History log of /sssd-io/src/sss_client/sss_pac_responder_client.c
Revision Date Author Comments Expand
080e1bfb72ed0e8d96e390d83ad35eaba79bd450 29-Jan-2018 René Genz <liebundartig@freenet.de>

Fix minor spelling mistakes in sss_client/* Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

1f331476e7d33bb03cc35a2a9064ee1cc5bed6cf 22-Sep-2017 Sumit Bose <sbose@redhat.com>

sssd_client: add mutex protected call to the PAC responder SSSD's plugin for MIT Kerberos to send the PAC to the PAC responder currently uses sss_pac_make_request() which does not protect the communication with the PAC responder with a mutex as e.g. the NSS and PAM clients. If an application using threads loads this plugin via libkrb5 in different threads and is heavily processing Kerberos tickets with PACs chances are that two threads try to communicate with SSSD at once. In this case one of the threads will miss a reply and will wait for it until the default client timeout of 300s is passed. This patch adds a call which uses a mutex to protect the communication which will avoid the 300s delay mentioned above. Resolves: https://pagure.io/SSSD/sssd/issue/3518 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> Reviewed-by: Fabiano Fidêncio <fidencio@redhat.com>