[WIP PATCH] cli_session_setup_creds()

Andreas Schneider asn at samba.org
Wed Sep 21 06:15:10 UTC 2016


On Tuesday, 20 September 2016 21:13:39 CEST Andrew Bartlett wrote:
> > Third some semantics we had before change. We are first checking for
> > existing 
> > tickets and use them if they are still valid. If not we ask for a new
> > krbtgt 
> > using the provided username/password. We didn't do that before.
> 
> This bit doesn't seem right, unless the ccache was forced with
> CRED_SPECIFIED.  The idea in cli_credentials was that if a username/pw
> is specified, then we always get a new ticket with that.  

If you assume that, than we have an issue. The ktest with ntlm_auth specifies 
a username and password with CRED_SPECIFIED. But with this test we can't get a 
new ticket. So we first need to look for a valid ticket before we get one ...



Cheers,

	-- andreas

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org



More information about the samba-technical mailing list