[PATCH] Add sysdb request to authenticate against a cached password

[Sumit Bose]

Hi,

this patch move the validation against cached password from the PAM
responder code to a sysdb tevent request. This allows e.g. the Kerberos
provider to check a password on it own when offline. This is needed for
features like 'kinit when going online' or 'automatic ticket renewal'
where the Kerberos provider needs to keep the password in memory.

I think this is no material for 1.0.x, but for 1.1.x.

bye,
Sumit

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/08/2010 06:13 AM, Sumit Bose wrote:
>  Hi,
>  
>  this patch move the validation against cached password from the PAM
>  responder code to a sysdb tevent request. This allows e.g. the Kerberos
>  provider to check a password on it own when offline. This is needed for
>  features like 'kinit when going online' or 'automatic ticket renewal'
>  where the Kerberos provider needs to keep the password in memory.
>  
>  I think this is no material for 1.0.x, but for 1.1.x.
>  
>  bye,
>  Sumit
>   
This looks good to me.

Ack.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAktVs0IACgkQeiVVYja6o6NIKwCfaahsHNUjIxh+0WQpdqh7+L6N
> +8sAn2LPDRURzNjpwOp3nuf1a6K2j6dc
> =MVl2
> -----END PGP SIGNATURE-----

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/19/2010 08:27 AM, Stephen Gallagher wrote:
>  On 01/08/2010 06:13 AM, Sumit Bose wrote:
> > Hi,
>  
> > this patch move the validation against cached password from the PAM
> > responder code to a sysdb tevent request. This allows e.g. the Kerberos
> > provider to check a password on it own when offline. This is needed for
> > features like 'kinit when going online' or 'automatic ticket
> renewal'
> > where the Kerberos provider needs to keep the password in memory.
>  
> > I think this is no material for 1.0.x, but for 1.1.x.
>  
> > bye,
> > Sumit
>  
>  
>  This looks good to me.
>  
>  Ack.
>   
Pushed to master.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAktXC+cACgkQeiVVYja6o6P4nQCZAem+rWUtwc0sLRlQM1uJm/E5
> jAYAn2K3QFjzEzXkApCJzPxPxkpHL9+x
> =T2Xc
> -----END PGP SIGNATURE-----