[SSSD] [PATCH] Fix bad password caching when using automatic TGT renewal

Stephen Gallagher sgallagh at redhat.com
Thu Apr 28 17:55:46 UTC 2011


When the internal ticket renewal process runs, it has the Kerberos
credential cache saved into the 'authtok' member attribute of the PAM
data. So after it successfully renews the ticket, we're saving this
value to the cache.

We need to skip updating the cached password if it's happening during
automatic ticket renewal.

Fixes https://fedorahosted.org/sssd/ticket/856
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fix-bad-password-caching-when-using-automatic-TGT-re.patch
Type: text/x-patch
Size: 2169 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110428/346dd60b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110428/346dd60b/attachment.sig>


More information about the sssd-devel mailing list