summaryrefslogtreecommitdiff
path: root/source4/auth/kerberos/kerberos_util.c
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2005-12-22 06:50:04 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:47:36 -0500
commit9a9cb35cbd96d813f047c4b57a8b8c0c0cb7c25b (patch)
treef105feca1c341f8298848386454cccf21e293a58 /source4/auth/kerberos/kerberos_util.c
parent8e0948bbad959f8809a19e40e6777705013f866c (diff)
downloadsamba-9a9cb35cbd96d813f047c4b57a8b8c0c0cb7c25b.tar.gz
samba-9a9cb35cbd96d813f047c4b57a8b8c0c0cb7c25b.tar.bz2
samba-9a9cb35cbd96d813f047c4b57a8b8c0c0cb7c25b.zip
r12422: Some kerberos comments and clarifications.
Andrew Bartlett (This used to be commit 31046cd22b45de6c62c9f122a81cfc898e818308)
Diffstat (limited to 'source4/auth/kerberos/kerberos_util.c')
-rw-r--r--source4/auth/kerberos/kerberos_util.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/source4/auth/kerberos/kerberos_util.c b/source4/auth/kerberos/kerberos_util.c
index d8c650b098..d3edd1b26c 100644
--- a/source4/auth/kerberos/kerberos_util.c
+++ b/source4/auth/kerberos/kerberos_util.c
@@ -89,6 +89,8 @@ krb5_error_code salt_principal_from_credentials(TALLOC_CTX *parent_ctx,
}
if (ret == 0) {
+ /* This song-and-dance effectivly puts the principal
+ * into talloc, so we can't loose it. */
mem_ctx->smb_krb5_context = talloc_reference(mem_ctx, smb_krb5_context);
mem_ctx->principal = *salt_princ;
talloc_set_destructor(mem_ctx, free_principal);
@@ -115,7 +117,8 @@ krb5_error_code principal_from_credentials(TALLOC_CTX *parent_ctx,
princ_string = cli_credentials_get_principal(credentials, mem_ctx);
- /* A NULL here has meaning, as the gssapi server case will then use the principal from the client */
+ /* A NULL here has meaning, as the gssapi server case will
+ * then use the principal from the client */
if (!princ_string) {
talloc_free(mem_ctx);
princ = NULL;
@@ -548,7 +551,7 @@ static krb5_error_code remove_old_entries(TALLOC_CTX *parent_ctx,
* because deletes during enumeration may not
* always be consistant.
*
- * Also, the enumeration locks the keytab
+ * Also, the enumeration locks a FILE: keytab
*/
krb5_kt_end_seq_get(smb_krb5_context->krb5_context, keytab, &cursor);