From 05ed6a29cbd3cbec177364487a2afeade51d6546 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Fri, 31 Jul 2015 11:05:48 +0200
Subject: krb5: do not create kdcinfo file if proxy configuration exists

Resolves https://fedorahosted.org/sssd/ticket/2652

Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
---
 src/providers/krb5/krb5_common.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/providers/krb5/krb5_common.c b/src/providers/krb5/krb5_common.c
index 81d4048b6..be6c9e354 100644
--- a/src/providers/krb5/krb5_common.c
+++ b/src/providers/krb5/krb5_common.c
@@ -428,6 +428,13 @@ errno_t write_krb5info_file(const char *realm, const char *server,
         return EINVAL;
     }
 
+    if (sss_krb5_realm_has_proxy(realm)) {
+        DEBUG(SSSDBG_CONF_SETTINGS,
+              "KDC Proxy available for realm [%s], no kdcinfo file created.\n",
+              realm);
+        return EOK;
+    }
+
     if (strcmp(service, SSS_KRB5KDC_FO_SRV) == 0) {
         name_tmpl = KDCINFO_TMPL;
     } else if (strcmp(service, SSS_KRB5KPASSWD_FO_SRV) == 0) {
-- 
cgit