[SSSD] [PATCH] Add support for offline auth cache timeout

Stephen Gallagher sgallagh at redhat.com
Tue Oct 20 20:13:32 UTC 2009


On 10/20/2009 12:19 PM, Sumit Bose wrote:
> On Tue, Oct 20, 2009 at 11:15:52AM -0400, Stephen Gallagher wrote:
>> On 10/20/2009 10:37 AM, Stephen Gallagher wrote:
>>> This patch addresses: https://fedorahosted.org/sssd/ticket/60
>>>
>>> This adds a new option to the [PAM] section of the sssd.conf.
>>>
>>> It can be specified by seconds, minutes, hours or days and defines
>>> how long a user can perform offline authentications. If the user
>>> does not perform an online authentication within the timeout, they
>>> will be denied auth once the timeout passes.
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> sssd-devel mailing list
>>> sssd-devel at lists.fedorahosted.org
>>> https://fedorahosted.org/mailman/listinfo/sssd-devel
>>
>> Whoops, found a minor issue. Had the wrong option in the sssd.api.conf,
>> and I also extended the manpage to describe the timeout options better.
>>
>> -- 
>> Stephen Gallagher
>> RHCE 804006346421761
>>
> 
> NACK,
> 
> as discussed on irc I think it makes sense to check if the current
> domain isn't LOCAL and cache credential are enabled for the current
> domain before writing the last online auth time.
> 
> bye,
> Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel

Changes made as requested. Thank you for the review.

-- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 0001-Add-support-for-offline-auth-cache-timeout.patch
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20091020/c7ee01e0/attachment.ksh>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20091020/c7ee01e0/attachment.sig>


More information about the sssd-devel mailing list