{"push_id":803113608,"size":4,"distinct_size":4,"ref":"refs/heads/master","head":"ad50822bf010c5a7917f160b4d4b39e71f15d086","before":"f2efa15ef8c083926791195ed1037fd47a5e4e41","commits":[{"sha":"1201d5d8aeb0651a6fe195bc8232128ddf6e8b28","author":{"email":"354e29cfbea2f74d5ce81a3b79d7f0264830cb78@netapp.com","name":"Andy Adamson"},"message":"GSSD: move process_krb5_upcall machine cred case to helper function\n\nSigned-off-by: Andy Adamson <andros@netapp.com>\nSigned-off-by: Jeff Layton <jlayton@poochiereds.net>\nSigned-off-by: Steve Dickson <steved@redhat.com>","distinct":true,"url":"https://api.github.com/repos/kinglongmee/pnfs-nfs-utils/commits/1201d5d8aeb0651a6fe195bc8232128ddf6e8b28"},{"sha":"cbe19a1d34d4d13f41337047da26ec1ef82ed44c","author":{"email":"354e29cfbea2f74d5ce81a3b79d7f0264830cb78@netapp.com","name":"Andy Adamson"},"message":"GSSD: move process_krb5_updcall non machine cred case to helper function\n\nSigned-off-by: Andy Adamson <andros@netapp.com>\nSigned-off-by: Jeff Layton <jlayton@poochiereds.net>\nSigned-off-by: Steve Dickson <steved@redhat.com>","distinct":true,"url":"https://api.github.com/repos/kinglongmee/pnfs-nfs-utils/commits/cbe19a1d34d4d13f41337047da26ec1ef82ed44c"},{"sha":"30c37b2dd6decdd65a33b956a5ae4b548de63a6d","author":{"email":"354e29cfbea2f74d5ce81a3b79d7f0264830cb78@netapp.com","name":"Andy Adamson"},"message":"GSSD only fork when uid is not zero\n\ncommit f9cac65972da588d5218236de60a7be11247a8aa\nadded the fork to process_krb5_upcall so that the\nchild assumes the uid of the principal requesting\nservice.\n\nWhen machine credentials are used, a gssd_k5_kt_princ\nentry is added to a global list and used by future\nupcalls to note when valid machine credentials have\nbeen obtained. When a child process performs this task,\nthe entry to the global list is lost upon exit, and\nall upcalls for machine credentials re-fetch a TGT,\neven when a valid TGT is in the machine kerberos\ncredential cache.\n\nSince forking is not necessary when the principal has\nuid=0, solve the gssd_k5_kt_princ_list issue by only\nforking when the uid != 0.\n\nAcked-by: Jeff Layton <jlayton@poochiereds.net>\nSigned-off-by: Andy Adamson <andros@netapp.com>\nSigned-off-by: Steve Dickson <steved@redhat.com>","distinct":true,"url":"https://api.github.com/repos/kinglongmee/pnfs-nfs-utils/commits/30c37b2dd6decdd65a33b956a5ae4b548de63a6d"},{"sha":"ad50822bf010c5a7917f160b4d4b39e71f15d086","author":{"email":"354e29cfbea2f74d5ce81a3b79d7f0264830cb78@netapp.com","name":"Andy Adamson"},"message":"GSSD: clean up machine credentials\n\nSince we no longer fork for uid 0, gssd_atexit()\nis only called when uid != 0, and fails as permissions\non the /tmp/krb5ccmachine_REALM file prohibit the\nclean up of machine credentials (as it should).\n\nMove the reaping of machine credentials back into a\nSIGINT sighandler so that <Ctrl-C> destroyes\nmachine credentials.\n\nSigned-off-by: Andy Adamson <andros@netapp.com>\nSigned-off-by: Steve Dickson <steved@redhat.com>","distinct":true,"url":"https://api.github.com/repos/kinglongmee/pnfs-nfs-utils/commits/ad50822bf010c5a7917f160b4d4b39e71f15d086"}]}