[SSSD] [PATCHES] Fix offline authentication for the AD provider

Jakub Hrozek jhrozek at redhat.com
Sun Sep 22 15:42:34 UTC 2013


On Fri, Sep 20, 2013 at 02:08:24PM +0200, Sumit Bose wrote:
> Hi,
> 
> with the following two patches offline authentication in the AD provider
> is working again and https://fedorahosted.org/sssd/ticket/2060 should be
> fixed.
> 
> I started working on a unit test for find_or_guess_upn() but it is not
> finished yet because of the number of internal structs needed which must
> be created manually. Since the patches were working well in my tests I
> decided to send the functional part first and send the tests later.
> 
> bye,
> Sumit

Hi,

I think both patches are good. I tested offline and online auth both with
plain and enterprise principals and also deferred kinit and updating the
UPN from enterprise to plain. All cases I tested worked fine, so ACK.

I think the krb5 child just has some subtle error reporting bugs, but
they are not related to this patch and we can fix them separately.



More information about the sssd-devel mailing list