[Patches] avoid krb5_ccache ccselect magic (bug #12480)

Simo simo at samba.org
Fri Dec 30 00:56:32 UTC 2016


On Thu, 2016-12-29 at 22:14 +0100, Stefan Metzmacher wrote:
> Hi,
> 
> here're my patches for https://bugzilla.samba.org/show_bug.cgi?id=124
> 80.
> 
> Using gss_acquire_cred() (of MIT krb5) followed by
> gss_init_sec_context() will
> randomly choose any credential cache (from a global list) that
> matches the realm of target principal.
> 
> Have a look at the commit messages or the bug for more details...
> 
> Please review and push:-)
> 
> Thanks!
> metze

FYI: MIT recommends you use gss_acquire_cred_from instead of
gss_krb5_import_cred where/when possible, and I agree with them[*], the
semantics of gss_acquire_cred_from() are cleaner.

Simo.

[*] I may be biased having co-designed and implemented the
acquire_cred_from/store_cred_into interfaces.





More information about the samba-technical mailing list