[WIP PATCH] cli_session_setup_creds()
Andreas Schneider
asn at samba.org
Wed Sep 21 06:15:10 UTC 2016
On Tuesday, 20 September 2016 21:13:39 CEST Andrew Bartlett wrote:
> > Third some semantics we had before change. We are first checking for
> > existing
> > tickets and use them if they are still valid. If not we ask for a new
> > krbtgt
> > using the provided username/password. We didn't do that before.
>
> This bit doesn't seem right, unless the ccache was forced with
> CRED_SPECIFIED. The idea in cli_credentials was that if a username/pw
> is specified, then we always get a new ticket with that.
If you assume that, than we have an issue. The ktest with ntlm_auth specifies
a username and password with CRED_SPECIFIED. But with this test we can't get a
new ticket. So we first need to look for a valid ticket before we get one ...
Cheers,
-- andreas
--
Andreas Schneider GPG-ID: CC014E3D
Samba Team asn at samba.org
www.samba.org
More information about the samba-technical
mailing list