diff options
| author | Simo Sorce <simo@redhat.com> | 2013-03-29 02:06:32 -0400 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2013-04-10 09:09:52 -0400 |
| commit | a28a79af21adbc8267d214d3341ab1e4a46b756b (patch) | |
| tree | a10b36cfe4eb89d6ea36e4170e144e368bfe8092 /proxy/src/gp_debug.c | |
| parent | f678f9857af765d109c502229f07481a7b30c3e8 (diff) | |
| download | gss-proxy-a28a79af21adbc8267d214d3341ab1e4a46b756b.tar.gz gss-proxy-a28a79af21adbc8267d214d3341ab1e4a46b756b.tar.xz gss-proxy-a28a79af21adbc8267d214d3341ab1e4a46b756b.zip | |
Carefully process desired name based on service
In case the name type is GSS_C_NT_STRING_UID_NAME or GSS_NT_MACHINE_UID_NAME
we want to be able to impersonate the user referenced by the uid.
This is allowed exclusively for trusted services otherwise a generic
unprivileged application would be allowed to impersonate any user if there are
credentials available on the system or client keytabs installed.
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Günther Deschner <gdeschner@redhat.com>
Diffstat (limited to 'proxy/src/gp_debug.c')
0 files changed, 0 insertions, 0 deletions