[PATCH] Change the behavior of ads_verify_ticket when using keytabs
dan.sledz at isilon.com
Fri Jan 23 19:00:16 GMT 2009
Attached is a patch that gives a little more flexibility to verifying
incoming tickets by adding a notion of a dedicated keytab. The idea is
that this keytab only contains valid principals so we can skip the pre
filtering that is done in ads_keytab_verify_ticket. Isilon node's are
multi-homed so tickets can come in based on several different principals
of which samba has no knowledge.
This also removes the "use kerberos keytab" parameter since it seemed
confusing to have that and the new enum.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 16317 bytes
Url : http://lists.samba.org/archive/samba-technical/attachments/20090123/341a2305/0001-Add-two-new-parameters-to-control-how-we-verify-kerb.obj
More information about the samba-technical