Simo Sorce 893b213876 Avoid overriding default ccache for ads operations. ... Avoid overriding default ccache for ads operations. Nowadays various samba components may need to use GSSAPI and a default cred cache to perform their tasks. This code was completely overriding the whole process default ccache name, thus altering the current credentials and sometimes hijacking them (or getting preemptively hijaked). By using gss_krb5_import_cred we can instead use a private ccache (necessary sometimes to use a different set of credentials fromt he default cifs/fqdn@realm one, for example when contacting foreign DCs using trust credentials) that does not affect the rest of the process. For the kerberos versions which don't have gss_krb5_import_cred we fallback to temp override of KRB5CCNAME and gss_acquire_cred. Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104		2012-09-12 21:18:09 +02:00
..
ads_ldap_protos.h	s3-libads: Remove unused ads_pull_sids_from_extendeddn()	2012-02-23 16:14:19 +11:00
ads_proto.h	s3-libads: Remove unused ads_set_machine_password()	2012-02-23 16:14:19 +11:00
ads_status.c	s3-libads: Map LDAP_TIMELIMIT_EXCEEDED as NT_STATUS_IO_TIMEOUT	2012-05-26 02:03:07 +02:00
ads_status.h	source3/libads/ads_status.h: fix licence/copyright	2011-06-10 15:12:19 +02:00
ads_struct.c	Avoid overriding default ccache for ads operations.	2012-09-12 21:18:09 +02:00
authdata.c	auth: Common function for retrieving PAC_LOGIN_INFO from PAC	2012-07-06 20:45:51 +10:00
cldap.c	Add cldap_multi_netlogon_send/recv	2011-10-17 09:52:29 +02:00
cldap.h	Add cldap_multi_netlogon_send/recv	2011-10-17 09:52:29 +02:00
disp_sec.c	s3-libndr: add ../librpc/ndr/libndr.h include in some places.	2011-03-31 00:14:01 +02:00
kerberos_keytab.c	Check error returns from strupper_m() (in all reasonable places).	2012-08-09 12:06:54 -07:00
kerberos_proto.h	Make krb5 wrapper library common so they can be used all over	2012-04-23 19:20:38 -04:00
kerberos_util.c	Avoid overriding default ccache for ads operations.	2012-09-12 21:18:09 +02:00
kerberos.c	Correctly check for errors in strlower_m() returns.	2012-08-09 12:08:18 -07:00
krb5_errs.c	s3-kerberos: only use krb5 headers where required.	2009-11-27 16:36:00 +01:00
krb5_setpw.c	s3-build: only include asn1 headers where actually needed.	2011-03-16 23:46:18 +01:00
ldap_printer.c	s3:registry: remove usage of reg_objects from libads/ldap_printer.c	2012-04-25 14:11:06 +02:00
ldap_schema.c	s3-talloc Change TALLOC_P() to talloc()	2011-06-09 12:40:08 +02:00
ldap_schema.h	source3/libads/ldap_schema.h: fix licence/copyright	2011-06-10 15:12:22 +02:00
ldap_user.c	s3: avoid global include of ads.h.	2010-08-05 00:32:02 +02:00
ldap_utils.c	lib/param: Move all enum declarations to lib/param	2012-07-24 11:01:17 +02:00
ldap.c	s3-smbldap: use smbldap_ prefixed functions	2012-09-07 12:31:42 +02:00
ndr.c	lib/param: Move all enum declarations to lib/param	2012-07-24 11:01:17 +02:00
sasl_wrapping.c	s3: avoid global include of ads.h.	2010-08-05 00:32:02 +02:00
sasl.c	Avoid overriding default ccache for ads operations.	2012-09-12 21:18:09 +02:00
sitename_cache.c	s3 move the sitename cache in its own file	2010-02-23 12:46:26 -05:00
sitename_cache.h	s3 move the sitename cache in its own file	2010-02-23 12:46:26 -05:00
util.c	s3-libads: make ads_guess_service_principal static.	2011-02-11 12:22:41 +01:00