1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
samba-mirror/lib/krb5_wrap
Alexander Bokovoy 57286d5773 s3-gse: move krb5 fallback to smb_gss_krb5_import_cred wrapper
MIT krb5 1.9 version of gss_krb5_import_cred() may fail when importing
credentials from a keytab without specifying actual principal.
This was fixed in MIT krb5 1.9.2 (see commit
71c3be093db577aa52f6b9a9a3a9f442ca0d8f20 in MIT krb5-1.9 branch, git
master's version is bd18687a705a8a6cdcb7c140764d1a7c6a3381b5).

Move fallback code to the smb_gss_krb5_import_cred wrapper. We only
expect this fallback to happen with krb5 GSSAPI mechanism, thus hard
code use of krb5 mech when calling to gss_acquire_cred.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12611

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Wed Mar  8 22:00:24 CET 2017 on sn-devel-144
2017-03-08 22:00:24 +01:00
..
enctype_convert.c libkrb5: Fix build with MIT Kerberos. 2012-08-29 12:23:37 +02:00
gss_samba.c s3-gse: move krb5 fallback to smb_gss_krb5_import_cred wrapper 2017-03-08 22:00:24 +01:00
gss_samba.h lib/krb5_wrap: add smb_gss_krb5_import_cred wrapper 2017-03-08 18:00:11 +01:00
keytab_util.c lib/krb4_wrap: Add const to kt_copy_one_principal 2012-08-29 23:46:17 +02:00
krb5_samba.c Correct "occured" typos. 2017-02-22 08:26:21 +01:00
krb5_samba.h krb5_wrap: Fix smb_krb5_mk_error() with MIT Kerberos 2016-09-11 02:58:22 +02:00
wscript_build wscript: remove executable bits for all wscript* files 2017-01-11 20:21:01 +01:00