From 416e41b55514b34519fb3b8df91cf26e3e4fca73 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Tue, 6 Aug 2013 11:10:42 +0200 Subject: [PATCH 1/4] IPA_SERVER_MODE: do not follow AD referrals As in the plain AD provider we do not want to follow referrals send by AD in the ipa_server_mode. --- src/providers/ipa/ipa_subdomains.c | 7 +++++++ 1 files changed, 7 insertions(+), 0 deletions(-) diff --git a/src/providers/ipa/ipa_subdomains.c b/src/providers/ipa/ipa_subdomains.c index 9ded995..abec644 100644 --- a/src/providers/ipa/ipa_subdomains.c +++ b/src/providers/ipa/ipa_subdomains.c @@ -127,6 +127,13 @@ ipa_ad_ctx_new(struct be_ctx *be_ctx, return ret; } + ret = dp_opt_set_bool(ad_options->id->basic, SDAP_REFERRALS, false); + if (ret != EOK) { + DEBUG(SSSDBG_OP_FAILURE, ("Cannot set ldap_referrals to false.\n")); + talloc_free(ad_options); + return ret; + } + gc_service_name = talloc_asprintf(ad_options, "%s%s", "gc_", subdom->name); if (gc_service_name == NULL) { talloc_free(ad_options); -- 1.7.7.6