summaryrefslogtreecommitdiff
path: root/src/providers
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2012-09-21 10:06:47 -0400
committerJakub Hrozek <jhrozek@redhat.com>2012-09-24 13:05:18 +0200
commit5dedd73d90f0c1f23299f0c613f384ef902c3653 (patch)
treeebf1630ae02bb2a885daf745b4294a0355fb21c9 /src/providers
parentbb918975adc4dc26d22578f174027c0d7a1e3ed9 (diff)
downloadsssd-5dedd73d90f0c1f23299f0c613f384ef902c3653.tar.gz
sssd-5dedd73d90f0c1f23299f0c613f384ef902c3653.tar.bz2
sssd-5dedd73d90f0c1f23299f0c613f384ef902c3653.zip
AD: autorid compatibility should recommend the use of default domain
Previously, we were failing to start if ldap_idmap_autorid_compat was True but the default domain SID was unspecified. This is the recommended configuration, but it is functional without it. There is just a slight risk that the IDs will be inconsistent between machines if the first user requested is not from the default domain. https://fedorahosted.org/sssd/ticket/1530
Diffstat (limited to 'src/providers')
-rw-r--r--src/providers/ldap/sdap_idmap.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/src/providers/ldap/sdap_idmap.c b/src/providers/ldap/sdap_idmap.c
index b41958bb..94170e54 100644
--- a/src/providers/ldap/sdap_idmap.c
+++ b/src/providers/ldap/sdap_idmap.c
@@ -157,11 +157,11 @@ sdap_idmap_init(TALLOC_CTX *mem_ctx,
} else {
if (dp_opt_get_bool(idmap_ctx->id_ctx->opts->basic, SDAP_IDMAP_AUTORID_COMPAT)) {
/* In autorid compatibility mode, we MUST have a slice 0 */
- DEBUG(SSSDBG_FATAL_FAILURE,
- ("Autorid compatibility mode selected, but %s is not set\n",
+ DEBUG(SSSDBG_CRIT_FAILURE,
+ ("WARNING: Autorid compatibility mode selected, "
+ "but %s is not set. UID/GID values may differ "
+ "between clients.\n",
idmap_ctx->id_ctx->opts->basic[SDAP_IDMAP_DEFAULT_DOMAIN_SID].opt_name));
- ret = EINVAL;
- goto done;
}
/* Otherwise, we'll just fall back to hash values as they are seen */
}