URL:
https://github.com/SSSD/sssd/pull/5432
Author: pbrezina
Title: #5432: kcm: decode base64 encoded secret on upgrade path
Action: opened
PR body:
"""
Previous unefficient code encoded the secret multiple times:
secret -> base64 -> masterkey -> base64
To allow smooth upgrade for already existant ccache we need to also decode
the secret if it is still in the old format (type == simple). Otherwise
users are not able to log in.
Resolves:
https://github.com/SSSD/sssd/issues/5349
To test, build SSSD without recent KCM performance patches. Run SSSD,
login as a Kerberized user to create ccache and log out.
Then apply the patches, and rebuild. Make sure to restart sssd-kcm.
Try to log in - it should fail.
Apply this patch - the login should succeed.
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/5432/head:pr5432
git checkout pr5432