[SSSD] [PATCH] Initialize Kerberos ticket renewal in the IPA provider (1.8 backport)

Jakub Hrozek jhrozek at redhat.com
Tue Oct 9 19:46:47 UTC 2012


Patch 3441d0c2d11aea0c39b009751a1898333c009674 that unified krb5 and ipa
configuration fixed the ticket https://fedorahosted.org/sssd/ticket/1526
pretty much by accident. The attached patch fixes that bug by only
adding the krb5 renewal initialization and is based on the sssd-1-8
branch.
-------------- next part --------------
>From 498445ab1fcfed04b7c2ba6fc788e2b269343296 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Tue, 9 Oct 2012 20:58:52 +0200
Subject: [PATCH] Initialize Kerberos ticket renewal in the IPA provider

Fixes
https://fedorahosted.org/sssd/ticket/1526
in the 1.8 branch
---
 src/providers/ipa/ipa_init.c | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/src/providers/ipa/ipa_init.c b/src/providers/ipa/ipa_init.c
index f02a84bfe0f9f569ce9312951c880c04c5df26b1..ce4547480b6bbd923608eee5502b8b06931aedcf 100644
--- a/src/providers/ipa/ipa_init.c
+++ b/src/providers/ipa/ipa_init.c
@@ -228,6 +228,7 @@ int sssm_ipa_auth_init(struct be_ctx *bectx,
     FILE *debug_filep;
     unsigned v;
     int ret;
+    time_t renew_intv;
 
     if (!ipa_options) {
         ret = common_ipa_init(bectx);
@@ -308,6 +309,18 @@ int sssm_ipa_auth_init(struct be_ctx *bectx,
         }
     }
 
+    renew_intv = dp_opt_get_int(krb5_auth_ctx->opts, KRB5_RENEW_INTERVAL);
+    if (renew_intv > 0) {
+        DEBUG(SSSDBG_CONF_SETTINGS,
+             ("Initializing Kerberos ticket renewal with %d second interval\n",
+              renew_intv));
+        ret = init_renew_tgt(krb5_auth_ctx, bectx, bectx->ev, renew_intv);
+        if (ret != EOK) {
+            DEBUG(SSSDBG_CRIT_FAILURE, ("init_renew_tgt failed.\n"));
+            goto done;
+        }
+    }
+
     ret = check_and_export_options(krb5_auth_ctx->opts, bectx->domain,
                                    krb5_auth_ctx);
     if (ret != EOK) {
-- 
1.7.11.4



More information about the sssd-devel mailing list