[SSSD] [PATCH] Do not call nspr_nss_cleanup() in sss_password_decrypt()

Stephen Gallagher sgallagh at redhat.com
Thu Jan 6 19:38:38 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/06/2011 07:22 AM, Sumit Bose wrote:
>> This new patch converts the obfuscated password at startup and replaces
>> it with the cleartext version in the option array. This should fix
>> https://fedorahosted.org/sssd/ticket/761 and
>> https://fedorahosted.org/sssd/ticket/762
> 
>> Would you mind filing a new ticket to create some common routines to
>> handle the Linux kernel keyring which can be used here and for deferred
>> authentication? (I have to admit that I think it doesn't make much sense
>> to use the kernel keyring here. Because I think the default LDAP
>> password is more a config option than a password which should kept
>> secret.)

Ack. Also, given more thought, I agree with you that we probably don't
need to use the keyring here.


- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0mGj4ACgkQeiVVYja6o6N0IgCgmXaOEMwHX/5T+G2cFNn8t+fy
k7oAn20v1MOq2TttzWVvu2nYOTSMzazs
=YaGa
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list