[SSSD] [PATCH] Open the PAC socket from krb5_child before dropping root

Sumit Bose sbose at redhat.com
Wed Jan 21 09:09:11 UTC 2015


On Wed, Jan 21, 2015 at 09:51:29AM +0100, Jakub Hrozek wrote:
> Hi,
> 
> the attached patch adds a public function that opens the PAC responder
> socket. The krb5_child uses this call to open a fd towards PAC before
> becoming user so that PAC responder is contacted for users from trusted
> domains.

Patch looks good and is working as expected. Since this patch is the fix
for #2559 I wonder if you want to revive the ticket and add a link to
the commit message?

bye,
Sumit



More information about the sssd-devel mailing list