#749 account checks should be done with fresh data
Closed: Fixed None Opened 13 years ago by ossman.

Currently the data for a user is refreshed when sssd performs the authentication step, which makes sure you don't perform any security sensitive decisions on stale data. Unfortunately you get problems if you authenticate by other means and only use sssd for access control. In those cases sssd will not refresh data and changes to access permissions could take 90 minutes to take effect (with a default configuration).

sssd should be changed so that doing only access control also acts on up to date data.


Fields changed

component: SSSD => PAM
milestone: NEEDS_TRIAGE => SSSD 1.5.0
owner: somebody => sgallagh
status: new => assigned
tests: 0 => 1

Fixed by c71ff1e

resolution: => fixed
status: assigned => closed

Confirmed working.

(a bit late, but for posterity :))

upgrade: => 0

Fields changed

rhbz: => 0

Metadata Update from @ossman:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.0

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1791

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata