From 687e4eba3cced6015fdcaac2c6ba675cdebc1273 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Sat, 30 Jan 2010 19:24:28 -0800 Subject: Fix bug #7079 - cliconnect gets realm wrong with trusted domains. Passing NULL as dest_realm for cli_session_setup_spnego() was always using our own realm (as for a NetBIOS name). Change this to look for the mapped realm using krb5_get_host_realm() if the destination machine name is a DNS name (contains a '.'). Could get fancier with DNS name detection (length, etc.) but this will do for now. Jeremy. --- source3/include/proto.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'source3/include/proto.h') diff --git a/source3/include/proto.h b/source3/include/proto.h index f0ccc92c46..fa4a40c435 100644 --- a/source3/include/proto.h +++ b/source3/include/proto.h @@ -1795,6 +1795,8 @@ char* kerberos_standard_des_salt( void ); bool kerberos_secrets_store_des_salt( const char* salt ); char* kerberos_secrets_fetch_des_salt( void ); char *kerberos_get_default_realm_from_ccache( void ); +char *kerberos_get_realm_from_hostname(const char *hostname); + bool kerberos_secrets_store_salting_principal(const char *service, int enctype, const char *principal); -- cgit