summaryrefslogtreecommitdiff
path: root/src/providers/krb5/krb5_renew_tgt.c
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2013-09-20 12:12:03 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-09-23 17:00:39 +0200
commit764aa04ee92dbbd0d1eca6703294135eb97fda6d (patch)
treee8f872ffe2b9fa4f85b07826ed8d9209eb7ed99b /src/providers/krb5/krb5_renew_tgt.c
parentd2f4746587809673122d348a8f806f1c14d3d60a (diff)
downloadsssd-764aa04ee92dbbd0d1eca6703294135eb97fda6d.tar.gz
sssd-764aa04ee92dbbd0d1eca6703294135eb97fda6d.tar.bz2
sssd-764aa04ee92dbbd0d1eca6703294135eb97fda6d.zip
krb5: save canonical upn to sysdb
If the returned TGT contains a different user principal name (upn) than used in the request, i.e. the upn was canonicalized, we currently save it to sysdb into the same attribute where the upn coming from an LDAP server is stored as well. This means the canonical upn might be overwritten when the user data is re-read from the LDAP server. To avoid this this patch add a new attribute to sysdb where the canonical upn is stored and makes sure it is used when available. Fixes https://fedorahosted.org/sssd/ticket/2060
Diffstat (limited to 'src/providers/krb5/krb5_renew_tgt.c')
-rw-r--r--src/providers/krb5/krb5_renew_tgt.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/providers/krb5/krb5_renew_tgt.c b/src/providers/krb5/krb5_renew_tgt.c
index 9102f8ca..5d5a25b8 100644
--- a/src/providers/krb5/krb5_renew_tgt.c
+++ b/src/providers/krb5/krb5_renew_tgt.c
@@ -375,7 +375,7 @@ static errno_t check_ccache_files(struct renew_tgt_ctx *renew_tgt_ctx)
const char *ccache_filter = "(&("SYSDB_CCACHE_FILE"=*)" \
"("SYSDB_OBJECTCLASS"="SYSDB_USER_CLASS"))";
const char *ccache_attrs[] = { SYSDB_CCACHE_FILE, SYSDB_UPN, SYSDB_NAME,
- NULL };
+ SYSDB_CANONICAL_UPN, NULL };
size_t msgs_count = 0;
struct ldb_message **msgs = NULL;
size_t c;