[PATCH] Change the behavior of ads_verify_ticket when using keytabs

[Dan Sledz]

Attached is a patch that gives a little more flexibility to verifying
incoming tickets by adding a notion of a dedicated keytab.  The idea is
that this keytab only contains valid principals so we can skip the pre
filtering that is done in ads_keytab_verify_ticket.  Isilon node's are
multi-homed so tickets can come in based on several different principals
of which samba has no knowledge.

 

This also removes the "use kerberos keytab" parameter since it seemed
confusing to have that and the new enum.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-two-new-parameters-to-control-how-we-verify-kerb.patch
Type: application/octet-stream
Size: 16317 bytes
Desc: 0001-Add-two-new-parameters-to-control-how-we-verify-kerb.patch
Url : http://lists.samba.org/archive/samba-technical/attachments/20090123/341a2305/0001-Add-two-new-parameters-to-control-how-we-verify-kerb.obj