[SSSD] [PATCH] Try all servers during Kerberos auth (sssd 1.2)

Stephen Gallagher sgallagh at redhat.com
Mon May 3 17:54:38 UTC 2010


On 05/03/2010 05:53 AM, Sumit Bose wrote:
> On Fri, Apr 30, 2010 at 05:36:27PM +0200, Jakub Hrozek wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> The Kerberos backend would previously try only the first server and if
>> it was unreachable, it immediatelly went offline.
>>
>> This patch was rebased on top of Sumit's tevent_req rewrite of
>> krb_auth.c on the sssd-1-2 branch.
>>
>> It also handles the case where the child times out and removes the
>> special-casing of SSS_PAM_CHAUTHTOK in krb5_resolve_kdc_done(). The
>> special casing didn't in fact have any effect as when using KDC for
>> password changes we don't distinguish between the kdc and kpasswd
>> service (they use the same "port" in terms of failover).
>
> ACK.
>

Pushed to master and sssd-1-2

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list