From 9824bec3a9fc14a527a4febd60a730f6deee0918 Mon Sep 17 00:00:00 2001
From: Simo Sorce <simo@redhat.com>
Date: Sat, 16 Nov 2013 18:54:28 -0500
Subject: creds: Allow admins to define only client creds

When a service is configured with cred_usage = initiate it is
ok to allow only client credentials to be defined.
---
 proxy/src/gp_creds.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'proxy/src')

diff --git a/proxy/src/gp_creds.c b/proxy/src/gp_creds.c
index e02a667..e1c71fe 100644
--- a/proxy/src/gp_creds.c
+++ b/proxy/src/gp_creds.c
@@ -371,7 +371,12 @@ static int gp_get_cred_environment(struct gp_call_ctx *gpcall,
      * if any. */
     if (use_service_keytab) {
         if (k_num == -1) {
-            ret = EINVAL;
+            if (ck_num == -1) {
+                ret = EINVAL;
+            } else {
+                /* allow a service to define only the client keytab */
+                ret = 0;
+            }
             goto done;
         }
         if (ck_num == -1) {
-- 
cgit