7 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	bc473e5cf0	s3:libads: let kerberos_kinit_password_ext() return the canonicalized principal/realm ... BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org>	2019-09-24 18:30:37 +00:00
Stefan Metzmacher	48815cc16a	s3:libads: do an early return if we don't have a password for ads_kinit_password() ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>	2018-12-23 18:15:19 +01:00
Simo Sorce	893b213876	Avoid overriding default ccache for ads operations. ... Avoid overriding default ccache for ads operations. Nowadays various samba components may need to use GSSAPI and a default cred cache to perform their tasks. This code was completely overriding the whole process default ccache name, thus altering the current credentials and sometimes hijacking them (or getting preemptively hijaked). By using gss_krb5_import_cred we can instead use a private ccache (necessary sometimes to use a different set of credentials fromt he default cifs/fqdn@realm one, for example when contacting foreign DCs using trust credentials) that does not affect the rest of the process. For the kerberos versions which don't have gss_krb5_import_cred we fallback to temp override of KRB5CCNAME and gss_acquire_cred. Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104	2012-09-12 21:18:09 +02:00
Andrew Bartlett	f3562424b6	lib/param: Move all enum declarations to lib/param ... This is in preperation for the parameter table being made common. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>	2012-07-24 11:01:17 +02:00
Andrew Bartlett	b0798cc013	s3-libads: Remove unused ads_set_machine_password() ... Found by callcatcher. Andrew Bartlett	2012-02-23 16:14:19 +11:00
Andrew Bartlett	74eed8f3ed	s3-param Remove special case for global_myname(), rename to lp_netbios_name() ... There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett	2011-06-09 12:40:09 +02:00
Günther Deschner	e7a6a3ec0d	s3: avoid global include of ads.h. ... Guenther	2010-08-05 00:32:02 +02:00