e07aefb Work around issues fetching session data

1 file Authored by simo 7 years ago, Committed by tkrizek 7 years ago,
    Work around issues fetching session data
    
    Unfortunately the MIT krb5 library has a severe limitation with FILE
    ccaches when retrieving config data. It will always only search until
    the first entry is found and return that one.
    
    For FILE caches MIT krb5 does not support removing old entries when a
    new one is stored, and storage happens only in append mode, so the end
    result is that even if an update is stored it is never returned with the
    standard krb5_cc_get_config() call.
    
    To work around this issue we simply implement what krb5_cc_get_config()
    does under the hood with the difference that we do not stop at the first
    match but keep going until all ccache entries have been checked.
    
    Related https://pagure.io/freeipa/issue/6775
    
    Signed-off-by: Simo Sorce <simo@redhat.com>
    Reviewed-By: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    
        
file modified
+190 -23