[SSSD] [PATCH] If canon'ing principals, write ccache with updated default principal

Stef Walter stefw at gnome.org
Fri May 4 19:41:18 UTC 2012


On 05/04/2012 07:01 PM, Stephen Gallagher wrote:
>> Will attach simple patch which fixes the problem. An alternate patch
>> would be to use krb5_get_init_creds_opt_set_out_ccache() instead of
>> writing the credential cache in sssd code.
> 
> Thanks for the patch! Just a few things:
> 
> Please add a comment stating the reason to use my_creds.client instead
> of kprinc so future developers don't get confused.

Done.

> Also, this change needs to be made to src/providers/krb5/krb5_child.c as
> well. From discussion on IRC, "create_ccache_file() could lose the
> krb5_principal argument and always use the one in the creds".

Updated krb5_child.c. Didn't change signature of create_ccache_file() as
its called with NULL creds sometimes.

New patch attached,

Cheers,

Stef
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-If-canon-ing-principals-write-ccache-with-updated-de.patch
Type: text/x-patch
Size: 2435 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120504/82410923/attachment.bin>


More information about the sssd-devel mailing list