From 4c157ecedd52602f75574605ef48d0c48e9bfbe8 Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Tue, 10 Apr 2012 22:20:53 +0200 Subject: Limit krb5_get_init_creds_keytab() to etypes in keytab * Load the enctypes for the keys in the keytab and pass them to krb5_get_init_creds_keytab(). * This fixes the problem where the server offers a enctype that krb5 supports, but we don't have a key for in the keytab. https://bugzilla.redhat.com/show_bug.cgi?id=811375 --- src/util/sss_krb5.h | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'src/util/sss_krb5.h') diff --git a/src/util/sss_krb5.h b/src/util/sss_krb5.h index 6ad80806..12412585 100644 --- a/src/util/sss_krb5.h +++ b/src/util/sss_krb5.h @@ -137,4 +137,12 @@ typedef krb5_ticket_times sss_krb5_ticket_times; typedef krb5_times sss_krb5_ticket_times; #endif +krb5_error_code +sss_krb5_read_etypes_for_keytab(TALLOC_CTX *mem_ctx, + krb5_context context, + krb5_keytab keytab, + krb5_principal princ, + krb5_enctype **etype_list, + int *n_etype_list); + #endif /* __SSS_KRB5_H__ */ -- cgit