[Freeipa-devel] [PATCH] 357 Use fully qualified CCACHE names

Alexander Bokovoy abokovoy at redhat.com
Thu Jan 31 18:07:50 UTC 2013


On Thu, 31 Jan 2013, Martin Kosek wrote:
>On 01/31/2013 05:01 PM, Alexander Bokovoy wrote:
>> On Wed, 30 Jan 2013, Martin Kosek wrote:
>>> Some parts of install scripts used only ccache name as returned by
>>> krbV.CCache.name attribute. However, when this name is used again
>>> to initialize krbV.CCache object or when it is used in KRB5CCNAME
>>> environmental variable, it fails for new DIR type of CCACHE.
>>>
>>> We should always use both CCACHE type and name when referring to
>>> them to avoid these crashes. ldap2 backend was also updated to
>>> accept directly krbV.CCache object which contains everything we need
>>> to authenticate with ccache.
>>>
>>> https://fedorahosted.org/freeipa/ticket/3381
>> Minor comment: there are few cleanups of 'import krbV' in places where
>> Kerberos functions are not used. Maybe it would be better to separate
>> them into their own patch to avoid rebasing issues in future?
>
>Sure, good idea. Attaching both patches.
ACK to both now. Thanks!

-- 
/ Alexander Bokovoy




More information about the Freeipa-devel mailing list