diff options
| author | Sumit Bose <sbose@redhat.com> | 2009-12-04 11:04:34 +0100 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2009-12-07 10:19:04 -0500 |
| commit | 051cd4b5d3fce4174b92b9b55c1527b8166ea975 (patch) | |
| tree | 6306f21cec9d552479f16e731fd4b588b878727a /server/providers/ldap/ldap_common.h | |
| parent | afb62c29182fc8174b63520a7170faa22a9dc47b (diff) | |
| download | sssd-051cd4b5d3fce4174b92b9b55c1527b8166ea975.tar.gz sssd-051cd4b5d3fce4174b92b9b55c1527b8166ea975.tar.xz sssd-051cd4b5d3fce4174b92b9b55c1527b8166ea975.zip | |
Try to renew Kerberos credentials
When using GSSAPI we need a valid service ticket to talk to the LDAP
server. If the ticket is expired the LDAP client returns with 'Can't
contact LDAP server'. Currently we set the backend offline if this error
occurs although the server is still available. This patch checks if the
TGT is expired and tries to renew the credentials before going offline.
Diffstat (limited to 'server/providers/ldap/ldap_common.h')
| -rw-r--r-- | server/providers/ldap/ldap_common.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/server/providers/ldap/ldap_common.h b/server/providers/ldap/ldap_common.h index b1985455c..ff1ffb725 100644 --- a/server/providers/ldap/ldap_common.h +++ b/server/providers/ldap/ldap_common.h @@ -91,6 +91,7 @@ int ldap_id_cleanup_set_timer(struct sdap_id_ctx *ctx, struct timeval tv); bool sdap_connected(struct sdap_id_ctx *ctx); void sdap_mark_offline(struct sdap_id_ctx *ctx); +bool sdap_check_gssapi_reconnect(struct sdap_id_ctx *ctx); struct tevent_req *users_get_send(TALLOC_CTX *memctx, struct tevent_context *ev, |