#2523 PAC: krb5_pac_verify failures should not be fatal (backport fix from upstream)
Closed: Fixed None Opened 9 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 1172494

Please backport the following commit from sssd upstream:

commit 6e51d44a65b15c2f0491b0a8b452caac0bc00584
Author: Jakub Hrozek <jhrozek@redhat.com>
Date:   Mon Aug 4 13:36:42 2014 +0200

    PAC: krb5_pac_verify failures should not be fatal

    As noted in the MIT KRB5 documentation, some servers send PAC with no
    checksum, therefire the PAC validation should not be fatal, instead, we
    should treat a failure from krb5_pac_verify as if there was no PAC at
    all.

    Reported on sssd-devel by Thomas Sondergaard

This bug was already fixed, just linking with downstream bugzilla for book-keeping.

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
milestone: NEEDS_TRIAGE => SSSD 1.12.1
resolution: => fixed
review: True => 0
selected: =>
status: new => closed
testsupdated: => 0

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.12.1

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3565

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata