SSSD / sssd

#4007 [RFE] SSSD should use GSS-SPNEGO instead of GSSAPI when talking to AD
Closed: Fixed by pbrezina. Opened by jhrozek.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla: Bug 1707963

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
SSSD should always use GSS-SPNEGO instead of GSSAPI when talking to AD as
GSSAPI is only partially compatible, while GSS-SPNEGO is fully compatible.
SSSD should also now prefer to use GSS_SPNEGO when talking to IPA too, but
because of incompatible changes in the past that may break vs old RHEL6 IPA, so
in that case it should implement a fallback option to revert to GSSAPI or have
an option to set GSSAPI.

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1707963

Metadata Update from @thalman:
- Issue tagged with: Canditate to close

Metadata Update from @sbose:
- Issue assigned to sbose

Hi,

I removed 'Candidate to close', this ticket is about changing the default for the AD provider from GSSAPI to GSS-SPNEGO. It make sense to do this for sssd-2.3.

bye,
Sumit

Metadata Update from @sbose:
- Issue untagged with: Canditate to close
- Issue tagged with: Next milestone

PR: https://github.com/SSSD/sssd/pull/1033

Metadata Update from @sbose:
- Custom field patch adjusted to on

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4978

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @pbrezina:
- Issue close_status updated to: cloned-to-github
- Issue status updated to: Closed (was: Open)

Commit dc21609f fixes this issue

Commit ac7248e8 relates to this ticket
Metadata

Next milestone

None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1707963
on
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.