[SSSD] [PATCH] Chain authentication requests in all Kerberos-based providers

Jakub Hrozek jhrozek at redhat.com
Fri Jul 3 09:59:53 UTC 2015


On Fri, Jul 03, 2015 at 11:54:46AM +0200, Jakub Hrozek wrote:
> Hi,
> 
> the attached patches fix https://fedorahosted.org/sssd/ticket/2701
> 
> The first patch just adds a common function instead of copying the same
> pattern again to the new test.
> 
> The second adds a new request krb5_auth_queue_send() that wraps
> krb5_auth_send() and also uses the Kerberos authentication queue. I hope
> the unit tests cover a lot of use-cases, if not, please suggest more!
> 
> btw I was thinking that the chaining might not always be necessary if
> the ccache is of type MEMORY and I hope that the serializaton wouldn't
> be perceived as performance regression for users. Shall we say that
> Pavel's cached auth patches are a more systematic solution that doesn't
> rely on properties of the ccache type in that case?

I'm sorry, but CI fails on Debian because of wrong linking with
libraries. I'm already testing a fix. Review of the rest is appreciated
:-)



More information about the sssd-devel mailing list