[SSSD] [PATCH] Use new MIT krb5 API for better password expiration warnings

Stephen Gallagher sgallagh at redhat.com
Thu Sep 23 17:22:39 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/23/2010 08:13 AM, Stephen Gallagher wrote:
> On 09/10/2010 09:38 AM, Sumit Bose wrote:
>> Hi,
> 
>> currently we can only present a warning message which in generated
>> inside the MIT Kerberos library to the user if the password is about to
>> expire. But the developers of MIT Kerberos were so nice to add a new API
>> to retrieve the original timestamps
>> (http://k5wiki.kerberos.org/wiki/Projects/Password_expiration_API). It
>> is currently available in the daily development snapshots of MIT
>> Kerberos and should find its way into the 1.9 release.
> 
>> The attached patch checks if the new API is available and adds a
>> callback to read the password expiration timestamp. As mentioned on the
>> web page there is a small chance that this patch will not display the
>> time when the password expires, but the time when the account expires. I
>> think we can neglect this case.
> 
> Ack.
> 

Pushed to master.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkybjN8ACgkQeiVVYja6o6NM9QCdGqrMl6v6SSux1yWsxKTJMhl1
7jsAn24ypc7jf3i0GA5cJuFwDS9g1Hwq
=+yBJ
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list