diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2015-08-10 12:40:39 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-08-17 13:21:46 +0200 |
| commit | 4d400c7374e0ca6af7c8f990e27c1e58a18ad7d4 (patch) | |
| tree | 342f1edf24869c8e5657d72ce9037d8da3b6ac5e | |
| parent | 1d42e3c3a4f9536ee3539683a810c95314fd1c5d (diff) | |
| download | sssd-4d400c7374e0ca6af7c8f990e27c1e58a18ad7d4.tar.gz sssd-4d400c7374e0ca6af7c8f990e27c1e58a18ad7d4.tar.xz sssd-4d400c7374e0ca6af7c8f990e27c1e58a18ad7d4.zip | |
IPA: Change the default of ldap_user_certificate to userCertificate;binary
This is safe from ldb point of view, because ldb gurantees the data is
NULL-terminated. We must be careful before we save the data, though.
Resolves:
https://fedorahosted.org/sssd/ticket/2742
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 2 | ||||
| -rw-r--r-- | src/providers/ipa/ipa_opts.h | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index 9ac175f8d..49e84560f 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -821,7 +821,7 @@ certificate of the user. </para> <para> - Default: no set in the general case, userCertificate + Default: no set in the general case, userCertificate;binary for IPA </para> </listitem> diff --git a/src/providers/ipa/ipa_opts.h b/src/providers/ipa/ipa_opts.h index 9576228d1..f6c40dddb 100644 --- a/src/providers/ipa/ipa_opts.h +++ b/src/providers/ipa/ipa_opts.h @@ -204,7 +204,7 @@ struct sdap_attr_map ipa_user_map[] = { { "ldap_user_nds_login_allowed_time_map", "loginAllowedTimeMap", SYSDB_NDS_LOGIN_ALLOWED_TIME_MAP, NULL }, { "ldap_user_ssh_public_key", "ipaSshPubKey", SYSDB_SSH_PUBKEY, NULL }, { "ldap_user_auth_type", "ipaUserAuthType", SYSDB_AUTH_TYPE, NULL }, - { "ldap_user_certificate", "userCertificate", SYSDB_USER_CERT, NULL }, + { "ldap_user_certificate", "userCertificate;binary", SYSDB_USER_CERT, NULL }, SDAP_ATTR_MAP_TERMINATOR }; |