[SSSD] [PATCH] Allow new option to specify principal for FAST

Stephen Gallagher sgallagh at redhat.com
Tue Mar 29 11:32:29 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/29/2011 03:53 AM, Jan Zelený wrote:
> I'm not entirely sure if I got the feature request right but in case I didn't 
> I have already another patch prepared.
> 
> https://fedorahosted.org/sssd/ticket/700


Nack.

If we have explicitly set a principal, we should NOT fall back to NULL
on KRB5_KT_NOTFOUND.

In krb5_child_setup(), I'd rather that you send fast_principal into
krb5_parse_name() and then get the realm from krb5_principal_get_realm().



- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk2Rw00ACgkQeiVVYja6o6O6YACdEAW3qazqHNlMIFZIWrIup6zq
hKwAn0TOmMRIhR8b6rEkbRFAo7mRaZpF
=KqcU
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list