[debian-edu-commits] r80559 - in branches/wheezy/debian-edu-config: debian share/debian-edu-config/tools

[pere at alioth.debian.org]

Author: pere
Date: 2013-06-13 10:19:45 +0000 (Thu, 13 Jun 2013)
New Revision: 80559

Modified:
   branches/wheezy/debian-edu-config/debian/changelog
   branches/wheezy/debian-edu-config/share/debian-edu-config/tools/sssd-generate-config
Log:
Update sssd-generate-config with the change done to sssd.conf in
version 1.704~svn79934, and generate sssd.conf with checking og
the TLS certificate, now that it is working as it should.

Modified: branches/wheezy/debian-edu-config/debian/changelog
===================================================================
--- branches/wheezy/debian-edu-config/debian/changelog	2013-06-13 09:47:31 UTC (rev 80558)
+++ branches/wheezy/debian-edu-config/debian/changelog	2013-06-13 10:19:45 UTC (rev 80559)
@@ -4,6 +4,9 @@
     mirror from ftp.skolelinux.org, ftp.debian.org and cdn.debian.net
     to http.debian.net, to pick a nearby mirror in the most efficient
     way available today.
+  * Update sssd-generate-config with the change done to sssd.conf in
+    version 1.704~svn79934, and generate sssd.conf with checking og
+    the TLS certificate, now that it is working as it should.
 
  -- Petter Reinholdtsen <pere at debian.org>  Thu, 13 Jun 2013 10:57:58 +0200
 

Modified: branches/wheezy/debian-edu-config/share/debian-edu-config/tools/sssd-generate-config
===================================================================
--- branches/wheezy/debian-edu-config/share/debian-edu-config/tools/sssd-generate-config	2013-06-13 09:47:31 UTC (rev 80558)
+++ branches/wheezy/debian-edu-config/share/debian-edu-config/tools/sssd-generate-config	2013-06-13 10:19:45 UTC (rev 80559)
@@ -130,8 +130,7 @@
 
 ldap_uri = $ldapuri
 ldap_search_base = $ldapbase
-; FIXME reqcert should be enabled when we figure out a way to get it working
-ldap_tls_reqcert = never
+ldap_tls_reqcert = demand
 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
 EOF