1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/source4/auth/gensec
Stefan Metzmacher db8fd3d6a3 s4:auth: use the correct client realm in gensec_gssapi_update_internal()
The function gensec_gssapi_client_creds() may call kinit and gets
a TGT for the user. The principal provided by the user may not
be canonicalized. The user may use 'given.last@example.com'
but that may be mapped to glast@AD.EXAMPLE.PRIVATE in the background.

It means we should use client_realm = AD.EXAMPLE.PRIVATE
instead of client_realm = EXAMPLE.COM

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
2019-09-24 18:30:37 +00:00
..
gensec_gssapi.c s4:auth: use the correct client realm in gensec_gssapi_update_internal() 2019-09-24 18:30:37 +00:00
gensec_gssapi.h s4:gensec-gssapi: Create a helper function to setup server_principal 2017-03-10 11:37:21 +01:00
gensec_krb5_heimdal.c gensec_krb5: Rename smb_rd_req_return_stuff() 2016-08-30 11:34:14 +02:00
gensec_krb5_mit.c gensec_krb5: Implement smb_krb5_rd_req_decoded() with MIT Kerberos 2016-09-29 11:56:41 +02:00
gensec_krb5.c s4:auth: Add FALL_THROUGH statements in gensec_krb5.c 2018-03-01 04:37:43 +01:00
gensec_krb5.h gensec_krb5: Rename smb_rd_req_return_stuff() 2016-08-30 11:34:14 +02:00
gensec_tstream.c s4:gensec_tstream: allow wrapped messages up to a size of 0xfffffff 2016-04-28 16:51:15 +02:00
gensec_tstream.h
pygensec.c s4/gensec/py: avoid null deref with bad python arguments 2019-07-22 22:20:26 +00:00
wscript_build build: Remove bld.gen_python_environments() 2019-03-21 04:06:14 +00:00