[SSSD] sssdpac_verify() treats krb5_pac_verify() error as fatal - mspac_verify() does not

Jakub Hrozek jhrozek at redhat.com
Thu Aug 7 09:33:32 UTC 2014


On Mon, Aug 04, 2014 at 11:53:16AM -0400, Simo Sorce wrote:
> On Mon, 2014-08-04 at 17:09 +0200, Jakub Hrozek wrote:
> > On Mon, Aug 04, 2014 at 04:10:04PM +0200, Thomas Sondergaard wrote:
> > > Your patch solves the problem. I have not tested whether it introduces other
> > > problems, but my code works now with the new sssd-client installed.
> > > 
> > > Thanks!
> > > 
> > > Thomas
> > 
> > Alexander, Simo, OK if I commit the patch? (In other words -- looking
> > for a formal ACK)
> 
> As long as we have assurance that the PAC is not saved if it fails
> verification it looks ok to me.
> 
> Simo.
> 

Yes, we don't even contact the PAC responder in this case.

Pushed to master as: 6e51d44a65b15c2f0491b0a8b452caac0bc00584



More information about the sssd-devel mailing list