diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-07-19 08:36:28 +0300 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-07-23 14:18:03 +0200 |
| commit | 48657b5de36a63b0c13ed5d53065871d59d8f10b (patch) | |
| tree | 61403ad977c2a0f73e1a776170fce867468a142d /src/providers/krb5/krb5_init.c | |
| parent | 1b3144586978c47506eaa39db505e6231e3b0c0a (diff) | |
| download | sssd-48657b5de36a63b0c13ed5d53065871d59d8f10b.tar.gz sssd-48657b5de36a63b0c13ed5d53065871d59d8f10b.tar.bz2 sssd-48657b5de36a63b0c13ed5d53065871d59d8f10b.zip | |
KRB5: Do not send PAC in server mode
The krb5 child contacts the PAC responder for any user except for the
IPA native users if the PAC is configured. This works fine for the
general case but the ipa_server_mode is a special one. The PAC responder
is there, but since in the server mode we should be operating as AD
provider default, the PAC shouldn't be analyzed either in this case.
Diffstat (limited to 'src/providers/krb5/krb5_init.c')
| -rw-r--r-- | src/providers/krb5/krb5_init.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/providers/krb5/krb5_init.c b/src/providers/krb5/krb5_init.c index c6ec496e..91f701a1 100644 --- a/src/providers/krb5/krb5_init.c +++ b/src/providers/krb5/krb5_init.c @@ -98,6 +98,7 @@ int sssm_krb5_auth_init(struct be_ctx *bectx, ctx->action = INIT_PW; ctx->opts = krb5_options->opts; + ctx->config_type = K5C_GENERIC; krb5_servers = dp_opt_get_string(ctx->opts, KRB5_KDC); krb5_backup_servers = dp_opt_get_string(ctx->opts, KRB5_BACKUP_KDC); |