Blame SOURCES/0007-kdb-make-sure-audit_as_req-callback-signature-change-is-preserved_rhbz#1803786.patch

a6e2d8
From 30b8c8b9985a5eb41e700b80fd03f95548e45fba Mon Sep 17 00:00:00 2001
a6e2d8
From: Alexander Bokovoy <abokovoy@redhat.com>
a6e2d8
Date: Mon, 17 Feb 2020 13:58:51 +0200
a6e2d8
Subject: [PATCH] kdb: make sure audit_as_req callback signature change is
a6e2d8
 preserved
a6e2d8
a6e2d8
audit_as_req() callback has changed its signature with MIT krb5 commit
a6e2d8
20991d55efbe1f987c1dbc1065f2d58c8f34031b in 2017, we should preserve the
a6e2d8
change for any newer DAL versions. Otherwise audit_as_req() callback
a6e2d8
would reference wrong data and we might crash.
a6e2d8
a6e2d8
Fixes: https://pagure.io/freeipa/issue/8200
a6e2d8
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
a6e2d8
Reviewed-By: Christian Heimes <cheimes@redhat.com>
a6e2d8
---
a6e2d8
 daemons/ipa-kdb/ipa_kdb.h          | 2 +-
a6e2d8
 daemons/ipa-kdb/ipa_kdb_audit_as.c | 2 +-
a6e2d8
 2 files changed, 2 insertions(+), 2 deletions(-)
a6e2d8
a6e2d8
diff --git a/daemons/ipa-kdb/ipa_kdb.h b/daemons/ipa-kdb/ipa_kdb.h
a6e2d8
index 7519f26e26..ae37a5a033 100644
a6e2d8
--- a/daemons/ipa-kdb/ipa_kdb.h
a6e2d8
+++ b/daemons/ipa-kdb/ipa_kdb.h
a6e2d8
@@ -345,7 +345,7 @@ krb5_error_code ipadb_check_allowed_to_delegate(krb5_context kcontext,
a6e2d8
 
a6e2d8
 void ipadb_audit_as_req(krb5_context kcontext,
a6e2d8
                         krb5_kdc_req *request,
a6e2d8
-#if (KRB5_KDB_DAL_MAJOR_VERSION == 7)
a6e2d8
+#if (KRB5_KDB_DAL_MAJOR_VERSION >= 7)
a6e2d8
                         const krb5_address *local_addr,
a6e2d8
                         const krb5_address *remote_addr,
a6e2d8
 #endif
a6e2d8
diff --git a/daemons/ipa-kdb/ipa_kdb_audit_as.c b/daemons/ipa-kdb/ipa_kdb_audit_as.c
a6e2d8
index 77748a75d6..a60bc82b6d 100644
a6e2d8
--- a/daemons/ipa-kdb/ipa_kdb_audit_as.c
a6e2d8
+++ b/daemons/ipa-kdb/ipa_kdb_audit_as.c
a6e2d8
@@ -25,7 +25,7 @@
a6e2d8
 
a6e2d8
 void ipadb_audit_as_req(krb5_context kcontext,
a6e2d8
                         krb5_kdc_req *request,
a6e2d8
-#if (KRB5_KDB_DAL_MAJOR_VERSION == 7)
a6e2d8
+#if (KRB5_KDB_DAL_MAJOR_VERSION >= 7)
a6e2d8
                         const krb5_address *local_addr,
a6e2d8
                         const krb5_address *remote_addr,
a6e2d8
 #endif
a6e2d8
#From 4eb48492b354ecc30ffe1dd9654dcc0e0e833d64 Mon Sep 17 00:00:00 2001
a6e2d8
#From: Alexander Bokovoy <abokovoy@redhat.com>
a6e2d8
#Date: Mon, 17 Feb 2020 14:21:10 +0200
a6e2d8
#Subject: [PATCH] Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+
a6e2d8
#
a6e2d8
#Reviewed-By: Christian Heimes <cheimes@redhat.com>
a6e2d8
#---
a6e2d8
# ipatests/azure/templates/prepare-build.yml | 1 +
a6e2d8
# 1 file changed, 1 insertion(+)
a6e2d8
#
a6e2d8
#diff --git a/ipatests/azure/templates/prepare-build.yml b/ipatests/azure/templates/prepare-build.yml
a6e2d8
#index 0528efe129..643910f085 100644
a6e2d8
#--- a/ipatests/azure/templates/prepare-build.yml
a6e2d8
#+++ b/ipatests/azure/templates/prepare-build.yml
a6e2d8
#@@ -13,6 +13,7 @@ steps:
a6e2d8
#     for metalink in $(sudo dnf repolist -v |grep Repo-metalink | awk '{print $2}' ) ; do echo '###############' ; echo '####' ; echo $metalink ; echo '####' ; curl $metalink ; done
a6e2d8
#     echo "Fastestmirror results:"
a6e2d8
#     sudo cat /var/cache/dnf/fastestmirror.cache
a6e2d8
#+    sudo dnf -y module enable nodejs:12
a6e2d8
#     sudo dnf makecache || :
a6e2d8
#     echo "Installing base development environment"
a6e2d8
#     sudo dnf install -y \