diff options
| author | Simo Sorce <simo@redhat.com> | 2015-12-02 15:20:42 -0500 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-02-01 13:28:39 +0100 |
| commit | e011b376a5d071492bf3adfae26e4d61e2face07 (patch) | |
| tree | d4fad36a1120e1000784031226aa175d6ffa1da5 /ipapython/kernel_keyring.py | |
| parent | 4bef7577b746d8decd65c18f81b1e8fdd9cf06a7 (diff) | |
| download | freeipa-e011b376a5d071492bf3adfae26e4d61e2face07.tar.gz freeipa-e011b376a5d071492bf3adfae26e4d61e2face07.tar.xz freeipa-e011b376a5d071492bf3adfae26e4d61e2face07.zip | |
Improve keytab code to select the right principal.
Whe requesting a keytab the salt used is the NORMAL type (for backwards and AD
compatibility), however since we added alias support we need to search for the
krbCanonicalName in preference, hen nothing is specified, and for the requested
principal name when a getkeytab operation is performed. This is so that the
correct salt can be applied. (Windows AD uses some peculiar aliases for some
special accounts to generate the salt).
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'ipapython/kernel_keyring.py')
0 files changed, 0 insertions, 0 deletions