diff options
| author | Günther Deschner <gd@samba.org> | 2014-05-07 08:24:15 +0200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2014-08-08 06:02:35 +0200 |
| commit | 759c9b03e4b3560b0a17f364503ad9489033cb76 (patch) | |
| tree | be5176b35ab115875dd4a9814c7cde831b313d41 | |
| parent | 7f619503988cc88b2e2e5d0b938b7ba124ac6d04 (diff) | |
| download | samba-759c9b03e4b3560b0a17f364503ad9489033cb76.tar.gz | |
s4-auth/kerberos: add a note how to implement krb5_get_init_creds_opt_set_win2k() with MIT.
Guenther
Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
| -rw-r--r-- | source4/auth/kerberos/kerberos_util.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/source4/auth/kerberos/kerberos_util.c b/source4/auth/kerberos/kerberos_util.c index b65a2adc5ef..c2e48fd5155 100644 --- a/source4/auth/kerberos/kerberos_util.c +++ b/source4/auth/kerberos/kerberos_util.c @@ -218,6 +218,8 @@ static krb5_error_code impersonate_principal_from_credentials( * flags: * KRB5_INIT_CREDS_NO_C_CANON_CHECK; * KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK; + * + * On MIT: Set pkinit_eku_checking to none */ krb5_get_init_creds_opt_set_win2k(smb_krb5_context->krb5_context, krb_options, true); |