diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-03-18 16:48:11 +0100 |
|---|---|---|
| committer | Sumit Bose <sbose@redhat.com> | 2014-03-26 09:56:23 +0100 |
| commit | 3983d81f461a4f17736a516eb595f54df4bf4336 (patch) | |
| tree | dda3d53fe7d5826878e3e07246cea191c4fa0a8d /src/python/pysss.c | |
| parent | 6bbff437dcea7e56d71cf119d1391be7264dfaf0 (diff) | |
| download | sssd-3983d81f461a4f17736a516eb595f54df4bf4336.tar.gz sssd-3983d81f461a4f17736a516eb595f54df4bf4336.tar.xz sssd-3983d81f461a4f17736a516eb595f54df4bf4336.zip | |
KRB5: Do not attempt to get a TGT after a password change using OTP
https://fedorahosted.org/sssd/ticket/2271
The current krb5_child code attempts to get a TGT for the convenience of
the user using the new password after a password change operation.
However, an OTP should never be used twice, which means we can't perform
the kinit operation after chpass is finished. Instead, we only print a
PAM information instructing the user to log out and back in manually.
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'src/python/pysss.c')
0 files changed, 0 insertions, 0 deletions