Skip to content

[autobackport: sssd-2-13] KRB5: read keytab copy in offline mode too#8687

Merged
alexey-tikhonov merged 1 commit intoSSSD:sssd-2-13from
sssd-bot:SSSD-sssd-backport-pr8671-to-sssd-2-13
May 11, 2026
Merged

[autobackport: sssd-2-13] KRB5: read keytab copy in offline mode too#8687
alexey-tikhonov merged 1 commit intoSSSD:sssd-2-13from
sssd-bot:SSSD-sssd-backport-pr8671-to-sssd-2-13

Conversation

@sssd-bot
Copy link
Copy Markdown
Contributor

This is an automatic backport of PR#8671 KRB5: read keytab copy in offline mode too to branch sssd-2-13, created by @alexey-tikhonov.

Please make sure this backport is correct.

Note

The commits were cherry-picked without conflicts.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr8671-to-sssd-2-13
git checkout SSSD-sssd-backport-pr8671-to-sssd-2-13
git push sssd-bot SSSD-sssd-backport-pr8671-to-sssd-2-13 --force

Original commits
b070171 - KRB5: read keytab copy in offline mode too

Backported commits

  • c12da3e - KRB5: read keytab copy in offline mode too

Original Pull Request Body

The process can transition from offline pre-auth to online auth within the same invocation.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request modifies the privileged_krb5_setup function in src/providers/krb5/krb5_child.c to adjust how the offline status affects Kerberos setup. Specifically, it removes the offline check from the outer conditional block that manages keytab setup and instead applies a !offline check specifically to the k5c_setup_fast call. I have no feedback to provide.

@alexey-tikhonov alexey-tikhonov added the no-backport This should go to target branch only. label May 11, 2026
Copy link
Copy Markdown
Contributor

@sumit-bose sumit-bose left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

backport matches the original patch, ACK.

bye,
Sumit

The process can transition from offline pre-auth to online auth within
the same invocation.

Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit b070171)
@sssd-bot
Copy link
Copy Markdown
Contributor Author

The pull request was accepted by @alexey-tikhonov with the following PR CI status:


🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-42-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-44-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 Build / freebsd (success)
🟢 Build / make-distcheck (success)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@sssd-bot sssd-bot force-pushed the SSSD-sssd-backport-pr8671-to-sssd-2-13 branch from c12da3e to 3fa894d Compare May 11, 2026 08:24
@alexey-tikhonov alexey-tikhonov merged commit 6e2b87a into SSSD:sssd-2-13 May 11, 2026
3 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Accepted no-backport This should go to target branch only.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants