1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/source3
Alexander Bokovoy 57286d5773 s3-gse: move krb5 fallback to smb_gss_krb5_import_cred wrapper
MIT krb5 1.9 version of gss_krb5_import_cred() may fail when importing
credentials from a keytab without specifying actual principal.
This was fixed in MIT krb5 1.9.2 (see commit
71c3be093db577aa52f6b9a9a3a9f442ca0d8f20 in MIT krb5-1.9 branch, git
master's version is bd18687a705a8a6cdcb7c140764d1a7c6a3381b5).

Move fallback code to the smb_gss_krb5_import_cred wrapper. We only
expect this fallback to happen with krb5 GSSAPI mechanism, thus hard
code use of krb5 mech when calling to gss_acquire_cred.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12611

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Wed Mar  8 22:00:24 CET 2017 on sn-devel-144
2017-03-08 22:00:24 +01:00
..
auth auth3: Simplify get_system_info3 2017-02-27 11:31:53 +01:00
build
client Modify smbspool_krb5_wrapper to just fall through to smbspool if AUTH_INFO_REQUIRED is not set or is not "negotiate". 2017-02-17 04:27:26 +01:00
exports
groupdb Correct "errror" typos. 2017-02-22 08:26:22 +01:00
include s3/includes: add FinderInfo offset define to MacExtensions.h 2017-03-02 00:32:20 +01:00
intl
lib lib: Make gencache hash size configurable, default to 10000 2017-03-03 21:55:26 +01:00
libads libads: convert to use smb_gss_krb5_import_cred 2017-03-08 18:00:12 +01:00
libgpo libgpo: apply some const. 2017-01-06 12:28:19 +01:00
libnet s3:libnet_join: make use of trust_pw_new_value() 2017-02-21 16:09:22 +01:00
librpc s3-gse: move krb5 fallback to smb_gss_krb5_import_cred wrapper 2017-03-08 22:00:24 +01:00
libsmb libcli/smb: add max_credits arg to smbXcli_negprot_send() 2017-03-03 21:55:27 +01:00
locale Correct "descriptior" typos. 2017-02-22 08:26:22 +01:00
locking s3/locking: Avoid a talloc for nonexisting fetch_share_mode_unlocked 2017-01-22 18:30:11 +01:00
modules vfs_fruit: enabling AAPL extensions must be a global switch 2017-03-02 04:34:10 +01:00
nmbd Correct "errror" typos. 2017-02-22 08:26:22 +01:00
param rpc_server: Allow to configure the port range for RPC services 2017-01-27 08:09:15 +01:00
passdb s3:passdb: use cli_credentials_set_kerberos_state() for trusts in pdb_get_trust_credentials() 2017-02-24 18:40:14 +01:00
printing Correct "somthing" typos. 2017-02-22 08:26:23 +01:00
profile s3-profile: reduce dependencies of smbprofile.h 2016-03-28 20:45:16 +02:00
registry Correct "existence" typos. 2017-02-22 08:26:22 +01:00
rpc_client cli_netlogon: Add return parms to rpccli_netlogon_password_logon 2017-03-07 09:15:17 +01:00
rpc_server Correct "Openened" typos. 2017-02-22 08:26:24 +01:00
rpcclient cli_netlogon: Add return parms to rpccli_netlogon_password_logon 2017-03-07 09:15:17 +01:00
script Correct "follwing" typos. 2017-02-22 08:26:22 +01:00
selftest selftest: add shares without vfs_fruit for the vfs_fruit tests 2017-03-02 00:32:23 +01:00
services Update smbrun to allow for settings environment variables. 2016-10-13 04:26:26 +02:00
smbd smbd: Do an early exit on negprot failure 2017-03-03 02:24:09 +01:00
torture libcli/smb: add max_credits arg to smbXcli_negprot_send() 2017-03-03 21:55:27 +01:00
utils testparm: remove check for "ea support" in fruit shares 2017-03-02 22:30:23 +01:00
web
winbindd idmap_autorid: allocate new domain range if the callers knows the sid is valid 2017-03-08 04:06:59 +01:00
.clang_complete
.dmallocrc
.indent.pro
change-log Correct "existence" typos. 2017-02-22 08:26:22 +01:00
Doxyfile
mainpage.dox
smbadduser.in
wscript build:wafsamba: Remove ambiguous 'if x in conf.env' constructs 2017-02-21 13:47:07 +01:00
wscript_build s3:wscript_build: remove unused bld.RECURSE('lib/pthreadpool') 2017-02-23 23:58:21 +01:00
wscript_configure_system_ncurses