mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
ipa-kdb: use magic value to check if ipadb is used
The certauth plugin is configured in /etc/krb5.conf independently form the database module. As a result the IPA certauth plugin can be added to the configuration without the IPA DAL driver. Since the IPA certauth plugin depends on the presence of the IPA DAL driver this patch adds a magic value at the beginning of struct ipadb_context which can be checked to see if the IPA DAL driver is properly initialized. Resolves https://pagure.io/freeipa/issue/7261 Reviewed-By: Christian Heimes <cheimes@redhat.com>
This commit is contained in:
committed by
Christian Heimes
parent
df0e6696d8
commit
ec228f411e
@@ -522,6 +522,7 @@ static krb5_error_code ipadb_init_module(krb5_context kcontext,
|
||||
if (!ipactx) {
|
||||
return ENOMEM;
|
||||
}
|
||||
ipactx->magic = IPA_CONTEXT_MAGIC;
|
||||
|
||||
/* only check for unsupported 'temporary' value for now */
|
||||
for (i = 0; db_args != NULL && db_args[i] != NULL; i++) {
|
||||
|
||||
@@ -101,7 +101,9 @@ struct ipadb_global_config {
|
||||
bool disable_preauth_for_spns;
|
||||
};
|
||||
|
||||
#define IPA_CONTEXT_MAGIC 0x0c027ea7
|
||||
struct ipadb_context {
|
||||
int magic;
|
||||
char *uri;
|
||||
char *base;
|
||||
char *realm;
|
||||
|
||||
@@ -131,7 +131,7 @@ static krb5_error_code ipa_get_init_data(krb5_context kcontext,
|
||||
krb5_klog_syslog(LOG_INFO, "Initializing IPA certauth plugin.");
|
||||
|
||||
ipactx = ipadb_get_context(kcontext);
|
||||
if (ipactx == NULL) {
|
||||
if (ipactx == NULL || ipactx->magic != IPA_CONTEXT_MAGIC) {
|
||||
return KRB5_KDB_DBNOTINITED;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user