sysadmin question: .k5login and password login
by Jimmy Dorff
Hi Folks,
Sorry if this isn't the right list.. more of a "user" question.
With nslcd and Russ Allbery's pam_krb5 we create a ~/.k5login file with
the user's kerberos principal name and the user can console login with a
local username and krb5 password and get a krb5 ticket and everything
works swell.
I'm attempting to replicate this under sssd on Fedora 16. I see several
mentions of .k5login, but is it possible to login without a krb5 ticket
and obtain a ticket like a "normal" login.
Thanks,
Jimmy Dorff
11 years, 1 month
[PATCHES] Assorted issues discovered by Coverity
by Stephen Gallagher
All of these patches are being submitted for both master and sssd-1-8.
Patch 0001: Remove some leftover code that was unreachable
Patch 0002: Make sure to check for NULL on malloc() in pam_sss.c
Patch 0003: Avoid an uninitialized value comparison on ret in
check_cache()
Patch 0004: Add missing 'break' to two switch statements due to a bad
merge of the service and autofs megapatches.
Patch 0005: Fix two places where in_transaction wasn't being initialized
to 'false'
Patch 0006: If the dbus_message_get_args() failed, we would have been
dereferencing a NULL be_req.
Patch 0007: Check for failure in sss_packet_grow()
Patch 0008: Fix uninitialized value error in proxy provider
11 years, 1 month
[PATCH] Free memory properly during setent operations
by Jakub Hrozek
The attached two patches fix https://fedorahosted.org/sssd/ticket/1189
that was mostly manifested by ""BUG: a callback did not free its
request." during enumeration (and reading of the autofs map).
[PATCH 1/2] Remove setent structure when callback is called
The setent_remove_ref() destructor was only changing the ->head variable
local to the entry being destroyed. This doesn't work properly when the
entry is the head, the head needs to be set to NULL.
The patch also changes two unrelated places where we were using the
low-level setent_notify_done() instead of the nss-specific
nss_setent_notify_done() and removes one unused function.
[PATCH 2/2] Allocate setent structure on state, not on the client context
Inside the _send() functions that use the setent contexts, we should
allocate the setent structure on state, not on the client context. Mostly
because the callbacks attached to tevent_req should also free the setent
structures after they receive data.
The services code already does this correctly.
There's also one unrelated fix for a wrong string format variable.
11 years, 1 month