef131 100644 --- a/src/providers/ad/ad_common.c +++ b/src/providers/ad/ad_common.c @@ -152,7 +152,7 @@ ad_servers_init(TALLOC_CTX *mem_ctx, bool primary) { size_t i; - errno_t ret; + errno_t ret = 0; char **list; char *ad_domain; TALLOC_CTX *tmp_ctx; @@ -172,6 +172,14 @@ ad_servers_init(TALLOC_CTX *mem_ctx, /* Add each of these servers to the failover service */ for (i = 0; list[i]; i++) { if (be_fo_is_srv_identifier(list[i])) { + if (!primary) { + DEBUG(SSSDBG_MINOR_FAILURE, + ("Failed to add server [%s] to failover service: " + "SRV resolution only allowed for primary servers!\n", + list[i])); + continue; + } + ret = be_fo_add_srv_server(bectx, AD_SERVICE_NAME, "ldap", ad_domain, BE_FO_PROTO_TCP, false, NULL); |