[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3970-g55d43c0

[Jeremy Allison]

The branch, v3-3-test has been updated
       via  55d43c04b47855e40b9ceeec2bc6f0deb3bf39d0 (commit)
      from  89a2558d7ac2d3f596534e4add98eb0e9302d940 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -----------------------------------------------------------------
commit 55d43c04b47855e40b9ceeec2bc6f0deb3bf39d0
Author: Jeremy Allison <jra at samba.org>
Date:   Wed Sep 10 10:17:21 2008 -0700

    Fix blocker bug 5745 kerberos authentication with (lib)smbclient is broken.
    Jeremy.

-----------------------------------------------------------------------

Summary of changes:
 source/libsmb/clikrb5.c |   16 ++++++++++++++--
 1 files changed, 14 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/libsmb/clikrb5.c b/source/libsmb/clikrb5.c
index f940081..b8afb57 100644
--- a/source/libsmb/clikrb5.c
+++ b/source/libsmb/clikrb5.c
@@ -749,9 +749,21 @@ static krb5_error_code ads_krb5_mk_req(krb5_context context,
 						ccache,
 						&in_data );
 		if (retval) {
-			DEBUG( 1, ("ads_krb5_get_fwd_ticket failed (%s)\n",
+			DEBUG( 3, ("ads_krb5_get_fwd_ticket failed (%s)\n",
 				   error_message( retval ) ) );
-			goto cleanup_creds;
+
+			/*
+			 * This is not fatal. Delete the *auth_context and continue
+			 * with krb5_mk_req_extended to get a non-forwardable ticket.
+			 */
+
+			if (in_data.data) {
+				free( in_data.data );
+				in_data.data = NULL;
+				in_data.length = 0;
+			}
+			krb5_auth_con_free(context, *auth_context);
+			*auth_context = NULL;
 		}
 	}
 #endif


-- 
Samba Shared Repository