summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2011-07-24 22:02:21 +0200
committerStefan Metzmacher <metze@samba.org>2011-07-25 09:45:01 +0200
commit188b28b9d99ee97176c910b506cb542b5eff01ff (patch)
tree8622477a7c144deffad6438049ac437d623f9b1e
parent9190345bf513e76996481bf7a7abdcb72e840d63 (diff)
downloadsamba-188b28b9d99ee97176c910b506cb542b5eff01ff.tar.gz
samba-188b28b9d99ee97176c910b506cb542b5eff01ff.tar.bz2
samba-188b28b9d99ee97176c910b506cb542b5eff01ff.zip
s4:auth/kerberos: activate windows related krb5 flags
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jul 25 09:45:01 CEST 2011 on sn-devel-104
-rw-r--r--source4/auth/kerberos/kerberos_util.c10
1 files changed, 10 insertions, 0 deletions
diff --git a/source4/auth/kerberos/kerberos_util.c b/source4/auth/kerberos/kerberos_util.c
index 9a48e95c6d..c255e6605a 100644
--- a/source4/auth/kerberos/kerberos_util.c
+++ b/source4/auth/kerberos/kerberos_util.c
@@ -394,6 +394,16 @@ krb5_error_code principal_from_credentials(TALLOC_CTX *parent_ctx,
break;
}
+ /*
+ * In order to work against windows KDCs even if we use
+ * the netbios domain name as realm, we need to add the following
+ * flags:
+ * KRB5_INIT_CREDS_NO_C_CANON_CHECK;
+ * KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK;
+ */
+ krb5_get_init_creds_opt_set_win2k(smb_krb5_context->krb5_context,
+ krb_options, true);
+
tries = 2;
while (tries--) {
struct tevent_context *previous_ev;