[Patches] avoid krb5_ccache ccselect magic (bug #12480)
simo at samba.org
Fri Dec 30 00:56:32 UTC 2016
On Thu, 2016-12-29 at 22:14 +0100, Stefan Metzmacher wrote:
> here're my patches for https://bugzilla.samba.org/show_bug.cgi?id=124
> Using gss_acquire_cred() (of MIT krb5) followed by
> gss_init_sec_context() will
> randomly choose any credential cache (from a global list) that
> matches the realm of target principal.
> Have a look at the commit messages or the bug for more details...
> Please review and push:-)
FYI: MIT recommends you use gss_acquire_cred_from instead of
gss_krb5_import_cred where/when possible, and I agree with them[*], the
semantics of gss_acquire_cred_from() are cleaner.
[*] I may be biased having co-designed and implemented the
More information about the samba-technical