diff options
| author | Michal Zidek <mzidek@redhat.com> | 2012-08-09 14:38:23 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-08-09 19:54:01 +0200 |
| commit | 4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df (patch) | |
| tree | ef4fce99b810ba0de827a46248fe13b37822d4cc /src/providers/ipa/ipa_common.c | |
| parent | ceb40cb8846ff755f841466908954087f927eae7 (diff) | |
| download | sssd-4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df.tar.gz sssd-4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df.tar.xz sssd-4a1e58d85409fbb7a12ac244c3dbef8c0c1b15df.zip | |
SRV resolution for backup servers should not be permitted.
https://fedorahosted.org/sssd/ticket/1463
Diffstat (limited to 'src/providers/ipa/ipa_common.c')
| -rw-r--r-- | src/providers/ipa/ipa_common.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c index b5f6337d9..bf62fcb94 100644 --- a/src/providers/ipa/ipa_common.c +++ b/src/providers/ipa/ipa_common.c @@ -806,7 +806,7 @@ errno_t ipa_servers_init(struct be_ctx *ctx, TALLOC_CTX *tmp_ctx; char **list = NULL; char *ipa_domain; - int ret; + int ret = 0; int i; tmp_ctx = talloc_new(NULL); @@ -827,6 +827,14 @@ errno_t ipa_servers_init(struct be_ctx *ctx, talloc_steal(service, list[i]); if (be_fo_is_srv_identifier(list[i])) { + if (!primary) { + DEBUG(SSSDBG_MINOR_FAILURE, + ("Failed to add server [%s] to failover service: " + "SRV resolution only allowed for primary servers!\n", + list[i])); + continue; + } + ipa_domain = dp_opt_get_string(options->basic, IPA_DOMAIN); ret = be_fo_add_srv_server(ctx, "IPA", "ldap", ipa_domain, BE_FO_PROTO_TCP, false, NULL); |