URL:
https://github.com/SSSD/sssd/pull/5841
Title: #5841: KCM: delete malformed 'cn=default' entries
alexey-tikhonov commented:
"""
Steps to reproduce would be nice, since it requires using kswitch.
With an old SSSD version that still writes encrypted content in secrets db:
- obtain any ticket (even one ticket is enough)
- `kswitch -c ...` to created cache (any successful execution of `kswitch` will use
`SET_DEFAULT_CACHE` KCM op and create 'cn=default,cn=$uid,cn=persistent,cn=kcm'
entry)
Then update SSSD and try `klist`:
- 2.6.0 version will fail with "[ccdb_secdb_get_default_send] (0x0040): Unexpected
UUID size ..."
- 2.6.0 + this patch will remove this entry
```
[ccdb_secdb_get_default_send] (0x0040): Unexpected UUID size 152, deleting this entry
[sss_sec_delete] (0x0400): Removing a secret from [persistent/1000/default]
```
and continue as if default isn't set (since all encrypted entries will be purged,
cache will appear empty)
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5841#issuecomment-952884928