[PATCH] Compare the full service name
by Sumit Bose
Hi,
this patch fixes an issue discussed on the freeipa-user mailing list.
Now the service names should be compared properly.
bye,
Sumit
13 years, 10 months
[PATCH] Clean up kdcinfo and kpasswdinfo files when exiting
by Stephen Gallagher
https://fedorahosted.org/sssd/ticket/452
This patch adds a signal handler for SIGTERM that will remove the
kdcinfo.REALM and kpasswd.REALM files before exiting. I had to move the
definition of krb5_ctx into krb5_common.h so I could dereference it to
get the realm name.
I also made the sig_term() function from server.c public, so I could
chain into it once my exit handler is done (to make sure it cleans up
any krb5_child processes that might still be in-progress).
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
13 years, 10 months
[PATCH] Fix memory hierarchy in the ipa timerules
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This was found by running our test suite with MALLOC_PERTURB_ on
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkvj/e4ACgkQHsardTLnvCVINQCeKAHaqpK2W7do8+SSOw+bNcx0
7r4AoKmDp/nPtBYlkwzIn3mq9ymBdy4x
=DkZp
-----END PGP SIGNATURE-----
13 years, 10 months
[PATCH] Handle Krb5 password expiration warning
by Sumit Bose
Hi,
this two patches add the support to display a warning to the user that
the Kerberos password is about to expire. The first patch just moves
some utility functions to a separate file to avoid linking the
krb5_child against libdbus.
I the second patch a prompter function is introduced to catch the
warning message which is generated by libkrb5. With the current API of
MIT Kerberos we have to rely on this message, because the the underlying
AS_REPLY data is not exposed by the library. As a consequece this message
cannot be translated, but this is true for messages which are generated
to indicate why a password change failed, too. The rest of the patch
changes the way the response from the child is packed and unpacked to
allow more than one response message.
bye,
Sumit
13 years, 10 months
[PATCH] Use all available servers in LDAP provider
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
A similar patch as the one for the Kerberos provider - catches ETIMEDOUT
and restarts the failed request with another server.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkvfDqYACgkQHsardTLnvCXozACdGJCXxZ1xJv3NdurA6jTsqD/O
uQsAoJfKUkrw5ZYu/Zt+ipHZmDK3M4cZ
=4yUK
-----END PGP SIGNATURE-----
13 years, 10 months
[PATCH] Add a README file
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Petter Reinholdtsen pointed out that we do not include any contact
information in our tarball. This patch adds a simple README file
(inspired by the file FreeIPA carries)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkvj/+wACgkQHsardTLnvCUGPQCeLaZ6QW0oAzir2s+/Z5pa32Bi
ETIAnig/rQvL3Nv9vbeOrauUvYJG6pcO
=Zpiw
-----END PGP SIGNATURE-----
13 years, 10 months