mirror of
https://github.com/samba-team/samba.git
synced 2024-12-22 13:34:15 +03:00
dab9456cfc
We should not have cli_credentials_get_realm() return "" without a
configured (default) realm in smb.conf.
Note that the existing tests with creds.get_realm() == lp.get("realm")
also work with "" as string.
At the same time we should never let cli_credentials_get_principal()
return "@REALM.EXAMPLE.COM" nor "username@".
If cli_credentials_parse_string() gets "OTHERDOMAIN\username"
we must not use cli_credentials_get_realm() to generate
a principal unless cli_credentials_get_domain() returns
also "OTHERDOMAIN". What we need to do is using
username@OTHERDOMAIN as principal, whild we still
use cli_credentials_get_realm to get a default kdc,
(which may route us to the correct kdc with WRONG_REALM
messages).
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
|
||
|---|---|---|
| .. | ||
| tests | ||
| credentials_internal.h | ||
| credentials_krb5.c | ||
| credentials_krb5.h | ||
| credentials_ntlm.c | ||
| credentials_secrets.c | ||
| credentials.c | ||
| credentials.h | ||
| pycredentials.c | ||
| pycredentials.h | ||
| samba-credentials.pc.in | ||
| wscript_build | ||