|
 |
86baa9 |
From 8cdf6a3dd64d36f40a9107dad2ab2d9a470f58b5 Mon Sep 17 00:00:00 2001
|
|
|
86baa9 |
From: amitkuma <amitkuma@redhat.com>
|
|
|
86baa9 |
Date: Tue, 16 Jan 2018 17:34:08 +0530
|
|
|
86baa9 |
Subject: [PATCH] RFE: ipa client should setup openldap for GSSAPI
|
|
|
86baa9 |
|
|
|
86baa9 |
The IPA client installer currently edits /etc/openldap/ldap.conf, setting up
|
|
|
86baa9 |
the client to consume LDAP data from IPA. It currently sets:
|
|
|
86baa9 |
URI
|
|
|
86baa9 |
BASE
|
|
|
86baa9 |
TLS_CACERT
|
|
|
86baa9 |
|
|
|
86baa9 |
This PR makes ipa-client to add this AV pair:
|
|
|
86baa9 |
SASL_MECH GSSAPI
|
|
|
86baa9 |
|
|
|
86baa9 |
Resolves: https://pagure.io/freeipa/issue/7366
|
|
|
86baa9 |
Reviewed-By: Christian Heimes <cheimes@redhat.com>
|
|
|
86baa9 |
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
|
|
|
86baa9 |
Reviewed-By: Christian Heimes <cheimes@redhat.com>
|
|
|
86baa9 |
---
|
|
|
86baa9 |
ipaclient/install/client.py | 14 ++++++++++++--
|
|
|
86baa9 |
1 file changed, 12 insertions(+), 2 deletions(-)
|
|
|
86baa9 |
|
|
|
86baa9 |
diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py
|
|
|
86baa9 |
index babebfc667c5a096fb2e0238de444ffa3ce62b77..ca404ab80fd1586e7098950545a343fa6812ca39 100644
|
|
|
86baa9 |
--- a/ipaclient/install/client.py
|
|
|
86baa9 |
+++ b/ipaclient/install/client.py
|
|
|
86baa9 |
@@ -523,8 +523,12 @@ def configure_openldap_conf(fstore, cli_basedn, cli_server):
|
|
|
86baa9 |
{
|
|
|
86baa9 |
'name': 'comment',
|
|
|
86baa9 |
'type': 'comment',
|
|
|
86baa9 |
- 'value': ' URI, BASE and TLS_CACERT have been added if they '
|
|
|
86baa9 |
- 'were not set.'
|
|
|
86baa9 |
+ 'value': ' URI, BASE, TLS_CACERT and SASL_MECH'
|
|
|
86baa9 |
+ },
|
|
|
86baa9 |
+ {
|
|
|
86baa9 |
+ 'name': 'comment',
|
|
|
86baa9 |
+ 'type': 'comment',
|
|
|
86baa9 |
+ 'value': ' have been added if they were not set.'
|
|
|
86baa9 |
},
|
|
|
86baa9 |
{
|
|
|
86baa9 |
'name': 'comment',
|
|
|
86baa9 |
@@ -575,6 +579,12 @@ def configure_openldap_conf(fstore, cli_basedn, cli_server):
|
|
|
86baa9 |
'type': 'option',
|
|
|
86baa9 |
'value': paths.IPA_CA_CRT
|
|
|
86baa9 |
},
|
|
|
86baa9 |
+ {
|
|
|
86baa9 |
+ 'action': 'addifnotset',
|
|
|
86baa9 |
+ 'name': 'SASL_MECH',
|
|
|
86baa9 |
+ 'type': 'option',
|
|
|
86baa9 |
+ 'value': 'GSSAPI'
|
|
|
86baa9 |
+ },
|
|
|
86baa9 |
]
|
|
|
86baa9 |
|
|
|
86baa9 |
target_fname = paths.OPENLDAP_LDAP_CONF
|
|
|
86baa9 |
--
|
|
|
86baa9 |
2.20.1
|
|
|
86baa9 |
|