[SSSD] [PATCH] Fix bad password caching when using automatic TGT renewal

Stephen Gallagher sgallagh at redhat.com
Fri Apr 29 15:42:14 UTC 2011


On Fri, 2011-04-29 at 10:22 +0200, Jakub Hrozek wrote:
> On 04/28/2011 07:55 PM, Stephen Gallagher wrote:
> > When the internal ticket renewal process runs, it has the Kerberos
> > credential cache saved into the 'authtok' member attribute of the PAM
> > data. So after it successfully renews the ticket, we're saving this
> > value to the cache.
> > 
> > We need to skip updating the cached password if it's happening during
> > automatic ticket renewal.
> > 
> > Fixes https://fedorahosted.org/sssd/ticket/856
> > 
> 
> Ack

Pushed to master and sssd-1-5.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110429/3e7d4b06/attachment.sig>


More information about the sssd-devel mailing list