From 860b0e5e2f34a270a5e40912fd07efbe093a29f8 Mon Sep 17 00:00:00 2001

From: Sumit Bose <sbose@redhat.com>

Date: Fri, 31 Jul 2015 11:06:54 +0200

Subject: [PATCH 50/57] krb5: assume online state if KDC proxy is configured

If a KDC proxy is configured a request in the KRB5 provider will assume

online state even if the backend is offline without changing the state

of the backend.

Resolves https://fedorahosted.org/sssd/ticket/2700

Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

---

 src/providers/krb5/krb5_auth.c | 6 ++++++

 1 file changed, 6 insertions(+)

diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c

index d1bf4025b052d82413d1f370a36b0b99720d6f05..da8309d0504a6815902513693343a3500f454557 100644

--- a/src/providers/krb5/krb5_auth.c

+++ b/src/providers/krb5/krb5_auth.c

@@ -754,6 +754,12 @@ static void krb5_auth_resolve_done(struct tevent_req *subreq)

         kr->is_offline = be_is_offline(state->be_ctx);

     }

+    if (kr->is_offline

+            && sss_krb5_realm_has_proxy(dp_opt_get_cstring(kr->krb5_ctx->opts,

+                                        KRB5_REALM))) {

+        kr->is_offline = false;

+    }

+

     subreq = handle_child_send(state, state->ev, kr);

     if (subreq == NULL) {

         DEBUG(SSSDBG_CRIT_FAILURE, "handle_child_send failed.\n");

-- 

2.4.3