[SSSD] [PATCH] Try all servers during Kerberos auth (sssd 1.2)

Jakub Hrozek jhrozek at redhat.com
Fri Apr 30 15:36:27 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Kerberos backend would previously try only the first server and if
it was unreachable, it immediatelly went offline.

This patch was rebased on top of Sumit's tevent_req rewrite of
krb_auth.c on the sssd-1-2 branch.

It also handles the case where the child times out and removes the
special-casing of SSS_PAM_CHAUTHTOK in krb5_resolve_kdc_done(). The
special casing didn't in fact have any effect as when using KDC for
password changes we don't distinguish between the kdc and kpasswd
service (they use the same "port" in terms of failover).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkva+PoACgkQHsardTLnvCX0XACfWTfPs9OljR9jrQN5pnBB2rF8
BAsAoJTA/JOLnbmdldTo/3xZQgBRRs6D
=inHf
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Try-all-servers-during-Kerberos-auth.patch
Type: text/x-patch
Size: 6976 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100430/2bbaa5dc/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Try-all-servers-during-Kerberos-auth.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100430/2bbaa5dc/attachment.sig>


More information about the sssd-devel mailing list