[SSSD] [PATCH] Do not check pwdAttribute

Stephen Gallagher sgallagh at redhat.com
Thu Jun 16 22:16:52 UTC 2011


On Thu, 2011-06-16 at 12:30 -0400, Stephen Gallagher wrote:
> On Thu, 2011-06-16 at 12:55 +0200, Sumit Bose wrote:
> > Hi,
> > 
> > this patch should fix https://fedorahosted.org/sssd/ticket/896 .
> > 
> > Currently we expect that server side password policies are available if
> > the user object has a pwdAttribute set. But recently we introduced a
> > patch which let sssd only use LDAP controls which are listed in the
> > supportedControl attribute of the rootDSE and OpenLDAP does not list the
> > password policy control here. Since sssd does not check carefully if the
> > server really returns the policy data a segfault might happen in this
> > scenario.
> > 
> > With this patch we only assume that there are server side password
> > policies if servers returns a LDAP_CONTROL_PASSWORDPOLICYRESPONSE.
> 
> 
> Ack.

Pushed to master and sssd-1-5.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110616/e29a9f87/attachment.sig>


More information about the sssd-devel mailing list