credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case

[Stefan Metzmacher]

Hi Alexander,

> Attached patch is needed for upcoming FreeIPA 4.5 release to allow use
> of Samba Python bindings in a privile separation mode provided by
> GSS-proxy (https://pagure.io/gssproxy). FreeIPA bug is here:
> https://pagure.io/freeipa/issue/6671, Samba bug is
> https://bugzilla.samba.org/show_bug.cgi?id=12611
> 
> Please see more details in the commit message.

Please have a look at
https://bugzilla.samba.org/show_bug.cgi?id=12480
for the reasons why we can't use gss_acquire_cred().

There needs to be another solution, sorry.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170303/f5182e9e/signature.sig>