diff options
author | Sumit Bose <sbose@redhat.com> | 2014-11-21 18:07:10 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-25 13:28:39 +0100 |
commit | 4fa184e2c60b377fd71e0115a618bd68dc73627d (patch) | |
tree | 58e84cd4c984c579537e0451272f88d14dcfb9b9 /src/providers/ad | |
parent | eaaeaa7e00c3d4bfa792cc4d3c6770dc1e28ef0c (diff) | |
download | sssd-4fa184e2c60b377fd71e0115a618bd68dc73627d.tar.gz sssd-4fa184e2c60b377fd71e0115a618bd68dc73627d.tar.xz sssd-4fa184e2c60b377fd71e0115a618bd68dc73627d.zip |
AD/IPA: add krb5_confd_path configuration option
With this new parameter the directory where Kerberos configuration
snippets are created can be specified.
Fixes https://fedorahosted.org/sssd/ticket/2473
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/providers/ad')
-rw-r--r-- | src/providers/ad/ad_common.h | 1 | ||||
-rw-r--r-- | src/providers/ad/ad_opts.h | 1 | ||||
-rw-r--r-- | src/providers/ad/ad_subdomains.c | 8 |
3 files changed, 10 insertions, 0 deletions
diff --git a/src/providers/ad/ad_common.h b/src/providers/ad/ad_common.h index df8dcffea..b39ade40c 100644 --- a/src/providers/ad/ad_common.h +++ b/src/providers/ad/ad_common.h @@ -60,6 +60,7 @@ enum ad_basic_opt { AD_GPO_MAP_PERMIT, AD_GPO_MAP_DENY, AD_GPO_DEFAULT_RIGHT, + AD_KRB5_CONFD_PATH, AD_OPTS_BASIC /* opts counter */ }; diff --git a/src/providers/ad/ad_opts.h b/src/providers/ad/ad_opts.h index ac6006c92..c3de3d94b 100644 --- a/src/providers/ad/ad_opts.h +++ b/src/providers/ad/ad_opts.h @@ -48,6 +48,7 @@ struct dp_option ad_basic_opts[] = { { "ad_gpo_map_permit", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ad_gpo_map_deny", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ad_gpo_default_right", DP_OPT_STRING, NULL_STRING, NULL_STRING }, + { "krb5_confd_path", DP_OPT_STRING, { KRB5_MAPPING_DIR }, NULL_STRING }, DP_OPTION_TERMINATOR }; diff --git a/src/providers/ad/ad_subdomains.c b/src/providers/ad/ad_subdomains.c index bc5bc8914..3c61d1352 100644 --- a/src/providers/ad/ad_subdomains.c +++ b/src/providers/ad/ad_subdomains.c @@ -461,6 +461,14 @@ static errno_t ad_subdom_reinit(struct ad_subdomains_ctx *ctx) { errno_t ret; + ret = sss_write_krb5_conf_snippet( + dp_opt_get_string(ctx->ad_id_ctx->ad_options->basic, + AD_KRB5_CONFD_PATH)); + if (ret != EOK) { + DEBUG(SSSDBG_MINOR_FAILURE, "sss_write_krb5_conf_snippet failed.\n"); + /* Just continue */ + } + ret = sysdb_update_subdomains(ctx->be_ctx->domain); if (ret != EOK) { DEBUG(SSSDBG_OP_FAILURE, "sysdb_update_subdomains failed.\n"); |