[SSSD] [PATCH] Move ccache operations to krb5_child, allow the krb5_auth code to run unprivileged

Jakub Hrozek jhrozek at redhat.com
Tue Nov 11 20:11:45 UTC 2014


On Tue, Nov 11, 2014 at 06:23:24PM +0100, Lukas Slebodnik wrote:
> On (11/11/14 13:45), Jakub Hrozek wrote:
> >On Tue, Nov 11, 2014 at 11:15:30AM +0100, Jakub Hrozek wrote:
> >> Can you give me access to a host that reproduces this crash? ccname
> >> should never be NULL with the new patches ...
> >
> >..except on access_provider=krb5...
> >
> >Thanks for catching that, new patches are attached.
> 
> There is problem with support of enterprise principals.
> authentication for such users failed.

Thanks a lot for catching that, I had no trouble logging in as a user
from a child domain, but I could reproduce the issue when I used a
completely different suffix.

I'll work on a fix.



More information about the sssd-devel mailing list