Attachment 576740 Details for Bug 811518 – If canon'ing principals, write ccache with updated default principal

[patch] If canon'ing principals, write ccache with updated default principal

If-canoning-principals-write-ccache-with-updated-d.patch (text/plain), 1.21 KB, created by Stef Walter on 2012-04-11 10:27:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Stef Walter

Created: 2012-04-11 10:27:58 UTC

Size: 1.21 KB

patch

obsolete

>From fb847807a41887ac63f1a4b95b38e17939be6f11 Mon Sep 17 00:00:00 2001
>From: Stef Walter <stefw@gnome.org>
>Date: Wed, 11 Apr 2012 12:12:57 +0200
>Subject: [PATCH] If canon'ing principals, write ccache with updated default
> principal
>
> * When calling krb5_get_init_creds_keytab() with
>   krb5_get_init_creds_opt_set_canonicalize() the credential
>   principal can get updated.
> * Create the cache file with the correct default credential.
> * LDAP GSSAPI SASL would fail due to the mismatched credentials
>   before this patch.
>
>https://bugzilla.redhat.com/show_bug.cgi?id=811518
>---
> src/providers/ldap/ldap_child.c |    2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
>diff --git a/src/providers/ldap/ldap_child.c b/src/providers/ldap/ldap_child.c
>index ab91559..eeaa6d7 100644
>--- a/src/providers/ldap/ldap_child.c
>+++ b/src/providers/ldap/ldap_child.c
>@@ -296,7 +296,7 @@ static krb5_error_code ldap_child_get_tgt_sync(TALLOC_CTX *memctx,
>         goto done;
>     }
> 
>-    krberr = krb5_cc_initialize(context, ccache, kprinc);
>+    krberr = krb5_cc_initialize(context, ccache, my_creds.client);
>     if (krberr) {
>         DEBUG(2, ("Failed to init ccache: %s\n",
>                   sss_krb5_get_error_message(context, krberr)));
>-- 
>1.7.9.3

Actions: View | Diff

Attachments on bug 811518: 576740