[SSSD] [PATCH] Chain authentication requests in all Kerberos-based providers
Jakub Hrozek
jhrozek at redhat.com
Fri Jul 3 09:59:53 UTC 2015
On Fri, Jul 03, 2015 at 11:54:46AM +0200, Jakub Hrozek wrote:
> Hi,
>
> the attached patches fix https://fedorahosted.org/sssd/ticket/2701
>
> The first patch just adds a common function instead of copying the same
> pattern again to the new test.
>
> The second adds a new request krb5_auth_queue_send() that wraps
> krb5_auth_send() and also uses the Kerberos authentication queue. I hope
> the unit tests cover a lot of use-cases, if not, please suggest more!
>
> btw I was thinking that the chaining might not always be necessary if
> the ccache is of type MEMORY and I hope that the serializaton wouldn't
> be perceived as performance regression for users. Shall we say that
> Pavel's cached auth patches are a more systematic solution that doesn't
> rely on properties of the ccache type in that case?
I'm sorry, but CI fails on Debian because of wrong linking with
libraries. I'm already testing a fix. Review of the rest is appreciated
:-)
More information about the sssd-devel
mailing list