summaryrefslogtreecommitdiffstats
path: root/aclocal/kerberos5.m4
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2017-11-16 15:39:01 -0500
committerSimo Sorce <simo@redhat.com>2017-11-16 16:28:28 -0500
commit799c0303440e66004b4517e66d7f2852cfd313e4 (patch)
tree294e1eb2acf0dfe3f043d5be13f6de28e16e4f48 /aclocal/kerberos5.m4
parent8d9bf479441d9d7a44a86b69026a7e9d431d3ade (diff)
downloadnfs-utils-fixrootccache.tar.gz
nfs-utils-fixrootccache.tar.xz
nfs-utils-fixrootccache.zip
Avoid clobbering root's ccache if possiblefixrootccache
If the gssapi library is modern enough, store the ccache in a process scoped keyring by default. This will avoid clobbering root's default ccache, and keep the creds from littering the filesystem. Signed-off-by: Simo Sorce <simo@redhat.com>
Diffstat (limited to 'aclocal/kerberos5.m4')
-rw-r--r--aclocal/kerberos5.m44
1 files changed, 4 insertions, 0 deletions
diff --git a/aclocal/kerberos5.m4 b/aclocal/kerberos5.m4
index 8a0f3e4..c26881b 100644
--- a/aclocal/kerberos5.m4
+++ b/aclocal/kerberos5.m4
@@ -94,6 +94,10 @@ AC_DEFUN([AC_KERBEROS_V5],[
AC_CHECK_LIB($gssapi_lib, krb5_get_init_creds_opt_set_addressless,
AC_DEFINE(HAVE_KRB5_GET_INIT_CREDS_OPT_SET_ADDRESSLESS, 1, [Define this if the function krb5_get_init_creds_opt_set_addressless is available]), ,$KRBLIBS)
+ dnl Optional functions that make life better
+ AC_CHECK_LIB($gssapi_lib, gss_acquire_cred_from,
+ AC_DEFINE(HAVE_GSS_ACQUIRE_CRED_FROM, 1, [Define this if the function gss_acquire_cred_from is available]), ,$KRBLIBS)
+
dnl If they specified a directory and it didn't work, give them a warning
if test "x$krb5_with" != "x" -a "$krb5_with" != "$KRBDIR"; then
AC_MSG_WARN(Using $KRBDIR instead of requested value of $krb5_with for Kerberos!)