[SSSD] sssdpac_verify() treats krb5_pac_verify() error as fatal - mspac_verify() does not
Jakub Hrozek
jhrozek at redhat.com
Thu Aug 7 09:33:32 UTC 2014
On Mon, Aug 04, 2014 at 11:53:16AM -0400, Simo Sorce wrote:
> On Mon, 2014-08-04 at 17:09 +0200, Jakub Hrozek wrote:
> > On Mon, Aug 04, 2014 at 04:10:04PM +0200, Thomas Sondergaard wrote:
> > > Your patch solves the problem. I have not tested whether it introduces other
> > > problems, but my code works now with the new sssd-client installed.
> > >
> > > Thanks!
> > >
> > > Thomas
> >
> > Alexander, Simo, OK if I commit the patch? (In other words -- looking
> > for a formal ACK)
>
> As long as we have assurance that the PAC is not saved if it fails
> verification it looks ok to me.
>
> Simo.
>
Yes, we don't even contact the PAC responder in this case.
Pushed to master as: 6e51d44a65b15c2f0491b0a8b452caac0bc00584
More information about the sssd-devel
mailing list