diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2013-09-27 12:36:59 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-10-04 10:25:31 +0200 |
| commit | a87813bf420c19a99b1a19711e63d231cd4afd86 (patch) | |
| tree | cb1c52a06603defd4e02be67d41560005cf58582 /ipalib | |
| parent | 2d6c7e3adb47787ba7c38c303fd1f528f7d52a13 (diff) | |
| download | freeipa-a87813bf420c19a99b1a19711e63d231cd4afd86.tar.gz freeipa-a87813bf420c19a99b1a19711e63d231cd4afd86.tar.xz freeipa-a87813bf420c19a99b1a19711e63d231cd4afd86.zip | |
ipaserver/dcerpc: remove use of trust account authentication
Since FreeIPA KDC supports adding MS-PAC to HTTP/ipa.server principal,
it is possible to use it when talking to the trusted AD DC.
Remove support for authenticating as trust account because it should not
really be used other than within Samba.
Diffstat (limited to 'ipalib')
| -rw-r--r-- | ipalib/plugins/trust.py | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py index 53dee918d..9ba1f562b 100644 --- a/ipalib/plugins/trust.py +++ b/ipalib/plugins/trust.py @@ -551,7 +551,6 @@ sides. None, SCOPE_SUBTREE, basedn=info_dn, - use_http=True, quiet=True) if info_list: |