diff options
author | Sumit Bose <sbose@redhat.com> | 2012-12-17 22:08:59 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-12-18 20:15:06 +0100 |
commit | 4bbf95ee2dfa7f5bf947306a5dc91ff9cd4ad2ac (patch) | |
tree | 7d5412123fc9f8a3747dde74b5b73321508d1840 /src/util | |
parent | 074a53dfd80b0fc642e532207bc11de8945ae1c6 (diff) | |
download | sssd-4bbf95ee2dfa7f5bf947306a5dc91ff9cd4ad2ac.tar.gz sssd-4bbf95ee2dfa7f5bf947306a5dc91ff9cd4ad2ac.tar.xz sssd-4bbf95ee2dfa7f5bf947306a5dc91ff9cd4ad2ac.zip |
select_principal_from_keytab() look for plain input as well
Currently in select_principal_from_keytab() all kind of different
versions of the host principal are looked up in the keytab except for
the plain name the ldap_sasl_authid option. With this patch the plain
name is looked up first.
Diffstat (limited to 'src/util')
-rw-r--r-- | src/util/sss_krb5.c | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/src/util/sss_krb5.c b/src/util/sss_krb5.c index 383745787..0eb032a76 100644 --- a/src/util/sss_krb5.c +++ b/src/util/sss_krb5.c @@ -49,14 +49,18 @@ errno_t select_principal_from_keytab(TALLOC_CTX *mem_ctx, /** * Priority of lookup: + * - our.hostname@REALM or host/our.hostname@REALM depending on the input + * - our.hostname$@REALM (AD domain) * - foobar$@REALM (AD domain) * - host/our.hostname@REALM * - host/foobar@REALM * - host/foo@BAR * - pick the first principal in the keytab */ - const char *primary_patterns[] = {"%s$", "*$", "host/%s", "host/*", "host/*", NULL}; - const char *realm_patterns[] = {"%s", "%s", "%s", "%s", NULL, NULL}; + const char *primary_patterns[] = {"%s", "%s$", "*$", "host/%s", "host/*", + "host/*", NULL}; + const char *realm_patterns[] = {"%s", "%s", "%s", "%s", "%s", + NULL, NULL}; DEBUG(5, ("trying to select the most appropriate principal from keytab\n")); tmp_ctx = talloc_new(NULL); |