summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-12-17 22:08:59 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-12-18 19:04:06 +0100
commitf2999e1d624d45e0142f39317461a6a1c996efb2 (patch)
tree17f2cdce076b006de9be21745f131a17e211e079
parent185dcb88690f45c7886c95076bd189877aef2289 (diff)
downloadsssd-f2999e1d624d45e0142f39317461a6a1c996efb2.tar.gz
sssd-f2999e1d624d45e0142f39317461a6a1c996efb2.tar.bz2
sssd-f2999e1d624d45e0142f39317461a6a1c996efb2.zip
select_principal_from_keytab() look for plain input as well
Currently in select_principal_from_keytab() all kind of different versions of the host principal are looked up in the keytab except for the plain name the ldap_sasl_authid option. With this patch the plain name is looked up first.
-rw-r--r--src/util/sss_krb5.c8
1 files changed, 6 insertions, 2 deletions
diff --git a/src/util/sss_krb5.c b/src/util/sss_krb5.c
index 38374578..0eb032a7 100644
--- a/src/util/sss_krb5.c
+++ b/src/util/sss_krb5.c
@@ -49,14 +49,18 @@ errno_t select_principal_from_keytab(TALLOC_CTX *mem_ctx,
/**
* Priority of lookup:
+ * - our.hostname@REALM or host/our.hostname@REALM depending on the input
+ * - our.hostname$@REALM (AD domain)
* - foobar$@REALM (AD domain)
* - host/our.hostname@REALM
* - host/foobar@REALM
* - host/foo@BAR
* - pick the first principal in the keytab
*/
- const char *primary_patterns[] = {"%s$", "*$", "host/%s", "host/*", "host/*", NULL};
- const char *realm_patterns[] = {"%s", "%s", "%s", "%s", NULL, NULL};
+ const char *primary_patterns[] = {"%s", "%s$", "*$", "host/%s", "host/*",
+ "host/*", NULL};
+ const char *realm_patterns[] = {"%s", "%s", "%s", "%s", "%s",
+ NULL, NULL};
DEBUG(5, ("trying to select the most appropriate principal from keytab\n"));
tmp_ctx = talloc_new(NULL);