[PATCH] krb5 ticket refresh after winbindd goes online

boyang boyang at suse.de
Mon Dec 15 07:31:48 GMT 2008


Hi, everyone:
     1. When winbindd goes from offline to online, primary domain's
online status must be updated. Trusted domains will contact the primary
domain for authentication and something else. [ in winbindd_dual.c]
      2. The krb5 ticket must be refreshed. But the
krb5_ticket_refresh_handler might not fired as soon as possible. There
can be 5 minutes lag between ticket refresh and winbindd goes online.
Apps(smbspool) relying on krb5 ticket suffers from this, we must ensure
that ticket is refreshed as soon as winbindd goes online. [in winbindd_cm.c]
     3. krb5 ticket refresh chain is broken in
krb5_ticket_refresh_handler(). when KDC is unreachable, we have to keep
the krb5 ticket refresh handler. [in winbindd_cred_cache.c]

     patch arrive in the attachment, please review them.
     Thanks!

Best
        Regards
--BoYang
4th, Dec

-------------- next part --------------
A non-text attachment was scrubbed...
Name: krb5-refresh-master.diff
Type: text/x-patch
Size: 3158 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081215/dbb85437/krb5-refresh-master.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: krb5-refresh-v3-0-test.diff
Type: text/x-patch
Size: 3167 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081215/dbb85437/krb5-refresh-v3-0-test.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: krb5-refresh-v3-2-test.diff
Type: text/x-patch
Size: 3140 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081215/dbb85437/krb5-refresh-v3-2-test.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: krb5-refresh-v3-3-test.diff
Type: text/x-patch
Size: 3146 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081215/dbb85437/krb5-refresh-v3-3-test.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: boyang.vcf
Type: text/x-vcard
Size: 187 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081215/dbb85437/boyang.vcf


More information about the samba-technical mailing list