[Freeipa-devel] [PATCH] 357 Use fully qualified CCACHE names

Martin Kosek mkosek at redhat.com
Wed Jan 30 12:42:18 UTC 2013


Some parts of install scripts used only ccache name as returned by
krbV.CCache.name attribute. However, when this name is used again
to initialize krbV.CCache object or when it is used in KRB5CCNAME
environmental variable, it fails for new DIR type of CCACHE.

We should always use both CCACHE type and name when referring to
them to avoid these crashes. ldap2 backend was also updated to
accept directly krbV.CCache object which contains everything we need
to authenticate with ccache.

https://fedorahosted.org/freeipa/ticket/3381

---

Please note, that this fix is rather a short/medium-term fix for Fedora 18. In
a long term we should consolidate our CCACHE manipulation code, it now uses
several different wrappers or just uses krbV python library directly. I did not
do any global refactoring in this patch, this should be done after we decide if
we want to create a new, more usable krb5 library bindings as was already
discussed in the past.

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-357-use-fully-qualified-ccache-names.patch
Type: text/x-patch
Size: 7625 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20130130/9c101c5c/attachment.bin>


More information about the Freeipa-devel mailing list