From 763f24777fe3c9be4efe495077e7bb1feb99a3bd Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 17 Feb 2016 16:40:57 +0100 Subject: subdomains: inherit ldap_krb5_keytab If a non-default keytab is configured for the parent domain the subdomains will still use the default keytab because the alternative keytab is not inherited. As a consequence SSSD might not be able to connect to services in the subdomain because the default keytab is either not present or does not have suitable keys. Reviewed-by: Jakub Hrozek --- src/man/sssd.conf.5.xml | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/man') diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index e03580bf7..c6ed2e0ee 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -529,6 +529,10 @@ ldap_user_principal + + ldap_krb5_keytab (the value of krb5_keytab will be + used if ldap_krb5_keytab is not set explicitly) + Example: -- cgit