diff options
| author | Gerald Carter <jerry@samba.org> | 2001-02-08 18:39:36 +0000 |
|---|---|---|
| committer | Gerald Carter <jerry@samba.org> | 2001-02-08 18:39:36 +0000 |
| commit | 57165d1578eefa270d5c0bd8697a774eb8cb06cf (patch) | |
| tree | 3513e8efb22ba604940bf88be4c7794ef57dc4d6 | |
| parent | 2b9c6d1c9e278caccd202c1d3b07690c0423acc1 (diff) | |
| download | samba-57165d1578eefa270d5c0bd8697a774eb8cb06cf.tar.gz samba-57165d1578eefa270d5c0bd8697a774eb8cb06cf.tar.xz samba-57165d1578eefa270d5c0bd8697a774eb8cb06cf.zip | |
add pam_setcred() call to pam_auth(). Patch was submited last Oct.
jerry
| -rw-r--r-- | source/auth/pass_check.c | 8 | ||||
| -rw-r--r-- | source/passdb/pass_check.c | 8 |
2 files changed, 16 insertions, 0 deletions
diff --git a/source/auth/pass_check.c b/source/auth/pass_check.c index aea543d8539..c803816e046 100644 --- a/source/auth/pass_check.c +++ b/source/auth/pass_check.c @@ -134,6 +134,14 @@ static BOOL pam_auth(char *user, char *password) * put a pam_allow.so entry in /etc/pam.conf for account handling. */ pam_error = pam_acct_mgmt(pamh, PAM_SILENT); PAM_BAIL; + + /* + * This will allow samba to aquire a kerberos token. And, when + * exporting an AFS cell, be able to /write/ to this cell. + */ + pam_error = pam_setcred(pamh, (PAM_ESTABLISH_CRED|PAM_SILENT)); + PAM_BAIL; + pam_end(pamh, PAM_SUCCESS); /* If this point is reached, the user has been authenticated. */ return (True); diff --git a/source/passdb/pass_check.c b/source/passdb/pass_check.c index aea543d8539..c803816e046 100644 --- a/source/passdb/pass_check.c +++ b/source/passdb/pass_check.c @@ -134,6 +134,14 @@ static BOOL pam_auth(char *user, char *password) * put a pam_allow.so entry in /etc/pam.conf for account handling. */ pam_error = pam_acct_mgmt(pamh, PAM_SILENT); PAM_BAIL; + + /* + * This will allow samba to aquire a kerberos token. And, when + * exporting an AFS cell, be able to /write/ to this cell. + */ + pam_error = pam_setcred(pamh, (PAM_ESTABLISH_CRED|PAM_SILENT)); + PAM_BAIL; + pam_end(pamh, PAM_SUCCESS); /* If this point is reached, the user has been authenticated. */ return (True); |