diff options
| author | Kevin Coffman <kwc@citi.umich.edu> | 2007-03-30 18:32:14 -0400 |
|---|---|---|
| committer | Neil Brown <neilb@suse.de> | 2007-03-31 09:08:02 +1000 |
| commit | ffe1a9badb6f247b3314ef570573739d3f91f429 (patch) | |
| tree | 9d4730d2c17d91f40820892d6d9cd0d68a3bee05 /utils/gssd/krb5_util.h | |
| parent | 6904f7b7f4f91d52c4bd783e5588e870d32ff021 (diff) | |
| download | nfs-utils-ffe1a9badb6f247b3314ef570573739d3f91f429.tar.gz nfs-utils-ffe1a9badb6f247b3314ef570573739d3f91f429.tar.xz nfs-utils-ffe1a9badb6f247b3314ef570573739d3f91f429.zip | |
Use newly added keytab functions
Use the new functions added in the previous patch.
Obtain machine credentials in a pre-determined order
Look for appropriate machine credentials in the following order:
root/<fqdn>@REALM
nfs/<fqdn>@REALM
host/<fqdn>@REALM
root/<any-name>@REALM
nfs/<any-name>@REALM
host/<any-name>@REALM
The first matching credential will be used.
Also, the machine credentials to be used are now determined
"on-demand" rather than at gssd startup. This allows keytab
additions to be noticed and used without requiring a restart of gssd.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Neil Brown <neilb@suse.de>
Diffstat (limited to 'utils/gssd/krb5_util.h')
| -rw-r--r-- | utils/gssd/krb5_util.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/utils/gssd/krb5_util.h b/utils/gssd/krb5_util.h index 625d53c..ce7cb57 100644 --- a/utils/gssd/krb5_util.h +++ b/utils/gssd/krb5_util.h @@ -5,7 +5,8 @@ /* * List of principals from our keytab that we - * may try to get credentials for + * will try to use to obtain credentials + * (known as a principal list entry (ple)) */ struct gssd_k5_kt_princ { struct gssd_k5_kt_princ *next; |