URL: https://github.com/SSSD/sssd/pull/5841 Title: #5841: KCM: delete malformed 'cn=default' entries
alexey-tikhonov commented: """ > > Steps to reproduce would be nice, since it requires using kswitch. With an old SSSD version that still writes encrypted content in secrets db: - obtain any ticket (even one ticket is enough) - `kswitch -c ...` to created cache (any successful execution of `kswitch` will use `SET_DEFAULT_CACHE` KCM op and create 'cn=default,cn=$uid,cn=persistent,cn=kcm' entry) Then update SSSD and try `klist`: - 2.6.0 version will fail with "[ccdb_secdb_get_default_send] (0x0040): Unexpected UUID size ..." - 2.6.0 + this patch will remove this entry ``` [ccdb_secdb_get_default_send] (0x0040): Unexpected UUID size 152, deleting this entry [sss_sec_delete] (0x0400): Removing a secret from [persistent/1000/default] ``` and continue as if default isn't set (since all encrypted entries will be purged, cache will appear empty) """ See the full comment at https://github.com/SSSD/sssd/pull/5841#issuecomment-952884928
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure