[SSSD] sssdpac_verify() treats krb5_pac_verify() error as fatal - mspac_verify() does not

Simo Sorce ssorce at redhat.com
Mon Aug 4 15:53:16 UTC 2014


On Mon, 2014-08-04 at 17:09 +0200, Jakub Hrozek wrote:
> On Mon, Aug 04, 2014 at 04:10:04PM +0200, Thomas Sondergaard wrote:
> > Your patch solves the problem. I have not tested whether it introduces other
> > problems, but my code works now with the new sssd-client installed.
> > 
> > Thanks!
> > 
> > Thomas
> 
> Alexander, Simo, OK if I commit the patch? (In other words -- looking
> for a formal ACK)

As long as we have assurance that the PAC is not saved if it fails
verification it looks ok to me.

Simo.




More information about the sssd-devel mailing list