SSSD / sssd

#3419 krb5: properly handle 'password expired' information retured by the KDC during PKINIT/Smartcard authentication
Closed: Fixed Opened by sbose.

Closed: Fixed
Reopen Issue

Current during Smartcard/PKINIT authentication the PAM client gets confused by additional data which is send if the user password, which is not used for this authentication type, is expired.

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.15.3

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1459846

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1459846

Issue linked to Bugzilla: Bug 1459846

Metadata Update from @sbose:
- Issue assigned to sbose

https://github.com/SSSD/sssd/pull/305

Metadata Update from @sbose:
- Custom field patch adjusted to on

Metadata Update from @jhrozek:
- Issue priority set to: major
  • master: 7e2ec7caa2d1c17e475fff78c5025496b8695509

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4446

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
https://bugzilla.redhat.com/show_bug.cgi?id=1459846
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.