From 7d2d1cb59d22eeed9ed62541299e96ea97006d0e Mon Sep 17 00:00:00 2001 From: Martin Kosek Date: Thu, 3 Oct 2013 15:09:02 +0200 Subject: Do not set DNS discovery domain in server mode In server mode, the discovery domain should be left unset in all cases as the DNS discovery is only driven by the AD domains. https://fedorahosted.org/freeipa/ticket/3947 --- ipa-client/ipa-install/ipa-client-install | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'ipa-client/ipa-install') diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 7e474bd59..fdfadee76 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -1097,7 +1097,8 @@ def configure_sssd_conf(fstore, cli_realm, cli_domain, cli_server, options, clie domain.add_provider('ipa', 'id') #add discovery domain if client domain different from server domain - if cli_domain != client_domain: + #do not set this config in server mode (#3947) + if not options.on_master and cli_domain != client_domain: domain.set_option('dns_discovery_domain', cli_domain) if not options.on_master: -- cgit