Changeset 124 for branches/samba-3.0/source/libads/kerberos.c

Timestamp:

Mar 12, 2008, 9:08:18 AM (17 years ago)

Author:

Paul Smedley

Message:

Update source to 3.0.28a

File:

• branches/samba-3.0/source/libads/kerberos.c (modified) (2 diffs)

branches/samba-3.0/source/libads/kerberos.c

@@ -363 +363 @@
 }
 
+/************************************************************************
+ Routine to get the default realm from the kerberos credentials cache.
+ Caller must free if the return value is not NULL.
+************************************************************************/
+
+char *kerberos_get_default_realm_from_ccache( void )
+{
+        char *realm = NULL;
+        krb5_context ctx = NULL;
+        krb5_ccache cc = NULL;
+        krb5_principal princ = NULL;
+
+        initialize_krb5_error_table();
+        if (krb5_init_context(&ctx)) {
+                return NULL;
+        }
+
+        DEBUG(5,("kerberos_get_default_realm_from_ccache: "
+                "Trying to read krb5 cache: %s\n",
+                krb5_cc_default_name(ctx)));
+        if (krb5_cc_default(ctx, &cc)) {
+                DEBUG(0,("kerberos_get_default_realm_from_ccache: "
+                        "failed to read default cache\n"));
+                goto out;
+        }
+        if (krb5_cc_get_principal(ctx, cc, &princ)) {
+                DEBUG(0,("kerberos_get_default_realm_from_ccache: "
+                        "failed to get default principal\n"));
+                goto out;
+        }
+
+#if defined(HAVE_KRB5_PRINCIPAL_GET_REALM)
+        realm = SMB_STRDUP(krb5_principal_get_realm(ctx, princ));
+#elif defined(HAVE_KRB5_PRINC_REALM)
+        {
+                krb5_data *realm_data = krb5_princ_realm(ctx, princ);
+                realm = SMB_STRNDUP(realm_data->data, realm_data->length);
+        }
+#endif
+
+  out:
+
+        if (princ) {
+                krb5_free_principal(ctx, princ);
+        }
+        if (cc) {
+                krb5_cc_close(ctx, cc);
+        }
+        if (ctx) {
+                krb5_free_context(ctx);
+        }
+
+        return realm;
+}
+
 
 /************************************************************************
@@ -622 +677 @@
                 return False;
         }
-                
-        file_contents = talloc_asprintf(fname, "[libdefaults]\n\tdefault_realm = %s\n\n"
-                                "[realms]\n\t%s = {\n"
-                                "\t%s\t}\n",
-                                realm_upper, realm_upper, kdc_ip_string);
+
+        file_contents = talloc_asprintf(fname,
+                                        "[libdefaults]\n\tdefault_realm = %s\n"
+                                        "default_tgs_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5\n"
+                                        "default_tkt_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5\n"
+                                        "preferred_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5\n\n"
+                                        "[realms]\n\t%s = {\n"
+                                        "\t%s\t}\n",
+                                        realm_upper, realm_upper, kdc_ip_string);
 
         if (!file_contents) {