summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2013-11-13 20:03:53 -0500
committerGünther Deschner <gdeschner@redhat.com>2013-11-20 14:37:03 +0100
commit32b1d5aa0497c4e3677b4575cc7e299590df5618 (patch)
tree830e8a19ccfd6bb0aa4f4e0af217284f7c601bc6
parent591fad86aba3520a76eaf75aa0fd5e585fac94a5 (diff)
downloadgss-proxy-32b1d5aa0497c4e3677b4575cc7e299590df5618.tar.gz
gss-proxy-32b1d5aa0497c4e3677b4575cc7e299590df5618.tar.xz
gss-proxy-32b1d5aa0497c4e3677b4575cc7e299590df5618.zip
Try impersonation even when a name is not provided
In some cases a name may not be provided, still try to perform impersonation if the service is configured that way. Reviewed-by: Günther Deschner <gdeschner@redhat.com>
-rw-r--r--proxy/src/gp_creds.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/proxy/src/gp_creds.c b/proxy/src/gp_creds.c
index e02a667..5337390 100644
--- a/proxy/src/gp_creds.c
+++ b/proxy/src/gp_creds.c
@@ -289,6 +289,11 @@ static int gp_get_cred_environment(struct gp_call_ctx *gpcall,
}
*requested_name = name;
}
+ } else {
+ /* No name provided */
+ if (svc->euid != target_uid) {
+ user_requested = true;
+ }
}
/* impersonation case (only for initiation) */