summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndreas Schneider <anschneider@suse.de>2008-10-20 14:54:11 +0200
committerGünther Deschner <gd@samba.org>2008-10-21 15:26:39 +0200
commite858cc20830bc395f71f5f76ca68476bf798155f (patch)
tree879c9aa1e0aafc8ffb993600ab2fff093196f9d1
parent95b13b313bb35e97e4318e229ab7773c0218abae (diff)
downloadsamba-e858cc20830bc395f71f5f76ca68476bf798155f.tar.gz
samba-e858cc20830bc395f71f5f76ca68476bf798155f.tar.bz2
samba-e858cc20830bc395f71f5f76ca68476bf798155f.zip
Delete the krb5 ccname variable from the PAM environment if set.
If winbind sets the KRB5CCNAME variable it should unset it when the cache gets destroyed.
-rw-r--r--source3/nsswitch/pam_winbind.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/source3/nsswitch/pam_winbind.c b/source3/nsswitch/pam_winbind.c
index 4cfd9001d6..2967770d8d 100644
--- a/source3/nsswitch/pam_winbind.c
+++ b/source3/nsswitch/pam_winbind.c
@@ -2740,6 +2740,14 @@ out:
user, "wbcLogoffUser");
}
+ /*
+ * Delete the krb5 ccname variable from the PAM environment
+ * if it was set by winbind.
+ */
+ if (ctx->ctrl & WINBIND_KRB5_AUTH) {
+ pam_putenv(pamh, "KRB5CCNAME");
+ }
+
_PAM_LOG_FUNCTION_LEAVE("pam_sm_close_session", ctx, retval);
TALLOC_FREE(ctx);