[SSSD] [PATCH] Add support for offline auth cache timeout

Sumit Bose sbose at redhat.com
Tue Oct 20 16:19:21 UTC 2009


On Tue, Oct 20, 2009 at 11:15:52AM -0400, Stephen Gallagher wrote:
> On 10/20/2009 10:37 AM, Stephen Gallagher wrote:
> > This patch addresses: https://fedorahosted.org/sssd/ticket/60
> > 
> > This adds a new option to the [PAM] section of the sssd.conf.
> > 
> > It can be specified by seconds, minutes, hours or days and defines
> > how long a user can perform offline authentications. If the user
> > does not perform an online authentication within the timeout, they
> > will be denied auth once the timeout passes.
> > 
> > 
> > 
> > 
> > _______________________________________________
> > sssd-devel mailing list
> > sssd-devel at lists.fedorahosted.org
> > https://fedorahosted.org/mailman/listinfo/sssd-devel
> 
> Whoops, found a minor issue. Had the wrong option in the sssd.api.conf,
> and I also extended the manpage to describe the timeout options better.
> 
> -- 
> Stephen Gallagher
> RHCE 804006346421761
> 

NACK,

as discussed on irc I think it makes sense to check if the current
domain isn't LOCAL and cache credential are enabled for the current
domain before writing the last online auth time.

bye,
Sumit



More information about the sssd-devel mailing list