[SSSD] [PATCH] PAM: make initgroups timeout work across multiple clients

Stephen Gallagher sgallagh at redhat.com
Tue Dec 20 18:56:25 UTC 2011


On Tue, 2011-12-20 at 18:05 +0100, Jakub Hrozek wrote:
> On Tue, Dec 20, 2011 at 10:52:56AM -0500, Stephen Gallagher wrote:
> > Instead of timing out the initgroups lookup on a per-cctx basis,
> > we will maintain a hash table of recently-seen users and use this
> > instead. This will allow SSSD to handle user's logging into
> > multiple services simultaneously more graciously, as well as
> > playing nicer with SSH (which makes calls to PAM both before and
> > after a fork).
> > 
> > Fixes: https://fedorahosted.org/sssd/ticket/1063
> 
> Ack (and thanks for fixing the NULL check).

Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111220/1b4f2aac/attachment.sig>


More information about the sssd-devel mailing list