set SASL_NOCANON to on by default

Resolves: #949864
2013-04-09 13:43:45 +02:00 · 2013-04-09 13:43:45 +02:00 · 50ba1f03e9
commit 50ba1f03e9
parent a5ba090a01
2 changed files with 4 additions and 0 deletions
--- a/ldap.conf
+++ b/ldap.conf
@ -13,3 +13,6 @@
 #DEREF		never

 TLS_CACERTDIR	/etc/openldap/certs
+
+# Turning this off breaks GSSAPI used with krb5 when rdns = false
+SASL_NOCANON	on
--- a/openldap.spec
+++ b/openldap.spec
@ -599,6 +599,7 @@ exit 0
 %changelog
 * Tue Apr 09 2013 Jan Synáček <jsynacek@redhat.com> 2.4.35-3
 - fix: minor documentation fixes
+- set SASL_NOCANON to on by default (#949864)

 * Fri Apr 05 2013 Jan Synáček <jsynacek@redhat.com> 2.4.35-2
 - drop the evolution patch