[SSSD] [PATCH] Handle Krb5 password expiration warning

Stephen Gallagher sgallagh at redhat.com
Fri Apr 30 14:18:39 UTC 2010


On 04/29/2010 07:27 AM, Sumit Bose wrote:
> Sorry, the first patch had dependencies to another patch, new version
> attached.
>
> bye,
> Sumit
> On Tue, Apr 27, 2010 at 02:08:02PM +0200, Sumit Bose wrote:
>> Hi,
>>
>> this two patches add the support to display a warning to the user that
>> the Kerberos password is about to expire. The first patch just moves
>> some utility functions to a separate file to avoid linking the
>> krb5_child against libdbus.
>>
>> I the second patch a prompter function is introduced to catch the
>> warning message which is generated by libkrb5. With the current API of
>> MIT Kerberos we have to rely on this message, because the the underlying
>> AS_REPLY data is not exposed by the library. As a consequece this message
>> cannot be translated, but this is true for messages which are generated
>> to indicate why a password change failed, too. The rest of the patch
>> changes the way the response from the child is packed and unpacked to
>> allow more than one response message.
>>
>> bye,
>> Sumit
>


Patch 0001: Ack

Patch 0002: The krb5_child_done() function is in desperate need of 
comments. At minimum, there needs to be a comment describing the format 
of the received buffer. Same for the pack_response_packet().

This is wrong:
         if (msg_len > pref_len &&
             strncmp((const char *) &buf[p], CCACHE_ENV_NAME"=", 
pref_len) == 0) {

pref_len needs to be another byte longer to account for the '='. Also, a 
comment here would be fantastic.

Otherwise this looks fine.


-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list