diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2011-07-01 17:45:05 +0200 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-07-11 16:52:52 -0400 |
commit | 97c93859e310bc8e4ad5f011e42a5fccd4a7f369 (patch) | |
tree | a2aca7d7913f656fe2044ea80af5f278af6ade00 /src/providers/ipa/ipa_common.c | |
parent | 2e1973b90ea87b343d39fef1f6393cc201989ecd (diff) | |
download | sssd-97c93859e310bc8e4ad5f011e42a5fccd4a7f369.tar.gz sssd-97c93859e310bc8e4ad5f011e42a5fccd4a7f369.tar.bz2 sssd-97c93859e310bc8e4ad5f011e42a5fccd4a7f369.zip |
Escape IP address in kdcinfo
https://fedorahosted.org/sssd/ticket/909
Diffstat (limited to 'src/providers/ipa/ipa_common.c')
-rw-r--r-- | src/providers/ipa/ipa_common.c | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c index 6301355d..8f4eeb6b 100644 --- a/src/providers/ipa/ipa_common.c +++ b/src/providers/ipa/ipa_common.c @@ -639,15 +639,6 @@ static void ipa_resolve_callback(void *private_data, struct fo_server *server) return; } - safe_address = sss_escape_ip_address(tmp_ctx, - srvaddr->family, - address); - if (safe_address == NULL) { - DEBUG(1, ("sss_ldap_escape_ip_address failed.\n")); - talloc_free(tmp_ctx); - return; - } - new_uri = talloc_asprintf(service, "ldap://%s", fo_get_server_name(server)); if (!new_uri) { DEBUG(2, ("Failed to copy URI ...\n")); @@ -664,7 +655,16 @@ static void ipa_resolve_callback(void *private_data, struct fo_server *server) talloc_zfree(service->krb5_service->address); service->krb5_service->address = talloc_steal(service, address); - ret = write_krb5info_file(service->krb5_service->realm, address, + safe_address = sss_escape_ip_address(tmp_ctx, + srvaddr->family, + address); + if (safe_address == NULL) { + DEBUG(1, ("sss_escape_ip_address failed.\n")); + talloc_free(tmp_ctx); + return; + } + + ret = write_krb5info_file(service->krb5_service->realm, safe_address, SSS_KRB5KDC_FO_SRV); if (ret != EOK) { DEBUG(2, ("write_krb5info_file failed, authentication might fail.\n")); |