diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-06-26 16:23:32 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-06-26 23:37:33 +0200 |
| commit | ba95f1c434b430f0db7fddbd865af10488ecab17 (patch) | |
| tree | 09f0635b58095622e417faee4d672d27c1d04a8e /src/providers/ad/ad_common.h | |
| parent | d66195c1d8e1bc808b4e117904d149276e139b61 (diff) | |
| download | sssd-ba95f1c434b430f0db7fddbd865af10488ecab17.tar.gz sssd-ba95f1c434b430f0db7fddbd865af10488ecab17.tar.xz sssd-ba95f1c434b430f0db7fddbd865af10488ecab17.zip | |
AD: kinit with the local DC even when talking to a GC
We tried to use the GC address even for kinit which gave us errors like:
"Realm not local to KDC while getting initial credentials".
This patch adds a new AD_GC service that is only used for ID lookups,
any sort of Kerberos operations are done against the local servers.
Diffstat (limited to 'src/providers/ad/ad_common.h')
| -rw-r--r-- | src/providers/ad/ad_common.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/ad/ad_common.h b/src/providers/ad/ad_common.h index 1503059e8..500f49c78 100644 --- a/src/providers/ad/ad_common.h +++ b/src/providers/ad/ad_common.h @@ -26,7 +26,8 @@ #include "util/util.h" #include "providers/ldap/ldap_common.h" -#define AD_SERVICE_NAME "AD" +#define AD_SERVICE_NAME "AD" +#define AD_GC_SERVICE_NAME "AD_GC" /* The port the Global Catalog runs on */ #define AD_GC_PORT 3268 |