diff options
| author | Stefan Metzmacher <metze@samba.org> | 2016-12-29 15:20:00 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2017-01-10 13:54:17 +0100 |
| commit | 3a870baee8d9dbe5359f04a108814afc27e57d46 (patch) | |
| tree | a626a380ae06700619e78fdb681347c342a7343a /source4/auth | |
| parent | 48bcca566ebb3a5385b15b0525d7fbdd06361e04 (diff) | |
| download | samba-3a870baee8d9dbe5359f04a108814afc27e57d46.tar.gz | |
s4:gensec_gssapi: require a realm in gensec_gssapi_client_start()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'source4/auth')
| -rw-r--r-- | source4/auth/gensec/gensec_gssapi.c | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index 3974c3d42a0..2ae2e23f3d2 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -330,6 +330,16 @@ static NTSTATUS gensec_gssapi_client_start(struct gensec_security *gensec_securi return NT_STATUS_INVALID_PARAMETER; } + if (realm == NULL) { + char *cred_name = cli_credentials_get_unparsed_name(creds, + gensec_security); + DEBUG(3, ("cli_credentials(%s) without realm, " + "cannot use kerberos for this connection %s/%s\n", + cred_name, service, hostname)); + TALLOC_FREE(cred_name); + return NT_STATUS_INVALID_PARAMETER; + } + do_start: nt_status = gensec_gssapi_start(gensec_security); |