[SSSD] [PATCH] Do not check pwdAttribute

Stephen Gallagher sgallagh at redhat.com
Thu Jun 16 16:30:02 UTC 2011


On Thu, 2011-06-16 at 12:55 +0200, Sumit Bose wrote:
> Hi,
> 
> this patch should fix https://fedorahosted.org/sssd/ticket/896 .
> 
> Currently we expect that server side password policies are available if
> the user object has a pwdAttribute set. But recently we introduced a
> patch which let sssd only use LDAP controls which are listed in the
> supportedControl attribute of the rootDSE and OpenLDAP does not list the
> password policy control here. Since sssd does not check carefully if the
> server really returns the policy data a segfault might happen in this
> scenario.
> 
> With this patch we only assume that there are server side password
> policies if servers returns a LDAP_CONTROL_PASSWORDPOLICYRESPONSE.


Ack.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110616/4d57fe38/attachment.sig>


More information about the sssd-devel mailing list