summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-12-19 18:37:32 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-12-20 19:46:55 +0100
commit8144958510cec8ec2fc2226fe80a9b8a1dddf1fb (patch)
treeeb092c95ad82f6fa8e3c55f8e1a2f8616a19d6e1
parenta8c4867d220d64bb132088f3fcfd7e8778a94ebe (diff)
downloadsssd-8144958510cec8ec2fc2226fe80a9b8a1dddf1fb.tar.gz
sssd-8144958510cec8ec2fc2226fe80a9b8a1dddf1fb.tar.xz
sssd-8144958510cec8ec2fc2226fe80a9b8a1dddf1fb.zip
krb5 tgt renewal: fix usage of ldb_dn_get_component_val()
For some reason I was under the impression that the DN components are counted backwards in libldb. This patch corrects this.
-rw-r--r--src/providers/krb5/krb5_renew_tgt.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/src/providers/krb5/krb5_renew_tgt.c b/src/providers/krb5/krb5_renew_tgt.c
index ccb7e6af6..b5eee697f 100644
--- a/src/providers/krb5/krb5_renew_tgt.c
+++ b/src/providers/krb5/krb5_renew_tgt.c
@@ -423,11 +423,11 @@ static errno_t check_ccache_files(struct renew_tgt_ctx *renew_tgt_ctx)
continue;
}
- /* The DNs of users in sysdb ends with ...,cn=domain.name,cn=sysdb, so
- * the value of the component before the last (index 1) is the domain
- * name. */
+ /* The DNs of users in sysdb looks like
+ * name=username,cn=users,cn=domain.name,cn=sysdb
+ * the value of the third component (index 2) is the domain name. */
- user_dom_val = ldb_dn_get_component_val(msgs[c]->dn, 1);
+ user_dom_val = ldb_dn_get_component_val(msgs[c]->dn, 2);
if (user_dom_val == NULL) {
DEBUG(SSSDBG_OP_FAILURE, ("Invalid user DN [%s].\n",
ldb_dn_get_linearized(msgs[c]->dn)));