URL: https://github.com/SSSD/sssd/pull/5841
Title: #5841: KCM: delete malformed 'cn=default' entries

alexey-tikhonov commented:
"""
> 
> Steps to reproduce would be nice, since it requires using kswitch.

With an old SSSD version that still writes encrypted content in secrets db:
 - obtain any ticket (even one ticket is enough)
 - `kswitch -c ...` to created cache (any successful execution of `kswitch` 
will use `SET_DEFAULT_CACHE` KCM op and create 
'cn=default,cn=$uid,cn=persistent,cn=kcm' entry)

Then update SSSD and try `klist`:
 - 2.6.0 version will fail with "[ccdb_secdb_get_default_send] (0x0040): 
Unexpected UUID size ..."
 - 2.6.0 + this patch will remove this entry
```
[ccdb_secdb_get_default_send] (0x0040): Unexpected UUID size 152, deleting this 
entry
[sss_sec_delete] (0x0400): Removing a secret from [persistent/1000/default]
```
and continue as if default isn't set (since all encrypted entries will be 
purged, cache will appear empty)
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5841#issuecomment-952884928
_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to