summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2015-09-04 10:30:03 +0200
committerJakub Hrozek <jhrozek@redhat.com>2015-09-16 16:53:33 +0200
commitf0815f5dff315576c8d1b6fedf00165a4161f8c0 (patch)
treecbf20090fa92cc9a6e31e3c903b21d020c519367
parent4649f19ea4b11c428ca75803beda8d495a0c9335 (diff)
downloadsssd-f0815f5dff315576c8d1b6fedf00165a4161f8c0.tar.gz
sssd-f0815f5dff315576c8d1b6fedf00165a4161f8c0.tar.xz
sssd-f0815f5dff315576c8d1b6fedf00165a4161f8c0.zip
KRB5: Don't error out reading a minimal krb5.conf
With some setups, krb5.conf can be really minimal. In those cases, we should ignore PROF_NO_RELATION and PROF_NO_SECTION and just return "false" as in "no proxy" without a loud debug message. Reviewed-by: Petr Cech <pcech@redhat.com>
-rw-r--r--src/util/sss_krb5.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/src/util/sss_krb5.c b/src/util/sss_krb5.c
index e29c753e1..2d2dfc4e9 100644
--- a/src/util/sss_krb5.c
+++ b/src/util/sss_krb5.c
@@ -1103,7 +1103,10 @@ bool sss_krb5_realm_has_proxy(const char *realm)
profile_path[1] = realm;
kerr = profile_get_values(profile, profile_path, &list);
- if (kerr != 0) {
+ if (kerr == PROF_NO_RELATION || kerr == PROF_NO_SECTION) {
+ kerr = 0;
+ goto done;
+ } else if (kerr != 0) {
DEBUG(SSSDBG_OP_FAILURE, "profile_get_values failed.\n");
goto done;
}