diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-18 22:03:13 +0200 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-18 20:33:42 +0100 |
commit | 2745b0156f12df7a7eb93d57716233243658e4d9 (patch) | |
tree | c0accf228b7d15d1d9114b7522ac3bf7b8efd492 /src/util/util_errors.h | |
parent | 7c5cd2e7711621af9163a41393e88896a91ac33b (diff) | |
download | sssd-2745b0156f12df7a7eb93d57716233243658e4d9.tar.gz sssd-2745b0156f12df7a7eb93d57716233243658e4d9.tar.xz sssd-2745b0156f12df7a7eb93d57716233243658e4d9.zip |
KRB5: Move all ccache operations to krb5_child.c
The credential cache operations must be now performed by the krb5_child
completely, because the sssd_be process might be running as the sssd
user who doesn't have access to the ccaches.
src/providers/krb5/krb5_ccache.c is still linked against libsss_krb5
until we fix Kerberos ticket renewal as non-root.
Also includes a new error code that indicates that the back end should
remove the old ccache attribute -- the child can't do that if it's
running as the user.
Related:
https://fedorahosted.org/sssd/ticket/2370
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Diffstat (limited to 'src/util/util_errors.h')
-rw-r--r-- | src/util/util_errors.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/util/util_errors.h b/src/util/util_errors.h index 2bc576605..f71ede8d0 100644 --- a/src/util/util_errors.h +++ b/src/util/util_errors.h @@ -56,6 +56,7 @@ enum sssd_errors { ERR_CREDS_INVALID, ERR_NO_CACHED_CREDS, ERR_CACHED_CREDS_EXPIRED, + ERR_CREDS_EXPIRED_CCACHE, ERR_AUTH_DENIED, ERR_AUTH_FAILED, ERR_CHPASS_DENIED, |