diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-24 16:10:41 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-16 18:08:52 +0200 |
| commit | 06424c5ac5ffb871476208155762bb5b73e0b665 (patch) | |
| tree | d25855e1d131caa852467a914481cb5f4e00e987 /src/providers/ipa | |
| parent | ed4a9bd4d0f7fb359bed66a8d63a92e7be633aae (diff) | |
| download | sssd-06424c5ac5ffb871476208155762bb5b73e0b665.tar.gz sssd-06424c5ac5ffb871476208155762bb5b73e0b665.tar.xz sssd-06424c5ac5ffb871476208155762bb5b73e0b665.zip | |
UTIL: Always write capaths
We used to only generate the [capaths] section on the IPA server itself,
when running in a trusted setup. But we also found out that the capaths
are often required to make SSO fully work, so it's better to always
generate them.
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'src/providers/ipa')
| -rw-r--r-- | src/providers/ipa/ipa_subdomains.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/src/providers/ipa/ipa_subdomains.c b/src/providers/ipa/ipa_subdomains.c index 0ff61cff9..bedc0f1a5 100644 --- a/src/providers/ipa/ipa_subdomains.c +++ b/src/providers/ipa/ipa_subdomains.c @@ -287,9 +287,7 @@ ipa_subdom_reinit(struct ipa_subdomains_ctx *ctx) return ret; } - ret = sss_write_domain_mappings(ctx->be_ctx->domain, - dp_opt_get_bool(ctx->id_ctx->ipa_options->basic, - IPA_SERVER_MODE)); + ret = sss_write_domain_mappings(ctx->be_ctx->domain); if (ret != EOK) { DEBUG(SSSDBG_MINOR_FAILURE, "sss_krb5_write_mappings failed.\n"); |