[SSSD] [PATCHES] Add support for multiple servers in the Kerberos locator plugin

Stephen Gallagher sgallagh at redhat.com
Tue Jul 17 17:36:26 UTC 2012


This is the first half of the work necessary to resolve
https://fedorahosted.org/sssd/ticket/941

This patch largely rewrites the Kerberos locator plugin so that it can
parse kdcinfo files containing multiple servers (one per line, with
optional port). These patches are testable by manually
editing /var/lib/sss/pubconf/kdcinfo.REALM
(or /var/lib/sss/pubconf/kpasswdinfo.REALM, as appropriate). They are
also fully backwards-compatible.

I will be working on and sending the KRB5 provider side of things after
this, but since these are ready, manually testable and
backwards-compatible, it seemed prudent to send them for review in
parallel.

Patch 0001: Convert memory allocation functions to use talloc. There's
no reason to avoid this dependency, and it will make subsequent patches
much simpler.

Patch 0002: Create a structure for holding address and port information
(with linked-list semantics)

Patch 0003: Rewrite the kdcinfo parser so that it supports multiple
entries, one per line. It ignores blank lines.

Patch 0004: Modify the sssd_krb5_locator_lookup() function to send
repeated calls to the cbfunc() callback, providing all of the
kdcinfo-specified servers as values. Clients using libkrb5 will
transparently try all of the provided servers until finding one that
works.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-LOCATOR-Convert-Kerberos-locator-to-talloc.patch
Type: text/x-patch
Size: 5930 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120717/4539195c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-LOCATOR-Create-struct-for-address-and-port.patch
Type: text/x-patch
Size: 6901 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120717/4539195c/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-LOCATOR-Support-multiple-entries-in-kdcinfo-file.patch
Type: text/x-patch
Size: 8853 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120717/4539195c/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-LOCATOR-Return-multiple-server-addresses-to-libkrb5-.patch
Type: text/x-patch
Size: 7120 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120717/4539195c/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120717/4539195c/attachment.sig>


More information about the sssd-devel mailing list