summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2014-08-27 17:14:07 +0200
committerJakub Hrozek <jhrozek@redhat.com>2014-09-01 13:41:51 +0200
commit9ea0969f6a9e52b7c57feb5808266b0739ee40a4 (patch)
treef380f21e80841dd617f3a427a6826e15725999b0 /src
parente6bf08648e4b808da75d220dfab8d17a2352ca02 (diff)
downloadsssd-9ea0969f6a9e52b7c57feb5808266b0739ee40a4.tar.gz
sssd-9ea0969f6a9e52b7c57feb5808266b0739ee40a4.tar.xz
sssd-9ea0969f6a9e52b7c57feb5808266b0739ee40a4.zip
LDAP: Add Windows Server 2012 R2 functional level
https://fedorahosted.org/sssd/ticket/2418 According to http://msdn.microsoft.com/en-us/library/cc223272.aspx a Windows Server 2012 R2 has a functional level set to '6'. We need to support that value in order for tokenGroups to be functional. For more information on the functional levels, please refer to: http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels%28v=ws.10%29.aspx Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src')
-rw-r--r--src/providers/ldap/sdap.c1
-rw-r--r--src/providers/ldap/sdap.h3
2 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ldap/sdap.c b/src/providers/ldap/sdap.c
index 9231cc2b0..56faf5123 100644
--- a/src/providers/ldap/sdap.c
+++ b/src/providers/ldap/sdap.c
@@ -1187,6 +1187,7 @@ int sdap_get_server_opts_from_rootdse(TALLOC_CTX *memctx,
case DS_BEHAVIOR_WIN2008:
case DS_BEHAVIOR_WIN2008R2:
case DS_BEHAVIOR_WIN2012:
+ case DS_BEHAVIOR_WIN2012R2:
opts->dc_functional_level = dc_level;
DEBUG(SSSDBG_CONF_SETTINGS,
"Setting AD compatibility level to [%d]\n",
diff --git a/src/providers/ldap/sdap.h b/src/providers/ldap/sdap.h
index da1471c2f..41063149f 100644
--- a/src/providers/ldap/sdap.h
+++ b/src/providers/ldap/sdap.h
@@ -377,7 +377,8 @@ enum dc_functional_level {
DS_BEHAVIOR_WIN2003 = 2,
DS_BEHAVIOR_WIN2008 = 3,
DS_BEHAVIOR_WIN2008R2 = 4,
- DS_BEHAVIOR_WIN2012 = 5
+ DS_BEHAVIOR_WIN2012 = 5,
+ DS_BEHAVIOR_WIN2012R2 = 6
};
struct sdap_domain {