From 9c49fb9a7cb6aa87a7bce1865887d6e4f78ce5fd Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 11 Nov 2009 14:16:41 +0100 Subject: Validate Kerberos credentials with local keytab --- server/providers/ipa/ipa_common.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'server/providers/ipa') diff --git a/server/providers/ipa/ipa_common.c b/server/providers/ipa/ipa_common.c index 54044b99..38e4d53d 100644 --- a/server/providers/ipa/ipa_common.c +++ b/server/providers/ipa/ipa_common.c @@ -112,6 +112,8 @@ struct dp_option ipa_def_krb5_opts[] = { { "krb5_ccname_template", DP_OPT_STRING, { "FILE:%d/krb5cc_%U_XXXXXX" }, NULL_STRING}, { "krb5_changepw_principal", DP_OPT_STRING, { "kadmin/changepw" }, NULL_STRING }, { "krb5_auth_timeout", DP_OPT_NUMBER, { .number = 15 }, NULL_NUMBER }, + { "krb5_keytab", DP_OPT_STRING, { "/etc/krb5.keytab" }, NULL_STRING }, + { "krb5_validate", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE } }; int domain_to_basedn(TALLOC_CTX *memctx, const char *domain, char **basedn) -- cgit