sssd.git/src/providers/krb5, branch nonroot-libcap

UTIL: Move become_user outside krb5 tree

2014-10-07T11:48:04+00:00

In order for several other SSSD processes to run as a non-root user, we
need to move the functions to become another user to a shared space in
our source tree.

Fix debug messages - trailing '.'

2014-09-29T16:15:01+00:00

Fix debug messages where '\n' was wrongly followed by '.'.

Reviewed-by: Lukáš Slebodník

UTIL: rename find_subdomain_by_name

2014-07-22T07:40:08+00:00

The function was named "find_subdomain" yet it could find both main
domain and subdomain.

sed 's/find_subdomain_by_name/find_domain_by_name/' -i `find . -name "*.[ch]"`

Reviewed-by: Jakub Hrozek

KRB5: add missing debug-to-stderr option to krb5_child

2014-07-20T19:26:19+00:00

Without this option krb5_child cannot be run in interactive mode.

Reviewed-by: Jakub Hrozek

KRB5: Go offline in case of generic error

2014-04-17T20:18:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2313

KRB: do not check ccache directory for GID

2014-04-17T08:31:14+00:00

krb5_child: Fix use after free in debug message

2014-04-08T12:12:23+00:00

debug_prg_name is used in debug_fn and it was allocated under
talloc context "kr". The variable "kr" was removed before the last debug
messages in function main. It is very little change that it will be overridden.
It is possible to see this issue with exported environment variable
TALLOC_FREE_FILL=255

Reviewed-by: Sumit Bose

krb5_child: Remove unused krb5_context from set_changepw_options

2014-04-07T15:46:10+00:00

Reviewed-by: Pavel Reichl

KRB5: Do not attempt to get a TGT after a password change using OTP

2014-03-26T08:56:23+00:00

https://fedorahosted.org/sssd/ticket/2271

The current krb5_child code attempts to get a TGT for the convenience of
the user using the new password after a password change operation.
However, an OTP should never be used twice, which means we can't perform
the kinit operation after chpass is finished. Instead, we only print a
PAM information instructing the user to log out and back in manually.

Reviewed-by: Alexander Bokovoy

krb5-child: add revert_changepw_options()

2014-03-21T22:06:26+00:00

After changing the Kerberos password krb5-child will try to get a fresh
TGT with the new password. This patch tries to make sure the right gic
options are used.

Resolves: https://fedorahosted.org/sssd/ticket/2289

Reviewed-by: Jakub Hrozek