mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Set BIND to use ldapi and use fake mname
The fake_mname for now doesn't exists but is a feature that will be added in the near future. Since any unknown arguments to bind-dyndb-ldap are ignored, we are safe to use it now.
This commit is contained in:
committed by
Rob Crittenden
parent
d53df67c95
commit
d6ca88f331
@@ -32,8 +32,9 @@ include "/etc/named.rfc1912.zones";
|
||||
|
||||
dynamic-db "ipa" {
|
||||
library "ldap.so";
|
||||
arg "uri ldap://$FQDN";
|
||||
arg "uri ldapi://%2fvar%2frun%2fslapd-$SERVER_ID.socket";
|
||||
arg "base cn=dns, $SUFFIX";
|
||||
arg "fake_mname $FQDN";
|
||||
arg "auth_method sasl";
|
||||
arg "sasl_mech GSSAPI";
|
||||
arg "sasl_user DNS/$FQDN";
|
||||
|
||||
Reference in New Issue
Block a user