[PATCHES] Handle expired sessions in winbindd

[Andrew Bartlett]

On Fri, 2016-01-08 at 18:33 +0100, Stefan Metzmacher wrote:
> Hi Christof,
> 
> > > The attached patches catch the error and retry the same request
> > > on a
> > > new
> > > connection. The first patch is a hack to use the admember
> > > selftest
> > > environment for some testing. I was not sure of the best approach
> > > of
> > > getting some test coverage here. Maybe change the config of
> > > admember
> > > to
> > > use short-lived tickets, or create a new admember2 environment
> > > that
> > > uses
> > > a short ticket lifetime.
> > 
> > This approach is reasonable enough, and ad_dc doesn't have multiple
> > DCs
> > in it, so you can just change that one KDC.  However changing from
> > ad_dc_ntvfs to ad_dc will change some other things, perhaps fixing
> > some
> > of the winbind flapping tests actually, because different other
> > tests
> > will have run against it. 
> 
> I think for testing we need to change the client,
> as we do in the smb2.session.expire1 test.
> 
> So winbindd should just ask for short tickets, instead of
> changing the kdc. So the admember env would be ok for that.

If we could, via smbcontrol, change it to get very short tickets, then
sleep, then try operations, we could avoid this bleeding into other
tests.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba