From 799c0303440e66004b4517e66d7f2852cfd313e4 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Thu, 16 Nov 2017 15:39:01 -0500 Subject: Avoid clobbering root's ccache if possible If the gssapi library is modern enough, store the ccache in a process scoped keyring by default. This will avoid clobbering root's default ccache, and keep the creds from littering the filesystem. Signed-off-by: Simo Sorce --- utils/gssd/gss_util.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'utils/gssd/gss_util.h') diff --git a/utils/gssd/gss_util.h b/utils/gssd/gss_util.h index aa9f778..24fad94 100644 --- a/utils/gssd/gss_util.h +++ b/utils/gssd/gss_util.h @@ -32,12 +32,13 @@ #define _GSS_UTIL_H_ #include +#include #include #include "write_bytes.h" extern gss_cred_id_t gssd_creds; -int gssd_acquire_cred(char *server_name, const gss_OID oid); +int gssd_acquire_cred(char *server_name, bool machine, const gss_OID oid); void pgsserr(char *msg, u_int32_t maj_stat, u_int32_t min_stat, const gss_OID mech); int gssd_check_mechs(void); -- cgit