r1475: More kerberos work

- We can now connect to hosts that follow the SPNEGO RFC, and *do not*
give us their principal name in the mechListMIC.
 - The client code now remembers the hostname it connects to

- We now kinit for a user, if there is not valid ticket already

- Re-introduce clock skew compensation

TODO:
 - See if the username in the ccache matches the username specified
 - Use a private ccache, rather then the global one, for a 'new' kinit
 - Determine 'default' usernames.
  - The default for Krb5 is the one in the ccache, then $USER
  - For NTLMSSP, it's just $USER

Andrew Bartlett
(This used to be commit de5da669397db4ac87c6da08d3533ca3030da2b0)

1 files changed, 10 insertions, 1 deletions

diff --git a/source4/libcli/raw/clisocket.c b/source4/libcli/raw/clisocket.c
index 4dae7d517d..5cd6f33689 100644
--- a/source4/libcli/raw/clisocket.c
+++ b/source4/libcli/raw/clisocket.c
@@ -45,6 +45,8 @@ struct cli_socket *cli_sock_init(void)
 	/* 20 second default timeout */
 	sock->timeout = 20000;
 
+	sock->hostname = NULL;
+
 	return sock;
 }
 
@@ -140,6 +142,7 @@ BOOL cli_sock_connect_byname(struct cli_socket *sock, const char *host, int port
 	struct in_addr ip;
 	TALLOC_CTX *mem_ctx;
 	char *name, *p;
+	BOOL ret;
 
 	if (getenv("LIBSMB_PROG")) {
 		sock->fd = sock_exec(getenv("LIBSMB_PROG"));
@@ -162,7 +165,13 @@ BOOL cli_sock_connect_byname(struct cli_socket *sock, const char *host, int port
 		return False;
 	}
 
+	ret = cli_sock_connect(sock, &ip, port);
+
+	if (ret) {
+		sock->hostname = talloc_steal(mem_ctx, sock->mem_ctx, name);
+	}
+
 	talloc_destroy(mem_ctx);
 
-	return cli_sock_connect(sock, &ip, port);
+	return ret;
 }