URL: https://github.com/SSSD/sssd/pull/5432 Author: pbrezina Title: #5432: kcm: decode base64 encoded secret on upgrade path Action: opened PR body: """ Previous unefficient code encoded the secret multiple times: secret -> base64 -> masterkey -> base64 To allow smooth upgrade for already existant ccache we need to also decode the secret if it is still in the old format (type == simple). Otherwise users are not able to log in. Resolves: https://github.com/SSSD/sssd/issues/5349 To test, build SSSD without recent KCM performance patches. Run SSSD, login as a Kerberized user to create ccache and log out. Then apply the patches, and rebuild. Make sure to restart sssd-kcm. Try to log in - it should fail. Apply this patch - the login should succeed. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5432/head:pr5432 git checkout pr5432