summaryrefslogtreecommitdiffstats
path: root/src/config
diff options
context:
space:
mode:
authorJan Zeleny <jzeleny@redhat.com>2011-10-19 03:27:47 -0400
committerStephen Gallagher <sgallagh@redhat.com>2011-11-02 14:10:30 -0400
commit7dfc7617085c403d30debe9f08d4c9bcca322744 (patch)
treefa23c5b6037c2178f48c938eae9d940f9d9d2646 /src/config
parent20c187339201a95558a9b237af37b461665d9340 (diff)
downloadsssd_unused-7dfc7617085c403d30debe9f08d4c9bcca322744.tar.gz
sssd_unused-7dfc7617085c403d30debe9f08d4c9bcca322744.tar.xz
sssd_unused-7dfc7617085c403d30debe9f08d4c9bcca322744.zip
Add support to request canonicalization on krb AS requests
https://fedorahosted.org/sssd/ticket/957
Diffstat (limited to 'src/config')
-rw-r--r--src/config/SSSDConfig.py1
-rwxr-xr-xsrc/config/SSSDConfigTest.py9
-rw-r--r--src/config/etc/sssd.api.d/sssd-krb5.conf1
3 files changed, 8 insertions, 3 deletions
diff --git a/src/config/SSSDConfig.py b/src/config/SSSDConfig.py
index 2d9d448c..87b1d634 100644
--- a/src/config/SSSDConfig.py
+++ b/src/config/SSSDConfig.py
@@ -120,6 +120,7 @@ option_strings = {
'krb5_renew_interval' : _("Time between two checks for renewal"),
'krb5_use_fast' : _("Enables FAST"),
'krb5_fast_principal' : _("Selects the principal to use for FAST"),
+ 'krb5_canonicalize' : _("Enables principal canonicalization"),
# [provider/krb5/chpass]
'krb5_kpasswd' : _('Server where the change password service is running if not on the KDC'),
diff --git a/src/config/SSSDConfigTest.py b/src/config/SSSDConfigTest.py
index 79c18bcf..16ddfe50 100755
--- a/src/config/SSSDConfigTest.py
+++ b/src/config/SSSDConfigTest.py
@@ -566,7 +566,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_lifetime',
'krb5_renew_interval',
'krb5_use_fast',
- 'krb5_fast_principal'])
+ 'krb5_fast_principal',
+ 'krb5_canonicalize'])
options = domain.list_options()
@@ -719,7 +720,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_lifetime',
'krb5_renew_interval',
'krb5_use_fast',
- 'krb5_fast_principal']
+ 'krb5_fast_principal',
+ 'krb5_canonicalize']
self.assertTrue(type(options) == dict,
"Options should be a dictionary")
@@ -882,7 +884,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_lifetime',
'krb5_renew_interval',
'krb5_use_fast',
- 'krb5_fast_principal'])
+ 'krb5_fast_principal',
+ 'krb5_canonicalize'])
options = domain.list_options()
diff --git a/src/config/etc/sssd.api.d/sssd-krb5.conf b/src/config/etc/sssd.api.d/sssd-krb5.conf
index 993763b6..c52df1a6 100644
--- a/src/config/etc/sssd.api.d/sssd-krb5.conf
+++ b/src/config/etc/sssd.api.d/sssd-krb5.conf
@@ -16,6 +16,7 @@ krb5_lifetime = str, None, false
krb5_renew_interval = int, None, false
krb5_use_fast = str, None, false
krb5_fast_principal = str, None, false
+krb5_canonicalize = bool, None, false
[provider/krb5/access]