diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2014-11-24 15:07:49 +0200 |
|---|---|---|
| committer | Tomas Babej <tbabej@redhat.com> | 2014-11-25 12:23:17 +0100 |
| commit | ed3dddab870563b398400b05af3d945e8fc2ec9d (patch) | |
| tree | 117d7b0e6a769d305fb7167dbd67fd0563b142f5 /ipapython/py_default_encoding | |
| parent | d55936756d9593bb1c713dc4c1edd251a112c619 (diff) | |
| download | freeipa-ed3dddab870563b398400b05af3d945e8fc2ec9d.tar.gz freeipa-ed3dddab870563b398400b05af3d945e8fc2ec9d.tar.xz freeipa-ed3dddab870563b398400b05af3d945e8fc2ec9d.zip | |
AD trust: improve trust validation
Trust validation requires AD DC to contact IPA server to verify that trust account
actually works. It can fail due to DNS or firewall issue or if AD DC was able to
resolve IPA master(s) via SRV records, it still may contact a replica that has
no trust data replicated yet.
In case AD DC still returns 'access denied', wait 5 seconds and try validation again.
Repeat validation until we hit a limit of 10 attempts, at which point raise
exception telling what's happening.
https://fedorahosted.org/freeipa/ticket/4764
Reviewed-By: Tomas Babej <tbabej@redhat.com>
Diffstat (limited to 'ipapython/py_default_encoding')
0 files changed, 0 insertions, 0 deletions