diff options
| author | Simo Sorce <simo@redhat.com> | 2014-08-04 11:49:23 -0400 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2014-08-07 12:44:46 -0400 |
| commit | c0ab9d46730db8196ce46fa3e346009d30cee029 (patch) | |
| tree | 79b1a2bfeac04cf853547770286de6a2f341055c /src/gss_sec_ctx.c | |
| parent | 90dac37d9d15004dd425b3139ab8141113c245e1 (diff) | |
| download | gss-ntlmssp-c0ab9d46730db8196ce46fa3e346009d30cee029.tar.gz gss-ntlmssp-c0ab9d46730db8196ce46fa3e346009d30cee029.tar.xz gss-ntlmssp-c0ab9d46730db8196ce46fa3e346009d30cee029.zip | |
Add external server auth support via Winbind
If wbclient support is available we can now check domain credentials
against a Domain Controller.
Requires a configured Winbind (or cmpatible) service on the host.
Diffstat (limited to 'src/gss_sec_ctx.c')
| -rw-r--r-- | src/gss_sec_ctx.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/gss_sec_ctx.c b/src/gss_sec_ctx.c index 3f8d569..33e6aa0 100644 --- a/src/gss_sec_ctx.c +++ b/src/gss_sec_ctx.c @@ -907,7 +907,8 @@ uint32_t gssntlm_accept_sec_context(uint32_t *minor_status, NULL, NULL); if (retmaj) goto done; /* We can't handle winbind credentials yet */ - if (usr_cred->type != GSSNTLM_CRED_USER) { + if (usr_cred->type != GSSNTLM_CRED_USER && + usr_cred->type != GSSNTLM_CRED_EXTERNAL) { retmin = EINVAL; retmaj = GSS_S_CRED_UNAVAIL; goto done; |