From 85145bca378261bb4afeec6a277ec599398f9874 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Fri, 31 Jul 2015 11:06:54 +0200 Subject: [PATCH 3/3] krb5: always tell krb5_child we are online if KDC proxy is configured Resolves https://fedorahosted.org/sssd/ticket/2700 --- src/providers/krb5/krb5_child_handler.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/providers/krb5/krb5_child_handler.c b/src/providers/krb5/krb5_child_handler.c index 4e453b02d5f4e57b8f5a8f48d7be2434654c0f7e..da5d2707894511a97b7f13eef888f359907b41e0 100644 --- a/src/providers/krb5/krb5_child_handler.c +++ b/src/providers/krb5/krb5_child_handler.c @@ -177,7 +177,12 @@ static errno_t create_send_buffer(struct krb5child_req *kr, SAFEALIGN_COPY_UINT32(&buf->data[rp], &kr->uid, &rp); SAFEALIGN_COPY_UINT32(&buf->data[rp], &kr->gid, &rp); SAFEALIGN_COPY_UINT32(&buf->data[rp], &validate, &rp); - SAFEALIGN_COPY_UINT32(&buf->data[rp], &kr->is_offline, &rp); + if (sss_krb5_realm_has_proxy(dp_opt_get_cstring(kr->krb5_ctx->opts, + KRB5_REALM))) { + SAFEALIGN_SET_UINT32(&buf->data[rp], 0, &rp); + } else { + SAFEALIGN_COPY_UINT32(&buf->data[rp], &kr->is_offline, &rp); + } SAFEALIGN_COPY_UINT32(&buf->data[rp], &send_pac, &rp); SAFEALIGN_COPY_UINT32(&buf->data[rp], &use_enterprise_principal, &rp); -- 2.1.0