[SSSD] [PATCH] Initialize Kerberos ticket renewal in the IPA provider (1.8 backport)
Jakub Hrozek
jhrozek at redhat.com
Tue Oct 9 19:46:47 UTC 2012
Patch 3441d0c2d11aea0c39b009751a1898333c009674 that unified krb5 and ipa
configuration fixed the ticket https://fedorahosted.org/sssd/ticket/1526
pretty much by accident. The attached patch fixes that bug by only
adding the krb5 renewal initialization and is based on the sssd-1-8
branch.
-------------- next part --------------
>From 498445ab1fcfed04b7c2ba6fc788e2b269343296 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Tue, 9 Oct 2012 20:58:52 +0200
Subject: [PATCH] Initialize Kerberos ticket renewal in the IPA provider
Fixes
https://fedorahosted.org/sssd/ticket/1526
in the 1.8 branch
---
src/providers/ipa/ipa_init.c | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/src/providers/ipa/ipa_init.c b/src/providers/ipa/ipa_init.c
index f02a84bfe0f9f569ce9312951c880c04c5df26b1..ce4547480b6bbd923608eee5502b8b06931aedcf 100644
--- a/src/providers/ipa/ipa_init.c
+++ b/src/providers/ipa/ipa_init.c
@@ -228,6 +228,7 @@ int sssm_ipa_auth_init(struct be_ctx *bectx,
FILE *debug_filep;
unsigned v;
int ret;
+ time_t renew_intv;
if (!ipa_options) {
ret = common_ipa_init(bectx);
@@ -308,6 +309,18 @@ int sssm_ipa_auth_init(struct be_ctx *bectx,
}
}
+ renew_intv = dp_opt_get_int(krb5_auth_ctx->opts, KRB5_RENEW_INTERVAL);
+ if (renew_intv > 0) {
+ DEBUG(SSSDBG_CONF_SETTINGS,
+ ("Initializing Kerberos ticket renewal with %d second interval\n",
+ renew_intv));
+ ret = init_renew_tgt(krb5_auth_ctx, bectx, bectx->ev, renew_intv);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_CRIT_FAILURE, ("init_renew_tgt failed.\n"));
+ goto done;
+ }
+ }
+
ret = check_and_export_options(krb5_auth_ctx->opts, bectx->domain,
krb5_auth_ctx);
if (ret != EOK) {
--
1.7.11.4
More information about the sssd-devel
mailing list