[SSSD] [PATCH] Try all servers during Kerberos auth

Jakub Hrozek jhrozek at redhat.com
Fri Apr 30 15:39:53 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/28/2010 02:21 PM, Jakub Hrozek wrote:
> The Kerberos backend would previously try only the first server and if
> it was unreachable, it immediatelly went offline.

Attached is a patch rebased on top of Sumit's tevent_req rewrite of
krb5_auth.c for the master branch.

It also handles the case where the child times out and removes the
special-casing of SSS_PAM_CHAUTHTOK in krb5_resolve_kdc_done(). The
special casing didn't in fact have any effect as when using KDC for
password changes we don't distinguish between the kdc and kpasswd
service (they use the same "port" in terms of failover).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEUEARECAAYFAkva+ckACgkQHsardTLnvCXBuQCXQNmH2LKdF6JnILnZjKbCaTgL
nwCgr+rPgx2dBxuKjahd4Hskebp3zhY=
=S/FO
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Try-all-servers-during-Kerberos-auth.patch
Type: text/x-patch
Size: 6973 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100430/b75a8422/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Try-all-servers-during-Kerberos-auth.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100430/b75a8422/attachment.sig>


More information about the sssd-devel mailing list