git.samba.org
/
samba.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
7f61950
)
s4-auth/kerberos: add a note how to implement krb5_get_init_creds_opt_set_win2k(...
author
Günther Deschner
<gd@samba.org>
Wed, 7 May 2014 06:24:15 +0000
(08:24 +0200)
committer
Andrew Bartlett
<abartlet@samba.org>
Fri, 8 Aug 2014 04:02:35 +0000
(06:02 +0200)
Guenther
Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/auth/kerberos/kerberos_util.c
patch
|
blob
|
history
diff --git
a/source4/auth/kerberos/kerberos_util.c
b/source4/auth/kerberos/kerberos_util.c
index b65a2adc5efc2327bf3fc2ab149c430489c32819..c2e48fd51550e0e417e4403c2ae2f822b0f52177 100644
(file)
--- a/
source4/auth/kerberos/kerberos_util.c
+++ b/
source4/auth/kerberos/kerberos_util.c
@@
-218,6
+218,8
@@
static krb5_error_code impersonate_principal_from_credentials(
* flags:
* KRB5_INIT_CREDS_NO_C_CANON_CHECK;
* KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK;
+ *
+ * On MIT: Set pkinit_eku_checking to none
*/
krb5_get_init_creds_opt_set_win2k(smb_krb5_context->krb5_context,
krb_options, true);