diff options
| author | Stefan Metzmacher <metze@samba.org> | 2019-09-13 16:04:30 +0200 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2019-09-24 18:30:37 +0000 |
| commit | 5d0bf32ec0ad21d49587e3a1520ffdc8b5ae7614 (patch) | |
| tree | 618fe57fab5ee94cb4672c04238db89bde403edd /lib/krb5_wrap | |
| parent | 0bced73bed481a8846a6b3e68be85941914390ba (diff) | |
| download | samba-5d0bf32ec0ad21d49587e3a1520ffdc8b5ae7614.tar.gz | |
krb5_wrap: smb_krb5_kinit_password_ccache() should always use the canonicalized principal
We should always use krb5_get_init_creds_opt_set_canonicalize()
and krb5_get_init_creds_opt_set_win2k() for heimdal
and expect the client principal to be changed.
There's no reason to have a different logic between MIT and Heimdal.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14124
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
Diffstat (limited to 'lib/krb5_wrap')
| -rw-r--r-- | lib/krb5_wrap/krb5_samba.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/lib/krb5_wrap/krb5_samba.c b/lib/krb5_wrap/krb5_samba.c index 72889fffcf0..55c17d481f4 100644 --- a/lib/krb5_wrap/krb5_samba.c +++ b/lib/krb5_wrap/krb5_samba.c @@ -2114,14 +2114,12 @@ krb5_error_code smb_krb5_kinit_password_ccache(krb5_context ctx, return code; } -#ifndef SAMBA4_USES_HEIMDAL /* MIT */ /* * We need to store the principal as returned from the KDC to the * credentials cache. If we don't do that the KRB5 library is not * able to find the tickets it is looking for */ principal = my_creds.client; -#endif code = krb5_cc_initialize(ctx, cc, principal); if (code) { goto done; |