mirror of
https://github.com/samba-team/samba.git
synced 2025-01-26 10:04:02 +03:00
6222d572ee
It is easier for external callers to manipulate the krb5_get_init_creds_opt (via the helpers) as this is passed down from higher up than the krb5_init_creds_context. And just as importantly, alignment with MIT makes end-user callers happier. Finally, this resolves the ambiguity as to which layer owns the krb5_ccache, because now we match the MIT behaviour the init_creds code re-opens a private copy inside libkrb5, meaning the caller closes the cache it opened, rather than handing it over to the library. (The unrelated changes are fixes to the test_pac test, also included in this import, but in distinct lorikeet-heimdal commits, to allow it to compile) Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>