summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2014-08-27 17:21:26 +0200
committerJakub Hrozek <jhrozek@redhat.com>2014-09-01 13:46:26 +0200
commitaaab5cd6c1ff71b520a4943e4c7d6d7ed236bc46 (patch)
tree0b0ac57f5ed2d37ba4cb1974c57d5d285a875af2
parentde4788be9b6ce457e132bf124c01ab674279703a (diff)
downloadsssd-aaab5cd6c1ff71b520a4943e4c7d6d7ed236bc46.tar.gz
sssd-aaab5cd6c1ff71b520a4943e4c7d6d7ed236bc46.tar.xz
sssd-aaab5cd6c1ff71b520a4943e4c7d6d7ed236bc46.zip
LDAP: Fall back to functional level of Windows Server 2003
The newest functional level we branch for is currently DS_BEHAVIOR_WIN2003. Therefore (and also because extended support for Windows server 2003 ends in 2015) we can safely set the functional level to 2003 if the attribute is present but not a known value. Reviewed-by: Pavel Březina <pbrezina@redhat.com> (cherry picked from commit 0fafb51756913e78dbf523a69fc3a4ef2bac54ec)
-rw-r--r--src/providers/ldap/sdap.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/ldap/sdap.c b/src/providers/ldap/sdap.c
index 4eef405ae..8ebf1ea96 100644
--- a/src/providers/ldap/sdap.c
+++ b/src/providers/ldap/sdap.c
@@ -1208,7 +1208,8 @@ int sdap_get_server_opts_from_rootdse(TALLOC_CTX *memctx,
default:
DEBUG(SSSDBG_MINOR_FAILURE,
"Received invalid value for AD compatibility level. "
- "Continuing without AD performance enhancements\n");
+ "Using the lowest-common compatibility level\n");
+ opts->dc_functional_level = DS_BEHAVIOR_WIN2003;
}
} else if (ret != ENOENT) {
DEBUG(SSSDBG_MINOR_FAILURE,