[debian-edu-commits] r79931 - in branches/wheezy/debian-edu-config: debian etc/sssd

[pere at alioth.debian.org]

Author: pere
Date: 2013-05-04 20:00:59 +0000 (Sat, 04 May 2013)
New Revision: 79931

Modified:
   branches/wheezy/debian-edu-config/debian/changelog
   branches/wheezy/debian-edu-config/etc/sssd/sssd-debian-edu.conf
Log:
Switch sssd.conf to check the TLS certificate, now that it is
working as it should.

Modified: branches/wheezy/debian-edu-config/debian/changelog
===================================================================
--- branches/wheezy/debian-edu-config/debian/changelog	2013-05-04 15:00:58 UTC (rev 79930)
+++ branches/wheezy/debian-edu-config/debian/changelog	2013-05-04 20:00:59 UTC (rev 79931)
@@ -1,3 +1,11 @@
+debian-edu-config (1.704~svn79895) UNRELEASED; urgency=low
+
+  [ Petter Reinholdtsen ]
+  * Switch sssd.conf to check the TLS certificate, now that it is
+    working as it should.
+
+ -- Petter Reinholdtsen <pere at debian.org>  Sat, 04 May 2013 21:59:55 +0200
+
 debian-edu-config (1.704~svn79894) wheezy-test; urgency=low
 
   [ Petter Reinholdtsen ]

Modified: branches/wheezy/debian-edu-config/etc/sssd/sssd-debian-edu.conf
===================================================================
--- branches/wheezy/debian-edu-config/etc/sssd/sssd-debian-edu.conf	2013-05-04 15:00:58 UTC (rev 79930)
+++ branches/wheezy/debian-edu-config/etc/sssd/sssd-debian-edu.conf	2013-05-04 20:00:59 UTC (rev 79931)
@@ -24,8 +24,7 @@
 
 ldap_uri = ldap://ldap
 ldap_search_base = dc=skole,dc=skolelinux,dc=no
-; FIXME reqcert should be enabled when we figure out a way to get it working
-ldap_tls_reqcert = never
+ldap_tls_reqcert = demand
 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
 
 krb5_kdcip = kerberos