URL: https://github.com/SSSD/sssd/pull/5432 Author: pbrezina Title: #5432: kcm: decode base64 encoded secret on upgrade path Action: opened
PR body: """ Previous unefficient code encoded the secret multiple times: secret -> base64 -> masterkey -> base64
To allow smooth upgrade for already existant ccache we need to also decode the secret if it is still in the old format (type == simple). Otherwise users are not able to log in.
Resolves: https://github.com/SSSD/sssd/issues/5349
To test, build SSSD without recent KCM performance patches. Run SSSD, login as a Kerberized user to create ccache and log out.
Then apply the patches, and rebuild. Make sure to restart sssd-kcm. Try to log in - it should fail.
Apply this patch - the login should succeed. """
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5432/head:pr5432 git checkout pr5432