From 1c5028c17df9dc903a6db2712738670c3534246f Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Tue, 28 Jun 2011 14:19:51 +0200 Subject: Configure SSSD to store user password if offline. ticket 1359 --- ipa-client/ipa-install/ipa-client-install | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'ipa-client/ipa-install/ipa-client-install') diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 884dd213b..6bdeb8796 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -90,6 +90,8 @@ def parse_options(): help="The hostname of this server (FQDN). By default of nodename from uname(2) is used.") parser.add_option("", "--enable-dns-updates", dest="dns_updates", action="store_true", default=False, help="Configures the machine to attempt dns updates when the ip address changes.") + parser.add_option("--no-krb5-offline-passwords", dest="krb5_offline_passwords", action="store_false", + help="Configure SSSD not to store user password when the server is offline", default=True) options, args = parser.parse_args() safe_opts = parser.get_safe_opts(options) @@ -550,6 +552,8 @@ def configure_sssd_conf(fstore, cli_realm, cli_domain, cli_server, options): if options.dns_updates: domain.set_option('ipa_dyndns_update', True) + if options.krb5_offline_passwords: + domain.set_option('krb5_store_password_if_offline', True) domain.set_active(True) -- cgit