[SSSD] [PATCH] Fix client libs thread safety

Simo Sorce ssorce at redhat.com
Mon Nov 22 17:19:30 UTC 2010


On Mon, 22 Nov 2010 17:25:38 +0100
Sumit Bose <sbose at redhat.com> wrote:

> On Mon, Nov 22, 2010 at 09:23:01AM -0500, Simo Sorce wrote:
> > On Mon, 22 Nov 2010 10:46:02 +0100
> > Sumit Bose <sbose at redhat.com> wrote:
> > 
> > > Protecting a whole PAM task like authentication with a mutex can
> > > lead to DOS situation when a user logs into a threaded
> > > application with his username but "forgets" to enter his password
> > > immediately because the phone is ringing.
> > 
> > After discussing this point on IRC, moved the mutex to cover only
> > socket communication for the pam client.
> > 
> > New patch attached.
> 
> ACK

Pushed to master.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list