summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2014-08-27 17:21:26 +0200
committerJakub Hrozek <jhrozek@redhat.com>2014-10-14 11:37:27 +0200
commit7a2d5d5994ff706e57f91140eb11f6ee4730cf13 (patch)
treef6a72b031332ea7cc20fec3a0543837d67e20179
parent6c3e3b0c05ee4bb5ecede4312946de360f3855f5 (diff)
downloadsssd-7a2d5d5994ff706e57f91140eb11f6ee4730cf13.tar.gz
sssd-7a2d5d5994ff706e57f91140eb11f6ee4730cf13.tar.xz
sssd-7a2d5d5994ff706e57f91140eb11f6ee4730cf13.zip
LDAP: Fall back to functional level of Windows Server 2003
The newest functional level we branch for is currently DS_BEHAVIOR_WIN2003. Therefore (and also because extended support for Windows server 2003 ends in 2015) we can safely set the functional level to 2003 if the attribute is present but not a known value. Reviewed-by: Pavel Březina <pbrezina@redhat.com> (cherry picked from commit 0fafb51756913e78dbf523a69fc3a4ef2bac54ec)
-rw-r--r--src/providers/ldap/sdap.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/providers/ldap/sdap.c b/src/providers/ldap/sdap.c
index 900136cfc..f0c690aa9 100644
--- a/src/providers/ldap/sdap.c
+++ b/src/providers/ldap/sdap.c
@@ -1026,6 +1026,7 @@ int sdap_get_server_opts_from_rootdse(TALLOC_CTX *memctx,
DEBUG(SSSDBG_MINOR_FAILURE,
("Received invalid value for AD compatibility level. "
"Continuing without AD performance enhancements\n"));
+ opts->dc_functional_level = DS_BEHAVIOR_WIN2003;
}
} else if (ret != ENOENT) {
DEBUG(SSSDBG_MINOR_FAILURE,