[PATCH] IPA: Handle sssd-owned keytabs when running as root

[Jakub Hrozek]

Hi,

the attached patch fixes #2718. To reproduce, run sssd as the root user,
but chown the keytab as the sssd users.

[Jakub Hrozek]

On Wed, Jul 22, 2015 at 06:16:00PM +0200, Jakub Hrozek wrote:
> Hi,
>
> the attached patch fixes #2718. To reproduce, run sssd as the root user,
> but chown the keytab as the sssd users.

And now with two additional trivial patches that make the debug messages
a bit less noisy and useful.

[Jakub Hrozek]

On Wed, Jul 22, 2015 at 11:25:06PM +0200, Jakub Hrozek wrote:
> On Wed, Jul 22, 2015 at 06:16:00PM +0200, Jakub Hrozek wrote:
> > Hi,
> >
> > the attached patch fixes #2718. To reproduce, run sssd as the root user,
> > but chown the keytab as the sssd users.
>
> And now with two additional trivial patches that make the debug messages
> a bit less noisy and useful.

Sorry for the spam, but one of the debug messages had a wrong level.

[Alexander Bokovoy]

On Thu, 23 Jul 2015, Jakub Hrozek wrote:
> On Wed, Jul 22, 2015 at 11:25:06PM +0200, Jakub Hrozek wrote:
> > On Wed, Jul 22, 2015 at 06:16:00PM +0200, Jakub Hrozek wrote:
> > > Hi,
> > >
> > > the attached patch fixes #2718. To reproduce, run sssd as the root user,
> > > but chown the keytab as the sssd users.
> >
> > And now with two additional trivial patches that make the debug messages
> > a bit less noisy and useful.
>
> Sorry for the spam, but one of the debug messages had a wrong level.

ACK for all three patches.

[Jakub Hrozek]

On Tue, Jul 28, 2015 at 07:03:36AM +0300, Alexander Bokovoy wrote:
> On Thu, 23 Jul 2015, Jakub Hrozek wrote:
> > On Wed, Jul 22, 2015 at 11:25:06PM +0200, Jakub Hrozek wrote:
> > > On Wed, Jul 22, 2015 at 06:16:00PM +0200, Jakub Hrozek wrote:
> > > > Hi,
> > > >
> > > > the attached patch fixes #2718. To reproduce, run sssd as the root user,
> > > > but chown the keytab as the sssd users.
> > >
> > > And now with two additional trivial patches that make the debug messages
> > > a bit less noisy and useful.
> >
> > Sorry for the spam, but one of the debug messages had a wrong level.
>
> ACK for all three patches.

Thanks for the review, pushed to master:
    * 6ed964cf2e5a68e92e220f3b9f55029731bcabaa
    * 6986012562505c85bb5601d70bb256aab178c3ce
    * 146e024b318dadeb069e8ce8254179f6119747f2