From accb48919654049ec51a864b89ac2a99cb40b5d2 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Fri, 31 Jul 2015 11:06:54 +0200 Subject: [PATCH 3/3] krb5: assume online state if KDC proxy is configured If a KDC proxy is configured a request in the KRB5 provider will assume online state even if the backend is offline without changing the state of the backend. Resolves https://fedorahosted.org/sssd/ticket/2700 --- src/providers/krb5/krb5_auth.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c index 1c55ec3fca15db9ea717e590c5743f8365ec8c0d..d35df13994a3e16feff90592bec16d7a8f30b70a 100644 --- a/src/providers/krb5/krb5_auth.c +++ b/src/providers/krb5/krb5_auth.c @@ -754,6 +754,12 @@ static void krb5_auth_resolve_done(struct tevent_req *subreq) kr->is_offline = be_is_offline(state->be_ctx); } + if (kr->is_offline + && sss_krb5_realm_has_proxy(dp_opt_get_cstring(kr->krb5_ctx->opts, + KRB5_REALM))) { + kr->is_offline = false; + } + subreq = handle_child_send(state, state->ev, kr); if (subreq == NULL) { DEBUG(SSSDBG_CRIT_FAILURE, "handle_child_send failed.\n"); -- 2.1.0