sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code

r6700: Upper case realms in kerberos-specific parts of the code, as this is

Browse Source 
no longer done globally.

This keeps MIT client libraries happy, because otherwise the windows
KDC will return a different case to what was requested.

Andrew Bartlett
This commit is contained in:
Andrew Bartlett 2005-05-10 09:51:55 +00:00 committed by Gerald (Jerry) Carter
parent 6d7f1daaf2
commit 9098b9321f
2 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
source/auth/gensec/gensec_krb5.c
View File

@ -284,7 +284,12 @@ static NTSTATUS gensec_krb5_start(struct gensec_security *gensec_security)
}
if (lp_realm() && *lp_realm()) {
ret = krb5_set_default_realm(gensec_krb5_state->context, lp_realm());
char *upper_realm = strupper_talloc(gensec_krb5_state, lp_realm());
if (!upper_realm) {
DEBUG(1,("gensec_krb5_start: could not uppercase realm: %s\n", lp_realm()));
return NT_STATUS_NO_MEMORY;
}
ret = krb5_set_default_realm(gensec_krb5_state->context, upper_realm);
if (ret) {
DEBUG(1,("gensec_krb5_start: krb5_set_default_realm failed (%s)\n", error_message(ret)));
return NT_STATUS_INTERNAL_ERROR;

6
source/lib/credentials.c
View File

@ -175,10 +175,14 @@ char *cli_credentials_get_principal(struct cli_credentials *cred,
cli_credentials_get_realm(cred));
}
/**
* Set the realm for this credentials context, and force it to
* uppercase for the sainity of our local kerberos libraries
*/
BOOL cli_credentials_set_realm(struct cli_credentials *cred, const char *val, enum credentials_obtained obtained)
{
if (obtained >= cred->realm_obtained) {
cred->realm = talloc_strdup(cred, val);
cred->realm = strupper_talloc(cred, val);
cred->realm_obtained = obtained;
return True;
}