[SSSD] [PATCHES] Fix password change for trusted AD users

Sumit Bose sbose at redhat.com
Mon Nov 19 16:53:38 UTC 2012


On Mon, Nov 19, 2012 at 03:45:06PM +0100, Jakub Hrozek wrote:
> On Wed, Nov 14, 2012 at 06:33:04PM +0100, Sumit Bose wrote:
> > On Wed, Nov 14, 2012 at 12:03:14PM -0500, Simo Sorce wrote:
> > > On Wed, 2012-11-14 at 17:27 +0100, Sumit Bose wrote:
> > > > Hi,
> > > > 
> > > > the following three patches make password changes for trusted AD users
> > > > work and fix https://fedorahosted.org/sssd/ticket/1615 . The most
> > > > important fix, disabling canonicalization for the AS-REQ for the
> > > > change
> > > > password ticket, is in the third patch. The other two fixes issues I
> > > > came across which might block password changes under specific
> > > > conditions.
> > > > 
> > > > bye,
> > > > Sumit
> > > > 
> > > > 
> > > > 
> > > > 
> > > > 
> > > > 
> > > > 
> > > > plain text
> > > > document
> > > > attachment
> > > > (0001-Just-use-the-service-name-with-krb5_get_init_creds_p.patch)
> > > 
> > > Besides the discard_const() issue this looks good
> > 
> > ok, alternative version attached.
> > 
> > bye,
> > Sumit
> 
> Hi,
> I'm still seeing some compilation warnings with these patches:
> 
> src/providers/krb5/krb5_child.c: In function ‘changepw_child’:
> src/providers/krb5/krb5_child.c:1117:41: warning: passing argument 8 of ‘krb5_get_init_creds_password’ discards ‘const’ qualifier from pointer target type [enabled by default]
> In file included from ./src/util/sss_krb5.h:30:0,
>                  from src/providers/krb5/krb5_child.c:33:
> /usr/include/krb5/krb5.h:6686:1: note: expected ‘char *’ but argument is of type ‘const char *’
> src/providers/krb5/krb5_child.c: In function ‘tgt_req_child’:
> src/providers/krb5/krb5_child.c:1269:45: warning: passing argument 8 of ‘krb5_get_init_creds_password’ discards ‘const’ qualifier from pointer target type [enabled by default]
> In file included from ./src/util/sss_krb5.h:30:0,
>                  from src/providers/krb5/krb5_child.c:33:
> /usr/include/krb5/krb5.h:6686:1: note: expected ‘char *’ but argument is of type ‘const char *’

This is what Simo requested in his comment. The fist version of the
patch with discard_const() does not show this warning.

bye,
Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list