From c84e6aebc202838267d2a4b172f640b52a201bbb Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Tue, 21 Aug 2012 11:24:58 -0700 Subject: Fix bug #9098 - winbind does not refresh kerberos tickets. Based on work from Ian Gordon . Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Tue Aug 21 22:01:15 CEST 2012 on sn-devel-104 --- source3/winbindd/winbindd_pam.c | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'source3/winbindd/winbindd_pam.c') diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index d8febe6a5c..6ad0baf196 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -646,6 +646,7 @@ static NTSTATUS winbindd_raw_kerberos_login(TALLOC_CTX *mem_ctx, cc, service, user, + pass, realm, uid, time(NULL), @@ -965,6 +966,7 @@ static NTSTATUS winbindd_dual_pam_auth_cached(struct winbindd_domain *domain, cc, service, state->request->data.auth.user, + state->request->data.auth.pass, domain->alt_name, uid, time(NULL), @@ -2127,6 +2129,13 @@ enum winbindd_result winbindd_dual_pam_logoff(struct winbindd_domain *domain, goto process_result; } + /* + * Remove any mlock'ed memory creds in the child + * we might be using for krb5 ticket renewal. + */ + + winbindd_delete_memory_creds(state->request->data.logoff.user); + #else result = NT_STATUS_NOT_SUPPORTED; #endif -- cgit