sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-02 00:22:11 +03:00
Code Activity

nssswitch: Log user access to kerberos

Browse Source 
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Noel Power <npower@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Mon Feb 18 13:01:12 CET 2019 on sn-devel-144
This commit is contained in:
Andreas Schneider
2018-11-16 18:23:35 +01:00
committed by Andreas Schneider
parent 6b4ae52f22
commit 03357bc825
1 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
nsswitch/krb5_plugin/winbind_krb5_localauth.c
View File

@ -98,14 +98,12 @@ static krb5_error_code winbind_userok(krb5_context context,
cmp = strcasecmp(princ_str, lname);
if (cmp == 0) {
krb5_free_unparsed_name(context, princ_str);
return 0;
goto out;
}
wbc_status = wbcCtxGetpwnam(data->wbc_ctx,
princ_str,
&pwd);
krb5_free_unparsed_name(context, princ_str);
switch (wbc_status) {
case WBC_ERR_SUCCESS:
princ_uid = pwd->pw_uid;
@ -123,7 +121,7 @@ static krb5_error_code winbind_userok(krb5_context context,
}
wbcFreeMemory(pwd);
if (code != 0) {
return code;
goto out;
}
wbc_status = wbcCtxGetpwnam(data->wbc_ctx,
@ -145,13 +143,26 @@ static krb5_error_code winbind_userok(krb5_context context,
}
wbcFreeMemory(pwd);
if (code != 0) {
return code;
goto out;
}
if (princ_uid != lname_uid) {
code = EPERM;
}
com_err("winbind_localauth",
code,
"Access %s: %s (uid=%u) %sequal to %s (uid=%u)",
code == 0 ? "granted" : "denied",
princ_str,
(unsigned int)princ_uid,
code == 0 ? "" : "not ",
lname,
(unsigned int)lname_uid);
out:
krb5_free_unparsed_name(context, princ_str);
return code;
}