[PATCH] KRB5: Only return PAM error for unreachable kpasswd when performing chpass

[Jakub Hrozek]

I know this ticket is scheduled for RC2 but I suspect it is the root
cause of problems we were seeing in production and I wanted to provide a
scratch buil.

https://fedorahosted.org/sssd/ticket/1452

We always try to resolve the kpasswd server even when we're just
authenticating the user so that tools such as kpasswd work. However, we
should treat errors from this step as fatal only when actually changing
passwords.

[Pavel Březina]

On 08/14/2012 04:09 PM, Jakub Hrozek wrote:
> I know this ticket is scheduled for RC2 but I suspect it is the root
> cause of problems we were seeing in production and I wanted to provide a
> scratch buil.
>
> https://fedorahosted.org/sssd/ticket/1452
>
> We always try to resolve the kpasswd server even when we're just
> authenticating the user so that tools such as kpasswd work. However, we
> should treat errors from this step as fatal only when actually changing
> passwords.

Ack.

[Jakub Hrozek]

On Wed, Aug 15, 2012 at 09:58:40AM +0200, Pavel Březina wrote:
> On 08/14/2012 04:09 PM, Jakub Hrozek wrote:
> > I know this ticket is scheduled for RC2 but I suspect it is the root
> > cause of problems we were seeing in production and I wanted to provide a
> > scratch buil.
> >
> > https://fedorahosted.org/sssd/ticket/1452
> >
> > We always try to resolve the kpasswd server even when we're just
> > authenticating the user so that tools such as kpasswd work. However, we
> > should treat errors from this step as fatal only when actually changing
> > passwords.
>
> Ack.

Pushed to master.

[Jakub Hrozek]

On Wed, Aug 15, 2012 at 02:07:48PM +0200, Jakub Hrozek wrote:
> On Wed, Aug 15, 2012 at 09:58:40AM +0200, Pavel Březina wrote:
> > On 08/14/2012 04:09 PM, Jakub Hrozek wrote:
> > > I know this ticket is scheduled for RC2 but I suspect it is the root
> > > cause of problems we were seeing in production and I wanted to provide a
> > > scratch buil.
> > >
> > > https://fedorahosted.org/sssd/ticket/1452
> > >
> > > We always try to resolve the kpasswd server even when we're just
> > > authenticating the user so that tools such as kpasswd work. However, we
> > > should treat errors from this step as fatal only when actually changing
> > > passwords.
> >
> > Ack.
>
> Pushed to master.

Also pushed to sssd-1-8