diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2017-02-07 11:05:47 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2017-02-08 11:17:51 +0100 |
| commit | e947a871f7d3cfc4389e981a147fe10bedca0569 (patch) | |
| tree | fbbe8c7c03c6066d7b2083f5f479d3d7098a5a5e /src/python | |
| parent | a8191ce7ad5364801ad9458c3194075a7ca77b8a (diff) | |
AD: Use ad_domain to match forest root domain, not the configured domain from sssd.conf
If the sssd.conf domain name was different from the joined domain name,
but sssd was joined to the forest root, the AD subdomains code considered
sssd joined to a non-root domain and tried to discover the forest root.
This could be reproduced by joining sssd to a domain, for example
win.trust.test but calling the sssd.conf domain otherwise, for example:
[domain/addomain]
ad_domain = win.trust.test
This is/was a frequent use-case in the RHEL world, where authconfig
often names the sssd.conf domain 'default'.
Without the patch, the trusted domains were not detected.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/python')
0 files changed, 0 insertions, 0 deletions